NYBLOB="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"]) fstatfs(r1, &(0x7f0000000240)=""/163) fsetxattr$security_selinux(r1, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:apm_bios_t:s0\x00', 0x20, 0x2) [ 904.881817] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.881828] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.881839] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.881850] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.881861] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.881873] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.881883] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.881895] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.881906] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882324] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882335] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882357] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882369] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882567] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882577] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882588] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882598] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882609] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882620] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882729] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882740] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882751] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882762] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882772] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882901] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882912] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882923] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882934] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882945] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882957] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882967] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882978] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.882989] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883000] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883012] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883022] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883032] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883043] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883054] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883064] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883075] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883086] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883097] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883108] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883119] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883129] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883140] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883152] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883180] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883191] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.883579] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 904.898805] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 904.997970] audit: type=1400 audit(1543322563.776:94): avc: denied { relabelto } for pid=12781 comm="syz-executor4" name="bus" dev="sda1" ino=16535 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 905.015801] audit: type=1400 audit(1543322563.796:95): avc: denied { write } for pid=12781 comm="syz-executor4" name="bus" dev="sda1" ino=16535 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 905.016110] audit: type=1400 audit(1543322563.796:96): avc: denied { open } for pid=12781 comm="syz-executor4" path="/syzcgroup/cpu/syz4/bus" dev="sda1" ino=16535 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 905.036994] audit: type=1400 audit(1543322563.816:97): avc: denied { ioctl } for pid=12781 comm="syz-executor4" path="/syzcgroup/cpu/syz4/bus" dev="sda1" ino=16535 ioctlcmd=0x660b scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 905.041661] audit: type=1400 audit(1543322563.826:98): avc: denied { relabelfrom } for pid=12781 comm="syz-executor4" name="bus" dev="sda1" ino=16535 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 906.063122] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.069812] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.076510] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.083190] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.089861] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.096551] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.103250] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.110007] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.116703] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.123378] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.130057] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.136756] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.143442] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.150115] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.156839] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.163529] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.170217] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.176905] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.183597] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.190293] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.196998] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.203669] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.210347] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.217059] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.223742] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.230405] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.237094] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.243793] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.250479] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.257165] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.263837] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.270492] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.277188] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.283866] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.290530] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.297223] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.303905] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.310577] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.317263] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.323934] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.330600] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.337300] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.343969] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.350623] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.357315] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.363987] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.370680] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.377388] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.385423] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.392167] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.398840] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.405544] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.412236] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.418903] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.425596] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.432311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.438981] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.445656] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.452355] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.459028] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.465702] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.472406] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.479079] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.485753] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.492438] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.499096] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.505771] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.512487] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.519166] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.525844] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.532552] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.539209] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.545875] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.552558] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.559213] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.565882] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.572557] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.579213] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.585883] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.592558] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.599226] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.605920] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.612592] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.619250] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.625920] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.632592] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.639270] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.645943] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.652628] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.659293] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.665963] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.672654] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.679326] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.686017] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.692693] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.699358] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.706057] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.713034] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.719692] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.726379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.733071] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.739751] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.746427] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.753100] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.759766] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.766462] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.773153] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.779838] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.786530] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.793214] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.799879] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.806565] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.813238] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.819897] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.826595] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.833394] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.840050] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.846728] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.853408] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.860069] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.866750] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.873428] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.880088] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.886775] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.893461] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.900122] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.906804] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 12:42:45 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x20031, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00001d8fc0), 0x0, 0x0, 0x0, 0x0) 12:42:45 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r3, 0x2aa, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x2b283714574a214d}]) ftruncate(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) fstatfs(r1, &(0x7f0000000240)=""/163) fsetxattr$security_selinux(r1, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:apm_bios_t:s0\x00', 0x20, 0x2) 12:42:45 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x6e4d08ecd40849e2, 0x2}, 0x10}}, 0x0) 12:42:45 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r3, 0x2aa, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x2b283714574a214d}]) ftruncate(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) fstatfs(r1, &(0x7f0000000240)=""/163) fsetxattr$security_selinux(r1, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:apm_bios_t:s0\x00', 0x20, 0x2) 12:42:45 executing program 0: socket(0x10, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000180)='vmnet0,)#-\'!#em1%vmnet1!\x00'}, 0x30) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000280)=""/132, 0x84}, 0x11c) 12:42:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r3, 0x2aa, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x2b283714574a214d}]) ftruncate(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) fstatfs(r1, &(0x7f0000000240)=""/163) fsetxattr$security_selinux(r1, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:apm_bios_t:s0\x00', 0x20, 0x2) 12:42:45 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r3, 0x2aa, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x2b283714574a214d}]) ftruncate(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) fstatfs(r1, &(0x7f0000000240)=""/163) fsetxattr$security_selinux(r1, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:apm_bios_t:s0\x00', 0x20, 0x2) [ 906.913506] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.920166] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.926850] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 906.934626] hid-generic 0000:0000:0000.001F: hidraw1: HID v0.00 Device [syz1] on syz0 12:42:45 executing program 4: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000140)="26000000220047018500acc21ea31ce29b07009a80e8ff06006d20f7e2069860af925df8246a", 0x26) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000240)=0x8c, 0x4) recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/93, 0x5d}}], 0x1, 0x0, &(0x7f0000004d80)) 12:42:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)='-0', 0x2}], 0x1) 12:42:45 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r3, 0x2aa, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x2b283714574a214d}]) ftruncate(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) fstatfs(r1, &(0x7f0000000240)=""/163) fsetxattr$security_selinux(r1, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:apm_bios_t:s0\x00', 0x20, 0x2) 12:42:45 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x6e4d08ecd40849e2, 0x2}, 0x10}}, 0x0) 12:42:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x1, 0x0, &(0x7f0000000300)="11"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 12:42:45 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x6e4d08ecd40849e2, 0x2}, 0x10}}, 0x0) [ 907.005033] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 907.036986] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 12:42:45 executing program 4: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000140)="26000000220047018500acc21ea31ce29b07009a80e8ff06006d20f7e2069860af925df8246a", 0x26) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000240)=0x8c, 0x4) recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/93, 0x5d}}], 0x1, 0x0, &(0x7f0000004d80)) 12:42:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)='-0', 0x2}], 0x1) 12:42:45 executing program 4: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000140)="26000000220047018500acc21ea31ce29b07009a80e8ff06006d20f7e2069860af925df8246a", 0x26) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000240)=0x8c, 0x4) recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/93, 0x5d}}], 0x1, 0x0, &(0x7f0000004d80)) [ 907.094809] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 907.106600] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 907.114481] binder: 12826:12829 got transaction with invalid offset (0, min 0 max 0) or object. [ 907.114506] binder: 12826:12829 transaction failed 29201/-22, size 0-8 line 3199 [ 907.114698] binder: 12826:12829 got transaction with invalid offset (0, min 0 max 0) or object. [ 907.114717] binder: 12826:12829 transaction failed 29201/-22, size 0-12288 line 3199 [ 907.116903] binder_alloc: binder_alloc_mmap_handler: 12826 20ffc000-20fff000 already mapped failed -16 [ 907.117014] binder_alloc: 12826: binder_alloc_buf, no vma [ 907.117032] binder: 12826:12833 transaction failed 29189/-3, size 0-8 line 3136 [ 907.117050] binder: BINDER_SET_CONTEXT_MGR already set [ 907.117057] binder: 12826:12829 ioctl 40046207 0 returned -16 [ 907.117118] binder_alloc: 12826: binder_alloc_buf, no vma [ 907.117132] binder: 12826:12829 transaction failed 29189/-3, size 0-12288 line 3136 [ 907.217881] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 907.224573] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 907.231248] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 907.237948] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 907.244631] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 907.251293] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 907.257974] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 907.265045] binder: undelivered TRANSACTION_ERROR: 29189 [ 907.270535] binder: undelivered TRANSACTION_ERROR: 29201 [ 907.277224] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz1 [ 907.282990] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 12:42:46 executing program 0: socket(0x10, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000180)='vmnet0,)#-\'!#em1%vmnet1!\x00'}, 0x30) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000280)=""/132, 0x84}, 0x11c) 12:42:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r3, 0x2aa, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x2b283714574a214d}]) ftruncate(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) fstatfs(r1, &(0x7f0000000240)=""/163) fsetxattr$security_selinux(r1, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:apm_bios_t:s0\x00', 0x20, 0x2) 12:42:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)='-0', 0x2}], 0x1) 12:42:46 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r1, r0, 0x0) 12:42:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x1, 0x0, &(0x7f0000000300)="11"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 12:42:46 executing program 4: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000140)="26000000220047018500acc21ea31ce29b07009a80e8ff06006d20f7e2069860af925df8246a", 0x26) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000240)=0x8c, 0x4) recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/93, 0x5d}}], 0x1, 0x0, &(0x7f0000004d80)) 12:42:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x1, 0x0, &(0x7f0000000300)="11"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 12:42:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x1, 0x0, &(0x7f0000000300)="11"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 907.283002] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283012] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283022] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 12:42:46 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r1, r0, 0x0) 12:42:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)='-0', 0x2}], 0x1) 12:42:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r3, 0x2aa, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x2b283714574a214d}]) ftruncate(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) fstatfs(r1, &(0x7f0000000240)=""/163) fsetxattr$security_selinux(r1, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:apm_bios_t:s0\x00', 0x20, 0x2) 12:42:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x1, 0x0, &(0x7f0000000300)="11"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 907.283033] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283043] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 12:42:46 executing program 0: socket(0x10, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000180)='vmnet0,)#-\'!#em1%vmnet1!\x00'}, 0x30) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000280)=""/132, 0x84}, 0x11c) 12:42:46 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r1, r0, 0x0) 12:42:46 executing program 1: creat(&(0x7f0000000080)='./control\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007b5000), 0x8) signalfd(r0, &(0x7f00007b6ff8)={0x4}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) readv(r0, &(0x7f000008bfe0)=[{&(0x7f0000525000)=""/216, 0xd8}], 0x1) r3 = dup2(r1, r0) fcntl$setsig(r1, 0xa, 0x3) r4 = inotify_add_watch(r3, &(0x7f00007b4ff6)='./control\x00', 0x40000001) inotify_rm_watch(r1, r4) 12:42:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x1, 0x0, &(0x7f0000000300)="11"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 907.283053] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 12:42:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x1, 0x0, &(0x7f0000000300)="11"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 12:42:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f00000001c0)=""/28, 0x1c) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 12:42:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x14eb7bc0) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 12:42:46 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r1, r0, 0x0) 12:42:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x4) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="ef"], 0x1) sendfile(r3, r3, &(0x7f00000000c0), 0xfff) sendfile(r1, r3, &(0x7f0000000140), 0x8fff) [ 907.283063] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283073] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283084] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283094] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 12:42:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f00000001c0)=""/28, 0x1c) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 12:42:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f00000001c0)=""/28, 0x1c) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 12:42:46 executing program 1: creat(&(0x7f0000000080)='./control\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007b5000), 0x8) signalfd(r0, &(0x7f00007b6ff8)={0x4}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) readv(r0, &(0x7f000008bfe0)=[{&(0x7f0000525000)=""/216, 0xd8}], 0x1) r3 = dup2(r1, r0) fcntl$setsig(r1, 0xa, 0x3) r4 = inotify_add_watch(r3, &(0x7f00007b4ff6)='./control\x00', 0x40000001) inotify_rm_watch(r1, r4) 12:42:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f00000001c0)=""/28, 0x1c) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 12:42:46 executing program 4: creat(&(0x7f0000000080)='./control\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007b5000), 0x8) signalfd(r0, &(0x7f00007b6ff8)={0x4}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) readv(r0, &(0x7f000008bfe0)=[{&(0x7f0000525000)=""/216, 0xd8}], 0x1) r3 = dup2(r1, r0) fcntl$setsig(r1, 0xa, 0x3) r4 = inotify_add_watch(r3, &(0x7f00007b4ff6)='./control\x00', 0x40000001) inotify_rm_watch(r1, r4) [ 907.283104] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283115] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 12:42:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x14eb7bc0) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 12:42:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f00000001c0)=""/28, 0x1c) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 12:42:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x14eb7bc0) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 12:42:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f00000001c0)=""/28, 0x1c) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) [ 907.283125] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283135] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283145] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283155] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 12:42:46 executing program 1: creat(&(0x7f0000000080)='./control\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007b5000), 0x8) signalfd(r0, &(0x7f00007b6ff8)={0x4}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) readv(r0, &(0x7f000008bfe0)=[{&(0x7f0000525000)=""/216, 0xd8}], 0x1) r3 = dup2(r1, r0) fcntl$setsig(r1, 0xa, 0x3) r4 = inotify_add_watch(r3, &(0x7f00007b4ff6)='./control\x00', 0x40000001) inotify_rm_watch(r1, r4) 12:42:46 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1) [ 907.283166] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283176] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283186] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283196] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283206] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283216] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283226] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283237] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283247] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283257] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283267] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283277] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283288] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283298] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283308] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283318] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283328] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283339] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283349] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283359] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283369] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283380] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283390] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283400] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283410] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283420] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283430] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283440] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283455] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283466] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283476] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283486] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283496] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283506] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283516] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283526] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283536] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283546] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283556] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283566] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283576] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283586] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283596] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283606] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283617] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283627] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283637] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283647] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283656] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283667] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283677] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283687] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283697] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283707] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283717] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283727] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283737] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283747] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283757] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283767] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283777] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283787] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283797] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283807] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283817] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283827] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283837] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283847] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283857] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283867] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283876] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283886] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283896] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283906] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283915] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283925] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283943] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283953] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283963] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283973] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283983] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.283992] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284002] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284012] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284022] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284032] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284042] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284051] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284061] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284071] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284081] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284091] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284101] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284111] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284121] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284131] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284140] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284151] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284161] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284171] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284181] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284190] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284200] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284210] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284220] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284230] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284240] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 12:42:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x4) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="ef"], 0x1) sendfile(r3, r3, &(0x7f00000000c0), 0xfff) sendfile(r1, r3, &(0x7f0000000140), 0x8fff) 12:42:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f00000001c0)=""/28, 0x1c) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 12:42:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x14eb7bc0) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 12:42:47 executing program 4: creat(&(0x7f0000000080)='./control\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007b5000), 0x8) signalfd(r0, &(0x7f00007b6ff8)={0x4}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) readv(r0, &(0x7f000008bfe0)=[{&(0x7f0000525000)=""/216, 0xd8}], 0x1) r3 = dup2(r1, r0) fcntl$setsig(r1, 0xa, 0x3) r4 = inotify_add_watch(r3, &(0x7f00007b4ff6)='./control\x00', 0x40000001) inotify_rm_watch(r1, r4) 12:42:47 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1) 12:42:47 executing program 1: creat(&(0x7f0000000080)='./control\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007b5000), 0x8) signalfd(r0, &(0x7f00007b6ff8)={0x4}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) readv(r0, &(0x7f000008bfe0)=[{&(0x7f0000525000)=""/216, 0xd8}], 0x1) r3 = dup2(r1, r0) fcntl$setsig(r1, 0xa, 0x3) r4 = inotify_add_watch(r3, &(0x7f00007b4ff6)='./control\x00', 0x40000001) inotify_rm_watch(r1, r4) [ 907.284250] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284260] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284269] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284279] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284289] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284299] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 12:42:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x4) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="ef"], 0x1) sendfile(r3, r3, &(0x7f00000000c0), 0xfff) sendfile(r1, r3, &(0x7f0000000140), 0x8fff) 12:42:47 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1) 12:42:47 executing program 2: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1) 12:42:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5414, 0x20800009) [ 907.284309] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.284318] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 907.291380] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 907.330305] binder: BINDER_SET_CONTEXT_MGR already set [ 907.330313] binder: 12841:12845 ioctl 40046207 0 returned -16 12:42:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5414, 0x20800009) 12:42:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") add_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600), &(0x7f0000000680), 0x0, 0xfffffffffffffffe) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) getpriority(0x1, r1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) fremovexattr(r0, &(0x7f0000000a80)=@known='security.SMACK64MMAP\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x1, "9cb492d32219358a"}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000200)) [ 907.330483] binder_alloc: 12826: binder_alloc_buf, no vma [ 907.330500] binder: 12841:12845 transaction failed 29189/-3, size 0-8 line 3136 [ 907.330719] binder_alloc: 12826: binder_alloc_buf, no vma [ 907.330733] binder: 12841:12845 transaction failed 29189/-3, size 0-12288 line 3136 [ 907.365547] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 907.365559] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 907.365570] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 907.365581] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 907.365592] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 907.365603] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 907.365613] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 907.365624] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 907.365635] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 907.365645] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 907.365656] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 907.372539] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz1 [ 907.375732] binder: BINDER_SET_CONTEXT_MGR already set [ 907.375740] binder: 12853:12857 ioctl 40046207 0 returned -16 [ 907.376246] binder_alloc: 12826: binder_alloc_buf, no vma [ 907.376262] binder: 12853:12857 transaction failed 29189/-3, size 0-8 line 3136 [ 907.376472] binder_alloc: 12826: binder_alloc_buf, no vma [ 907.376485] binder: 12853:12857 transaction failed 29189/-3, size 0-12288 line 3136 [ 907.402445] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402458] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402469] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402480] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402490] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402502] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402513] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402524] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402535] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402546] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402557] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402566] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402578] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402589] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402600] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402611] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402622] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402633] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402644] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402655] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402666] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402677] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402687] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402699] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402710] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402721] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402732] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402743] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402754] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402765] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402776] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402786] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402797] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402808] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402819] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402830] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402841] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402852] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402863] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402874] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402885] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402896] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402908] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402919] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402951] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402962] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402973] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402983] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.402994] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403023] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403034] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403045] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403056] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403067] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403078] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403089] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403100] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403111] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403122] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403133] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403144] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403154] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403165] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403176] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403187] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403198] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403209] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403220] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403231] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403242] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403253] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403264] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403275] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403285] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403296] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403307] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403318] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403329] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403340] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403351] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403362] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403373] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403384] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403395] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403406] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403417] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403428] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403446] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403457] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403468] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403479] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403490] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403501] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403512] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403523] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403539] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403555] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403569] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403581] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403592] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 12:42:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x4) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="ef"], 0x1) sendfile(r3, r3, &(0x7f00000000c0), 0xfff) sendfile(r1, r3, &(0x7f0000000140), 0x8fff) 12:42:48 executing program 4: creat(&(0x7f0000000080)='./control\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007b5000), 0x8) signalfd(r0, &(0x7f00007b6ff8)={0x4}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) readv(r0, &(0x7f000008bfe0)=[{&(0x7f0000525000)=""/216, 0xd8}], 0x1) r3 = dup2(r1, r0) fcntl$setsig(r1, 0xa, 0x3) r4 = inotify_add_watch(r3, &(0x7f00007b4ff6)='./control\x00', 0x40000001) inotify_rm_watch(r1, r4) 12:42:48 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000040607031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:42:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5414, 0x20800009) 12:42:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") add_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600), &(0x7f0000000680), 0x0, 0xfffffffffffffffe) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) getpriority(0x1, r1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) fremovexattr(r0, &(0x7f0000000a80)=@known='security.SMACK64MMAP\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x1, "9cb492d32219358a"}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000200)) 12:42:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x4) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="ef"], 0x1) sendfile(r3, r3, &(0x7f00000000c0), 0xfff) sendfile(r1, r3, &(0x7f0000000140), 0x8fff) [ 907.403607] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403618] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403634] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403645] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403656] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403667] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403678] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 12:42:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5414, 0x20800009) [ 907.403689] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403704] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403715] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403725] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403736] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403748] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 12:42:48 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000040607031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:42:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") add_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600), &(0x7f0000000680), 0x0, 0xfffffffffffffffe) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) getpriority(0x1, r1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) fremovexattr(r0, &(0x7f0000000a80)=@known='security.SMACK64MMAP\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x1, "9cb492d32219358a"}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000200)) 12:42:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") add_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600), &(0x7f0000000680), 0x0, 0xfffffffffffffffe) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) getpriority(0x1, r1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) fremovexattr(r0, &(0x7f0000000a80)=@known='security.SMACK64MMAP\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x1, "9cb492d32219358a"}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000200)) [ 907.403759] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403769] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403784] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403794] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403805] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 12:42:48 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000040607031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 907.403816] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403827] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403837] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403848] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403859] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403870] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403880] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 12:42:48 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000040607031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 907.403891] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403901] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403912] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403934] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403945] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403956] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.403967] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 907.406165] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 907.427642] binder: BINDER_SET_CONTEXT_MGR already set [ 907.427652] binder: 12852:12859 ioctl 40046207 0 returned -16 [ 907.428377] binder_alloc: 12826: binder_alloc_buf, no vma [ 907.428394] binder: 12852:12859 transaction failed 29189/-3, size 0-8 line 3136 [ 907.428627] binder_alloc: 12826: binder_alloc_buf, no vma [ 907.428643] binder: 12852:12859 transaction failed 29189/-3, size 0-12288 line 3136 [ 907.441316] binder: BINDER_SET_CONTEXT_MGR already set [ 907.441324] binder: 12862:12866 ioctl 40046207 0 returned -16 [ 907.441533] binder_alloc: 12826: binder_alloc_buf, no vma [ 907.441549] binder: 12862:12866 transaction failed 29189/-3, size 0-8 line 3136 [ 907.442550] binder_alloc: 12826: binder_alloc_buf, no vma [ 907.442567] binder: 12862:12866 transaction failed 29189/-3, size 0-12288 line 3136 [ 907.463549] binder: BINDER_SET_CONTEXT_MGR already set [ 907.463556] binder: 12870:12873 ioctl 40046207 0 returned -16 [ 907.464034] binder_alloc: 12826: binder_alloc_buf, no vma [ 907.466496] binder: 12870:12873 transaction failed 29189/-3, size 0-8 line 3136 [ 907.468060] binder_alloc: 12826: binder_alloc_buf, no vma [ 907.468077] binder: 12870:12873 transaction failed 29189/-3, size 0-12288 line 3136 [ 907.505193] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 907.505204] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 907.505215] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 907.505226] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 907.505255] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 907.505266] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 907.505278] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 907.505289] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 907.505300] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 907.505311] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 907.505327] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 907.508890] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz1 [ 907.526378] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526391] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526403] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526414] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526432] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526444] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526455] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526466] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526477] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526488] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526499] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526509] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526520] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526531] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526542] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526553] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526565] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526575] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526587] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526597] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526610] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526621] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526632] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526643] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526654] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526665] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526676] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526687] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526698] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526708] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526719] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526730] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526741] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526752] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526764] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526775] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526786] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526797] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526808] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526819] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526829] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526839] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526849] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526861] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526871] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526882] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526893] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526903] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526924] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526935] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526946] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526974] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526984] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.526995] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527005] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527016] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527026] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527037] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527048] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527058] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527069] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527079] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527090] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527101] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 12:42:49 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x4) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="ef"], 0x1) sendfile(r3, r3, &(0x7f00000000c0), 0xfff) sendfile(r1, r3, &(0x7f0000000140), 0x8fff) 12:42:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") add_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600), &(0x7f0000000680), 0x0, 0xfffffffffffffffe) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) getpriority(0x1, r1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) fremovexattr(r0, &(0x7f0000000a80)=@known='security.SMACK64MMAP\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x1, "9cb492d32219358a"}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000200)) 12:42:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") add_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600), &(0x7f0000000680), 0x0, 0xfffffffffffffffe) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) getpriority(0x1, r1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) fremovexattr(r0, &(0x7f0000000a80)=@known='security.SMACK64MMAP\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x1, "9cb492d32219358a"}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000200)) 12:42:49 executing program 1: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f000095c000)="2400000026007f000000000800007701000000ff01000000000080ffffffffff0100ff10", 0x24) 12:42:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") add_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600), &(0x7f0000000680), 0x0, 0xfffffffffffffffe) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) getpriority(0x1, r1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) fremovexattr(r0, &(0x7f0000000a80)=@known='security.SMACK64MMAP\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x1, "9cb492d32219358a"}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000200)) [ 907.527111] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527122] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527132] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527143] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527153] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527164] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527175] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527185] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527197] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527208] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527218] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527229] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527239] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527250] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527261] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527271] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527282] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527292] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527303] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527313] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527324] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527335] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527345] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527356] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527366] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527378] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527389] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527399] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 12:42:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x4) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="ef"], 0x1) sendfile(r3, r3, &(0x7f00000000c0), 0xfff) sendfile(r1, r3, &(0x7f0000000140), 0x8fff) 12:42:49 executing program 1: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f000095c000)="2400000026007f000000000800007701000000ff01000000000080ffffffffff0100ff10", 0x24) 12:42:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") add_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600), &(0x7f0000000680), 0x0, 0xfffffffffffffffe) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) getpriority(0x1, r1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) fremovexattr(r0, &(0x7f0000000a80)=@known='security.SMACK64MMAP\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x1, "9cb492d32219358a"}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000200)) 12:42:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") add_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600), &(0x7f0000000680), 0x0, 0xfffffffffffffffe) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) getpriority(0x1, r1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) fremovexattr(r0, &(0x7f0000000a80)=@known='security.SMACK64MMAP\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x1, "9cb492d32219358a"}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000200)) 12:42:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") add_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600), &(0x7f0000000680), 0x0, 0xfffffffffffffffe) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = fcntl$getown(0xffffffffffffffff, 0x9) getpriority(0x1, r1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) fremovexattr(r0, &(0x7f0000000a80)=@known='security.SMACK64MMAP\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x1, "9cb492d32219358a"}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000200)) [ 907.527410] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527420] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527436] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527446] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527456] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527466] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 12:42:49 executing program 1: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f000095c000)="2400000026007f000000000800007701000000ff01000000000080ffffffffff0100ff10", 0x24) [ 907.527477] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527487] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527498] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527509] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527519] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527530] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527541] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 12:42:49 executing program 1: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f000095c000)="2400000026007f000000000800007701000000ff01000000000080ffffffffff0100ff10", 0x24) [ 907.527551] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527562] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527573] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527583] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527594] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527605] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527615] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527626] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527636] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527647] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527658] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527668] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527679] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527689] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527700] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527710] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527721] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527731] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527741] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527752] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527763] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527773] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527783] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527793] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527804] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527814] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.527824] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 907.531521] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 907.558661] binder: BINDER_SET_CONTEXT_MGR already set [ 907.558668] binder: 12874:12878 ioctl 40046207 0 returned -16 [ 907.559282] binder_alloc: 12826: binder_alloc_buf, no vma [ 907.559296] binder: 12874:12878 transaction failed 29189/-3, size 0-8 line 3136 [ 907.560760] binder_alloc: 12826: binder_alloc_buf, no vma [ 907.560775] binder: 12874:12878 transaction failed 29189/-3, size 0-12288 line 3136 [ 908.511151] audit: type=1400 audit(1543322567.286:99): avc: denied { read } for pid=12933 comm="syz-executor3" name="bus" dev="sda1" ino=16534 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 910.830744] binder: undelivered TRANSACTION_ERROR: 29189 [ 910.836429] binder: undelivered TRANSACTION_ERROR: 29189 [ 910.842020] binder: undelivered TRANSACTION_ERROR: 29189 [ 910.847611] binder: undelivered TRANSACTION_ERROR: 29189 [ 910.853267] binder: undelivered TRANSACTION_ERROR: 29189 [ 910.858873] binder: undelivered TRANSACTION_ERROR: 29189 12:42:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2000002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) write$evdev(r0, &(0x7f000004d000)=[{{0x2}}], 0x10) 12:42:50 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f00005b1ffc), 0x4) 12:42:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @multicast2}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='lo\x00'}) 12:42:50 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f000018effc)=0x1c, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:42:50 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f00005b1ffc), 0x4) 12:42:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000000000), 0xc) 12:42:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @multicast2}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='lo\x00'}) 12:42:50 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f00005b1ffc), 0x4) 12:42:50 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f000018effc)=0x1c, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:42:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) truncate(&(0x7f0000000400)='./bus\x00', 0x9fc) r2 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) syncfs(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140)="b30b", 0x0, &(0x7f0000000340), &(0x7f00000003c0)) syncfs(r4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, 0xffffffffffffffff) fchmod(r7, 0x120) 12:42:50 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f000018effc)=0x1c, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:42:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @multicast2}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='lo\x00'}) [ 911.395244] audit: type=1400 audit(1543322570.176:100): avc: denied { bind } for pid=13039 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 12:42:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2000002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) write$evdev(r0, &(0x7f000004d000)=[{{0x2}}], 0x10) 12:42:50 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f00005b1ffc), 0x4) 12:42:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @multicast2}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='lo\x00'}) 12:42:50 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f000018effc)=0x1c, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 12:42:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) memfd_create(&(0x7f0000000080)='#cgroup#posix_acl_access\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='attr/keycreate\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008ba000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f000067e000/0x2000)=nil) mlock2(&(0x7f0000469000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x3000, 0xffffffffffffffff, &(0x7f0000a65000/0x3000)=nil) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 12:42:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000001240)) 12:42:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/93, 0x5d) getdents64(r0, &(0x7f00000001c0)=""/4, 0x1c) 12:42:50 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000003880)}}, {{&(0x7f00000001c0)=@vsock, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000000)}}], 0x2, 0x0) 12:42:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) memfd_create(&(0x7f0000000080)='#cgroup#posix_acl_access\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='attr/keycreate\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008ba000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f000067e000/0x2000)=nil) mlock2(&(0x7f0000469000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x3000, 0xffffffffffffffff, &(0x7f0000a65000/0x3000)=nil) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 12:42:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) truncate(&(0x7f0000000400)='./bus\x00', 0x9fc) r2 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) syncfs(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140)="b30b", 0x0, &(0x7f0000000340), &(0x7f00000003c0)) syncfs(r4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, 0xffffffffffffffff) fchmod(r7, 0x120) 12:42:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) memfd_create(&(0x7f0000000080)='#cgroup#posix_acl_access\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='attr/keycreate\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008ba000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f000067e000/0x2000)=nil) mlock2(&(0x7f0000469000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x3000, 0xffffffffffffffff, &(0x7f0000a65000/0x3000)=nil) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 12:42:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000001240)) 12:42:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/93, 0x5d) getdents64(r0, &(0x7f00000001c0)=""/4, 0x1c) 12:42:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2000002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) write$evdev(r0, &(0x7f000004d000)=[{{0x2}}], 0x10) 12:42:50 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000003880)}}, {{&(0x7f00000001c0)=@vsock, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000000)}}], 0x2, 0x0) 12:42:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000001240)) 12:42:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/93, 0x5d) getdents64(r0, &(0x7f00000001c0)=""/4, 0x1c) 12:42:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) memfd_create(&(0x7f0000000080)='#cgroup#posix_acl_access\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='attr/keycreate\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008ba000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f000067e000/0x2000)=nil) mlock2(&(0x7f0000469000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x3000, 0xffffffffffffffff, &(0x7f0000a65000/0x3000)=nil) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 12:42:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/93, 0x5d) getdents64(r0, &(0x7f00000001c0)=""/4, 0x1c) 12:42:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000001240)) 12:42:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) truncate(&(0x7f0000000400)='./bus\x00', 0x9fc) r2 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) syncfs(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140)="b30b", 0x0, &(0x7f0000000340), &(0x7f00000003c0)) syncfs(r4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, 0xffffffffffffffff) fchmod(r7, 0x120) INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes 12:42:51 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) truncate(&(0x7f0000000400)='./bus\x00', 0x9fc) r2 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) syncfs(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140)="b30b", 0x0, &(0x7f0000000340), &(0x7f00000003c0)) syncfs(r4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, 0xffffffffffffffff) fchmod(r7, 0x120) 12:42:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) memfd_create(&(0x7f0000000080)='#cgroup#posix_acl_access\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='attr/keycreate\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008ba000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f000067e000/0x2000)=nil) mlock2(&(0x7f0000469000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x3000, 0xffffffffffffffff, &(0x7f0000a65000/0x3000)=nil) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 12:42:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) memfd_create(&(0x7f0000000080)='#cgroup#posix_acl_access\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='attr/keycreate\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008ba000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f000067e000/0x2000)=nil) mlock2(&(0x7f0000469000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x3000, 0xffffffffffffffff, &(0x7f0000a65000/0x3000)=nil) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 12:42:51 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000003880)}}, {{&(0x7f00000001c0)=@vsock, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000000)}}], 0x2, 0x0) 12:42:51 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2000002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) write$evdev(r0, &(0x7f000004d000)=[{{0x2}}], 0x10) 12:42:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) memfd_create(&(0x7f0000000080)='#cgroup#posix_acl_access\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='attr/keycreate\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008ba000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f000067e000/0x2000)=nil) mlock2(&(0x7f0000469000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x3000, 0xffffffffffffffff, &(0x7f0000a65000/0x3000)=nil) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 12:42:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) memfd_create(&(0x7f0000000080)='#cgroup#posix_acl_access\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='attr/keycreate\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008ba000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f000067e000/0x2000)=nil) mlock2(&(0x7f0000469000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x3000, 0xffffffffffffffff, &(0x7f0000a65000/0x3000)=nil) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 12:42:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) memfd_create(&(0x7f0000000080)='#cgroup#posix_acl_access\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='attr/keycreate\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008ba000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f000067e000/0x2000)=nil) mlock2(&(0x7f0000469000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x3000, 0xffffffffffffffff, &(0x7f0000a65000/0x3000)=nil) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 12:42:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) truncate(&(0x7f0000000400)='./bus\x00', 0x9fc) r2 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) syncfs(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140)="b30b", 0x0, &(0x7f0000000340), &(0x7f00000003c0)) syncfs(r4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, 0xffffffffffffffff) fchmod(r7, 0x120) 12:42:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) memfd_create(&(0x7f0000000080)='#cgroup#posix_acl_access\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='attr/keycreate\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008ba000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f000067e000/0x2000)=nil) mlock2(&(0x7f0000469000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x3000, 0xffffffffffffffff, &(0x7f0000a65000/0x3000)=nil) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 12:42:51 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000003880)}}, {{&(0x7f00000001c0)=@vsock, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000000)}}], 0x2, 0x0) 12:42:51 executing program 4: clone(0x2000007fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x115, &(0x7f0000346fc8)=@framed={{0x18, 0xffffff85}, [@alu]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xac3b42bc00d7f9cc, &(0x7f00001a7f05)=""/251}, 0x48) INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes 12:42:52 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) truncate(&(0x7f0000000400)='./bus\x00', 0x9fc) r2 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) syncfs(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140)="b30b", 0x0, &(0x7f0000000340), &(0x7f00000003c0)) syncfs(r4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, 0xffffffffffffffff) fchmod(r7, 0x120) 12:42:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)="617474722f736f636b6372656174650026a0d1f210f916450b760e027ab62f25bd516528e7e6ced06e838dee008c46df847c7641c8e60d3a5c1d2edb1e1a6dd45d080b30d40c") write$selinux_context(r0, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000), &(0x7f00000001c0)=0x4) 12:42:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000015c0)=""/131, 0x83}, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl(r0, 0x4000008907, &(0x7f0000000180)) 12:42:52 executing program 4: clone(0x2000007fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x115, &(0x7f0000346fc8)=@framed={{0x18, 0xffffff85}, [@alu]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xac3b42bc00d7f9cc, &(0x7f00001a7f05)=""/251}, 0x48) 12:42:52 executing program 1: clone(0x2000007fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x115, &(0x7f0000346fc8)=@framed={{0x18, 0xffffff85}, [@alu]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xac3b42bc00d7f9cc, &(0x7f00001a7f05)=""/251}, 0x48) [ 913.782744] audit: type=1400 audit(1543322572.566:101): avc: denied { bind } for pid=13161 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_trans_lock_t:s0 tclass=udp_socket permissive=1 12:42:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000015c0)=""/131, 0x83}, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl(r0, 0x4000008907, &(0x7f0000000180)) 12:42:52 executing program 4: clone(0x2000007fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x115, &(0x7f0000346fc8)=@framed={{0x18, 0xffffff85}, [@alu]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xac3b42bc00d7f9cc, &(0x7f00001a7f05)=""/251}, 0x48) 12:42:52 executing program 1: clone(0x2000007fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x115, &(0x7f0000346fc8)=@framed={{0x18, 0xffffff85}, [@alu]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xac3b42bc00d7f9cc, &(0x7f00001a7f05)=""/251}, 0x48) [ 913.851531] audit: type=1400 audit(1543322572.636:102): avc: denied { node_bind } for pid=13161 comm="syz-executor2" saddr=127.0.0.1 scontext=system_u:object_r:semanage_trans_lock_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=udp_socket permissive=1 12:42:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) truncate(&(0x7f0000000400)='./bus\x00', 0x9fc) r2 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) syncfs(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140)="b30b", 0x0, &(0x7f0000000340), &(0x7f00000003c0)) syncfs(r4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, 0xffffffffffffffff) fchmod(r7, 0x120) 12:42:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)="617474722f736f636b6372656174650026a0d1f210f916450b760e027ab62f25bd516528e7e6ced06e838dee008c46df847c7641c8e60d3a5c1d2edb1e1a6dd45d080b30d40c") write$selinux_context(r0, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000), &(0x7f00000001c0)=0x4) 12:42:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000015c0)=""/131, 0x83}, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl(r0, 0x4000008907, &(0x7f0000000180)) 12:42:52 executing program 1: clone(0x2000007fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x115, &(0x7f0000346fc8)=@framed={{0x18, 0xffffff85}, [@alu]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xac3b42bc00d7f9cc, &(0x7f00001a7f05)=""/251}, 0x48) 12:42:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000015c0)=""/131, 0x83}, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl(r0, 0x4000008907, &(0x7f0000000180)) 12:42:53 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)="617474722f736f636b6372656174650026a0d1f210f916450b760e027ab62f25bd516528e7e6ced06e838dee008c46df847c7641c8e60d3a5c1d2edb1e1a6dd45d080b30d40c") write$selinux_context(r0, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000), &(0x7f00000001c0)=0x4) 12:42:53 executing program 4: clone(0x2000007fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x115, &(0x7f0000346fc8)=@framed={{0x18, 0xffffff85}, [@alu]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xac3b42bc00d7f9cc, &(0x7f00001a7f05)=""/251}, 0x48) 12:42:53 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)="617474722f736f636b6372656174650026a0d1f210f916450b760e027ab62f25bd516528e7e6ced06e838dee008c46df847c7641c8e60d3a5c1d2edb1e1a6dd45d080b30d40c") write$selinux_context(r0, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000), &(0x7f00000001c0)=0x4) 12:42:53 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000000)=0x402, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffc, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x6) shutdown(r0, 0x1) 12:42:53 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)="617474722f736f636b6372656174650026a0d1f210f916450b760e027ab62f25bd516528e7e6ced06e838dee008c46df847c7641c8e60d3a5c1d2edb1e1a6dd45d080b30d40c") write$selinux_context(r0, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000), &(0x7f00000001c0)=0x4) 12:42:53 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)="617474722f736f636b6372656174650026a0d1f210f916450b760e027ab62f25bd516528e7e6ced06e838dee008c46df847c7641c8e60d3a5c1d2edb1e1a6dd45d080b30d40c") write$selinux_context(r0, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000), &(0x7f00000001c0)=0x4) 12:42:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGPGRP(r1, 0x402c542c, &(0x7f0000000040)) 12:42:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f0000001300)=""/4096, 0x119a}], 0x2000000000000067) 12:42:53 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000000)=0x402, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffc, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x6) shutdown(r0, 0x1) 12:42:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:42:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGPGRP(r1, 0x402c542c, &(0x7f0000000040)) 12:42:53 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)="617474722f736f636b6372656174650026a0d1f210f916450b760e027ab62f25bd516528e7e6ced06e838dee008c46df847c7641c8e60d3a5c1d2edb1e1a6dd45d080b30d40c") write$selinux_context(r0, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000), &(0x7f00000001c0)=0x4) 12:42:53 executing program 5: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r2}) fdatasync(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="00fb6f04006ed5cccabeab56cced0ce5669dc2ba61c7ac005af9c5ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa0660000d32b9ad45d66e35f490fa2b022f1a600c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c45589678072c889a2f864f608cb829bd10df629e5"], 0x1, 0x0) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000640), 0x4) 12:42:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f0000012ff0)={&(0x7f0000016000)={0x14, 0x1c, 0x401}, 0x14}}, 0x0) 12:42:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:42:53 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000040)={&(0x7f0000003100)=""/4096, 0x1000}) 12:42:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGPGRP(r1, 0x402c542c, &(0x7f0000000040)) 12:42:53 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000000)=0x402, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffc, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x6) shutdown(r0, 0x1) 12:42:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f0000012ff0)={&(0x7f0000016000)={0x14, 0x1c, 0x401}, 0x14}}, 0x0) 12:42:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:42:53 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000000)=0x402, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffc, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x6) shutdown(r0, 0x1) 12:42:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f0000012ff0)={&(0x7f0000016000)={0x14, 0x1c, 0x401}, 0x14}}, 0x0) 12:42:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGPGRP(r1, 0x402c542c, &(0x7f0000000040)) 12:42:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:42:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f0000012ff0)={&(0x7f0000016000)={0x14, 0x1c, 0x401}, 0x14}}, 0x0) 12:42:54 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000040)={&(0x7f0000003100)=""/4096, 0x1000}) 12:42:54 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x100000000800003, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) vmsplice(r0, &(0x7f0000000080), 0x346, 0x0) fsync(r0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x400854d6, 0x0) 12:42:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') pread64(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x0) 12:42:54 executing program 5: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r2}) fdatasync(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="00fb6f04006ed5cccabeab56cced0ce5669dc2ba61c7ac005af9c5ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa0660000d32b9ad45d66e35f490fa2b022f1a600c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c45589678072c889a2f864f608cb829bd10df629e5"], 0x1, 0x0) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000640), 0x4) 12:42:54 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x2, "2317757f15ce43d0"}) close(r1) read(r1, &(0x7f0000000740)=""/4096, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="e9703b406c34e37ae02800", @ANYRES16=0x0], 0x2}}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) signalfd(r1, &(0x7f0000000140)={0x4}, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x400, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 12:42:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') pread64(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x0) 12:42:54 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000040)={&(0x7f0000003100)=""/4096, 0x1000}) 12:42:54 executing program 0: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r2}) fdatasync(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="00fb6f04006ed5cccabeab56cced0ce5669dc2ba61c7ac005af9c5ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa0660000d32b9ad45d66e35f490fa2b022f1a600c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c45589678072c889a2f864f608cb829bd10df629e5"], 0x1, 0x0) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000640), 0x4) 12:42:54 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000040)={&(0x7f0000003100)=""/4096, 0x1000}) 12:42:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') pread64(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x0) 12:42:54 executing program 1: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r2}) fdatasync(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="00fb6f04006ed5cccabeab56cced0ce5669dc2ba61c7ac005af9c5ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa0660000d32b9ad45d66e35f490fa2b022f1a600c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c45589678072c889a2f864f608cb829bd10df629e5"], 0x1, 0x0) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000640), 0x4) 12:42:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') pread64(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x0) 12:42:54 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000050c0)={{{@in=@dev, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000051c0)=0xe8) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 12:42:55 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x100000000800003, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) vmsplice(r0, &(0x7f0000000080), 0x346, 0x0) fsync(r0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x400854d6, 0x0) 12:42:55 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000050c0)={{{@in=@dev, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000051c0)=0xe8) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 12:42:55 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x2, "2317757f15ce43d0"}) close(r1) read(r1, &(0x7f0000000740)=""/4096, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="e9703b406c34e37ae02800", @ANYRES16=0x0], 0x2}}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) signalfd(r1, &(0x7f0000000140)={0x4}, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x400, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 12:42:55 executing program 5: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r2}) fdatasync(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="00fb6f04006ed5cccabeab56cced0ce5669dc2ba61c7ac005af9c5ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa0660000d32b9ad45d66e35f490fa2b022f1a600c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c45589678072c889a2f864f608cb829bd10df629e5"], 0x1, 0x0) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000640), 0x4) 12:42:55 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000050c0)={{{@in=@dev, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000051c0)=0xe8) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 12:42:55 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x100000000800003, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) vmsplice(r0, &(0x7f0000000080), 0x346, 0x0) fsync(r0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x400854d6, 0x0) 12:42:55 executing program 0: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r2}) fdatasync(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="00fb6f04006ed5cccabeab56cced0ce5669dc2ba61c7ac005af9c5ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa0660000d32b9ad45d66e35f490fa2b022f1a600c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c45589678072c889a2f864f608cb829bd10df629e5"], 0x1, 0x0) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000640), 0x4) 12:42:55 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000050c0)={{{@in=@dev, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000051c0)=0xe8) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 12:42:55 executing program 1: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r2}) fdatasync(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="00fb6f04006ed5cccabeab56cced0ce5669dc2ba61c7ac005af9c5ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa0660000d32b9ad45d66e35f490fa2b022f1a600c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c45589678072c889a2f864f608cb829bd10df629e5"], 0x1, 0x0) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000640), 0x4) 12:42:55 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x2, "2317757f15ce43d0"}) close(r1) read(r1, &(0x7f0000000740)=""/4096, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="e9703b406c34e37ae02800", @ANYRES16=0x0], 0x2}}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) signalfd(r1, &(0x7f0000000140)={0x4}, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x400, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 12:42:55 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x2, "2317757f15ce43d0"}) close(r1) read(r1, &(0x7f0000000740)=""/4096, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="e9703b406c34e37ae02800", @ANYRES16=0x0], 0x2}}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) signalfd(r1, &(0x7f0000000140)={0x4}, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x400, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 12:42:56 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x2, "2317757f15ce43d0"}) close(r1) read(r1, &(0x7f0000000740)=""/4096, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="e9703b406c34e37ae02800", @ANYRES16=0x0], 0x2}}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) signalfd(r1, &(0x7f0000000140)={0x4}, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x400, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 12:42:56 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x100000000800003, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) vmsplice(r0, &(0x7f0000000080), 0x346, 0x0) fsync(r0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x400854d6, 0x0) 12:42:56 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x2, "2317757f15ce43d0"}) close(r1) read(r1, &(0x7f0000000740)=""/4096, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="e9703b406c34e37ae02800", @ANYRES16=0x0], 0x2}}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) signalfd(r1, &(0x7f0000000140)={0x4}, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x400, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 12:42:56 executing program 0: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r2}) fdatasync(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="00fb6f04006ed5cccabeab56cced0ce5669dc2ba61c7ac005af9c5ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa0660000d32b9ad45d66e35f490fa2b022f1a600c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c45589678072c889a2f864f608cb829bd10df629e5"], 0x1, 0x0) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000640), 0x4) 12:42:56 executing program 5: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r2}) fdatasync(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="00fb6f04006ed5cccabeab56cced0ce5669dc2ba61c7ac005af9c5ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa0660000d32b9ad45d66e35f490fa2b022f1a600c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c45589678072c889a2f864f608cb829bd10df629e5"], 0x1, 0x0) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000640), 0x4) 12:42:56 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x2, "2317757f15ce43d0"}) close(r1) read(r1, &(0x7f0000000740)=""/4096, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="e9703b406c34e37ae02800", @ANYRES16=0x0], 0x2}}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) signalfd(r1, &(0x7f0000000140)={0x4}, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x400, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 12:42:56 executing program 1: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="000028bd7000fcdbdf25020000000cd6db99ed3bd63c72b95dd9ba6d00030000f8ffffffffffff08000100000000000c000700080001007c37f7f0e1112424265b29e4d3ef1cc6ce9da85850301c71efe621cf0994f73c2541aad832be638a6fb1e5a5fbcd29aa05acac790f0e1c3dfba4340c8caf924784a670db42dff83d007db224e0ffa056c79418c84161e2fdd4ca420c931b7453e864000000000000000063a5beb8b0a273adcd146cfe92ab70b2374d1de005b3fc384a3c1d984ed0d9f426d6a63b0b5adb8f49562ef5c7ee9ccf40ca49b89528191da8cf291dee1f6b660ca7cf8b99bb41f6918fbb5c4135049a0000000000000000000000000000", @ANYRES32=r1], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r2}) fdatasync(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="00fb6f04006ed5cccabeab56cced0ce5669dc2ba61c7ac005af9c5ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa0660000d32b9ad45d66e35f490fa2b022f1a600c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c45589678072c889a2f864f608cb829bd10df629e5"], 0x1, 0x0) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000640), 0x4) 12:42:56 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x2, "2317757f15ce43d0"}) close(r1) read(r1, &(0x7f0000000740)=""/4096, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="e9703b406c34e37ae02800", @ANYRES16=0x0], 0x2}}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) signalfd(r1, &(0x7f0000000140)={0x4}, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x400, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 12:42:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000050c0)={{{@in=@dev, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000051c0)=0xe8) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 12:42:57 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x2, "2317757f15ce43d0"}) close(r1) read(r1, &(0x7f0000000740)=""/4096, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="e9703b406c34e37ae02800", @ANYRES16=0x0], 0x2}}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) signalfd(r1, &(0x7f0000000140)={0x4}, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x400, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 12:42:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000050c0)={{{@in=@dev, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000051c0)=0xe8) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 12:42:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000050c0)={{{@in=@dev, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000051c0)=0xe8) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 12:42:57 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="180000ff0100000000000080"], 0xc}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x4000)=nil, &(0x7f0000000000)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000100)) 12:42:57 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x48204) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141442, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:42:57 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="180000ff0100000000000080"], 0xc}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x4000)=nil, &(0x7f0000000000)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000100)) 12:42:57 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="180000ff0100000000000080"], 0xc}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x4000)=nil, &(0x7f0000000000)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000100)) 12:42:57 executing program 4: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) 12:42:57 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x2, "2317757f15ce43d0"}) close(r1) read(r1, &(0x7f0000000740)=""/4096, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="e9703b406c34e37ae02800", @ANYRES16=0x0], 0x2}}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) signalfd(r1, &(0x7f0000000140)={0x4}, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x400, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 12:42:57 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="180000ff0100000000000080"], 0xc}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x4000)=nil, &(0x7f0000000000)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000100)) 12:42:57 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 12:42:57 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="180000ff0100000000000080"], 0xc}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x4000)=nil, &(0x7f0000000000)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000100)) 12:42:57 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="180000ff0100000000000080"], 0xc}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x4000)=nil, &(0x7f0000000000)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000100)) 12:42:57 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="180000ff0100000000000080"], 0xc}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x4000)=nil, &(0x7f0000000000)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000100)) 12:42:57 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x10000002}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/67, 0x43}, {&(0x7f0000000240)=""/90, 0x5a}], 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040), 0x10) 12:42:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x4, &(0x7f0000000040)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000002c0)={0x0, @speck128, 0x0, "3fd209b0caf7a867"}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xe6d, 0x8, 0x0, 0x0, 0x0, 0x3}}}, 0x90) readv(r2, &(0x7f0000000240), 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)}) r4 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000000240)}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) 12:42:57 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 12:42:57 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 12:42:57 executing program 4: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) [ 918.857502] binder_alloc: 13523: binder_alloc_buf size 7469492431902855744 failed, no address space [ 918.868062] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 918.877656] binder: 13523:13525 transaction failed 29201/-28, size 0-0 line 3136 [ 918.887799] binder: 13523:13525 BC_FREE_BUFFER u0000000000000000 no match [ 918.896928] binder_alloc: binder_alloc_mmap_handler: 13523 20001000-20004000 already mapped failed -16 [ 918.942432] binder: BINDER_SET_CONTEXT_MGR already set [ 918.942441] binder: 13523:13525 ioctl 40046207 0 returned -16 12:42:57 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) [ 919.015256] binder_alloc: 13523: binder_alloc_buf, no vma [ 919.043152] binder: 13523:13540 transaction failed 29189/-3, size 0-0 line 3136 [ 919.050553] binder: 13523:13525 BC_FREE_BUFFER u0000000000000000 no match [ 919.050906] binder: undelivered TRANSACTION_ERROR: 29201 [ 919.118009] binder: undelivered TRANSACTION_ERROR: 29189 12:42:57 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 12:42:57 executing program 4: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) 12:42:57 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 12:42:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x4, &(0x7f0000000040)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000002c0)={0x0, @speck128, 0x0, "3fd209b0caf7a867"}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xe6d, 0x8, 0x0, 0x0, 0x0, 0x3}}}, 0x90) readv(r2, &(0x7f0000000240), 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)}) r4 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000000240)}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) 12:42:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x4, &(0x7f0000000040)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000002c0)={0x0, @speck128, 0x0, "3fd209b0caf7a867"}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xe6d, 0x8, 0x0, 0x0, 0x0, 0x3}}}, 0x90) readv(r2, &(0x7f0000000240), 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)}) r4 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000000240)}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) 12:42:58 executing program 1: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r1, &(0x7f0000000100)="0501000005000000f120aa00e7b25ba32f938207", 0x14, 0x0, &(0x7f0000000300)={0xa, 0x100202020800, 0x2, @remote}, 0x1c) 12:42:58 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x10000002}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/67, 0x43}, {&(0x7f0000000240)=""/90, 0x5a}], 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040), 0x10) [ 919.203536] binder_alloc: 13548: binder_alloc_buf size 7469492431902855744 failed, no address space [ 919.227129] binder: BINDER_SET_CONTEXT_MGR already set [ 919.227137] binder: 13554:13556 ioctl 40046207 0 returned -16 12:42:58 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 12:42:58 executing program 4: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) [ 919.267550] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 919.283476] binder_alloc: 13548: binder_alloc_buf size 7469492431902855744 failed, no address space [ 919.286081] binder: 13554:13562 BC_FREE_BUFFER u0000000000000000 no match [ 919.294977] binder: 13548:13552 transaction failed 29201/-28, size 0-0 line 3136 12:42:58 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x10000002}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/67, 0x43}, {&(0x7f0000000240)=""/90, 0x5a}], 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040), 0x10) [ 919.322040] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 919.334688] binder: 13548:13558 BC_FREE_BUFFER u0000000000000000 no match [ 919.334726] binder: 13554:13556 transaction failed 29201/-28, size 0-0 line 3136 12:42:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x4, &(0x7f0000000040)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000002c0)={0x0, @speck128, 0x0, "3fd209b0caf7a867"}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xe6d, 0x8, 0x0, 0x0, 0x0, 0x3}}}, 0x90) readv(r2, &(0x7f0000000240), 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)}) r4 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000000240)}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) 12:42:58 executing program 4: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'syzkaller0\x00', {0x2, 0x0, @multicast1}}) r0 = socket(0x11, 0x400000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=ANY=[], &(0x7f0000000000), 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$sock_ifreq(r0, 0x800000089f3, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_flags}) [ 919.377599] binder: undelivered TRANSACTION_ERROR: 29201 [ 919.419972] binder: undelivered TRANSACTION_ERROR: 29201 [ 919.427649] binder: BINDER_SET_CONTEXT_MGR already set 12:42:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x4, &(0x7f0000000040)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000002c0)={0x0, @speck128, 0x0, "3fd209b0caf7a867"}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xe6d, 0x8, 0x0, 0x0, 0x0, 0x3}}}, 0x90) readv(r2, &(0x7f0000000240), 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)}) r4 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000000240)}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) 12:42:58 executing program 1: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r1, &(0x7f0000000100)="0501000005000000f120aa00e7b25ba32f938207", 0x14, 0x0, &(0x7f0000000300)={0xa, 0x100202020800, 0x2, @remote}, 0x1c) [ 919.445890] binder: 13576:13577 ioctl 40046207 0 returned -16 [ 919.470361] binder: 13576:13577 transaction failed 29189/-22, size 0-0 line 3013 [ 919.487787] binder: 13576:13577 BC_FREE_BUFFER u0000000000000000 no match 12:42:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x4, &(0x7f0000000040)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000002c0)={0x0, @speck128, 0x0, "3fd209b0caf7a867"}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xe6d, 0x8, 0x0, 0x0, 0x0, 0x3}}}, 0x90) readv(r2, &(0x7f0000000240), 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)}) r4 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000000240)}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) [ 919.488867] binder_alloc: 13580: binder_alloc_buf size 7469492431902855744 failed, no address space [ 919.488874] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 919.488888] binder: 13580:13582 transaction failed 29201/-28, size 0-0 line 3136 12:42:58 executing program 4: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'syzkaller0\x00', {0x2, 0x0, @multicast1}}) r0 = socket(0x11, 0x400000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=ANY=[], &(0x7f0000000000), 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$sock_ifreq(r0, 0x800000089f3, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_flags}) [ 919.490196] binder: 13580:13582 BC_FREE_BUFFER u0000000000000000 no match 12:42:58 executing program 1: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r1, &(0x7f0000000100)="0501000005000000f120aa00e7b25ba32f938207", 0x14, 0x0, &(0x7f0000000300)={0xa, 0x100202020800, 0x2, @remote}, 0x1c) 12:42:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') socketpair$unix(0x1, 0x200000000000001, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffffffffffff41) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xfffffffffffffda1, 0x0, &(0x7f0000000100)=@abs, 0xa) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001300)=""/4096, 0x119a}], 0x2000000000000067) readv(r0, &(0x7f0000000580), 0x3c1) [ 919.490430] binder: undelivered TRANSACTION_ERROR: 29201 [ 919.556088] binder_alloc: 13587: binder_alloc_buf size 7469492431902855744 failed, no address space [ 919.556094] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 919.556111] binder: 13587:13588 transaction failed 29201/-28, size 0-0 line 3136 [ 919.557075] binder: 13587:13588 BC_FREE_BUFFER u0000000000000000 no match [ 919.557520] binder: undelivered TRANSACTION_ERROR: 29201 12:42:58 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x10000002}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/67, 0x43}, {&(0x7f0000000240)=""/90, 0x5a}], 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040), 0x10) 12:42:58 executing program 4: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'syzkaller0\x00', {0x2, 0x0, @multicast1}}) r0 = socket(0x11, 0x400000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=ANY=[], &(0x7f0000000000), 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$sock_ifreq(r0, 0x800000089f3, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_flags}) 12:42:58 executing program 1: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r1, &(0x7f0000000100)="0501000005000000f120aa00e7b25ba32f938207", 0x14, 0x0, &(0x7f0000000300)={0xa, 0x100202020800, 0x2, @remote}, 0x1c) 12:42:58 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x10000002}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/67, 0x43}, {&(0x7f0000000240)=""/90, 0x5a}], 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040), 0x10) 12:42:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x4, &(0x7f0000000040)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000002c0)={0x0, @speck128, 0x0, "3fd209b0caf7a867"}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xe6d, 0x8, 0x0, 0x0, 0x0, 0x3}}}, 0x90) readv(r2, &(0x7f0000000240), 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)}) r4 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000000240)}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) [ 919.842152] binder: undelivered TRANSACTION_ERROR: 29189 12:42:58 executing program 4: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'syzkaller0\x00', {0x2, 0x0, @multicast1}}) r0 = socket(0x11, 0x400000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=ANY=[], &(0x7f0000000000), 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$sock_ifreq(r0, 0x800000089f3, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_flags}) 12:42:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') socketpair$unix(0x1, 0x200000000000001, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffffffffffff41) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xfffffffffffffda1, 0x0, &(0x7f0000000100)=@abs, 0xa) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001300)=""/4096, 0x119a}], 0x2000000000000067) readv(r0, &(0x7f0000000580), 0x3c1) 12:42:58 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="7e821e94b5c5a767c60a29b785e1098d917f40ba03fc12991f33d89188094ec9ccfc235304a026f0d926570636da17d07bdfda199b3d754de1acd2ce9d880b4a6c86e045ec1d8dfd2a1d14c9a683106dcf5569906e706aea527e530aab7acc9b9053fba15f91866009832ac6297924f1697c7a30136a4481c24e9e2f3065ca7274d06db63ffd4017c50eb39eb1abffa927168567839f26eab451cd1b4337dcfc9bf7c0579fdc53948dc025d94c0f06aebdbba80959664e1f4d858af7b86d050f85b8bf0965cf13273ed137b85295d8e227c864f50a067b00aae37f80f3525e4c2b7707615b29d0bb8a6a811741ae"], &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000033ff4), &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440), 0x4000000000200) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x6) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x40, 0x0) 12:42:58 executing program 4: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) [ 919.950120] binder_alloc: 13606: binder_alloc_buf size 7469492431902855744 failed, no address space [ 919.963631] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 919.976440] binder: 13606:13609 transaction failed 29201/-28, size 0-0 line 3136 12:42:58 executing program 4: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) exit(0x0) getcwd(0x0, 0x0) [ 920.006631] binder: 13606:13618 BC_FREE_BUFFER u0000000000000000 no match [ 920.020369] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 12:42:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) [ 920.303951] binder: undelivered TRANSACTION_ERROR: 29201 12:42:59 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x10000002}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/67, 0x43}, {&(0x7f0000000240)=""/90, 0x5a}], 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040), 0x10) 12:42:59 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x10000002}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/67, 0x43}, {&(0x7f0000000240)=""/90, 0x5a}], 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040), 0x10) 12:42:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') socketpair$unix(0x1, 0x200000000000001, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffffffffffff41) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xfffffffffffffda1, 0x0, &(0x7f0000000100)=@abs, 0xa) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001300)=""/4096, 0x119a}], 0x2000000000000067) readv(r0, &(0x7f0000000580), 0x3c1) 12:42:59 executing program 4: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) exit(0x0) getcwd(0x0, 0x0) 12:42:59 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="7e821e94b5c5a767c60a29b785e1098d917f40ba03fc12991f33d89188094ec9ccfc235304a026f0d926570636da17d07bdfda199b3d754de1acd2ce9d880b4a6c86e045ec1d8dfd2a1d14c9a683106dcf5569906e706aea527e530aab7acc9b9053fba15f91866009832ac6297924f1697c7a30136a4481c24e9e2f3065ca7274d06db63ffd4017c50eb39eb1abffa927168567839f26eab451cd1b4337dcfc9bf7c0579fdc53948dc025d94c0f06aebdbba80959664e1f4d858af7b86d050f85b8bf0965cf13273ed137b85295d8e227c864f50a067b00aae37f80f3525e4c2b7707615b29d0bb8a6a811741ae"], &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000033ff4), &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440), 0x4000000000200) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x6) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x40, 0x0) 12:42:59 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="7e821e94b5c5a767c60a29b785e1098d917f40ba03fc12991f33d89188094ec9ccfc235304a026f0d926570636da17d07bdfda199b3d754de1acd2ce9d880b4a6c86e045ec1d8dfd2a1d14c9a683106dcf5569906e706aea527e530aab7acc9b9053fba15f91866009832ac6297924f1697c7a30136a4481c24e9e2f3065ca7274d06db63ffd4017c50eb39eb1abffa927168567839f26eab451cd1b4337dcfc9bf7c0579fdc53948dc025d94c0f06aebdbba80959664e1f4d858af7b86d050f85b8bf0965cf13273ed137b85295d8e227c864f50a067b00aae37f80f3525e4c2b7707615b29d0bb8a6a811741ae"], &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000033ff4), &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440), 0x4000000000200) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x6) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x40, 0x0) 12:42:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') socketpair$unix(0x1, 0x200000000000001, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffffffffffff41) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xfffffffffffffda1, 0x0, &(0x7f0000000100)=@abs, 0xa) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001300)=""/4096, 0x119a}], 0x2000000000000067) readv(r0, &(0x7f0000000580), 0x3c1) 12:42:59 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000000c0)=[{r1}, {r0}], 0x2, 0x10080c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 12:42:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000010, &(0x7f0000000080)=0x9, 0xffffffffffffff18) 12:42:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000010, &(0x7f0000000080)=0x9, 0xffffffffffffff18) 12:43:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000010, &(0x7f0000000080)=0x9, 0xffffffffffffff18) 12:43:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000010, &(0x7f0000000080)=0x9, 0xffffffffffffff18) 12:43:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/sockstat6\x00') openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='cgroup.type\x00', 0x2, 0x0) fchdir(0xffffffffffffffff) setxattr$trusted_overlay_redirect(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000b40)='trusted.overlay.redirect\x00', &(0x7f0000000b80)='./bus\x00', 0x6, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./bus\x00', 0x6, 0x3) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='~systemposix_acl_access\x00', 0x18, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000009c0)={0x8}, 0x8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000008c0)) lseek(r2, 0x20000010000, 0x0) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x54) creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) lstat(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$apparmor_exec(r2, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f00000004c0)=""/157) lchown(&(0x7f0000000640)='./bus\x00', r4, r5) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80585414, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) time(&(0x7f00000000c0)) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0xffffffffffffffa8) getrusage(0xffffffffffffffff, &(0x7f00000005c0)) [ 921.255013] audit: type=1400 audit(1543322580.036:103): avc: denied { setattr } for pid=13674 comm="syz-executor2" name="bus" dev="sda1" ino=16536 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 921.385897] audit: type=1400 audit(1543322580.166:104): avc: denied { getattr } for pid=13674 comm="syz-executor2" path="/syzcgroup/cpu/syz2/bus" dev="sda1" ino=16536 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 12:43:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/sockstat6\x00') openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='cgroup.type\x00', 0x2, 0x0) fchdir(0xffffffffffffffff) setxattr$trusted_overlay_redirect(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000b40)='trusted.overlay.redirect\x00', &(0x7f0000000b80)='./bus\x00', 0x6, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./bus\x00', 0x6, 0x3) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='~systemposix_acl_access\x00', 0x18, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000009c0)={0x8}, 0x8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000008c0)) lseek(r2, 0x20000010000, 0x0) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x54) creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) lstat(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$apparmor_exec(r2, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f00000004c0)=""/157) lchown(&(0x7f0000000640)='./bus\x00', r4, r5) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80585414, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) time(&(0x7f00000000c0)) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0xffffffffffffffa8) getrusage(0xffffffffffffffff, &(0x7f00000005c0)) 12:43:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/sockstat6\x00') openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='cgroup.type\x00', 0x2, 0x0) fchdir(0xffffffffffffffff) setxattr$trusted_overlay_redirect(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000b40)='trusted.overlay.redirect\x00', &(0x7f0000000b80)='./bus\x00', 0x6, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./bus\x00', 0x6, 0x3) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='~systemposix_acl_access\x00', 0x18, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000009c0)={0x8}, 0x8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000008c0)) lseek(r2, 0x20000010000, 0x0) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x54) creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) lstat(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$apparmor_exec(r2, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f00000004c0)=""/157) lchown(&(0x7f0000000640)='./bus\x00', r4, r5) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80585414, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) time(&(0x7f00000000c0)) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0xffffffffffffffa8) getrusage(0xffffffffffffffff, &(0x7f00000005c0)) 12:43:00 executing program 4: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) exit(0x0) getcwd(0x0, 0x0) 12:43:00 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="7e821e94b5c5a767c60a29b785e1098d917f40ba03fc12991f33d89188094ec9ccfc235304a026f0d926570636da17d07bdfda199b3d754de1acd2ce9d880b4a6c86e045ec1d8dfd2a1d14c9a683106dcf5569906e706aea527e530aab7acc9b9053fba15f91866009832ac6297924f1697c7a30136a4481c24e9e2f3065ca7274d06db63ffd4017c50eb39eb1abffa927168567839f26eab451cd1b4337dcfc9bf7c0579fdc53948dc025d94c0f06aebdbba80959664e1f4d858af7b86d050f85b8bf0965cf13273ed137b85295d8e227c864f50a067b00aae37f80f3525e4c2b7707615b29d0bb8a6a811741ae"], &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000033ff4), &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440), 0x4000000000200) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x6) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x40, 0x0) 12:43:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/sockstat6\x00') openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='cgroup.type\x00', 0x2, 0x0) fchdir(0xffffffffffffffff) setxattr$trusted_overlay_redirect(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000b40)='trusted.overlay.redirect\x00', &(0x7f0000000b80)='./bus\x00', 0x6, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./bus\x00', 0x6, 0x3) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='~systemposix_acl_access\x00', 0x18, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000009c0)={0x8}, 0x8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000008c0)) lseek(r2, 0x20000010000, 0x0) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x54) creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) lstat(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$apparmor_exec(r2, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f00000004c0)=""/157) lchown(&(0x7f0000000640)='./bus\x00', r4, r5) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80585414, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) time(&(0x7f00000000c0)) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0xffffffffffffffa8) getrusage(0xffffffffffffffff, &(0x7f00000005c0)) 12:43:00 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="7e821e94b5c5a767c60a29b785e1098d917f40ba03fc12991f33d89188094ec9ccfc235304a026f0d926570636da17d07bdfda199b3d754de1acd2ce9d880b4a6c86e045ec1d8dfd2a1d14c9a683106dcf5569906e706aea527e530aab7acc9b9053fba15f91866009832ac6297924f1697c7a30136a4481c24e9e2f3065ca7274d06db63ffd4017c50eb39eb1abffa927168567839f26eab451cd1b4337dcfc9bf7c0579fdc53948dc025d94c0f06aebdbba80959664e1f4d858af7b86d050f85b8bf0965cf13273ed137b85295d8e227c864f50a067b00aae37f80f3525e4c2b7707615b29d0bb8a6a811741ae"], &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000033ff4), &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440), 0x4000000000200) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x6) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x40, 0x0) 12:43:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/sockstat6\x00') openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='cgroup.type\x00', 0x2, 0x0) fchdir(0xffffffffffffffff) setxattr$trusted_overlay_redirect(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000b40)='trusted.overlay.redirect\x00', &(0x7f0000000b80)='./bus\x00', 0x6, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./bus\x00', 0x6, 0x3) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='~systemposix_acl_access\x00', 0x18, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000009c0)={0x8}, 0x8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000008c0)) lseek(r2, 0x20000010000, 0x0) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x54) creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) lstat(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$apparmor_exec(r2, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f00000004c0)=""/157) lchown(&(0x7f0000000640)='./bus\x00', r4, r5) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80585414, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) time(&(0x7f00000000c0)) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0xffffffffffffffa8) getrusage(0xffffffffffffffff, &(0x7f00000005c0)) 12:43:00 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000000c0)=[{r1}, {r0}], 0x2, 0x10080c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 12:43:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/sockstat6\x00') openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='cgroup.type\x00', 0x2, 0x0) fchdir(0xffffffffffffffff) setxattr$trusted_overlay_redirect(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000b40)='trusted.overlay.redirect\x00', &(0x7f0000000b80)='./bus\x00', 0x6, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./bus\x00', 0x6, 0x3) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='~systemposix_acl_access\x00', 0x18, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000009c0)={0x8}, 0x8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000008c0)) lseek(r2, 0x20000010000, 0x0) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x54) creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) lstat(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$apparmor_exec(r2, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f00000004c0)=""/157) lchown(&(0x7f0000000640)='./bus\x00', r4, r5) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80585414, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) time(&(0x7f00000000c0)) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0xffffffffffffffa8) getrusage(0xffffffffffffffff, &(0x7f00000005c0)) 12:43:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/sockstat6\x00') openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='cgroup.type\x00', 0x2, 0x0) fchdir(0xffffffffffffffff) setxattr$trusted_overlay_redirect(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000b40)='trusted.overlay.redirect\x00', &(0x7f0000000b80)='./bus\x00', 0x6, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./bus\x00', 0x6, 0x3) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='~systemposix_acl_access\x00', 0x18, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000009c0)={0x8}, 0x8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000008c0)) lseek(r2, 0x20000010000, 0x0) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x54) creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) lstat(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$apparmor_exec(r2, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f00000004c0)=""/157) lchown(&(0x7f0000000640)='./bus\x00', r4, r5) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80585414, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) time(&(0x7f00000000c0)) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0xffffffffffffffa8) getrusage(0xffffffffffffffff, &(0x7f00000005c0)) 12:43:01 executing program 4: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) exit(0x0) getcwd(0x0, 0x0) 12:43:01 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000000c0)=[{r1}, {r0}], 0x2, 0x10080c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 12:43:01 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="7e821e94b5c5a767c60a29b785e1098d917f40ba03fc12991f33d89188094ec9ccfc235304a026f0d926570636da17d07bdfda199b3d754de1acd2ce9d880b4a6c86e045ec1d8dfd2a1d14c9a683106dcf5569906e706aea527e530aab7acc9b9053fba15f91866009832ac6297924f1697c7a30136a4481c24e9e2f3065ca7274d06db63ffd4017c50eb39eb1abffa927168567839f26eab451cd1b4337dcfc9bf7c0579fdc53948dc025d94c0f06aebdbba80959664e1f4d858af7b86d050f85b8bf0965cf13273ed137b85295d8e227c864f50a067b00aae37f80f3525e4c2b7707615b29d0bb8a6a811741ae"], &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000033ff4), &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440), 0x4000000000200) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x6) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x40, 0x0) 12:43:01 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="7e821e94b5c5a767c60a29b785e1098d917f40ba03fc12991f33d89188094ec9ccfc235304a026f0d926570636da17d07bdfda199b3d754de1acd2ce9d880b4a6c86e045ec1d8dfd2a1d14c9a683106dcf5569906e706aea527e530aab7acc9b9053fba15f91866009832ac6297924f1697c7a30136a4481c24e9e2f3065ca7274d06db63ffd4017c50eb39eb1abffa927168567839f26eab451cd1b4337dcfc9bf7c0579fdc53948dc025d94c0f06aebdbba80959664e1f4d858af7b86d050f85b8bf0965cf13273ed137b85295d8e227c864f50a067b00aae37f80f3525e4c2b7707615b29d0bb8a6a811741ae"], &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000033ff4), &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440), 0x4000000000200) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x6) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x40, 0x0) 12:43:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/sockstat6\x00') openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='cgroup.type\x00', 0x2, 0x0) fchdir(0xffffffffffffffff) setxattr$trusted_overlay_redirect(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000b40)='trusted.overlay.redirect\x00', &(0x7f0000000b80)='./bus\x00', 0x6, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./bus\x00', 0x6, 0x3) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='~systemposix_acl_access\x00', 0x18, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000009c0)={0x8}, 0x8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000008c0)) lseek(r2, 0x20000010000, 0x0) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x54) creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) lstat(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$apparmor_exec(r2, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f00000004c0)=""/157) lchown(&(0x7f0000000640)='./bus\x00', r4, r5) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80585414, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) time(&(0x7f00000000c0)) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0xffffffffffffffa8) getrusage(0xffffffffffffffff, &(0x7f00000005c0)) 12:43:01 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000000c0)=[{r1}, {r0}], 0x2, 0x10080c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 12:43:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/sockstat6\x00') openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='cgroup.type\x00', 0x2, 0x0) fchdir(0xffffffffffffffff) setxattr$trusted_overlay_redirect(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000b40)='trusted.overlay.redirect\x00', &(0x7f0000000b80)='./bus\x00', 0x6, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./bus\x00', 0x6, 0x3) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='~systemposix_acl_access\x00', 0x18, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000009c0)={0x8}, 0x8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000008c0)) lseek(r2, 0x20000010000, 0x0) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x54) creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) lstat(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$apparmor_exec(r2, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f00000004c0)=""/157) lchown(&(0x7f0000000640)='./bus\x00', r4, r5) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80585414, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) time(&(0x7f00000000c0)) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0xffffffffffffffa8) getrusage(0xffffffffffffffff, &(0x7f00000005c0)) 12:43:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/sockstat6\x00') openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='cgroup.type\x00', 0x2, 0x0) fchdir(0xffffffffffffffff) setxattr$trusted_overlay_redirect(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000b40)='trusted.overlay.redirect\x00', &(0x7f0000000b80)='./bus\x00', 0x6, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./bus\x00', 0x6, 0x3) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='~systemposix_acl_access\x00', 0x18, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000009c0)={0x8}, 0x8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000008c0)) lseek(r2, 0x20000010000, 0x0) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x54) creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) lstat(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$apparmor_exec(r2, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f00000004c0)=""/157) lchown(&(0x7f0000000640)='./bus\x00', r4, r5) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80585414, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) time(&(0x7f00000000c0)) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0xffffffffffffffa8) getrusage(0xffffffffffffffff, &(0x7f00000005c0)) 12:43:02 executing program 4: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="a0", 0x1}], 0x1, 0x0) 12:43:02 executing program 4: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="a0", 0x1}], 0x1, 0x0) 12:43:02 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000000c0)=[{r1}, {r0}], 0x2, 0x10080c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 12:43:02 executing program 4: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="a0", 0x1}], 0x1, 0x0) 12:43:02 executing program 4: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="a0", 0x1}], 0x1, 0x0) 12:43:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x4c) [ 923.407292] device syz_tun entered promiscuous mode [ 923.414127] device syz_tun left promiscuous mode [ 923.420139] device syz_tun entered promiscuous mode [ 923.426013] device syz_tun left promiscuous mode 12:43:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x4c) 12:43:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x2000011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002f80)=ANY=[@ANYBLOB='K']}) 12:43:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_delrule={0x30, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000000}, 0x0) 12:43:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x2000011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002f80)=ANY=[@ANYBLOB='K']}) 12:43:02 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000000c0)=[{r1}, {r0}], 0x2, 0x10080c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 12:43:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=@gettfilter={0x24, 0x2e, 0x1}, 0x24}}, 0x0) 12:43:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_delrule={0x30, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000000}, 0x0) 12:43:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x4c) [ 923.823377] device syz_tun entered promiscuous mode [ 923.830937] device syz_tun left promiscuous mode [ 923.884088] device syz_tun entered promiscuous mode [ 923.896860] device syz_tun left promiscuous mode 12:43:03 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000000c0)=[{r1}, {r0}], 0x2, 0x10080c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 12:43:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=@gettfilter={0x24, 0x2e, 0x1}, 0x24}}, 0x0) 12:43:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_delrule={0x30, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000000}, 0x0) 12:43:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x2000011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002f80)=ANY=[@ANYBLOB='K']}) 12:43:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x4c) 12:43:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_delrule={0x30, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000000}, 0x0) 12:43:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=@gettfilter={0x24, 0x2e, 0x1}, 0x24}}, 0x0) 12:43:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x2000011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002f80)=ANY=[@ANYBLOB='K']}) [ 924.271696] device syz_tun entered promiscuous mode [ 924.294259] device syz_tun left promiscuous mode 12:43:03 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:43:03 executing program 5: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xe7}) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}) 12:43:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) getpgrp(0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="040dfe79ad541591b755b47b416e2d7e2d528c3974ce715d4d2e9d9409d62b10657f9720"], 0x1, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r6, &(0x7f0000000280)=""/243, 0xf3) 12:43:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=@gettfilter={0x24, 0x2e, 0x1}, 0x24}}, 0x0) 12:43:03 executing program 5: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xe7}) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}) 12:43:03 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@local, 0x800, 0x0, 0xff}, 0x20) 12:43:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) r1 = socket$inet6(0x10, 0x80000, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000840)=@nl, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r3 = memfd_create(&(0x7f0000000180)="0004003100", 0x0) write$P9_RFSYNC(r3, &(0x7f0000000240)={0x7, 0x33, 0x100000005}, 0x7) sendto$inet6(r2, &(0x7f0000000380), 0x0, 0x20000004, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f00000005c0)='./bus\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x4) r5 = open(&(0x7f0000000540)='./bus\x00', 0x141042, 0x0) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000480)) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) r6 = creat(&(0x7f00000003c0)='./bus\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000500)={@multicast1, @multicast1, 0x0}, &(0x7f0000000440)=0xc) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000580)={@remote, r7}, 0x14) r8 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:43:03 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x7a04, &(0x7f0000000140)=ANY=[]) unlink(&(0x7f0000000140)='.\x00') mount(&(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000), &(0x7f0000000980)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000009c0)) mount(&(0x7f0000000140), &(0x7f0000000380)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x44000, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:43:03 executing program 5: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xe7}) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}) 12:43:04 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@local, 0x800, 0x0, 0xff}, 0x20) 12:43:04 executing program 5: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xe7}) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}) 12:43:04 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@local, 0x800, 0x0, 0xff}, 0x20) 12:43:04 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:43:04 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@local, 0x800, 0x0, 0xff}, 0x20) 12:43:04 executing program 5: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$selinux_user(r0, &(0x7f0000000000)={'system_u:object_r:hald_cache_t:s0', 0x20, 'system_u\x00'}, 0x2b) 12:43:04 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x7a04, &(0x7f0000000140)=ANY=[]) unlink(&(0x7f0000000140)='.\x00') mount(&(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000), &(0x7f0000000980)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000009c0)) mount(&(0x7f0000000140), &(0x7f0000000380)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x44000, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:43:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) getpgrp(0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="040dfe79ad541591b755b47b416e2d7e2d528c3974ce715d4d2e9d9409d62b10657f9720"], 0x1, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r6, &(0x7f0000000280)=""/243, 0xf3) 12:43:04 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x7a04, &(0x7f0000000140)=ANY=[]) unlink(&(0x7f0000000140)='.\x00') mount(&(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000), &(0x7f0000000980)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000009c0)) mount(&(0x7f0000000140), &(0x7f0000000380)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x44000, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:43:04 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:43:04 executing program 5: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$selinux_user(r0, &(0x7f0000000000)={'system_u:object_r:hald_cache_t:s0', 0x20, 'system_u\x00'}, 0x2b) 12:43:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) r1 = socket$inet6(0x10, 0x80000, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000840)=@nl, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r3 = memfd_create(&(0x7f0000000180)="0004003100", 0x0) write$P9_RFSYNC(r3, &(0x7f0000000240)={0x7, 0x33, 0x100000005}, 0x7) sendto$inet6(r2, &(0x7f0000000380), 0x0, 0x20000004, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f00000005c0)='./bus\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x4) r5 = open(&(0x7f0000000540)='./bus\x00', 0x141042, 0x0) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000480)) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) r6 = creat(&(0x7f00000003c0)='./bus\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000500)={@multicast1, @multicast1, 0x0}, &(0x7f0000000440)=0xc) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000580)={@remote, r7}, 0x14) r8 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:43:04 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x7a04, &(0x7f0000000140)=ANY=[]) unlink(&(0x7f0000000140)='.\x00') mount(&(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000), &(0x7f0000000980)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000009c0)) mount(&(0x7f0000000140), &(0x7f0000000380)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x44000, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:43:04 executing program 5: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$selinux_user(r0, &(0x7f0000000000)={'system_u:object_r:hald_cache_t:s0', 0x20, 'system_u\x00'}, 0x2b) 12:43:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) getpgrp(0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="040dfe79ad541591b755b47b416e2d7e2d528c3974ce715d4d2e9d9409d62b10657f9720"], 0x1, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r6, &(0x7f0000000280)=""/243, 0xf3) 12:43:05 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:43:05 executing program 5: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$selinux_user(r0, &(0x7f0000000000)={'system_u:object_r:hald_cache_t:s0', 0x20, 'system_u\x00'}, 0x2b) 12:43:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) getpgrp(0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="040dfe79ad541591b755b47b416e2d7e2d528c3974ce715d4d2e9d9409d62b10657f9720"], 0x1, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r6, &(0x7f0000000280)=""/243, 0xf3) 12:43:05 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:43:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) getpgrp(0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="040dfe79ad541591b755b47b416e2d7e2d528c3974ce715d4d2e9d9409d62b10657f9720"], 0x1, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r6, &(0x7f0000000280)=""/243, 0xf3) 12:43:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) r1 = socket$inet6(0x10, 0x80000, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000840)=@nl, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r3 = memfd_create(&(0x7f0000000180)="0004003100", 0x0) write$P9_RFSYNC(r3, &(0x7f0000000240)={0x7, 0x33, 0x100000005}, 0x7) sendto$inet6(r2, &(0x7f0000000380), 0x0, 0x20000004, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f00000005c0)='./bus\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x4) r5 = open(&(0x7f0000000540)='./bus\x00', 0x141042, 0x0) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000480)) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) r6 = creat(&(0x7f00000003c0)='./bus\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000500)={@multicast1, @multicast1, 0x0}, &(0x7f0000000440)=0xc) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000580)={@remote, r7}, 0x14) r8 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:43:06 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:43:06 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:43:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) getpgrp(0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="040dfe79ad541591b755b47b416e2d7e2d528c3974ce715d4d2e9d9409d62b10657f9720"], 0x1, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r6, &(0x7f0000000280)=""/243, 0xf3) 12:43:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) getpgrp(0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="040dfe79ad541591b755b47b416e2d7e2d528c3974ce715d4d2e9d9409d62b10657f9720"], 0x1, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r6, &(0x7f0000000280)=""/243, 0xf3) 12:43:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) getpgrp(0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="040dfe79ad541591b755b47b416e2d7e2d528c3974ce715d4d2e9d9409d62b10657f9720"], 0x1, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r6, &(0x7f0000000280)=""/243, 0xf3) 12:43:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) r1 = socket$inet6(0x10, 0x80000, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000840)=@nl, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r3 = memfd_create(&(0x7f0000000180)="0004003100", 0x0) write$P9_RFSYNC(r3, &(0x7f0000000240)={0x7, 0x33, 0x100000005}, 0x7) sendto$inet6(r2, &(0x7f0000000380), 0x0, 0x20000004, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f00000005c0)='./bus\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x4) r5 = open(&(0x7f0000000540)='./bus\x00', 0x141042, 0x0) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000480)) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) r6 = creat(&(0x7f00000003c0)='./bus\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000500)={@multicast1, @multicast1, 0x0}, &(0x7f0000000440)=0xc) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000580)={@remote, r7}, 0x14) r8 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:43:06 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') close(r0) fchdir(r1) r2 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r2, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x80801, 0x0) 12:43:07 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') close(r0) fchdir(r1) r2 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r2, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x80801, 0x0) 12:43:07 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') close(r0) fchdir(r1) r2 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r2, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x80801, 0x0) 12:43:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f00000004c0)=[@clear_death={0x400c630f, 0x0, 0x1}], 0x0, 0x0, &(0x7f0000000740)}) 12:43:07 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') close(r0) fchdir(r1) r2 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r2, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x80801, 0x0) 12:43:07 executing program 0: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r2}) fdatasync(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x6f, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9"}, 0x6f, 0x1) capget(&(0x7f0000000180)={0x200f1526, 0xffffffffffffffff}, &(0x7f00000002c0)={0x3, 0x1}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000640), 0x4) [ 928.380298] binder: 13952:13956 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 0000000000000001 [ 928.500065] binder: BINDER_SET_CONTEXT_MGR already set [ 928.527198] binder: 13952:13965 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 928.596385] binder: 13952:13956 ioctl 40046207 0 returned -16 12:43:07 executing program 4: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 12:43:07 executing program 4: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 12:43:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) getpgrp(0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="040dfe79ad541591b755b47b416e2d7e2d528c3974ce715d4d2e9d9409d62b10657f9720"], 0x1, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r6, &(0x7f0000000280)=""/243, 0xf3) 12:43:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) getpgrp(0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="040dfe79ad541591b755b47b416e2d7e2d528c3974ce715d4d2e9d9409d62b10657f9720"], 0x1, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r6, &(0x7f0000000280)=""/243, 0xf3) 12:43:08 executing program 4: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 12:43:08 executing program 1: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 12:43:08 executing program 0: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r2}) fdatasync(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x6f, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9"}, 0x6f, 0x1) capget(&(0x7f0000000180)={0x200f1526, 0xffffffffffffffff}, &(0x7f00000002c0)={0x3, 0x1}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000640), 0x4) 12:43:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @loopback}, 0xc) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 12:43:08 executing program 1: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 12:43:08 executing program 4: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 12:43:08 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001640)=0xfffffffffffffffc, 0x4) sync_file_range(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') 12:43:08 executing program 1: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 12:43:08 executing program 4: syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 12:43:08 executing program 1: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757812000000004c000006000000070000003c9f0000f1ac8e50d8040000000000000000000000000000"], 0x38) 12:43:09 executing program 3: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80}) fdatasync(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x70, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9c5"}, 0x70, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:09 executing program 4: syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 12:43:09 executing program 1: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757812000000004c000006000000070000003c9f0000f1ac8e50d8040000000000000000000000000000"], 0x38) 12:43:09 executing program 0: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r2}) fdatasync(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x6f, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9"}, 0x6f, 0x1) capget(&(0x7f0000000180)={0x200f1526, 0xffffffffffffffff}, &(0x7f00000002c0)={0x3, 0x1}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000640), 0x4) 12:43:09 executing program 5: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='loginuid\x00') pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000400)="85", 0x1}], 0x1, 0x4) 12:43:09 executing program 1: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757812000000004c000006000000070000003c9f0000f1ac8e50d8040000000000000000000000000000"], 0x38) 12:43:09 executing program 5: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='loginuid\x00') pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000400)="85", 0x1}], 0x1, 0x4) 12:43:09 executing program 4: syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 12:43:09 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001640)=0xfffffffffffffffc, 0x4) sync_file_range(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') 12:43:09 executing program 1: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757812000000004c000006000000070000003c9f0000f1ac8e50d8040000000000000000000000000000"], 0x38) 12:43:09 executing program 5: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='loginuid\x00') pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000400)="85", 0x1}], 0x1, 0x4) 12:43:09 executing program 4: syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 12:43:09 executing program 3: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80}) fdatasync(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x70, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9c5"}, 0x70, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:09 executing program 5: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='loginuid\x00') pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000400)="85", 0x1}], 0x1, 0x4) 12:43:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6103) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x40000000011, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mlock(&(0x7f0000004000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) 12:43:09 executing program 4: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x8004) 12:43:09 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001640)=0xfffffffffffffffc, 0x4) sync_file_range(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') 12:43:09 executing program 0: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r4, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r2}) fdatasync(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x6f, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9"}, 0x6f, 0x1) capget(&(0x7f0000000180)={0x200f1526, 0xffffffffffffffff}, &(0x7f00000002c0)={0x3, 0x1}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000640), 0x4) 12:43:09 executing program 5: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80}) fdatasync(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x70, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9c5"}, 0x70, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:09 executing program 4: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x8004) 12:43:09 executing program 4: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x8004) 12:43:09 executing program 4: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x8004) 12:43:09 executing program 4: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80}) fdatasync(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x70, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9c5"}, 0x70, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:09 executing program 1: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80}) fdatasync(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x70, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9c5"}, 0x70, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:10 executing program 3: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80}) fdatasync(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x70, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9c5"}, 0x70, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000af4768ea2f63959c67dd2981fb7bb04e1768eed1bf56d68ef51981e32571fda5cc7b02e05535c52f4476ab1747dbf8aea298514faca81fa533d463b3b4870495e75a8a605fa00997204f15bcf493962fb5ff6fbfda1a7d6467957c2401a74fb42938e0570a800ac507c04e03df2a29d27bf2d93ddf47ca4f46d6da51a581fea5d73656475a85cc3cff74ad289df861a2b47a26add859b959092d6df3e493b3c4f9d459052f7a4c256017bc4adb7e5d9fd51202a7a724a9bb32ae50f19eeb9b5df7c05ba23264d490c81830a2d58ba81d68a3100b06717f52f", 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:43:10 executing program 5: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80}) fdatasync(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x70, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9c5"}, 0x70, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000af4768ea2f63959c67dd2981fb7bb04e1768eed1bf56d68ef51981e32571fda5cc7b02e05535c52f4476ab1747dbf8aea298514faca81fa533d463b3b4870495e75a8a605fa00997204f15bcf493962fb5ff6fbfda1a7d6467957c2401a74fb42938e0570a800ac507c04e03df2a29d27bf2d93ddf47ca4f46d6da51a581fea5d73656475a85cc3cff74ad289df861a2b47a26add859b959092d6df3e493b3c4f9d459052f7a4c256017bc4adb7e5d9fd51202a7a724a9bb32ae50f19eeb9b5df7c05ba23264d490c81830a2d58ba81d68a3100b06717f52f", 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:43:11 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000001640)=0xfffffffffffffffc, 0x4) sync_file_range(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') 12:43:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000af4768ea2f63959c67dd2981fb7bb04e1768eed1bf56d68ef51981e32571fda5cc7b02e05535c52f4476ab1747dbf8aea298514faca81fa533d463b3b4870495e75a8a605fa00997204f15bcf493962fb5ff6fbfda1a7d6467957c2401a74fb42938e0570a800ac507c04e03df2a29d27bf2d93ddf47ca4f46d6da51a581fea5d73656475a85cc3cff74ad289df861a2b47a26add859b959092d6df3e493b3c4f9d459052f7a4c256017bc4adb7e5d9fd51202a7a724a9bb32ae50f19eeb9b5df7c05ba23264d490c81830a2d58ba81d68a3100b06717f52f", 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:43:11 executing program 4: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80}) fdatasync(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x70, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9c5"}, 0x70, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:11 executing program 1: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80}) fdatasync(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x70, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9c5"}, 0x70, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000af4768ea2f63959c67dd2981fb7bb04e1768eed1bf56d68ef51981e32571fda5cc7b02e05535c52f4476ab1747dbf8aea298514faca81fa533d463b3b4870495e75a8a605fa00997204f15bcf493962fb5ff6fbfda1a7d6467957c2401a74fb42938e0570a800ac507c04e03df2a29d27bf2d93ddf47ca4f46d6da51a581fea5d73656475a85cc3cff74ad289df861a2b47a26add859b959092d6df3e493b3c4f9d459052f7a4c256017bc4adb7e5d9fd51202a7a724a9bb32ae50f19eeb9b5df7c05ba23264d490c81830a2d58ba81d68a3100b06717f52f", 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:43:11 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x64}, {0x6}]}, 0x8) 12:43:11 executing program 5: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80}) fdatasync(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x70, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9c5"}, 0x70, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:11 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x64}, {0x6}]}, 0x8) 12:43:11 executing program 3: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80}) fdatasync(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x70, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9c5"}, 0x70, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:11 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x64}, {0x6}]}, 0x8) 12:43:11 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x64}, {0x6}]}, 0x8) 12:43:11 executing program 0: mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000000000/0x2000)=nil) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="006400ecff0345") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 12:43:12 executing program 3: mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000000000/0x2000)=nil) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="006400ecff0345") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 12:43:12 executing program 0: mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000000000/0x2000)=nil) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="006400ecff0345") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 12:43:12 executing program 1: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80}) fdatasync(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x70, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9c5"}, 0x70, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:12 executing program 4: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80}) fdatasync(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x70, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9c5"}, 0x70, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001040000040d001000ea1100000005000000", 0x29}], 0x1) 12:43:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001040000040d001000ea1100000005000000", 0x29}], 0x1) 12:43:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001040000040d001000ea1100000005000000", 0x29}], 0x1) 12:43:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001040000040d001000ea1100000005000000", 0x29}], 0x1) 12:43:12 executing program 0: mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000000000/0x2000)=nil) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="006400ecff0345") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 12:43:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001040000040d001000ea1100000005000000", 0x29}], 0x1) 12:43:12 executing program 3: mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000000000/0x2000)=nil) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="006400ecff0345") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 12:43:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001040000040d001000ea1100000005000000", 0x29}], 0x1) 12:43:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001040000040d001000ea1100000005000000", 0x29}], 0x1) 12:43:12 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x5}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 12:43:12 executing program 0: mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000000000/0x2000)=nil) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="006400ecff0345") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 12:43:12 executing program 3: mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000000000/0x2000)=nil) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="006400ecff0345") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 12:43:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$session_to_parent(0x12) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f00000003c0)=0x7f) ftruncate(r2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000400)=ANY=[]) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) getuid() 12:43:12 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x5}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 12:43:12 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xf1629b6348f06616) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) socket(0x1b, 0x0, 0x10000) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x2, 0x0) preadv(r2, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/79, 0x4f}], 0x1, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x68) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000540)={0xfffffffffffffffd, 0x7fff, 0x7}, 0x10) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) accept4(r2, &(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000400)=0x80, 0x80800) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000440)={@local, @remote, r3}, 0xc) lsetxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPOUT\x00', &(0x7f00000004c0)='/selinux/mls\x00', 0xd, 0x3) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000680)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2, 0x4e21, 0x8001, 0x0, 0x4, 0xa, 0x80, 0x20, 0x7f}, {0xfffffffffffffffc, 0x6, 0x0, 0xfff, 0x7, 0xe5c1, 0x0, 0x1}, {0xcac5, 0x4, 0xdbcc, 0x200}, 0x1, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x4d4, 0x2b}, 0xa, @in=@multicast2, 0x0, 0x0, 0xacb112824fb83600, 0x1, 0xffffffff, 0x7ff}}, 0xe8) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="636861c640202e6e67657004bccaa27616c07e7275737465642e6f7665726c61792e728a0b64301dfa26a9"], 0x1) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000300)='trusted.overlay.redirect\x00', 0xfffffffffffffffe, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000a80)={0x9, {0x2, 0x4e20, @rand_addr=0x3}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e21, @multicast2}, 0x45, 0x7, 0xe00000000000, 0x100000000, 0x7, &(0x7f0000000a40)='veth0_to_bond\x00', 0x0, 0x8, 0x1}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 12:43:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x289) write$binfmt_elf64(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x241) 12:43:12 executing program 3: mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./control\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000d40)={{}, {}, [{}], {}, [{}]}, 0x34, 0x0) getxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00', &(0x7f0000000200)=""/202, 0xca) 12:43:13 executing program 3: mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./control\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000d40)={{}, {}, [{}], {}, [{}]}, 0x34, 0x0) getxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00', &(0x7f0000000200)=""/202, 0xca) 12:43:13 executing program 3: mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./control\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000d40)={{}, {}, [{}], {}, [{}]}, 0x34, 0x0) getxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00', &(0x7f0000000200)=""/202, 0xca) 12:43:13 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) setsockopt$inet_mreqn(r0, 0x0, 0x5, &(0x7f00000000c0)={@broadcast}, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000840)}], 0x1}, 0x2400c840) 12:43:13 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4600706a5ce1a2ee467d3bca22f507643a066104010000000000000200000000000040000000000000000c02000000000000a6d10000030038000200ffffffff468051e57464030000000300000000000000bc08000000000000f9ffffffffffffffff7f000000000000060000000000000000080000000000000500000002f4c54c36e3c90b005e201b0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae2dc7f0e87b4cb7c2ebe8e1bf26d90204e8796ae2234ab4507f89e0a927c56e06ac8486242f23306477b3ced713f3ccd7a0f1572c2cfeceaf21bfb67974157e7a4e10510b1d74ca0f796a92f62c8102c33ef139e0cf2ccd4388e8404194afc7dc0000000004a76736e493f5c3e2c8d91d510485793916f26e041f6b30857e8c9b55fe64259328116a71513c065b05319d42f98f00000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000008f0000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x289) write$binfmt_elf64(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x241) 12:43:13 executing program 3: mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./control\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000d40)={{}, {}, [{}], {}, [{}]}, 0x34, 0x0) getxattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00', &(0x7f0000000200)=""/202, 0xca) 12:43:13 executing program 3: r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001fef)='/selinux/relabel\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:agp_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0-c1023', 0x20, 0x0, 0x35}, 0x53) 12:43:13 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x289) write$binfmt_elf64(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x241) 12:43:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$session_to_parent(0x12) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f00000003c0)=0x7f) ftruncate(r2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000400)=ANY=[]) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) getuid() 12:43:15 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x5}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 12:43:15 executing program 3: r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001fef)='/selinux/relabel\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:agp_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0-c1023', 0x20, 0x0, 0x35}, 0x53) 12:43:15 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) setsockopt$inet_mreqn(r0, 0x0, 0x5, &(0x7f00000000c0)={@broadcast}, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000840)}], 0x1}, 0x2400c840) 12:43:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$session_to_parent(0x12) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f00000003c0)=0x7f) ftruncate(r2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000400)=ANY=[]) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) getuid() 12:43:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4600706a5ce1a2ee467d3bca22f507643a066104010000000000000200000000000040000000000000000c02000000000000a6d10000030038000200ffffffff468051e57464030000000300000000000000bc08000000000000f9ffffffffffffffff7f000000000000060000000000000000080000000000000500000002f4c54c36e3c90b005e201b0000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae2dc7f0e87b4cb7c2ebe8e1bf26d90204e8796ae2234ab4507f89e0a927c56e06ac8486242f23306477b3ced713f3ccd7a0f1572c2cfeceaf21bfb67974157e7a4e10510b1d74ca0f796a92f62c8102c33ef139e0cf2ccd4388e8404194afc7dc0000000004a76736e493f5c3e2c8d91d510485793916f26e041f6b30857e8c9b55fe64259328116a71513c065b05319d42f98f00000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000008f0000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x289) write$binfmt_elf64(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x241) 12:43:15 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xf1629b6348f06616) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) socket(0x1b, 0x0, 0x10000) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x2, 0x0) preadv(r2, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/79, 0x4f}], 0x1, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x68) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000540)={0xfffffffffffffffd, 0x7fff, 0x7}, 0x10) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) accept4(r2, &(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000400)=0x80, 0x80800) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000440)={@local, @remote, r3}, 0xc) lsetxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPOUT\x00', &(0x7f00000004c0)='/selinux/mls\x00', 0xd, 0x3) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000680)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2, 0x4e21, 0x8001, 0x0, 0x4, 0xa, 0x80, 0x20, 0x7f}, {0xfffffffffffffffc, 0x6, 0x0, 0xfff, 0x7, 0xe5c1, 0x0, 0x1}, {0xcac5, 0x4, 0xdbcc, 0x200}, 0x1, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x4d4, 0x2b}, 0xa, @in=@multicast2, 0x0, 0x0, 0xacb112824fb83600, 0x1, 0xffffffff, 0x7ff}}, 0xe8) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="636861c640202e6e67657004bccaa27616c07e7275737465642e6f7665726c61792e728a0b64301dfa26a9"], 0x1) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000300)='trusted.overlay.redirect\x00', 0xfffffffffffffffe, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000a80)={0x9, {0x2, 0x4e20, @rand_addr=0x3}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e21, @multicast2}, 0x45, 0x7, 0xe00000000000, 0x100000000, 0x7, &(0x7f0000000a40)='veth0_to_bond\x00', 0x0, 0x8, 0x1}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 12:43:15 executing program 3: r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001fef)='/selinux/relabel\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:agp_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0-c1023', 0x20, 0x0, 0x35}, 0x53) 12:43:15 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) setsockopt$inet_mreqn(r0, 0x0, 0x5, &(0x7f00000000c0)={@broadcast}, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000840)}], 0x1}, 0x2400c840) 12:43:15 executing program 3: r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001fef)='/selinux/relabel\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:agp_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0-c1023', 0x20, 0x0, 0x35}, 0x53) 12:43:16 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) setsockopt$inet_mreqn(r0, 0x0, 0x5, &(0x7f00000000c0)={@broadcast}, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000840)}], 0x1}, 0x2400c840) 12:43:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$session_to_parent(0x12) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f00000003c0)=0x7f) ftruncate(r2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000400)=ANY=[]) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) getuid() 12:43:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$session_to_parent(0x12) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f00000003c0)=0x7f) ftruncate(r2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000400)=ANY=[]) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) getuid() 12:43:16 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xf1629b6348f06616) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) socket(0x1b, 0x0, 0x10000) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x2, 0x0) preadv(r2, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/79, 0x4f}], 0x1, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x68) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000540)={0xfffffffffffffffd, 0x7fff, 0x7}, 0x10) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) accept4(r2, &(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000400)=0x80, 0x80800) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000440)={@local, @remote, r3}, 0xc) lsetxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPOUT\x00', &(0x7f00000004c0)='/selinux/mls\x00', 0xd, 0x3) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000680)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2, 0x4e21, 0x8001, 0x0, 0x4, 0xa, 0x80, 0x20, 0x7f}, {0xfffffffffffffffc, 0x6, 0x0, 0xfff, 0x7, 0xe5c1, 0x0, 0x1}, {0xcac5, 0x4, 0xdbcc, 0x200}, 0x1, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x4d4, 0x2b}, 0xa, @in=@multicast2, 0x0, 0x0, 0xacb112824fb83600, 0x1, 0xffffffff, 0x7ff}}, 0xe8) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="636861c640202e6e67657004bccaa27616c07e7275737465642e6f7665726c61792e728a0b64301dfa26a9"], 0x1) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000300)='trusted.overlay.redirect\x00', 0xfffffffffffffffe, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000a80)={0x9, {0x2, 0x4e20, @rand_addr=0x3}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e21, @multicast2}, 0x45, 0x7, 0xe00000000000, 0x100000000, 0x7, &(0x7f0000000a40)='veth0_to_bond\x00', 0x0, 0x8, 0x1}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 12:43:18 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x5}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 12:43:18 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xf1629b6348f06616) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) socket(0x1b, 0x0, 0x10000) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x2, 0x0) preadv(r2, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/79, 0x4f}], 0x1, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x68) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000540)={0xfffffffffffffffd, 0x7fff, 0x7}, 0x10) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) accept4(r2, &(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000400)=0x80, 0x80800) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000440)={@local, @remote, r3}, 0xc) lsetxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPOUT\x00', &(0x7f00000004c0)='/selinux/mls\x00', 0xd, 0x3) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000680)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2, 0x4e21, 0x8001, 0x0, 0x4, 0xa, 0x80, 0x20, 0x7f}, {0xfffffffffffffffc, 0x6, 0x0, 0xfff, 0x7, 0xe5c1, 0x0, 0x1}, {0xcac5, 0x4, 0xdbcc, 0x200}, 0x1, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x4d4, 0x2b}, 0xa, @in=@multicast2, 0x0, 0x0, 0xacb112824fb83600, 0x1, 0xffffffff, 0x7ff}}, 0xe8) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="636861c640202e6e67657004bccaa27616c07e7275737465642e6f7665726c61792e728a0b64301dfa26a9"], 0x1) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000300)='trusted.overlay.redirect\x00', 0xfffffffffffffffe, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000a80)={0x9, {0x2, 0x4e20, @rand_addr=0x3}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e21, @multicast2}, 0x45, 0x7, 0xe00000000000, 0x100000000, 0x7, &(0x7f0000000a40)='veth0_to_bond\x00', 0x0, 0x8, 0x1}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 12:43:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$session_to_parent(0x12) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f00000003c0)=0x7f) ftruncate(r2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000400)=ANY=[]) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) getuid() 12:43:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$session_to_parent(0x12) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f00000003c0)=0x7f) ftruncate(r2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000400)=ANY=[]) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) getuid() 12:43:18 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xf1629b6348f06616) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) socket(0x1b, 0x0, 0x10000) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x2, 0x0) preadv(r2, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/79, 0x4f}], 0x1, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x68) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000540)={0xfffffffffffffffd, 0x7fff, 0x7}, 0x10) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) accept4(r2, &(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000400)=0x80, 0x80800) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000440)={@local, @remote, r3}, 0xc) lsetxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPOUT\x00', &(0x7f00000004c0)='/selinux/mls\x00', 0xd, 0x3) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000680)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2, 0x4e21, 0x8001, 0x0, 0x4, 0xa, 0x80, 0x20, 0x7f}, {0xfffffffffffffffc, 0x6, 0x0, 0xfff, 0x7, 0xe5c1, 0x0, 0x1}, {0xcac5, 0x4, 0xdbcc, 0x200}, 0x1, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x4d4, 0x2b}, 0xa, @in=@multicast2, 0x0, 0x0, 0xacb112824fb83600, 0x1, 0xffffffff, 0x7ff}}, 0xe8) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="636861c640202e6e67657004bccaa27616c07e7275737465642e6f7665726c61792e728a0b64301dfa26a9"], 0x1) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000300)='trusted.overlay.redirect\x00', 0xfffffffffffffffe, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000a80)={0x9, {0x2, 0x4e20, @rand_addr=0x3}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e21, @multicast2}, 0x45, 0x7, 0xe00000000000, 0x100000000, 0x7, &(0x7f0000000a40)='veth0_to_bond\x00', 0x0, 0x8, 0x1}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 12:43:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$session_to_parent(0x12) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f00000003c0)=0x7f) ftruncate(r2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000400)=ANY=[]) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) getuid() 12:43:19 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xf1629b6348f06616) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) socket(0x1b, 0x0, 0x10000) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x2, 0x0) preadv(r2, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/79, 0x4f}], 0x1, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x68) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000540)={0xfffffffffffffffd, 0x7fff, 0x7}, 0x10) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) accept4(r2, &(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000400)=0x80, 0x80800) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000440)={@local, @remote, r3}, 0xc) lsetxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPOUT\x00', &(0x7f00000004c0)='/selinux/mls\x00', 0xd, 0x3) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000680)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2, 0x4e21, 0x8001, 0x0, 0x4, 0xa, 0x80, 0x20, 0x7f}, {0xfffffffffffffffc, 0x6, 0x0, 0xfff, 0x7, 0xe5c1, 0x0, 0x1}, {0xcac5, 0x4, 0xdbcc, 0x200}, 0x1, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x4d4, 0x2b}, 0xa, @in=@multicast2, 0x0, 0x0, 0xacb112824fb83600, 0x1, 0xffffffff, 0x7ff}}, 0xe8) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="636861c640202e6e67657004bccaa27616c07e7275737465642e6f7665726c61792e728a0b64301dfa26a9"], 0x1) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000300)='trusted.overlay.redirect\x00', 0xfffffffffffffffe, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000a80)={0x9, {0x2, 0x4e20, @rand_addr=0x3}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e21, @multicast2}, 0x45, 0x7, 0xe00000000000, 0x100000000, 0x7, &(0x7f0000000a40)='veth0_to_bond\x00', 0x0, 0x8, 0x1}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 12:43:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$session_to_parent(0x12) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f00000003c0)=0x7f) ftruncate(r2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000400)=ANY=[]) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) getuid() 12:43:19 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xf1629b6348f06616) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) socket(0x1b, 0x0, 0x10000) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x2, 0x0) preadv(r2, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/79, 0x4f}], 0x1, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x68) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000540)={0xfffffffffffffffd, 0x7fff, 0x7}, 0x10) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) accept4(r2, &(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000400)=0x80, 0x80800) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000440)={@local, @remote, r3}, 0xc) lsetxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPOUT\x00', &(0x7f00000004c0)='/selinux/mls\x00', 0xd, 0x3) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000680)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2, 0x4e21, 0x8001, 0x0, 0x4, 0xa, 0x80, 0x20, 0x7f}, {0xfffffffffffffffc, 0x6, 0x0, 0xfff, 0x7, 0xe5c1, 0x0, 0x1}, {0xcac5, 0x4, 0xdbcc, 0x200}, 0x1, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x4d4, 0x2b}, 0xa, @in=@multicast2, 0x0, 0x0, 0xacb112824fb83600, 0x1, 0xffffffff, 0x7ff}}, 0xe8) write$apparmor_current(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="636861c640202e6e67657004bccaa27616c07e7275737465642e6f7665726c61792e728a0b64301dfa26a9"], 0x1) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000300)='trusted.overlay.redirect\x00', 0xfffffffffffffffe, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000a80)={0x9, {0x2, 0x4e20, @rand_addr=0x3}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e21, @multicast2}, 0x45, 0x7, 0xe00000000000, 0x100000000, 0x7, &(0x7f0000000a40)='veth0_to_bond\x00', 0x0, 0x8, 0x1}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 12:43:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$session_to_parent(0x12) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f00000003c0)=0x7f) ftruncate(r2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000400)=ANY=[]) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) getuid() 12:43:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040)) 12:43:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040)) 12:43:21 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) clock_gettime(0xfffffffffffffffb, &(0x7f0000000140)) 12:43:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040)) 12:43:21 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:21 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mount(&(0x7f00000004c0), &(0x7f0000d78000)='.', &(0x7f00000003c0)="c8f3cf6a93223b7892332446dc51a16d48bfd0ef5edbe2342b69afe134191d1819a9217b88fe5f5b50c3e93ca3f581b9318bf2aa8f9f83f59ac0413f8bceadf8ee4e07f7206e0acb0aaa6d0f41010520577803a562f5d6279124b302d9fc8c30cfe96eda796ff5c8532d7277b7c0a2142037eb1011a0434ce0bfca113b65d2bbf0678df51e0317c55d5ba0bd8b69a34b62cf828d5727c4b0587a6ea2d62cbf65a0fe6765e9db1de553d948cffcf22304c9c38bab5cde01d961623317fffba72e963a7767337239dac9746a19cae044dd9c5e57909cc79fe9d1ba64283f9055e799e4ea", 0x1003, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 12:43:21 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6a, 0xa, 0xff00}}, &(0x7f00000002c0)="4550d4001f91eb2f57b73224433025039c3096b26b9c5b690c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112b32f03cd4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x4000000000000001, 0xc3, &(0x7f0000000000)=""/195}, 0x48) 12:43:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x64) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmmsg(r0, &(0x7f0000012540)=[{{&(0x7f000000ce40)=@xdp, 0x80, &(0x7f000000e000)=[{&(0x7f000000cec0)=""/4096, 0x1000}], 0x1, 0xffffffffffffffff}}, {{&(0x7f000000e540)=@vsock, 0x80, &(0x7f0000010600)=[{&(0x7f000000e600)=""/4096, 0x1000}], 0x1, &(0x7f0000010640)=""/165, 0xa5}}, {{0x0, 0x0, &(0x7f00000109c0)=[{&(0x7f0000010700)=""/216, 0xd8}, {&(0x7f0000010800)=""/231, 0xe7}, {&(0x7f0000010900)=""/42, 0x2a}, {&(0x7f0000010940)=""/57, 0x39}, {&(0x7f0000010980)=""/21, 0x15}], 0x5, &(0x7f0000010a00)=""/4096, 0x1000, 0x1}, 0x3}, {{&(0x7f0000011a00)=@alg, 0x80, &(0x7f0000011bc0)=[{&(0x7f0000011a80)=""/90, 0x5a}, {&(0x7f0000011b00)=""/178, 0xb2}], 0x2, &(0x7f0000011c00)=""/115, 0x73, 0x5}, 0x4}, {{&(0x7f0000011c80)=@hci, 0x80, &(0x7f00000123c0)=[{&(0x7f0000011d00)=""/23, 0x17}, {&(0x7f0000011d40)=""/43, 0x2b}, {&(0x7f0000011d80)=""/99, 0x63}, {&(0x7f0000011e00)=""/240, 0xf0}, {&(0x7f0000011f00)=""/209, 0xd1}, {&(0x7f0000012000)=""/136, 0x88}, {&(0x7f00000120c0)=""/235, 0xeb}, {&(0x7f00000121c0)=""/187, 0xbb}, {&(0x7f0000012280)=""/158, 0x9e}, {&(0x7f0000012340)=""/67, 0x43}], 0xa, &(0x7f0000012440)=""/237, 0xed, 0x3}, 0x7f}], 0x5, 0x0, &(0x7f0000012640)={0x77359400}) 12:43:22 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6a, 0xa, 0xff00}}, &(0x7f00000002c0)="4550d4001f91eb2f57b73224433025039c3096b26b9c5b690c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112b32f03cd4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x4000000000000001, 0xc3, &(0x7f0000000000)=""/195}, 0x48) 12:43:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@setneightbl={0x13, 0x43, 0x1}, 0x14}}, 0x0) 12:43:22 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6a, 0xa, 0xff00}}, &(0x7f00000002c0)="4550d4001f91eb2f57b73224433025039c3096b26b9c5b690c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112b32f03cd4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x4000000000000001, 0xc3, &(0x7f0000000000)=""/195}, 0x48) 12:43:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040)) 12:43:22 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mount(&(0x7f00000004c0), &(0x7f0000d78000)='.', &(0x7f00000003c0)="c8f3cf6a93223b7892332446dc51a16d48bfd0ef5edbe2342b69afe134191d1819a9217b88fe5f5b50c3e93ca3f581b9318bf2aa8f9f83f59ac0413f8bceadf8ee4e07f7206e0acb0aaa6d0f41010520577803a562f5d6279124b302d9fc8c30cfe96eda796ff5c8532d7277b7c0a2142037eb1011a0434ce0bfca113b65d2bbf0678df51e0317c55d5ba0bd8b69a34b62cf828d5727c4b0587a6ea2d62cbf65a0fe6765e9db1de553d948cffcf22304c9c38bab5cde01d961623317fffba72e963a7767337239dac9746a19cae044dd9c5e57909cc79fe9d1ba64283f9055e799e4ea", 0x1003, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 12:43:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setreuid(0x0, r1) 12:43:22 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) clock_gettime(0xfffffffffffffffb, &(0x7f0000000140)) 12:43:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@setneightbl={0x13, 0x43, 0x1}, 0x14}}, 0x0) 12:43:22 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6a, 0xa, 0xff00}}, &(0x7f00000002c0)="4550d4001f91eb2f57b73224433025039c3096b26b9c5b690c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112b32f03cd4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x4000000000000001, 0xc3, &(0x7f0000000000)=""/195}, 0x48) 12:43:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setreuid(0x0, r1) 12:43:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@setneightbl={0x13, 0x43, 0x1}, 0x14}}, 0x0) 12:43:22 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) clock_gettime(0xfffffffffffffffb, &(0x7f0000000140)) 12:43:22 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mount(&(0x7f00000004c0), &(0x7f0000d78000)='.', &(0x7f00000003c0)="c8f3cf6a93223b7892332446dc51a16d48bfd0ef5edbe2342b69afe134191d1819a9217b88fe5f5b50c3e93ca3f581b9318bf2aa8f9f83f59ac0413f8bceadf8ee4e07f7206e0acb0aaa6d0f41010520577803a562f5d6279124b302d9fc8c30cfe96eda796ff5c8532d7277b7c0a2142037eb1011a0434ce0bfca113b65d2bbf0678df51e0317c55d5ba0bd8b69a34b62cf828d5727c4b0587a6ea2d62cbf65a0fe6765e9db1de553d948cffcf22304c9c38bab5cde01d961623317fffba72e963a7767337239dac9746a19cae044dd9c5e57909cc79fe9d1ba64283f9055e799e4ea", 0x1003, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 12:43:22 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setreuid(0x0, r1) 12:43:22 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@setneightbl={0x13, 0x43, 0x1}, 0x14}}, 0x0) 12:43:22 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) clock_gettime(0xfffffffffffffffb, &(0x7f0000000140)) 12:43:22 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mount(&(0x7f00000004c0), &(0x7f0000d78000)='.', &(0x7f00000003c0)="c8f3cf6a93223b7892332446dc51a16d48bfd0ef5edbe2342b69afe134191d1819a9217b88fe5f5b50c3e93ca3f581b9318bf2aa8f9f83f59ac0413f8bceadf8ee4e07f7206e0acb0aaa6d0f41010520577803a562f5d6279124b302d9fc8c30cfe96eda796ff5c8532d7277b7c0a2142037eb1011a0434ce0bfca113b65d2bbf0678df51e0317c55d5ba0bd8b69a34b62cf828d5727c4b0587a6ea2d62cbf65a0fe6765e9db1de553d948cffcf22304c9c38bab5cde01d961623317fffba72e963a7767337239dac9746a19cae044dd9c5e57909cc79fe9d1ba64283f9055e799e4ea", 0x1003, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 12:43:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setreuid(0x0, r1) 12:43:22 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:22 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:23 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:23 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x10001, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) 12:43:23 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x7ff) 12:43:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r1, 0x11, 0x8000065, &(0x7f0000000440)=0xa69, 0xce) r6 = getpgid(0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)={0xa8, r8, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r7}, {0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0xc2, &(0x7f0000000100)) syz_open_procfs(r6, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x24020400) r9 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[], 0xfffffef6) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f00000005c0)="c2f16a9258380d8eb718047b9c63bc6bdc32ce6c85594cf7a71047142daaf756cbfa4b2e470003e04d285c254e8cd39c7ebe433cebe73170462f2cd0110cc7556deb18f3ffe18fdc21c2e721a02eeec74c3b37353d7f52243ad9c3b00d15570b31bb60b7178feac2308e2b77c0dbb121178c977a2226fe27a326d64fdcbe3437fed3da042e3423b7169a979180355cca63135c0347e2c417cec7a32eea91c5a9f864bca2cec22f6f675ee64c6009bd21880b797a14fd3a29b51ea922f4e0e49539c450d99412832ce495b4a1397989075dd5e6852a2c7fc6f17e3936c0387665cd416eb7fd55fa72753c631a") unlink(&(0x7f0000000400)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 12:43:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x10001, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) 12:43:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="73657467726f757073001c48d0e379485c0d364a3b3fafd169bb5ef69e3d5897dca366d81ac6d78a5c0898512257d4f0fb94eebc71e94a76347665943dd6645a3617f11b6b3d7a8c14e5fc840f925165adb1f447421e9a0639dc2d4d1ea1c57507f719e450da29b3d3830c9cc0f694a6aaf6b0cff401044421937503b621eeb7ab7ee2cfff1650ce2c5aafcbb553a0be2593eca00f6429255578524858b4683c84d11f6d10f48f54a9a32c8464d7d08cd2e1d8ab94f6e9bf8ad97bbd39b7be5d8f6a5085ba5520a0cf262e122305f163c3d1e42b18e8a375700f3df0cf673f7339a9b53fe2496bfb1ca569882d185ccc9afc39a687f9fbf8") write$P9_RLERRORu(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, {{0x4, 'net\x00'}}}, 0x11) 12:43:23 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x100000000) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) fstat(r2, &(0x7f00000004c0)) r4 = add_key(&(0x7f0000000240)="00070400000000000000", &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="3e81349a1cd647d633178d74334acbb31e3c9f6e7c9d681069c116dcb566cd9ba5f1fdd518df58ba0d02702618935300951424fb48133d9a33e5749a6fa4", 0x3e, 0xfffffffffffffffc) r5 = request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000480)="6e6f646576fa00", 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x3}, r5) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="021004000a0000000000000000000000080012000000000000000eff0f0000000000000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000"], 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x10001, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) 12:43:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="73657467726f757073001c48d0e379485c0d364a3b3fafd169bb5ef69e3d5897dca366d81ac6d78a5c0898512257d4f0fb94eebc71e94a76347665943dd6645a3617f11b6b3d7a8c14e5fc840f925165adb1f447421e9a0639dc2d4d1ea1c57507f719e450da29b3d3830c9cc0f694a6aaf6b0cff401044421937503b621eeb7ab7ee2cfff1650ce2c5aafcbb553a0be2593eca00f6429255578524858b4683c84d11f6d10f48f54a9a32c8464d7d08cd2e1d8ab94f6e9bf8ad97bbd39b7be5d8f6a5085ba5520a0cf262e122305f163c3d1e42b18e8a375700f3df0cf673f7339a9b53fe2496bfb1ca569882d185ccc9afc39a687f9fbf8") write$P9_RLERRORu(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, {{0x4, 'net\x00'}}}, 0x11) 12:43:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="73657467726f757073001c48d0e379485c0d364a3b3fafd169bb5ef69e3d5897dca366d81ac6d78a5c0898512257d4f0fb94eebc71e94a76347665943dd6645a3617f11b6b3d7a8c14e5fc840f925165adb1f447421e9a0639dc2d4d1ea1c57507f719e450da29b3d3830c9cc0f694a6aaf6b0cff401044421937503b621eeb7ab7ee2cfff1650ce2c5aafcbb553a0be2593eca00f6429255578524858b4683c84d11f6d10f48f54a9a32c8464d7d08cd2e1d8ab94f6e9bf8ad97bbd39b7be5d8f6a5085ba5520a0cf262e122305f163c3d1e42b18e8a375700f3df0cf673f7339a9b53fe2496bfb1ca569882d185ccc9afc39a687f9fbf8") write$P9_RLERRORu(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, {{0x4, 'net\x00'}}}, 0x11) 12:43:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x10001, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) 12:43:23 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc86b}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) write(r3, &(0x7f0000000280), 0x0) 12:43:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="73657467726f757073001c48d0e379485c0d364a3b3fafd169bb5ef69e3d5897dca366d81ac6d78a5c0898512257d4f0fb94eebc71e94a76347665943dd6645a3617f11b6b3d7a8c14e5fc840f925165adb1f447421e9a0639dc2d4d1ea1c57507f719e450da29b3d3830c9cc0f694a6aaf6b0cff401044421937503b621eeb7ab7ee2cfff1650ce2c5aafcbb553a0be2593eca00f6429255578524858b4683c84d11f6d10f48f54a9a32c8464d7d08cd2e1d8ab94f6e9bf8ad97bbd39b7be5d8f6a5085ba5520a0cf262e122305f163c3d1e42b18e8a375700f3df0cf673f7339a9b53fe2496bfb1ca569882d185ccc9afc39a687f9fbf8") write$P9_RLERRORu(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, {{0x4, 'net\x00'}}}, 0x11) 12:43:23 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r1, 0x11, 0x8000065, &(0x7f0000000440)=0xa69, 0xce) r6 = getpgid(0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)={0xa8, r8, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r7}, {0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0xc2, &(0x7f0000000100)) syz_open_procfs(r6, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x24020400) r9 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[], 0xfffffef6) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f00000005c0)="c2f16a9258380d8eb718047b9c63bc6bdc32ce6c85594cf7a71047142daaf756cbfa4b2e470003e04d285c254e8cd39c7ebe433cebe73170462f2cd0110cc7556deb18f3ffe18fdc21c2e721a02eeec74c3b37353d7f52243ad9c3b00d15570b31bb60b7178feac2308e2b77c0dbb121178c977a2226fe27a326d64fdcbe3437fed3da042e3423b7169a979180355cca63135c0347e2c417cec7a32eea91c5a9f864bca2cec22f6f675ee64c6009bd21880b797a14fd3a29b51ea922f4e0e49539c450d99412832ce495b4a1397989075dd5e6852a2c7fc6f17e3936c0387665cd416eb7fd55fa72753c631a") unlink(&(0x7f0000000400)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 12:43:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x800) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) close(r0) 12:43:24 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) [ 945.296105] input: syz1 as /devices/virtual/input/input195 12:43:24 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x100000000) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) fstat(r2, &(0x7f00000004c0)) r4 = add_key(&(0x7f0000000240)="00070400000000000000", &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="3e81349a1cd647d633178d74334acbb31e3c9f6e7c9d681069c116dcb566cd9ba5f1fdd518df58ba0d02702618935300951424fb48133d9a33e5749a6fa4", 0x3e, 0xfffffffffffffffc) r5 = request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000480)="6e6f646576fa00", 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x3}, r5) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="021004000a0000000000000000000000080012000000000000000eff0f0000000000000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000"], 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:24 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x10, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) read(r0, &(0x7f00000002c0)=""/98, 0x62) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x25c, @remote, 0x97ea}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="dd3614000800000000000000b5da852b36a7f4f50d82096969ef0697b07420dfb5846be8e920c82fc26bb65a96e0466daaa5bd612b77c141903773"], 0x3b) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000180)={0x2f4}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@remote, 0x1, 0x2, 0x4e24, 0x14, 0xa, 0x0, 0xa0, 0x21, r8, r9}, {0x3b9, 0x0, 0x8, 0x9, 0x4, 0x0, 0x8001, 0x9}, {0x80, 0x115f, 0xffffffff, 0x6}, 0xfffffffffffff001, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x3501, 0x4, 0x3, 0x0, 0xff9b, 0x0, 0x100}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) syz_open_procfs(r7, &(0x7f0000000040)='limits\x00') sendfile(r6, r6, &(0x7f00000000c0), 0xfff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r3, r10, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x800) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) close(r0) 12:43:24 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x100000000) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) fstat(r2, &(0x7f00000004c0)) r4 = add_key(&(0x7f0000000240)="00070400000000000000", &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="3e81349a1cd647d633178d74334acbb31e3c9f6e7c9d681069c116dcb566cd9ba5f1fdd518df58ba0d02702618935300951424fb48133d9a33e5749a6fa4", 0x3e, 0xfffffffffffffffc) r5 = request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000480)="6e6f646576fa00", 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x3}, r5) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="021004000a0000000000000000000000080012000000000000000eff0f0000000000000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000"], 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) [ 945.579630] input: syz1 as /devices/virtual/input/input197 12:43:24 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x100000000) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) fstat(r2, &(0x7f00000004c0)) r4 = add_key(&(0x7f0000000240)="00070400000000000000", &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="3e81349a1cd647d633178d74334acbb31e3c9f6e7c9d681069c116dcb566cd9ba5f1fdd518df58ba0d02702618935300951424fb48133d9a33e5749a6fa4", 0x3e, 0xfffffffffffffffc) r5 = request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000480)="6e6f646576fa00", 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x3}, r5) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="021004000a0000000000000000000000080012000000000000000eff0f0000000000000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000"], 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x800) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) close(r0) [ 945.969881] input: syz1 as /devices/virtual/input/input198 12:43:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc86b}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) write(r3, &(0x7f0000000280), 0x0) 12:43:24 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x100000000) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) fstat(r2, &(0x7f00000004c0)) r4 = add_key(&(0x7f0000000240)="00070400000000000000", &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="3e81349a1cd647d633178d74334acbb31e3c9f6e7c9d681069c116dcb566cd9ba5f1fdd518df58ba0d02702618935300951424fb48133d9a33e5749a6fa4", 0x3e, 0xfffffffffffffffc) r5 = request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000480)="6e6f646576fa00", 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x3}, r5) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="021004000a0000000000000000000000080012000000000000000eff0f0000000000000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000"], 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x800) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) close(r0) 12:43:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r1, 0x11, 0x8000065, &(0x7f0000000440)=0xa69, 0xce) r6 = getpgid(0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)={0xa8, r8, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r7}, {0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0xc2, &(0x7f0000000100)) syz_open_procfs(r6, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x24020400) r9 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[], 0xfffffef6) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f00000005c0)="c2f16a9258380d8eb718047b9c63bc6bdc32ce6c85594cf7a71047142daaf756cbfa4b2e470003e04d285c254e8cd39c7ebe433cebe73170462f2cd0110cc7556deb18f3ffe18fdc21c2e721a02eeec74c3b37353d7f52243ad9c3b00d15570b31bb60b7178feac2308e2b77c0dbb121178c977a2226fe27a326d64fdcbe3437fed3da042e3423b7169a979180355cca63135c0347e2c417cec7a32eea91c5a9f864bca2cec22f6f675ee64c6009bd21880b797a14fd3a29b51ea922f4e0e49539c450d99412832ce495b4a1397989075dd5e6852a2c7fc6f17e3936c0387665cd416eb7fd55fa72753c631a") unlink(&(0x7f0000000400)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 12:43:25 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x100000000) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) fstat(r2, &(0x7f00000004c0)) r4 = add_key(&(0x7f0000000240)="00070400000000000000", &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="3e81349a1cd647d633178d74334acbb31e3c9f6e7c9d681069c116dcb566cd9ba5f1fdd518df58ba0d02702618935300951424fb48133d9a33e5749a6fa4", 0x3e, 0xfffffffffffffffc) r5 = request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000480)="6e6f646576fa00", 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x3}, r5) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="021004000a0000000000000000000000080012000000000000000eff0f0000000000000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000"], 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) [ 946.276665] input: syz1 as /devices/virtual/input/input199 12:43:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r1, 0x11, 0x8000065, &(0x7f0000000440)=0xa69, 0xce) r6 = getpgid(0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)={0xa8, r8, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r7}, {0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0xc2, &(0x7f0000000100)) syz_open_procfs(r6, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x24020400) r9 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[], 0xfffffef6) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f00000005c0)="c2f16a9258380d8eb718047b9c63bc6bdc32ce6c85594cf7a71047142daaf756cbfa4b2e470003e04d285c254e8cd39c7ebe433cebe73170462f2cd0110cc7556deb18f3ffe18fdc21c2e721a02eeec74c3b37353d7f52243ad9c3b00d15570b31bb60b7178feac2308e2b77c0dbb121178c977a2226fe27a326d64fdcbe3437fed3da042e3423b7169a979180355cca63135c0347e2c417cec7a32eea91c5a9f864bca2cec22f6f675ee64c6009bd21880b797a14fd3a29b51ea922f4e0e49539c450d99412832ce495b4a1397989075dd5e6852a2c7fc6f17e3936c0387665cd416eb7fd55fa72753c631a") unlink(&(0x7f0000000400)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 12:43:25 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x100000000) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) fstat(r2, &(0x7f00000004c0)) r4 = add_key(&(0x7f0000000240)="00070400000000000000", &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="3e81349a1cd647d633178d74334acbb31e3c9f6e7c9d681069c116dcb566cd9ba5f1fdd518df58ba0d02702618935300951424fb48133d9a33e5749a6fa4", 0x3e, 0xfffffffffffffffc) r5 = request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000480)="6e6f646576fa00", 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x3}, r5) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="021004000a0000000000000000000000080012000000000000000eff0f0000000000000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000"], 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:25 executing program 3: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4, 0x0, 0x0, 0x0, 0x7ff}, 0x20) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) unshare(0x40000000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 12:43:25 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x100000000) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) fstat(r2, &(0x7f00000004c0)) r4 = add_key(&(0x7f0000000240)="00070400000000000000", &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="3e81349a1cd647d633178d74334acbb31e3c9f6e7c9d681069c116dcb566cd9ba5f1fdd518df58ba0d02702618935300951424fb48133d9a33e5749a6fa4", 0x3e, 0xfffffffffffffffc) r5 = request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000480)="6e6f646576fa00", 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x3}, r5) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="021004000a0000000000000000000000080012000000000000000eff0f0000000000000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000"], 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:25 executing program 3: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4, 0x0, 0x0, 0x0, 0x7ff}, 0x20) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) unshare(0x40000000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 12:43:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r1, 0x11, 0x8000065, &(0x7f0000000440)=0xa69, 0xce) r6 = getpgid(0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)={0xa8, r8, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r7}, {0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0xc2, &(0x7f0000000100)) syz_open_procfs(r6, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x24020400) r9 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[], 0xfffffef6) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f00000005c0)="c2f16a9258380d8eb718047b9c63bc6bdc32ce6c85594cf7a71047142daaf756cbfa4b2e470003e04d285c254e8cd39c7ebe433cebe73170462f2cd0110cc7556deb18f3ffe18fdc21c2e721a02eeec74c3b37353d7f52243ad9c3b00d15570b31bb60b7178feac2308e2b77c0dbb121178c977a2226fe27a326d64fdcbe3437fed3da042e3423b7169a979180355cca63135c0347e2c417cec7a32eea91c5a9f864bca2cec22f6f675ee64c6009bd21880b797a14fd3a29b51ea922f4e0e49539c450d99412832ce495b4a1397989075dd5e6852a2c7fc6f17e3936c0387665cd416eb7fd55fa72753c631a") unlink(&(0x7f0000000400)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 12:43:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc86b}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) write(r3, &(0x7f0000000280), 0x0) 12:43:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r1, 0x11, 0x8000065, &(0x7f0000000440)=0xa69, 0xce) r6 = getpgid(0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)={0xa8, r8, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r7}, {0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0xc2, &(0x7f0000000100)) syz_open_procfs(r6, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x24020400) r9 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[], 0xfffffef6) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f00000005c0)="c2f16a9258380d8eb718047b9c63bc6bdc32ce6c85594cf7a71047142daaf756cbfa4b2e470003e04d285c254e8cd39c7ebe433cebe73170462f2cd0110cc7556deb18f3ffe18fdc21c2e721a02eeec74c3b37353d7f52243ad9c3b00d15570b31bb60b7178feac2308e2b77c0dbb121178c977a2226fe27a326d64fdcbe3437fed3da042e3423b7169a979180355cca63135c0347e2c417cec7a32eea91c5a9f864bca2cec22f6f675ee64c6009bd21880b797a14fd3a29b51ea922f4e0e49539c450d99412832ce495b4a1397989075dd5e6852a2c7fc6f17e3936c0387665cd416eb7fd55fa72753c631a") unlink(&(0x7f0000000400)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 12:43:26 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x100000000) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) fstat(r2, &(0x7f00000004c0)) r4 = add_key(&(0x7f0000000240)="00070400000000000000", &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="3e81349a1cd647d633178d74334acbb31e3c9f6e7c9d681069c116dcb566cd9ba5f1fdd518df58ba0d02702618935300951424fb48133d9a33e5749a6fa4", 0x3e, 0xfffffffffffffffc) r5 = request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000480)="6e6f646576fa00", 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x3}, r5) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="021004000a0000000000000000000000080012000000000000000eff0f0000000000000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000"], 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:26 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x100000000) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) fstat(r2, &(0x7f00000004c0)) r4 = add_key(&(0x7f0000000240)="00070400000000000000", &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="3e81349a1cd647d633178d74334acbb31e3c9f6e7c9d681069c116dcb566cd9ba5f1fdd518df58ba0d02702618935300951424fb48133d9a33e5749a6fa4", 0x3e, 0xfffffffffffffffc) r5 = request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000480)="6e6f646576fa00", 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x3}, r5) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="021004000a0000000000000000000000080012000000000000000eff0f0000000000000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000"], 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r2, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:27 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000001000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 12:43:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc86b}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) write(r3, &(0x7f0000000280), 0x0) 12:43:27 executing program 3: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4, 0x0, 0x0, 0x0, 0x7ff}, 0x20) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) unshare(0x40000000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 12:43:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r1, 0x11, 0x8000065, &(0x7f0000000440)=0xa69, 0xce) r6 = getpgid(0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)={0xa8, r8, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r7}, {0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0xc2, &(0x7f0000000100)) syz_open_procfs(r6, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x24020400) r9 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[], 0xfffffef6) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f00000005c0)="c2f16a9258380d8eb718047b9c63bc6bdc32ce6c85594cf7a71047142daaf756cbfa4b2e470003e04d285c254e8cd39c7ebe433cebe73170462f2cd0110cc7556deb18f3ffe18fdc21c2e721a02eeec74c3b37353d7f52243ad9c3b00d15570b31bb60b7178feac2308e2b77c0dbb121178c977a2226fe27a326d64fdcbe3437fed3da042e3423b7169a979180355cca63135c0347e2c417cec7a32eea91c5a9f864bca2cec22f6f675ee64c6009bd21880b797a14fd3a29b51ea922f4e0e49539c450d99412832ce495b4a1397989075dd5e6852a2c7fc6f17e3936c0387665cd416eb7fd55fa72753c631a") unlink(&(0x7f0000000400)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 12:43:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x7ff) fcntl$setstatus(r0, 0x4, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r4, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r3, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]) listen(r4, 0x40001ff) renameat(r3, &(0x7f0000000340)='./bus\x00', r3, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x40000000000017, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 12:43:27 executing program 2: timerfd_create(0x0, 0x0) 12:43:27 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x2040000) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz'}, &(0x7f0000000040)='[', 0x1, r0) 12:43:27 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x2040000) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz'}, &(0x7f0000000040)='[', 0x1, r0) 12:43:27 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x2040000) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz'}, &(0x7f0000000040)='[', 0x1, r0) 12:43:27 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x2040000) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz'}, &(0x7f0000000040)='[', 0x1, r0) 12:43:27 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000001000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 12:43:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 12:43:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000680)}) dup2(r1, r0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 12:43:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 949.243416] binder: release 14777:14783 transaction 241 out, still active [ 949.250929] binder: release 14777:14778 transaction 241 in, still active [ 949.258660] binder: undelivered TRANSACTION_COMPLETE [ 949.265215] binder: send failed reply for transaction 241, target dead 12:43:28 executing program 3: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4, 0x0, 0x0, 0x0, 0x7ff}, 0x20) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) unshare(0x40000000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 12:43:28 executing program 0: unshare(0x600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) [ 949.266307] binder_alloc: binder_alloc_mmap_handler: 14777 20010000-20013000 already mapped failed -16 [ 949.276641] binder: BINDER_SET_CONTEXT_MGR already set [ 949.276649] binder: 14777:14778 ioctl 40046207 0 returned -16 [ 949.276702] binder_alloc: 14777: binder_alloc_buf, no vma [ 949.276718] binder: 14777:14783 transaction failed 29189/-3, size 0-0 line 3136 [ 949.319666] binder: undelivered TRANSACTION_ERROR: 29189 12:43:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x7ff) fcntl$setstatus(r0, 0x4, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r4, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r3, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000c400000fe48b4b1e7fa37c911d43b7dfc1540065d654e421e46aa38951600c59fba6f39cf52e9ec8402c4611921b902574450eb6fcc611bb94c232461f22877f4a2e09f5f448f8a2ef823ff78d79dbd147c4ecf7ea6ab6ab52f030b8fea1243b4ad630c4069f58891137836d692868843a8998fea04a0bc474078acbead561a51093ca99b61cb70a4bcff2d634050eca0d4f941bfec0542fd99b2bd8823b383f9af93bc9c8b8578b5ed8ba7d2084ab94919aea43e1e3acfd6d899dd2159976b915f1279aaf23ce57319edb9be03d5b8472a0af33321a4d9b56776453712916a73e100e7310756f1153e6243ac5d9b4fe6efc118dbdbe423d6d903f08d6c7d317b8c2f7c15a3b9ee6efb3a82328977fea3360ac73dc8727b5815d6c41a9108dbd4ff366c3b655a096eba7abc6356bede81ff467fbac4b3e36d0eddd34367202b6c1e5ea1949ff33aa3ea383efcc02bd5f97165ff6093fe791d7ee231dca46129132fbbb01c9b17b287dfaa134de9c0d161ee8f639b36e5b83a2ec381159b0e1a12133bc3b0d18d43d8588bbf890af1ee48bd964c0bb702894a324b561179b1ecbc7edf55237fb7e01f09940d8"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]) listen(r4, 0x40001ff) renameat(r3, &(0x7f0000000340)='./bus\x00', r3, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x40000000000017, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 12:43:28 executing program 3: unshare(0x600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 12:43:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 12:43:28 executing program 0: unshare(0x600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 12:43:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000680)}) dup2(r1, r0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 12:43:28 executing program 0: unshare(0x600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) [ 949.644741] binder: release 14796:14808 transaction 244 out, still active [ 949.652643] binder: release 14796:14800 transaction 244 in, still active [ 949.660209] binder: send failed reply for transaction 244, target dead [ 949.667671] binder: undelivered TRANSACTION_COMPLETE 12:43:28 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000001000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 12:43:28 executing program 3: unshare(0x600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 12:43:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 12:43:28 executing program 0: unshare(0x600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 12:43:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000680)}) dup2(r1, r0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 12:43:28 executing program 3: unshare(0x600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) [ 949.991213] binder: release 14814:14823 transaction 246 out, still active [ 949.998792] binder: release 14814:14815 transaction 246 in, still active [ 950.006154] binder: send failed reply for transaction 246, target dead [ 950.013294] binder: undelivered TRANSACTION_COMPLETE 12:43:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x7ff) fcntl$setstatus(r0, 0x4, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r4, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r3, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000c400000fe48b4b1e7fa37c911d43b7dfc1540065d654e421e46aa38951600c59fba6f39cf52e9ec8402c4611921b902574450eb6fcc611bb94c232461f22877f4a2e09f5f448f8a2ef823ff78d79dbd147c4ecf7ea6ab6ab52f030b8fea1243b4ad630c4069f58891137836d692868843a8998fea04a0bc474078acbead561a51093ca99b61cb70a4bcff2d634050eca0d4f941bfec0542fd99b2bd8823b383f9af93bc9c8b8578b5ed8ba7d2084ab94919aea43e1e3acfd6d899dd2159976b915f1279aaf23ce57319edb9be03d5b8472a0af33321a4d9b56776453712916a73e100e7310756f1153e6243ac5d9b4fe6efc118dbdbe423d6d903f08d6c7d317b8c2f7c15a3b9ee6efb3a82328977fea3360ac73dc8727b5815d6c41a9108dbd4ff366c3b655a096eba7abc6356bede81ff467fbac4b3e36d0eddd34367202b6c1e5ea1949ff33aa3ea383efcc02bd5f97165ff6093fe791d7ee231dca46129132fbbb01c9b17b287dfaa134de9c0d161ee8f639b36e5b83a2ec381159b0e1a12133bc3b0d18d43d8588bbf890af1ee48bd964c0bb702894a324b561179b1ecbc7edf55237fb7e01f09940d8"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0000bf550800000019040000000000107fbe59a6c735080500000000000000cdac1a3719c6169d76611cea4c4b7eb8f6a53b0575daa01ce1b9ecc3aa52943d43a55eb4936685824a8a423cff66058e03aca8882501e4379a27650c5fc58da5912f8c6d8a8eee6d068c61ee5dd58b85a3eff408feac7de092f7bb2d51e144f60d0037473bb901198335e4bb7e7ecf81a868853b03d771df61fbda791c8619a7dc513f491dfd32e2e1b8f979a6749f72000000000000a02e8d1ab75bfb5fee5c78b844ec250b43564f4de842cd2ad41c48e876a3e90ba7e367b23bd290facdf87ca48c688fef383ce8bad49d0882aa7faff04c48465477fbd1a23267d7d4b244eb60cb9bb65b400b4f74ccfcf6bb47b3d9f88f0d63d4339c0dab847612095fa4ff12fe36dc106e809822a3b69045398e7e4a0d076c98cb7a0057152c1a79fc6b0df6baf461234e9770701c9d226b2cd9580aec0fb59df03bedb4ed8703ad44faa8095b2a2ad756b0062866fbc290a8cd01b9b3715dc767b5f547b156b68f17792b79dcc12a0e2193"]) listen(r4, 0x40001ff) renameat(r3, &(0x7f0000000340)='./bus\x00', r3, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x40000000000017, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 12:43:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x7ff) fcntl$setstatus(r0, 0x4, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r4, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r3, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]) listen(r4, 0x40001ff) renameat(r3, &(0x7f0000000340)='./bus\x00', r3, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x40000000000017, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 12:43:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x7ff) fcntl$setstatus(r0, 0x4, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r4, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r3, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]) listen(r4, 0x40001ff) renameat(r3, &(0x7f0000000340)='./bus\x00', r3, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x40000000000017, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 12:43:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000680)}) dup2(r1, r0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 12:43:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000680)}) dup2(r1, r0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 12:43:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000680)}) dup2(r1, r0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 950.483054] binder: release 14829:14836 transaction 248 out, still active [ 950.490688] binder: BINDER_SET_CONTEXT_MGR already set [ 950.490758] binder: release 14829:14834 transaction 248 in, still active [ 950.490763] binder: send failed reply for transaction 248, target dead [ 950.495365] binder: undelivered TRANSACTION_COMPLETE [ 950.610875] binder: 14826:14839 ioctl 40046207 0 returned -16 [ 950.616904] binder: 14826:14843 transaction failed 29189/-22, size 0-0 line 3013 [ 950.618717] binder: release 14841:14842 transaction 251 in, still active [ 950.618724] binder: send failed reply for transaction 251 to 14841:14848 [ 950.623733] binder: undelivered TRANSACTION_COMPLETE [ 950.623740] binder: undelivered TRANSACTION_ERROR: 29189 12:43:29 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000001000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 12:43:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000680)}) dup2(r1, r0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 950.623763] binder: undelivered TRANSACTION_ERROR: 29189 [ 950.844460] binder: release 14850:14854 transaction 253 out, still active [ 950.852036] binder: release 14850:14852 transaction 253 in, still active [ 950.870357] binder: send failed reply for transaction 253, target dead [ 950.877640] binder: undelivered TRANSACTION_COMPLETE 12:43:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000680)}) dup2(r1, r0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 12:43:29 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) [ 951.051183] binder: release 14858:14860 transaction 255 out, still active [ 951.059148] binder: release 14858:14859 transaction 255 in, still active [ 951.072667] binder: send failed reply for transaction 255, target dead [ 951.079900] binder: undelivered TRANSACTION_COMPLETE 12:43:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000680)}) dup2(r1, r0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 12:43:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x7ff) fcntl$setstatus(r0, 0x4, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r4, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r3, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]) listen(r4, 0x40001ff) renameat(r3, &(0x7f0000000340)='./bus\x00', r3, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x40000000000017, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 12:43:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x7ff) fcntl$setstatus(r0, 0x4, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r4, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r3, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0000bf550800000019040000000000107fbe59a6c735080500000000000000cdac1a3719c6169d76611cea4c4b7eb8f6a53b0575daa01ce1b9ecc3aa52943d43a55eb4936685824a8a423cff66058e03aca8882501e4379a27650c5fc58da5912f8c6d8a8eee6d068c61ee5dd58b85a3eff408feac7de092f7bb2d51e144f60d0037473bb901198335e4bb7e7ecf81a868853b03d771df61fbda791c8619a7dc513f491dfd32e2e1b8f979a6749f72000000000000a02e8d1ab75bfb5fee5c78b844ec250b43564f4de842cd2ad41c48e876a3e90ba7e367b23bd290facdf87ca48c688fef383ce8bad49d0882aa7faff04c48465477fbd1a23267d7d4b244eb60cb9bb65b400b4f74ccfcf6bb47b3d9f88f0d63d4339c0dab847612095fa4ff12fe36dc106e809822a3b69045398e7e4a0d076c98cb7a0057152c1a79fc6b0df6baf461234e9770701c9d226b2cd9580aec0fb59df03bedb4ed8703ad44faa8095b2a2ad756b0062866fbc290a8cd01b9b3715dc767b5f547b156b68f17792b79dcc12a0e2193"]) listen(r4, 0x40001ff) renameat(r3, &(0x7f0000000340)='./bus\x00', r3, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x40000000000017, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) [ 951.375612] binder: release 14863:14866 transaction 257 out, still active [ 951.383317] binder: release 14863:14864 transaction 257 in, still active [ 951.398410] binder: send failed reply for transaction 257, target dead 12:43:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x7ff) fcntl$setstatus(r0, 0x4, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r4, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r3, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0000bf550800000019040000000000107fbe59a6c735080500000000000000cdac1a3719c6169d76611cea4c4b7eb8f6a53b0575daa01ce1b9ecc3aa52943d43a55eb4936685824a8a423cff66058e03aca8882501e4379a27650c5fc58da5912f8c6d8a8eee6d068c61ee5dd58b85a3eff408feac7de092f7bb2d51e144f60d0037473bb901198335e4bb7e7ecf81a868853b03d771df61fbda791c8619a7dc513f491dfd32e2e1b8f979a6749f72000000000000a02e8d1ab75bfb5fee5c78b844ec250b43564f4de842cd2ad41c48e876a3e90ba7e367b23bd290facdf87ca48c688fef383ce8bad49d0882aa7faff04c48465477fbd1a23267d7d4b244eb60cb9bb65b400b4f74ccfcf6bb47b3d9f88f0d63d4339c0dab847612095fa4ff12fe36dc106e809822a3b69045398e7e4a0d076c98cb7a0057152c1a79fc6b0df6baf461234e9770701c9d226b2cd9580aec0fb59df03bedb4ed8703ad44faa8095b2a2ad756b0062866fbc290a8cd01b9b3715dc767b5f547b156b68f17792b79dcc12a0e2193"]) listen(r4, 0x40001ff) renameat(r3, &(0x7f0000000340)='./bus\x00', r3, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x40000000000017, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) [ 951.413312] binder: undelivered TRANSACTION_COMPLETE 12:43:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000680)}) dup2(r1, r0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 12:43:30 executing program 1: r0 = socket$inet6(0xa, 0x42000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) write(r0, &(0x7f00000000c0)="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", 0x5c1) [ 951.605089] binder: release 14875:14882 transaction 259 out, still active [ 951.612461] binder: release 14875:14876 transaction 259 in, still active [ 951.619914] binder: send failed reply for transaction 259, target dead 12:43:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x40000000000020f, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) [ 951.632523] binder: undelivered TRANSACTION_COMPLETE 12:43:30 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x21}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)="6c6f00966fd651b159a9c84a2c60d29800000020") 12:43:30 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 12:43:30 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x21}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)="6c6f00966fd651b159a9c84a2c60d29800000020") 12:43:30 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x21}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)="6c6f00966fd651b159a9c84a2c60d29800000020") 12:43:30 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x21}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)="6c6f00966fd651b159a9c84a2c60d29800000020") 12:43:30 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 12:43:31 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 12:43:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x7ff) fcntl$setstatus(r0, 0x4, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r4, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r3, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000c400000fe48b4b1e7fa37c911d43b7dfc1540065d654e421e46aa38951600c59fba6f39cf52e9ec8402c4611921b902574450eb6fcc611bb94c232461f22877f4a2e09f5f448f8a2ef823ff78d79dbd147c4ecf7ea6ab6ab52f030b8fea1243b4ad630c4069f58891137836d692868843a8998fea04a0bc474078acbead561a51093ca99b61cb70a4bcff2d634050eca0d4f941bfec0542fd99b2bd8823b383f9af93bc9c8b8578b5ed8ba7d2084ab94919aea43e1e3acfd6d899dd2159976b915f1279aaf23ce57319edb9be03d5b8472a0af33321a4d9b56776453712916a73e100e7310756f1153e6243ac5d9b4fe6efc118dbdbe423d6d903f08d6c7d317b8c2f7c15a3b9ee6efb3a82328977fea3360ac73dc8727b5815d6c41a9108dbd4ff366c3b655a096eba7abc6356bede81ff467fbac4b3e36d0eddd34367202b6c1e5ea1949ff33aa3ea383efcc02bd5f97165ff6093fe791d7ee231dca46129132fbbb01c9b17b287dfaa134de9c0d161ee8f639b36e5b83a2ec381159b0e1a12133bc3b0d18d43d8588bbf890af1ee48bd964c0bb702894a324b561179b1ecbc7edf55237fb7e01f09940d8"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]) listen(r4, 0x40001ff) renameat(r3, &(0x7f0000000340)='./bus\x00', r3, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x40000000000017, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 12:43:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x7ff) fcntl$setstatus(r0, 0x4, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r4, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r3, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000c400000fe48b4b1e7fa37c911d43b7dfc1540065d654e421e46aa38951600c59fba6f39cf52e9ec8402c4611921b902574450eb6fcc611bb94c232461f22877f4a2e09f5f448f8a2ef823ff78d79dbd147c4ecf7ea6ab6ab52f030b8fea1243b4ad630c4069f58891137836d692868843a8998fea04a0bc474078acbead561a51093ca99b61cb70a4bcff2d634050eca0d4f941bfec0542fd99b2bd8823b383f9af93bc9c8b8578b5ed8ba7d2084ab94919aea43e1e3acfd6d899dd2159976b915f1279aaf23ce57319edb9be03d5b8472a0af33321a4d9b56776453712916a73e100e7310756f1153e6243ac5d9b4fe6efc118dbdbe423d6d903f08d6c7d317b8c2f7c15a3b9ee6efb3a82328977fea3360ac73dc8727b5815d6c41a9108dbd4ff366c3b655a096eba7abc6356bede81ff467fbac4b3e36d0eddd34367202b6c1e5ea1949ff33aa3ea383efcc02bd5f97165ff6093fe791d7ee231dca46129132fbbb01c9b17b287dfaa134de9c0d161ee8f639b36e5b83a2ec381159b0e1a12133bc3b0d18d43d8588bbf890af1ee48bd964c0bb702894a324b561179b1ecbc7edf55237fb7e01f09940d8"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]) listen(r4, 0x40001ff) renameat(r3, &(0x7f0000000340)='./bus\x00', r3, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x40000000000017, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 12:43:31 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 12:43:31 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 12:43:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x40000000000020f, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 12:43:31 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 12:43:31 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 12:43:31 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 12:43:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x40000000000020f, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 12:43:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x40000000000020f, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 12:43:31 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)="00fffffffffffffff616be69f38b73142d16648fe575d1ebba7656d532d8267ba2e371fac5896a5a3a0cbcf3477a850d5c8ea26b3ee807b67008b91573edd7392d0e6552e388fe58bdfa463e0b7ad4eabf4aaa85a9b3be4b9ca8aa314e91b095ef1efd2f39e1ec33097337c9eb7fc0fd567c04f2e57570", 0x6, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:43:32 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 12:43:32 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)="00fffffffffffffff616be69f38b73142d16648fe575d1ebba7656d532d8267ba2e371fac5896a5a3a0cbcf3477a850d5c8ea26b3ee807b67008b91573edd7392d0e6552e388fe58bdfa463e0b7ad4eabf4aaa85a9b3be4b9ca8aa314e91b095ef1efd2f39e1ec33097337c9eb7fc0fd567c04f2e57570", 0x6, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:43:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080)="9e", 0x1) 12:43:32 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)="00fffffffffffffff616be69f38b73142d16648fe575d1ebba7656d532d8267ba2e371fac5896a5a3a0cbcf3477a850d5c8ea26b3ee807b67008b91573edd7392d0e6552e388fe58bdfa463e0b7ad4eabf4aaa85a9b3be4b9ca8aa314e91b095ef1efd2f39e1ec33097337c9eb7fc0fd567c04f2e57570", 0x6, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:43:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00009abffc)=0x8, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 12:43:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080)="9e", 0x1) 12:43:32 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)="00fffffffffffffff616be69f38b73142d16648fe575d1ebba7656d532d8267ba2e371fac5896a5a3a0cbcf3477a850d5c8ea26b3ee807b67008b91573edd7392d0e6552e388fe58bdfa463e0b7ad4eabf4aaa85a9b3be4b9ca8aa314e91b095ef1efd2f39e1ec33097337c9eb7fc0fd567c04f2e57570", 0x6, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:43:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00009abffc)=0x8, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 12:43:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080)="9e", 0x1) 12:43:32 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x40000000000020f, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 12:43:32 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 12:43:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00009abffc)=0x8, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 12:43:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080)="9e", 0x1) 12:43:32 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) stat(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000240)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) fremovexattr(r0, &(0x7f0000000180)=@random={'system.', 'posix_acl_accessvboxnet0/@eth1GPL\x00'}) renameat2(0xffffffffffffffff, &(0x7f00000000c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000002c0), 0xc, &(0x7f00000015c0)={&(0x7f0000000340)=@report={0x4c, 0x20, 0x0, 0x70bd2b, 0x0, {0x0, {@in=@rand_addr=0x1, @in6=@mcast2, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}}, 0x4c}}, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000001640)=""/4096) 12:43:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x40000000000020f, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 12:43:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 12:43:32 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) stat(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000240)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) fremovexattr(r0, &(0x7f0000000180)=@random={'system.', 'posix_acl_accessvboxnet0/@eth1GPL\x00'}) renameat2(0xffffffffffffffff, &(0x7f00000000c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000002c0), 0xc, &(0x7f00000015c0)={&(0x7f0000000340)=@report={0x4c, 0x20, 0x0, 0x70bd2b, 0x0, {0x0, {@in=@rand_addr=0x1, @in6=@mcast2, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}}, 0x4c}}, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000001640)=""/4096) 12:43:32 executing program 5: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/create\x00', 0x2, 0x0) write$selinux_create(r0, &(0x7f0000000040)=@objname={'system_u:object_r:systemd_notify_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x1, 0x20, './file0\x00'}, 0x176) 12:43:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00009abffc)=0x8, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 12:43:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 12:43:32 executing program 5: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/create\x00', 0x2, 0x0) write$selinux_create(r0, &(0x7f0000000040)=@objname={'system_u:object_r:systemd_notify_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x1, 0x20, './file0\x00'}, 0x176) 12:43:32 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x40000000000020f, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 12:43:32 executing program 3: add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffb) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) sched_getparam(r0, &(0x7f0000000100)) select(0x8150138, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(r1, 0x14) 12:43:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 12:43:32 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) stat(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000240)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) fremovexattr(r0, &(0x7f0000000180)=@random={'system.', 'posix_acl_accessvboxnet0/@eth1GPL\x00'}) renameat2(0xffffffffffffffff, &(0x7f00000000c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000002c0), 0xc, &(0x7f00000015c0)={&(0x7f0000000340)=@report={0x4c, 0x20, 0x0, 0x70bd2b, 0x0, {0x0, {@in=@rand_addr=0x1, @in6=@mcast2, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}}, 0x4c}}, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000001640)=""/4096) 12:43:32 executing program 5: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/create\x00', 0x2, 0x0) write$selinux_create(r0, &(0x7f0000000040)=@objname={'system_u:object_r:systemd_notify_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x1, 0x20, './file0\x00'}, 0x176) 12:43:32 executing program 5: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/create\x00', 0x2, 0x0) write$selinux_create(r0, &(0x7f0000000040)=@objname={'system_u:object_r:systemd_notify_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x1, 0x20, './file0\x00'}, 0x176) 12:43:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000cb9ffc)=0x1, 0x4) bind$inet(r0, &(0x7f0000c16ff0)={0x2, 0x1, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020007, &(0x7f0000000080)={0x2, 0x4000000000000001, @loopback}, 0x10) 12:43:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 12:43:32 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0xfffffffffffffffc) setxattr$system_posix_acl(&(0x7f0000000100)='./bus\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000d80)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f00000001c0)={0x7}, 0x7) 12:43:32 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') exit(0x0) sendfile(r0, r0, &(0x7f0000000180), 0x3ff) 12:43:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000cb9ffc)=0x1, 0x4) bind$inet(r0, &(0x7f0000c16ff0)={0x2, 0x1, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020007, &(0x7f0000000080)={0x2, 0x4000000000000001, @loopback}, 0x10) 12:43:32 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0xfffffffffffffffc) setxattr$system_posix_acl(&(0x7f0000000100)='./bus\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000d80)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f00000001c0)={0x7}, 0x7) 12:43:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000cb9ffc)=0x1, 0x4) bind$inet(r0, &(0x7f0000c16ff0)={0x2, 0x1, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020007, &(0x7f0000000080)={0x2, 0x4000000000000001, @loopback}, 0x10) 12:43:33 executing program 3: add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffb) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) sched_getparam(r0, &(0x7f0000000100)) select(0x8150138, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(r1, 0x14) 12:43:33 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0xfffffffffffffffc) setxattr$system_posix_acl(&(0x7f0000000100)='./bus\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000d80)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f00000001c0)={0x7}, 0x7) 12:43:33 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) stat(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000240)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) fremovexattr(r0, &(0x7f0000000180)=@random={'system.', 'posix_acl_accessvboxnet0/@eth1GPL\x00'}) renameat2(0xffffffffffffffff, &(0x7f00000000c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000002c0), 0xc, &(0x7f00000015c0)={&(0x7f0000000340)=@report={0x4c, 0x20, 0x0, 0x70bd2b, 0x0, {0x0, {@in=@rand_addr=0x1, @in6=@mcast2, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}}, 0x4c}}, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000001640)=""/4096) 12:43:33 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000010c0), 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000100), 0xffffffff) sendfile(r3, r3, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) socket$netlink(0x10, 0x3, 0xf) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendto(r4, &(0x7f00000001c0)="cfff6988debf60087c0cbf9d0dd0d6a263fbf32ceb733c93012c1dc287719c6a1e0cfe4bd92b0c0e650d01d7366b81fda196fcd14dea58", 0x37, 0x0, &(0x7f0000000440)=@ll={0x11, 0x1c, r6, 0x1, 0x20, 0x6, @random="76346643817e"}, 0x80) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x7530}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="01c79dca1c45b55ab69774fcf54b3b5b74a52fabd61d2c1efe556ada0ed774c9b384bc83ad323d44f3a9297543508e306129a288da521cab43f2cf99", 0x3c, 0x40, &(0x7f0000000080)=@generic={0x3, "f0bf04c2dba352fd1201fc8cd03d71d62433d0dd54f6dcc1a6b0bf71ac66218e36995ba0bbb67c77d6bd3d48204c6fcdfb44bf0a3f94dc43203d41b206f5eaaa7bbc8db938af1c0515b5dfc935ef1b7a5e3daf3d35255e9bc0a1748dbdf229ca2c19fe1ab3a1567f46f366394065aa910037c1654de63d49cd43a1f59fb2"}, 0x80) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020307031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000880)='./file0\x00', 0x0) 12:43:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000cb9ffc)=0x1, 0x4) bind$inet(r0, &(0x7f0000c16ff0)={0x2, 0x1, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020007, &(0x7f0000000080)={0x2, 0x4000000000000001, @loopback}, 0x10) 12:43:33 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0xfffffffffffffffc) setxattr$system_posix_acl(&(0x7f0000000100)='./bus\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000d80)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f00000001c0)={0x7}, 0x7) 12:43:33 executing program 4: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) clone(0x2020002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) futex(&(0x7f0000004000)=0x2, 0x7, 0x0, &(0x7f0000001ff0), &(0x7f0000000140), 0x0) 12:43:33 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 12:43:33 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') exit(0x0) sendfile(r0, r0, &(0x7f0000000180), 0x3ff) 12:43:33 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)="617474722f736f636b6372656174650026a0d1f210f916450b760e027ab62f25bd516528e7e6ced06e838dee008c46df847c7641c8e60d3a5c1d2edb1e1a6dd45d080b30d40c") write$selinux_context(r0, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f00000002c0), 0x1c) [ 954.874117] audit: type=1400 audit(1543322613.656:105): avc: denied { create } for pid=15063 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_trans_lock_t:s0 tclass=tcp_socket permissive=1 12:43:33 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 12:43:33 executing program 4: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) clone(0x2020002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) futex(&(0x7f0000004000)=0x2, 0x7, 0x0, &(0x7f0000001ff0), &(0x7f0000000140), 0x0) [ 954.902344] audit: type=1400 audit(1543322613.686:106): avc: denied { bind } for pid=15063 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_trans_lock_t:s0 tclass=tcp_socket permissive=1 [ 954.932055] audit: type=1400 audit(1543322613.716:107): avc: denied { node_bind } for pid=15063 comm="syz-executor5" scontext=system_u:object_r:semanage_trans_lock_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=tcp_socket permissive=1 [ 954.965781] blk_update_request: 642 callbacks suppressed [ 954.965786] blk_update_request: I/O error, dev loop0, sector 0 [ 954.965967] blk_update_request: I/O error, dev loop0, sector 5504 [ 954.965974] buffer_io_error: 639 callbacks suppressed [ 954.965980] Buffer I/O error on dev loop0, logical block 688, lost async page write 12:43:34 executing program 3: add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffb) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) sched_getparam(r0, &(0x7f0000000100)) select(0x8150138, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(r1, 0x14) 12:43:34 executing program 4: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) clone(0x2020002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) futex(&(0x7f0000004000)=0x2, 0x7, 0x0, &(0x7f0000001ff0), &(0x7f0000000140), 0x0) 12:43:34 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 12:43:34 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)="617474722f736f636b6372656174650026a0d1f210f916450b760e027ab62f25bd516528e7e6ced06e838dee008c46df847c7641c8e60d3a5c1d2edb1e1a6dd45d080b30d40c") write$selinux_context(r0, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f00000002c0), 0x1c) 12:43:34 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000010c0), 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000100), 0xffffffff) sendfile(r3, r3, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) socket$netlink(0x10, 0x3, 0xf) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendto(r4, &(0x7f00000001c0)="cfff6988debf60087c0cbf9d0dd0d6a263fbf32ceb733c93012c1dc287719c6a1e0cfe4bd92b0c0e650d01d7366b81fda196fcd14dea58", 0x37, 0x0, &(0x7f0000000440)=@ll={0x11, 0x1c, r6, 0x1, 0x20, 0x6, @random="76346643817e"}, 0x80) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x7530}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="01c79dca1c45b55ab69774fcf54b3b5b74a52fabd61d2c1efe556ada0ed774c9b384bc83ad323d44f3a9297543508e306129a288da521cab43f2cf99", 0x3c, 0x40, &(0x7f0000000080)=@generic={0x3, "f0bf04c2dba352fd1201fc8cd03d71d62433d0dd54f6dcc1a6b0bf71ac66218e36995ba0bbb67c77d6bd3d48204c6fcdfb44bf0a3f94dc43203d41b206f5eaaa7bbc8db938af1c0515b5dfc935ef1b7a5e3daf3d35255e9bc0a1748dbdf229ca2c19fe1ab3a1567f46f366394065aa910037c1654de63d49cd43a1f59fb2"}, 0x80) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020307031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000880)='./file0\x00', 0x0) 12:43:34 executing program 4: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) clone(0x2020002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) futex(&(0x7f0000004000)=0x2, 0x7, 0x0, &(0x7f0000001ff0), &(0x7f0000000140), 0x0) 12:43:34 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000008000/0x1000)=nil) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 12:43:34 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)="617474722f736f636b6372656174650026a0d1f210f916450b760e027ab62f25bd516528e7e6ced06e838dee008c46df847c7641c8e60d3a5c1d2edb1e1a6dd45d080b30d40c") write$selinux_context(r0, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f00000002c0), 0x1c) 12:43:34 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') exit(0x0) sendfile(r0, r0, &(0x7f0000000180), 0x3ff) 12:43:34 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000010c0), 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000100), 0xffffffff) sendfile(r3, r3, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) socket$netlink(0x10, 0x3, 0xf) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendto(r4, &(0x7f00000001c0)="cfff6988debf60087c0cbf9d0dd0d6a263fbf32ceb733c93012c1dc287719c6a1e0cfe4bd92b0c0e650d01d7366b81fda196fcd14dea58", 0x37, 0x0, &(0x7f0000000440)=@ll={0x11, 0x1c, r6, 0x1, 0x20, 0x6, @random="76346643817e"}, 0x80) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x7530}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="01c79dca1c45b55ab69774fcf54b3b5b74a52fabd61d2c1efe556ada0ed774c9b384bc83ad323d44f3a9297543508e306129a288da521cab43f2cf99", 0x3c, 0x40, &(0x7f0000000080)=@generic={0x3, "f0bf04c2dba352fd1201fc8cd03d71d62433d0dd54f6dcc1a6b0bf71ac66218e36995ba0bbb67c77d6bd3d48204c6fcdfb44bf0a3f94dc43203d41b206f5eaaa7bbc8db938af1c0515b5dfc935ef1b7a5e3daf3d35255e9bc0a1748dbdf229ca2c19fe1ab3a1567f46f366394065aa910037c1654de63d49cd43a1f59fb2"}, 0x80) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020307031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000880)='./file0\x00', 0x0) 12:43:34 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000010c0), 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000100), 0xffffffff) sendfile(r3, r3, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) socket$netlink(0x10, 0x3, 0xf) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendto(r4, &(0x7f00000001c0)="cfff6988debf60087c0cbf9d0dd0d6a263fbf32ceb733c93012c1dc287719c6a1e0cfe4bd92b0c0e650d01d7366b81fda196fcd14dea58", 0x37, 0x0, &(0x7f0000000440)=@ll={0x11, 0x1c, r6, 0x1, 0x20, 0x6, @random="76346643817e"}, 0x80) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x7530}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="01c79dca1c45b55ab69774fcf54b3b5b74a52fabd61d2c1efe556ada0ed774c9b384bc83ad323d44f3a9297543508e306129a288da521cab43f2cf99", 0x3c, 0x40, &(0x7f0000000080)=@generic={0x3, "f0bf04c2dba352fd1201fc8cd03d71d62433d0dd54f6dcc1a6b0bf71ac66218e36995ba0bbb67c77d6bd3d48204c6fcdfb44bf0a3f94dc43203d41b206f5eaaa7bbc8db938af1c0515b5dfc935ef1b7a5e3daf3d35255e9bc0a1748dbdf229ca2c19fe1ab3a1567f46f366394065aa910037c1654de63d49cd43a1f59fb2"}, 0x80) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020307031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000880)='./file0\x00', 0x0) 12:43:34 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)="617474722f736f636b6372656174650026a0d1f210f916450b760e027ab62f25bd516528e7e6ced06e838dee008c46df847c7641c8e60d3a5c1d2edb1e1a6dd45d080b30d40c") write$selinux_context(r0, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f00000002c0), 0x1c) [ 955.750369] blk_update_request: I/O error, dev loop0, sector 4992 [ 955.756731] Buffer I/O error on dev loop0, logical block 624, lost async page write [ 955.767892] blk_update_request: I/O error, dev loop0, sector 1920 [ 955.774244] Buffer I/O error on dev loop0, logical block 240, lost async page write 12:43:35 executing program 3: add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffb) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) sched_getparam(r0, &(0x7f0000000100)) select(0x8150138, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(r1, 0x14) 12:43:35 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000010c0), 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000100), 0xffffffff) sendfile(r3, r3, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) socket$netlink(0x10, 0x3, 0xf) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendto(r4, &(0x7f00000001c0)="cfff6988debf60087c0cbf9d0dd0d6a263fbf32ceb733c93012c1dc287719c6a1e0cfe4bd92b0c0e650d01d7366b81fda196fcd14dea58", 0x37, 0x0, &(0x7f0000000440)=@ll={0x11, 0x1c, r6, 0x1, 0x20, 0x6, @random="76346643817e"}, 0x80) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x7530}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="01c79dca1c45b55ab69774fcf54b3b5b74a52fabd61d2c1efe556ada0ed774c9b384bc83ad323d44f3a9297543508e306129a288da521cab43f2cf99", 0x3c, 0x40, &(0x7f0000000080)=@generic={0x3, "f0bf04c2dba352fd1201fc8cd03d71d62433d0dd54f6dcc1a6b0bf71ac66218e36995ba0bbb67c77d6bd3d48204c6fcdfb44bf0a3f94dc43203d41b206f5eaaa7bbc8db938af1c0515b5dfc935ef1b7a5e3daf3d35255e9bc0a1748dbdf229ca2c19fe1ab3a1567f46f366394065aa910037c1654de63d49cd43a1f59fb2"}, 0x80) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020307031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000880)='./file0\x00', 0x0) 12:43:35 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000010c0), 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000100), 0xffffffff) sendfile(r3, r3, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) socket$netlink(0x10, 0x3, 0xf) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendto(r4, &(0x7f00000001c0)="cfff6988debf60087c0cbf9d0dd0d6a263fbf32ceb733c93012c1dc287719c6a1e0cfe4bd92b0c0e650d01d7366b81fda196fcd14dea58", 0x37, 0x0, &(0x7f0000000440)=@ll={0x11, 0x1c, r6, 0x1, 0x20, 0x6, @random="76346643817e"}, 0x80) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x7530}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="01c79dca1c45b55ab69774fcf54b3b5b74a52fabd61d2c1efe556ada0ed774c9b384bc83ad323d44f3a9297543508e306129a288da521cab43f2cf99", 0x3c, 0x40, &(0x7f0000000080)=@generic={0x3, "f0bf04c2dba352fd1201fc8cd03d71d62433d0dd54f6dcc1a6b0bf71ac66218e36995ba0bbb67c77d6bd3d48204c6fcdfb44bf0a3f94dc43203d41b206f5eaaa7bbc8db938af1c0515b5dfc935ef1b7a5e3daf3d35255e9bc0a1748dbdf229ca2c19fe1ab3a1567f46f366394065aa910037c1654de63d49cd43a1f59fb2"}, 0x80) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020307031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000880)='./file0\x00', 0x0) 12:43:35 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000010c0), 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000100), 0xffffffff) sendfile(r3, r3, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) socket$netlink(0x10, 0x3, 0xf) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendto(r4, &(0x7f00000001c0)="cfff6988debf60087c0cbf9d0dd0d6a263fbf32ceb733c93012c1dc287719c6a1e0cfe4bd92b0c0e650d01d7366b81fda196fcd14dea58", 0x37, 0x0, &(0x7f0000000440)=@ll={0x11, 0x1c, r6, 0x1, 0x20, 0x6, @random="76346643817e"}, 0x80) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x7530}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="01c79dca1c45b55ab69774fcf54b3b5b74a52fabd61d2c1efe556ada0ed774c9b384bc83ad323d44f3a9297543508e306129a288da521cab43f2cf99", 0x3c, 0x40, &(0x7f0000000080)=@generic={0x3, "f0bf04c2dba352fd1201fc8cd03d71d62433d0dd54f6dcc1a6b0bf71ac66218e36995ba0bbb67c77d6bd3d48204c6fcdfb44bf0a3f94dc43203d41b206f5eaaa7bbc8db938af1c0515b5dfc935ef1b7a5e3daf3d35255e9bc0a1748dbdf229ca2c19fe1ab3a1567f46f366394065aa910037c1654de63d49cd43a1f59fb2"}, 0x80) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020307031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000880)='./file0\x00', 0x0) 12:43:35 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000010c0), 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000100), 0xffffffff) sendfile(r3, r3, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) socket$netlink(0x10, 0x3, 0xf) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendto(r4, &(0x7f00000001c0)="cfff6988debf60087c0cbf9d0dd0d6a263fbf32ceb733c93012c1dc287719c6a1e0cfe4bd92b0c0e650d01d7366b81fda196fcd14dea58", 0x37, 0x0, &(0x7f0000000440)=@ll={0x11, 0x1c, r6, 0x1, 0x20, 0x6, @random="76346643817e"}, 0x80) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x7530}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="01c79dca1c45b55ab69774fcf54b3b5b74a52fabd61d2c1efe556ada0ed774c9b384bc83ad323d44f3a9297543508e306129a288da521cab43f2cf99", 0x3c, 0x40, &(0x7f0000000080)=@generic={0x3, "f0bf04c2dba352fd1201fc8cd03d71d62433d0dd54f6dcc1a6b0bf71ac66218e36995ba0bbb67c77d6bd3d48204c6fcdfb44bf0a3f94dc43203d41b206f5eaaa7bbc8db938af1c0515b5dfc935ef1b7a5e3daf3d35255e9bc0a1748dbdf229ca2c19fe1ab3a1567f46f366394065aa910037c1654de63d49cd43a1f59fb2"}, 0x80) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020307031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000880)='./file0\x00', 0x0) 12:43:35 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000010c0), 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000100), 0xffffffff) sendfile(r3, r3, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) socket$netlink(0x10, 0x3, 0xf) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendto(r4, &(0x7f00000001c0)="cfff6988debf60087c0cbf9d0dd0d6a263fbf32ceb733c93012c1dc287719c6a1e0cfe4bd92b0c0e650d01d7366b81fda196fcd14dea58", 0x37, 0x0, &(0x7f0000000440)=@ll={0x11, 0x1c, r6, 0x1, 0x20, 0x6, @random="76346643817e"}, 0x80) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x7530}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="01c79dca1c45b55ab69774fcf54b3b5b74a52fabd61d2c1efe556ada0ed774c9b384bc83ad323d44f3a9297543508e306129a288da521cab43f2cf99", 0x3c, 0x40, &(0x7f0000000080)=@generic={0x3, "f0bf04c2dba352fd1201fc8cd03d71d62433d0dd54f6dcc1a6b0bf71ac66218e36995ba0bbb67c77d6bd3d48204c6fcdfb44bf0a3f94dc43203d41b206f5eaaa7bbc8db938af1c0515b5dfc935ef1b7a5e3daf3d35255e9bc0a1748dbdf229ca2c19fe1ab3a1567f46f366394065aa910037c1654de63d49cd43a1f59fb2"}, 0x80) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020307031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000880)='./file0\x00', 0x0) 12:43:35 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000010c0), 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000100), 0xffffffff) sendfile(r3, r3, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) socket$netlink(0x10, 0x3, 0xf) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendto(r4, &(0x7f00000001c0)="cfff6988debf60087c0cbf9d0dd0d6a263fbf32ceb733c93012c1dc287719c6a1e0cfe4bd92b0c0e650d01d7366b81fda196fcd14dea58", 0x37, 0x0, &(0x7f0000000440)=@ll={0x11, 0x1c, r6, 0x1, 0x20, 0x6, @random="76346643817e"}, 0x80) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x7530}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="01c79dca1c45b55ab69774fcf54b3b5b74a52fabd61d2c1efe556ada0ed774c9b384bc83ad323d44f3a9297543508e306129a288da521cab43f2cf99", 0x3c, 0x40, &(0x7f0000000080)=@generic={0x3, "f0bf04c2dba352fd1201fc8cd03d71d62433d0dd54f6dcc1a6b0bf71ac66218e36995ba0bbb67c77d6bd3d48204c6fcdfb44bf0a3f94dc43203d41b206f5eaaa7bbc8db938af1c0515b5dfc935ef1b7a5e3daf3d35255e9bc0a1748dbdf229ca2c19fe1ab3a1567f46f366394065aa910037c1654de63d49cd43a1f59fb2"}, 0x80) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020307031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000880)='./file0\x00', 0x0) 12:43:35 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000010c0), 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000100), 0xffffffff) sendfile(r3, r3, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) socket$netlink(0x10, 0x3, 0xf) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendto(r4, &(0x7f00000001c0)="cfff6988debf60087c0cbf9d0dd0d6a263fbf32ceb733c93012c1dc287719c6a1e0cfe4bd92b0c0e650d01d7366b81fda196fcd14dea58", 0x37, 0x0, &(0x7f0000000440)=@ll={0x11, 0x1c, r6, 0x1, 0x20, 0x6, @random="76346643817e"}, 0x80) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x7530}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="01c79dca1c45b55ab69774fcf54b3b5b74a52fabd61d2c1efe556ada0ed774c9b384bc83ad323d44f3a9297543508e306129a288da521cab43f2cf99", 0x3c, 0x40, &(0x7f0000000080)=@generic={0x3, "f0bf04c2dba352fd1201fc8cd03d71d62433d0dd54f6dcc1a6b0bf71ac66218e36995ba0bbb67c77d6bd3d48204c6fcdfb44bf0a3f94dc43203d41b206f5eaaa7bbc8db938af1c0515b5dfc935ef1b7a5e3daf3d35255e9bc0a1748dbdf229ca2c19fe1ab3a1567f46f366394065aa910037c1654de63d49cd43a1f59fb2"}, 0x80) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020307031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000880)='./file0\x00', 0x0) 12:43:35 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') exit(0x0) sendfile(r0, r0, &(0x7f0000000180), 0x3ff) 12:43:35 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000010c0), 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000100), 0xffffffff) sendfile(r3, r3, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) socket$netlink(0x10, 0x3, 0xf) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendto(r4, &(0x7f00000001c0)="cfff6988debf60087c0cbf9d0dd0d6a263fbf32ceb733c93012c1dc287719c6a1e0cfe4bd92b0c0e650d01d7366b81fda196fcd14dea58", 0x37, 0x0, &(0x7f0000000440)=@ll={0x11, 0x1c, r6, 0x1, 0x20, 0x6, @random="76346643817e"}, 0x80) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x7530}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="01c79dca1c45b55ab69774fcf54b3b5b74a52fabd61d2c1efe556ada0ed774c9b384bc83ad323d44f3a9297543508e306129a288da521cab43f2cf99", 0x3c, 0x40, &(0x7f0000000080)=@generic={0x3, "f0bf04c2dba352fd1201fc8cd03d71d62433d0dd54f6dcc1a6b0bf71ac66218e36995ba0bbb67c77d6bd3d48204c6fcdfb44bf0a3f94dc43203d41b206f5eaaa7bbc8db938af1c0515b5dfc935ef1b7a5e3daf3d35255e9bc0a1748dbdf229ca2c19fe1ab3a1567f46f366394065aa910037c1654de63d49cd43a1f59fb2"}, 0x80) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020307031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000880)='./file0\x00', 0x0) 12:43:35 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000010c0), 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000100), 0xffffffff) sendfile(r3, r3, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) socket$netlink(0x10, 0x3, 0xf) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendto(r4, &(0x7f00000001c0)="cfff6988debf60087c0cbf9d0dd0d6a263fbf32ceb733c93012c1dc287719c6a1e0cfe4bd92b0c0e650d01d7366b81fda196fcd14dea58", 0x37, 0x0, &(0x7f0000000440)=@ll={0x11, 0x1c, r6, 0x1, 0x20, 0x6, @random="76346643817e"}, 0x80) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x7530}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="01c79dca1c45b55ab69774fcf54b3b5b74a52fabd61d2c1efe556ada0ed774c9b384bc83ad323d44f3a9297543508e306129a288da521cab43f2cf99", 0x3c, 0x40, &(0x7f0000000080)=@generic={0x3, "f0bf04c2dba352fd1201fc8cd03d71d62433d0dd54f6dcc1a6b0bf71ac66218e36995ba0bbb67c77d6bd3d48204c6fcdfb44bf0a3f94dc43203d41b206f5eaaa7bbc8db938af1c0515b5dfc935ef1b7a5e3daf3d35255e9bc0a1748dbdf229ca2c19fe1ab3a1567f46f366394065aa910037c1654de63d49cd43a1f59fb2"}, 0x80) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020307031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000880)='./file0\x00', 0x0) 12:43:35 executing program 4: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) clone(0x2020002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) futex(&(0x7f0000004000)=0x2, 0x7, 0x0, &(0x7f0000001ff0), &(0x7f0000000140), 0x0) [ 956.547078] blk_update_request: I/O error, dev loop0, sector 288 [ 956.553305] Buffer I/O error on dev loop0, logical block 36, lost async page write [ 956.561970] blk_update_request: I/O error, dev loop0, sector 0 12:43:35 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000010c0), 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000100), 0xffffffff) sendfile(r3, r3, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) socket$netlink(0x10, 0x3, 0xf) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendto(r4, &(0x7f00000001c0)="cfff6988debf60087c0cbf9d0dd0d6a263fbf32ceb733c93012c1dc287719c6a1e0cfe4bd92b0c0e650d01d7366b81fda196fcd14dea58", 0x37, 0x0, &(0x7f0000000440)=@ll={0x11, 0x1c, r6, 0x1, 0x20, 0x6, @random="76346643817e"}, 0x80) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x7530}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="01c79dca1c45b55ab69774fcf54b3b5b74a52fabd61d2c1efe556ada0ed774c9b384bc83ad323d44f3a9297543508e306129a288da521cab43f2cf99", 0x3c, 0x40, &(0x7f0000000080)=@generic={0x3, "f0bf04c2dba352fd1201fc8cd03d71d62433d0dd54f6dcc1a6b0bf71ac66218e36995ba0bbb67c77d6bd3d48204c6fcdfb44bf0a3f94dc43203d41b206f5eaaa7bbc8db938af1c0515b5dfc935ef1b7a5e3daf3d35255e9bc0a1748dbdf229ca2c19fe1ab3a1567f46f366394065aa910037c1654de63d49cd43a1f59fb2"}, 0x80) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020307031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000880)='./file0\x00', 0x0) 12:43:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000280)={0x1c, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x12, [@generic="b2"]}]}, 0x1c}}, 0x0) 12:43:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_dump={0x0, 0x0, 0xf000000}}) 12:43:35 executing program 4: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) clone(0x2020002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) futex(&(0x7f0000004000)=0x2, 0x7, 0x0, &(0x7f0000001ff0), &(0x7f0000000140), 0x0) 12:43:35 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000010c0), 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000100), 0xffffffff) sendfile(r3, r3, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) socket$netlink(0x10, 0x3, 0xf) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendto(r4, &(0x7f00000001c0)="cfff6988debf60087c0cbf9d0dd0d6a263fbf32ceb733c93012c1dc287719c6a1e0cfe4bd92b0c0e650d01d7366b81fda196fcd14dea58", 0x37, 0x0, &(0x7f0000000440)=@ll={0x11, 0x1c, r6, 0x1, 0x20, 0x6, @random="76346643817e"}, 0x80) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x7530}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="01c79dca1c45b55ab69774fcf54b3b5b74a52fabd61d2c1efe556ada0ed774c9b384bc83ad323d44f3a9297543508e306129a288da521cab43f2cf99", 0x3c, 0x40, &(0x7f0000000080)=@generic={0x3, "f0bf04c2dba352fd1201fc8cd03d71d62433d0dd54f6dcc1a6b0bf71ac66218e36995ba0bbb67c77d6bd3d48204c6fcdfb44bf0a3f94dc43203d41b206f5eaaa7bbc8db938af1c0515b5dfc935ef1b7a5e3daf3d35255e9bc0a1748dbdf229ca2c19fe1ab3a1567f46f366394065aa910037c1654de63d49cd43a1f59fb2"}, 0x80) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020307031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000880)='./file0\x00', 0x0) 12:43:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000280)={0x1c, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x12, [@generic="b2"]}]}, 0x1c}}, 0x0) 12:43:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_dump={0x0, 0x0, 0xf000000}}) 12:43:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000280)={0x1c, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x12, [@generic="b2"]}]}, 0x1c}}, 0x0) 12:43:36 executing program 4: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) clone(0x2020002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) futex(&(0x7f0000004000)=0x2, 0x7, 0x0, &(0x7f0000001ff0), &(0x7f0000000140), 0x0) 12:43:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x501, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @dev}]}, 0x28}}, 0x0) 12:43:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_dump={0x0, 0x0, 0xf000000}}) 12:43:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000280)={0x1c, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x12, [@generic="b2"]}]}, 0x1c}}, 0x0) [ 957.397366] blk_update_request: I/O error, dev loop0, sector 5504 [ 957.399168] blk_update_request: I/O error, dev loop0, sector 0 [ 957.411478] Buffer I/O error on dev loop0, logical block 688, lost async page write 12:43:36 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000010c0), 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, &(0x7f0000000100), 0xffffffff) sendfile(r3, r3, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) socket$netlink(0x10, 0x3, 0xf) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendto(r4, &(0x7f00000001c0)="cfff6988debf60087c0cbf9d0dd0d6a263fbf32ceb733c93012c1dc287719c6a1e0cfe4bd92b0c0e650d01d7366b81fda196fcd14dea58", 0x37, 0x0, &(0x7f0000000440)=@ll={0x11, 0x1c, r6, 0x1, 0x20, 0x6, @random="76346643817e"}, 0x80) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x7530}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="01c79dca1c45b55ab69774fcf54b3b5b74a52fabd61d2c1efe556ada0ed774c9b384bc83ad323d44f3a9297543508e306129a288da521cab43f2cf99", 0x3c, 0x40, &(0x7f0000000080)=@generic={0x3, "f0bf04c2dba352fd1201fc8cd03d71d62433d0dd54f6dcc1a6b0bf71ac66218e36995ba0bbb67c77d6bd3d48204c6fcdfb44bf0a3f94dc43203d41b206f5eaaa7bbc8db938af1c0515b5dfc935ef1b7a5e3daf3d35255e9bc0a1748dbdf229ca2c19fe1ab3a1567f46f366394065aa910037c1654de63d49cd43a1f59fb2"}, 0x80) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020307031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000880)='./file0\x00', 0x0) 12:43:36 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) clock_adjtime(0xa, &(0x7f00007b7f30)) 12:43:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000052001f001515f407000904ff0a00072207000100ffffffff0800e5ff00000006", 0x24) 12:43:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_dump={0x0, 0x0, 0xf000000}}) 12:43:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x501, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @dev}]}, 0x28}}, 0x0) 12:43:36 executing program 4: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(0xffffffffffffffff, &(0x7f0000000c80)=""/250, 0x3ff7124d) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) pipe(&(0x7f0000000300)) fchdir(r1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r2, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYBLOB="000028bd7000fcdbdf25020000000cd6db99ed3bd63c72b95dd9ba6d00030000f8ffffffffffff08000100000000000c000700080001007c37f7f0e1112424265b29e4d3ef1cc6ce9da85850301c71efe621cf2994f73c2541aad832be638a6fb1e5a5fbcd29b34acfa948b9ec0819eefe30f979aa05acac790f0e1c3dfba4340c8caf924784a670db42dff83d007db224e0ffa056c79418c84161420c931b7453e864c086f139f26a101063a5beb8b0a273adcd146cfe92ab70b2374d1de005b3fc384a3c1d984ed0d9f026d6a63b0b5adb8f49562ef5c7ee9ccf40d549b89528191da8cf291dee8fbb5c4135049a", @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) dup(r3) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) write$P9_RSTATu(r2, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r0}) fdatasync(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x6f, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9"}, 0x6f, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x501, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @dev}]}, 0x28}}, 0x0) 12:43:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000052001f001515f407000904ff0a00072207000100ffffffff0800e5ff00000006", 0x24) 12:43:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:43:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x501, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @dev}]}, 0x28}}, 0x0) 12:43:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000052001f001515f407000904ff0a00072207000100ffffffff0800e5ff00000006", 0x24) 12:43:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@xdp, 0x80, 0x0}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) [ 957.731133] blk_update_request: I/O error, dev loop0, sector 2544 [ 957.737444] Buffer I/O error on dev loop0, logical block 318, lost async page write [ 957.745326] blk_update_request: I/O error, dev loop0, sector 3224 [ 957.751931] Buffer I/O error on dev loop0, logical block 403, lost async page write 12:43:36 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) clock_adjtime(0xa, &(0x7f00007b7f30)) 12:43:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000052001f001515f407000904ff0a00072207000100ffffffff0800e5ff00000006", 0x24) 12:43:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@xdp, 0x80, 0x0}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 12:43:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:43:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000180)) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x7) mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000000, 0x2810, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000001bc0)={r3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000002c0)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x4) r4 = socket$inet6(0xa, 0x400000000001, 0x0) waitid(0x0, r2, &(0x7f0000000080), 0x1, &(0x7f0000001c00)) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) getresuid(0x0, 0x0, 0x0) getegid() stat(0x0, 0x0) getgid() getresuid(0x0, 0x0, 0x0) getegid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000000340)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000001780)="10da02348e28e332197d875c51cc2435d2981fb21d2fd94fc3e7e62ba1aac0a46060a40ca57c119ef58e7677f7b47f53d04320d8513519cac22424b31e6900d09e619c635bb7b60b0a3f86c09aa981743453415bee379e13ff46bd4a4aea66ceb7764a89256f99b844c8daa9f21acbf0896ce2a10b3fba87878e6e1beda57def569ee5856c314278e369196fd0647da9fddab08cec4f22bf3df3f6fe6aeff33df61f5bce2134", 0xa6}], 0x1, 0x0, 0x0, 0x80}, 0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000004c0)="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") read(r5, &(0x7f0000000780)=""/4096, 0x1000) sendfile(r5, r6, &(0x7f0000000100), 0x8000fffffffe) 12:43:36 executing program 4: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(0xffffffffffffffff, &(0x7f0000000c80)=""/250, 0x3ff7124d) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) pipe(&(0x7f0000000300)) fchdir(r1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r2, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYBLOB="000028bd7000fcdbdf25020000000cd6db99ed3bd63c72b95dd9ba6d00030000f8ffffffffffff08000100000000000c000700080001007c37f7f0e1112424265b29e4d3ef1cc6ce9da85850301c71efe621cf2994f73c2541aad832be638a6fb1e5a5fbcd29b34acfa948b9ec0819eefe30f979aa05acac790f0e1c3dfba4340c8caf924784a670db42dff83d007db224e0ffa056c79418c84161420c931b7453e864c086f139f26a101063a5beb8b0a273adcd146cfe92ab70b2374d1de005b3fc384a3c1d984ed0d9f026d6a63b0b5adb8f49562ef5c7ee9ccf40d549b89528191da8cf291dee8fbb5c4135049a", @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) dup(r3) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) write$P9_RSTATu(r2, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r0}) fdatasync(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x6f, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9"}, 0x6f, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000046e000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 12:43:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@xdp, 0x80, 0x0}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) [ 957.965856] device lo entered promiscuous mode 12:43:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@xdp, 0x80, 0x0}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x0) 12:43:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000180)) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x7) mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000000, 0x2810, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000001bc0)={r3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000002c0)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x4) r4 = socket$inet6(0xa, 0x400000000001, 0x0) waitid(0x0, r2, &(0x7f0000000080), 0x1, &(0x7f0000001c00)) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) getresuid(0x0, 0x0, 0x0) getegid() stat(0x0, 0x0) getgid() getresuid(0x0, 0x0, 0x0) getegid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000000340)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000001780)="10da02348e28e332197d875c51cc2435d2981fb21d2fd94fc3e7e62ba1aac0a46060a40ca57c119ef58e7677f7b47f53d04320d8513519cac22424b31e6900d09e619c635bb7b60b0a3f86c09aa981743453415bee379e13ff46bd4a4aea66ceb7764a89256f99b844c8daa9f21acbf0896ce2a10b3fba87878e6e1beda57def569ee5856c314278e369196fd0647da9fddab08cec4f22bf3df3f6fe6aeff33df61f5bce2134", 0xa6}], 0x1, 0x0, 0x0, 0x80}, 0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000004c0)="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") read(r5, &(0x7f0000000780)=""/4096, 0x1000) sendfile(r5, r6, &(0x7f0000000100), 0x8000fffffffe) 12:43:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={"626f6e647a73556176655f3100008000", 0x20009d01}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x1) 12:43:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:43:37 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) clock_adjtime(0xa, &(0x7f00007b7f30)) 12:43:37 executing program 4: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(0xffffffffffffffff, &(0x7f0000000c80)=""/250, 0x3ff7124d) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) pipe(&(0x7f0000000300)) fchdir(r1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r2, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYBLOB="000028bd7000fcdbdf25020000000cd6db99ed3bd63c72b95dd9ba6d00030000f8ffffffffffff08000100000000000c000700080001007c37f7f0e1112424265b29e4d3ef1cc6ce9da85850301c71efe621cf2994f73c2541aad832be638a6fb1e5a5fbcd29b34acfa948b9ec0819eefe30f979aa05acac790f0e1c3dfba4340c8caf924784a670db42dff83d007db224e0ffa056c79418c84161420c931b7453e864c086f139f26a101063a5beb8b0a273adcd146cfe92ab70b2374d1de005b3fc384a3c1d984ed0d9f026d6a63b0b5adb8f49562ef5c7ee9ccf40d549b89528191da8cf291dee8fbb5c4135049a", @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) dup(r3) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) write$P9_RSTATu(r2, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r0}) fdatasync(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x6f, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9"}, 0x6f, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000180)) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x7) mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000000, 0x2810, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000001bc0)={r3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000002c0)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x4) r4 = socket$inet6(0xa, 0x400000000001, 0x0) waitid(0x0, r2, &(0x7f0000000080), 0x1, &(0x7f0000001c00)) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) getresuid(0x0, 0x0, 0x0) getegid() stat(0x0, 0x0) getgid() getresuid(0x0, 0x0, 0x0) getegid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000000340)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000001780)="10da02348e28e332197d875c51cc2435d2981fb21d2fd94fc3e7e62ba1aac0a46060a40ca57c119ef58e7677f7b47f53d04320d8513519cac22424b31e6900d09e619c635bb7b60b0a3f86c09aa981743453415bee379e13ff46bd4a4aea66ceb7764a89256f99b844c8daa9f21acbf0896ce2a10b3fba87878e6e1beda57def569ee5856c314278e369196fd0647da9fddab08cec4f22bf3df3f6fe6aeff33df61f5bce2134", 0xa6}], 0x1, 0x0, 0x0, 0x80}, 0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000004c0)="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") read(r5, &(0x7f0000000780)=""/4096, 0x1000) sendfile(r5, r6, &(0x7f0000000100), 0x8000fffffffe) 12:43:37 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ptrace$setregs(0x1a, r1, 0x0, &(0x7f0000000000)) 12:43:37 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) clock_adjtime(0xa, &(0x7f00007b7f30)) 12:43:37 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ptrace$setregs(0x1a, r1, 0x0, &(0x7f0000000000)) 12:43:37 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ptrace$setregs(0x1a, r1, 0x0, &(0x7f0000000000)) 12:43:37 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ptrace$setregs(0x1a, r1, 0x0, &(0x7f0000000000)) 12:43:37 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000100)='rxrpc\x00', &(0x7f0000000180)={'syz'}, r1) 12:43:37 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000100)='rxrpc\x00', &(0x7f0000000180)={'syz'}, r1) 12:43:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={"626f6e647a73556176655f3100008000", 0x20009d01}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x1) 12:43:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000180)) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x7) mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000000, 0x2810, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000001bc0)={r3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000002c0)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x4) r4 = socket$inet6(0xa, 0x400000000001, 0x0) waitid(0x0, r2, &(0x7f0000000080), 0x1, &(0x7f0000001c00)) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flistxattr(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) getresuid(0x0, 0x0, 0x0) getegid() stat(0x0, 0x0) getgid() getresuid(0x0, 0x0, 0x0) getegid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000000340)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000001780)="10da02348e28e332197d875c51cc2435d2981fb21d2fd94fc3e7e62ba1aac0a46060a40ca57c119ef58e7677f7b47f53d04320d8513519cac22424b31e6900d09e619c635bb7b60b0a3f86c09aa981743453415bee379e13ff46bd4a4aea66ceb7764a89256f99b844c8daa9f21acbf0896ce2a10b3fba87878e6e1beda57def569ee5856c314278e369196fd0647da9fddab08cec4f22bf3df3f6fe6aeff33df61f5bce2134", 0xa6}], 0x1, 0x0, 0x0, 0x80}, 0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f00000004c0)="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") read(r5, &(0x7f0000000780)=""/4096, 0x1000) sendfile(r5, r6, &(0x7f0000000100), 0x8000fffffffe) 12:43:37 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000100)='rxrpc\x00', &(0x7f0000000180)={'syz'}, r1) 12:43:37 executing program 4: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(0xffffffffffffffff, &(0x7f0000000c80)=""/250, 0x3ff7124d) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu\x00', 0x200002, 0x0) pipe(&(0x7f0000000300)) fchdir(r1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r2, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYBLOB="000028bd7000fcdbdf25020000000cd6db99ed3bd63c72b95dd9ba6d00030000f8ffffffffffff08000100000000000c000700080001007c37f7f0e1112424265b29e4d3ef1cc6ce9da85850301c71efe621cf2994f73c2541aad832be638a6fb1e5a5fbcd29b34acfa948b9ec0819eefe30f979aa05acac790f0e1c3dfba4340c8caf924784a670db42dff83d007db224e0ffa056c79418c84161420c931b7453e864c086f139f26a101063a5beb8b0a273adcd146cfe92ab70b2374d1de005b3fc384a3c1d984ed0d9f026d6a63b0b5adb8f49562ef5c7ee9ccf40d549b89528191da8cf291dee8fbb5c4135049a", @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x4004}, 0x20044005) dup(r3) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) write$P9_RSTATu(r2, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000980)={@loopback, @remote, @empty, 0xfff, 0x7fff, 0x8, 0x0, 0xffffffffffffffff, 0x80, r0}) fdatasync(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a00)={0x0, 0xfb, 0x6f, 0x4, 0x0, "6ed5cccabeab56cced0ce566c7ac005a", "f9c1ede25c0563fb276c55029dc623c35fce48b24cde114f895852817aa066ede2d32b9ad45d00c800e9962f812a3f12628654ae3f610904602144bbe4db146fe7c464c9de9cc84bfbe9f864f608cb829b4029f629e5a489cfa9"}, 0x6f, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) 12:43:37 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000100)='rxrpc\x00', &(0x7f0000000180)={'syz'}, r1) 12:43:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:43:37 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000100)='rxrpc\x00', &(0x7f0000000180)={'syz'}, r1) 12:43:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={"626f6e647a73556176655f3100008000", 0x20009d01}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x1) 12:43:37 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000100)='rxrpc\x00', &(0x7f0000000180)={'syz'}, r1) 12:43:37 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000100)='rxrpc\x00', &(0x7f0000000180)={'syz'}, r1) 12:43:37 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000280)=""/223) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 12:43:37 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) add_key(&(0x7f0000000200)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ptrace(0x10, r0) keyctl$assume_authority(0x10, 0x0) ptrace(0x11, r0) 12:43:37 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x100000000) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'nr0\x00'}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000340)={@broadcast}, &(0x7f0000000380)=0xc) accept4$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0xffffffffffffffb2, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr, @in=@multicast2}}, {{@in=@loopback}}}, &(0x7f0000000580)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000005c0)={{{@in6, @in=@rand_addr}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000006c0)=0xe8) accept4$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14, 0x80800) getsockname$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000900)=0xe8) getpeername$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000980)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000d80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002480)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000002580)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000029c0)={&(0x7f00000025c0)={0x1a0, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x13c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6f49}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="021004000a0000000000000000000000080012000000000000000eff0f0000000000000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000"], 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r11 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r3, r11, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@routing, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000), 0x0) 12:43:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={"626f6e647a73556176655f3100008000", 0x20009d01}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x1) 12:43:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@routing, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000), 0x0) 12:43:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@routing, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000), 0x0) 12:43:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@routing, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000), 0x0) 12:43:38 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0084904, &(0x7f0000000080)) 12:43:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={"626f6e647a73556176655f3100008000", 0x20009d01}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x1) 12:43:38 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0084904, &(0x7f0000000080)) 12:43:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000280)=""/223) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 12:43:38 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x100000000) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'nr0\x00'}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000340)={@broadcast}, &(0x7f0000000380)=0xc) accept4$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0xffffffffffffffb2, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr, @in=@multicast2}}, {{@in=@loopback}}}, &(0x7f0000000580)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000005c0)={{{@in6, @in=@rand_addr}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000006c0)=0xe8) accept4$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14, 0x80800) getsockname$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000900)=0xe8) getpeername$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000980)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000d80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002480)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000002580)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000029c0)={&(0x7f00000025c0)={0x1a0, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x13c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6f49}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="021004000a0000000000000000000000080012000000000000000eff0f0000000000000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000"], 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r11 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r3, r11, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:38 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) add_key(&(0x7f0000000200)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ptrace(0x10, r0) keyctl$assume_authority(0x10, 0x0) ptrace(0x11, r0) 12:43:38 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0084904, &(0x7f0000000080)) 12:43:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={"626f6e647a73556176655f3100008000", 0x20009d01}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x1) 12:43:38 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x100000000) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'nr0\x00'}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000340)={@broadcast}, &(0x7f0000000380)=0xc) accept4$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0xffffffffffffffb2, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr, @in=@multicast2}}, {{@in=@loopback}}}, &(0x7f0000000580)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000005c0)={{{@in6, @in=@rand_addr}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000006c0)=0xe8) accept4$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14, 0x80800) getsockname$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000900)=0xe8) getpeername$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000980)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000d80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002480)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000002580)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000029c0)={&(0x7f00000025c0)={0x1a0, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x13c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6f49}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="021004000a0000000000000000000000080012000000000000000eff0f0000000000000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000"], 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r11 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r3, r11, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={"626f6e647a73556176655f3100008000", 0x20009d01}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x1) 12:43:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000280)=""/223) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 12:43:38 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0084904, &(0x7f0000000080)) 12:43:38 executing program 4: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) add_key(&(0x7f0000000200)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ptrace(0x10, r0) keyctl$assume_authority(0x10, 0x0) ptrace(0x11, r0) 12:43:38 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x100000000) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'nr0\x00'}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000340)={@broadcast}, &(0x7f0000000380)=0xc) accept4$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0xffffffffffffffb2, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr, @in=@multicast2}}, {{@in=@loopback}}}, &(0x7f0000000580)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000005c0)={{{@in6, @in=@rand_addr}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000006c0)=0xe8) accept4$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14, 0x80800) getsockname$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000900)=0xe8) getpeername$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000980)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000d80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002480)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000002580)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000029c0)={&(0x7f00000025c0)={0x1a0, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x13c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6f49}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="021004000a0000000000000000000000080012000000000000000eff0f0000000000000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000"], 0x50}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r11 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r3, r11, &(0x7f0000d83ff8), 0x8000fffffffe) 12:43:38 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000280)=""/223) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 12:43:39 executing program 0: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00891"], 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0xfffffe4e) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x222) 12:43:39 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000280)=""/223) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 960.287369] hid-generic 0000:0000:0000.0028: unknown main item tag 0xe [ 960.301061] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 960.309785] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 960.319756] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 960.346510] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 960.360891] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 960.372715] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 960.379452] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 960.387949] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz1 [ 960.404356] hid-generic 0000:0000:0000.0029: unknown main item tag 0xe [ 960.411752] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 960.418767] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 960.430807] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 960.437609] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 960.445006] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 960.451939] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 960.458633] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 960.466977] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz1 12:43:39 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) add_key(&(0x7f0000000200)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ptrace(0x10, r0) keyctl$assume_authority(0x10, 0x0) ptrace(0x11, r0) 12:43:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080), 0x4) 12:43:39 executing program 0: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00891"], 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0xfffffe4e) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x222) 12:43:39 executing program 5: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00891"], 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0xfffffe4e) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x222) 12:43:39 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000280)=""/223) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 12:43:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080), 0x4) 12:43:39 executing program 0: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00891"], 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0xfffffe4e) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x222) [ 960.698428] hid-generic 0000:0000:0000.002A: unknown main item tag 0xe [ 960.709668] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 960.725615] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 12:43:39 executing program 4: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) add_key(&(0x7f0000000200)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ptrace(0x10, r0) keyctl$assume_authority(0x10, 0x0) ptrace(0x11, r0) 12:43:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080), 0x4) 12:43:39 executing program 0: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00891"], 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0xfffffe4e) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x222) [ 960.751921] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 960.777338] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 12:43:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080), 0x4) 12:43:39 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)="7374617475730042236739c16d17f90dc22322c94f133520785e91ea85ae107cc3819819c263540b1de1ba201e6de4b75a50115091eed530aa482e36594601ceb5d169c5baf41b35d8a5a09a82496613d86023865b57ef269f90d304969f687df53b611b40a44291b5a882208fbb835e54a41310a3b481d5bdbb0981742909a63b7cd1a18d405e5b011bfbe5a4d5bf299447e4c0dd4b63a367211c0078238b509d614100d33a5584aa3b3cb9b99e6e5f84719294d41b27117c47fb4f2b2be475eb25d5f69b6d10cf8422cade570c087b03f6b1818bc97077db23") rt_sigaction(0x36, &(0x7f0000000180)={&(0x7f00000000c0)="c461e9d961f40fdbf83e2664640f62ffc421fde70740790cc4a3014bbe0000802099c421d97402400f0fc9aa460f698900e0000047dde9", {}, 0x0, &(0x7f0000000100)="f20f5f13c4812971d3ffc4e371210dbbac00004b660f38db98feefffffc403fd00289966f08018008fe938018a000000002626da63643636660f38228a001000008fc9d091726b"}, &(0x7f00000006c0)={&(0x7f0000000540)="8fa848860b008f495801480fc4e38d6b730288c462693ed1c483a95e0200f20f2ac6c48179e395453200002e42e000c443a55f5300038fc838a63fc0", {}, 0x0, &(0x7f0000000680)="c442393716c4a3e17c5b2b8bf23e6436f042f61af080345e2a6dc4215d72d5f7c461ddf1c3673642fe0e6566430f383245c6660f71e10d"}, 0x8, &(0x7f0000000700)) sendfile(r0, r1, &(0x7f0000000080), 0x71c) [ 960.797163] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 960.807504] hid-generic 0000:0000:0000.002B: unknown main item tag 0xe [ 960.807534] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 960.807546] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 960.807557] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 960.807568] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 960.807579] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 960.807590] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 960.807601] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 960.811820] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz1 [ 960.925833] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 960.933233] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 960.948085] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz1 12:43:40 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) add_key(&(0x7f0000000200)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ptrace(0x10, r0) keyctl$assume_authority(0x10, 0x0) ptrace(0x11, r0) 12:43:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f00000001c0)=0xf2) 12:43:40 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)="7374617475730042236739c16d17f90dc22322c94f133520785e91ea85ae107cc3819819c263540b1de1ba201e6de4b75a50115091eed530aa482e36594601ceb5d169c5baf41b35d8a5a09a82496613d86023865b57ef269f90d304969f687df53b611b40a44291b5a882208fbb835e54a41310a3b481d5bdbb0981742909a63b7cd1a18d405e5b011bfbe5a4d5bf299447e4c0dd4b63a367211c0078238b509d614100d33a5584aa3b3cb9b99e6e5f84719294d41b27117c47fb4f2b2be475eb25d5f69b6d10cf8422cade570c087b03f6b1818bc97077db23") rt_sigaction(0x36, &(0x7f0000000180)={&(0x7f00000000c0)="c461e9d961f40fdbf83e2664640f62ffc421fde70740790cc4a3014bbe0000802099c421d97402400f0fc9aa460f698900e0000047dde9", {}, 0x0, &(0x7f0000000100)="f20f5f13c4812971d3ffc4e371210dbbac00004b660f38db98feefffffc403fd00289966f08018008fe938018a000000002626da63643636660f38228a001000008fc9d091726b"}, &(0x7f00000006c0)={&(0x7f0000000540)="8fa848860b008f495801480fc4e38d6b730288c462693ed1c483a95e0200f20f2ac6c48179e395453200002e42e000c443a55f5300038fc838a63fc0", {}, 0x0, &(0x7f0000000680)="c442393716c4a3e17c5b2b8bf23e6436f042f61af080345e2a6dc4215d72d5f7c461ddf1c3673642fe0e6566430f383245c6660f71e10d"}, 0x8, &(0x7f0000000700)) sendfile(r0, r1, &(0x7f0000000080), 0x71c) 12:43:40 executing program 5: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00891"], 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0xfffffe4e) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x222) 12:43:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000280)=""/223) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 12:43:40 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)="7374617475730042236739c16d17f90dc22322c94f133520785e91ea85ae107cc3819819c263540b1de1ba201e6de4b75a50115091eed530aa482e36594601ceb5d169c5baf41b35d8a5a09a82496613d86023865b57ef269f90d304969f687df53b611b40a44291b5a882208fbb835e54a41310a3b481d5bdbb0981742909a63b7cd1a18d405e5b011bfbe5a4d5bf299447e4c0dd4b63a367211c0078238b509d614100d33a5584aa3b3cb9b99e6e5f84719294d41b27117c47fb4f2b2be475eb25d5f69b6d10cf8422cade570c087b03f6b1818bc97077db23") rt_sigaction(0x36, &(0x7f0000000180)={&(0x7f00000000c0)="c461e9d961f40fdbf83e2664640f62ffc421fde70740790cc4a3014bbe0000802099c421d97402400f0fc9aa460f698900e0000047dde9", {}, 0x0, &(0x7f0000000100)="f20f5f13c4812971d3ffc4e371210dbbac00004b660f38db98feefffffc403fd00289966f08018008fe938018a000000002626da63643636660f38228a001000008fc9d091726b"}, &(0x7f00000006c0)={&(0x7f0000000540)="8fa848860b008f495801480fc4e38d6b730288c462693ed1c483a95e0200f20f2ac6c48179e395453200002e42e000c443a55f5300038fc838a63fc0", {}, 0x0, &(0x7f0000000680)="c442393716c4a3e17c5b2b8bf23e6436f042f61af080345e2a6dc4215d72d5f7c461ddf1c3673642fe0e6566430f383245c6660f71e10d"}, 0x8, &(0x7f0000000700)) sendfile(r0, r1, &(0x7f0000000080), 0x71c) 12:43:40 executing program 4: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) add_key(&(0x7f0000000200)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ptrace(0x10, r0) keyctl$assume_authority(0x10, 0x0) ptrace(0x11, r0) 12:43:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f00000001c0)=0xf2) [ 961.573793] hid-generic 0000:0000:0000.002C: unknown main item tag 0xe [ 961.583490] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 12:43:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f00000001c0)=0xf2) 12:43:40 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)="7374617475730042236739c16d17f90dc22322c94f133520785e91ea85ae107cc3819819c263540b1de1ba201e6de4b75a50115091eed530aa482e36594601ceb5d169c5baf41b35d8a5a09a82496613d86023865b57ef269f90d304969f687df53b611b40a44291b5a882208fbb835e54a41310a3b481d5bdbb0981742909a63b7cd1a18d405e5b011bfbe5a4d5bf299447e4c0dd4b63a367211c0078238b509d614100d33a5584aa3b3cb9b99e6e5f84719294d41b27117c47fb4f2b2be475eb25d5f69b6d10cf8422cade570c087b03f6b1818bc97077db23") rt_sigaction(0x36, &(0x7f0000000180)={&(0x7f00000000c0)="c461e9d961f40fdbf83e2664640f62ffc421fde70740790cc4a3014bbe0000802099c421d97402400f0fc9aa460f698900e0000047dde9", {}, 0x0, &(0x7f0000000100)="f20f5f13c4812971d3ffc4e371210dbbac00004b660f38db98feefffffc403fd00289966f08018008fe938018a000000002626da63643636660f38228a001000008fc9d091726b"}, &(0x7f00000006c0)={&(0x7f0000000540)="8fa848860b008f495801480fc4e38d6b730288c462693ed1c483a95e0200f20f2ac6c48179e395453200002e42e000c443a55f5300038fc838a63fc0", {}, 0x0, &(0x7f0000000680)="c442393716c4a3e17c5b2b8bf23e6436f042f61af080345e2a6dc4215d72d5f7c461ddf1c3673642fe0e6566430f383245c6660f71e10d"}, 0x8, &(0x7f0000000700)) sendfile(r0, r1, &(0x7f0000000080), 0x71c) [ 961.619870] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 961.640488] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 961.658180] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 12:43:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f00000001c0)=0xf2) [ 961.675253] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 961.689632] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 961.709829] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 12:43:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x1, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000980)={0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000480)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0x3f, &(0x7f0000000380)) syz_open_procfs(r7, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x4040000000) r8 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="aa9fb40da53ace389513c65d82b8fd4637fe46312c46dda0e7fb222fd4c6361606c493b5d763941d514b8ba27533b92224640d99fb5416be09753ffd38e8c0c8f26b12df891ae0616649c0f1931ca8496d520000000000000000000000000000"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000780)='./file0\x00') r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r9, 0x8, r5) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01042ddd7000fcdbdf24f40000001400030008000818000000000800087200000000000800068030001f00792b0c9ab7"], 0x1}}, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000600)=""/138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r2}, 0x10) [ 961.748175] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz1 12:43:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x1, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000980)={0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000480)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0x3f, &(0x7f0000000380)) syz_open_procfs(r7, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x4040000000) r8 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="aa9fb40da53ace389513c65d82b8fd4637fe46312c46dda0e7fb222fd4c6361606c493b5d763941d514b8ba27533b92224640d99fb5416be09753ffd38e8c0c8f26b12df891ae0616649c0f1931ca8496d520000000000000000000000000000"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000780)='./file0\x00') r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r9, 0x8, r5) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01042ddd7000fcdbdf24f40000001400030008000818000000000800087200000000000800068030001f00792b0c9ab7"], 0x1}}, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000600)=""/138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r2}, 0x10) 12:43:41 executing program 5: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00891"], 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0xfffffe4e) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x222) 12:43:41 executing program 0: r0 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0x0, &(0x7f00000001c0)) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) clone(0x80000000, &(0x7f0000000740), &(0x7f0000000200), &(0x7f0000000580), &(0x7f0000000600)="2d364b2fde328b3f79da3cad7caa5bdfb21ce8c79d15bca1e9bf0e532aac15738ca4be76c5ee9bae9f0f3c4a4e01ab980a0d8b74515f8de5dda063036e3be1be68c33750f5fb39ddeed16f7c295e3ddcc699423f735c1a31796a0355205fb204f5f3200205d4541eadecf255c5f96bf661212c03930d530bd109da846bc79f38b14f1f8f2ff2c15d259f") ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f00000004c0)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x20, 0x8, 0x0, 0x0, 0x0, 0x5, 0xffffffff80000000, 0x0, 0xec, 0xfffffffffffeffff, 0x0, 0x0, 0x1000, 0x39d, 0x3, 0x0, 0x3, 0x4376, 0x6, 0x0, 0x2, 0x0, 0x3, 0x101, 0x7fffffff, 0x0, 0x3ea, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7af1fd3, 0x7f}, 0x0, 0x18c, 0x0, 0x7, 0x6, 0x5, 0x1000}) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) ptrace(0x4207, r3) ptrace$setregs(0xffffffffffffffff, r3, 0x8, &(0x7f0000000440)="e100265c2f14a9db91bad7782c48a90e1795c60408a6829cc4eb4a7b29c39007eb07021cc93eb776ceebecd78160a20c2d8f8649b58123f6ceff66618ad8d57151616e4495842a079b16d4513dcb2aff44f7a5a84444b618e28edd") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x0) ptrace$setregset(0x4209, r3, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000280)={r5, 0x1, 0x6, @dev={[], 0x21}}, 0x10) 12:43:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x1, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000980)={0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000480)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0x3f, &(0x7f0000000380)) syz_open_procfs(r7, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x4040000000) r8 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="aa9fb40da53ace389513c65d82b8fd4637fe46312c46dda0e7fb222fd4c6361606c493b5d763941d514b8ba27533b92224640d99fb5416be09753ffd38e8c0c8f26b12df891ae0616649c0f1931ca8496d520000000000000000000000000000"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000780)='./file0\x00') r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r9, 0x8, r5) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01042ddd7000fcdbdf24f40000001400030008000818000000000800087200000000000800068030001f00792b0c9ab7"], 0x1}}, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000600)=""/138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r2}, 0x10) 12:43:41 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 12:43:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x1, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000980)={0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000480)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0x3f, &(0x7f0000000380)) syz_open_procfs(r7, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x4040000000) r8 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="aa9fb40da53ace389513c65d82b8fd4637fe46312c46dda0e7fb222fd4c6361606c493b5d763941d514b8ba27533b92224640d99fb5416be09753ffd38e8c0c8f26b12df891ae0616649c0f1931ca8496d520000000000000000000000000000"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000780)='./file0\x00') r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r9, 0x8, r5) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01042ddd7000fcdbdf24f40000001400030008000818000000000800087200000000000800068030001f00792b0c9ab7"], 0x1}}, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000600)=""/138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r2}, 0x10) 12:43:41 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x1, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000980)={0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000480)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0x3f, &(0x7f0000000380)) syz_open_procfs(r7, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x4040000000) r8 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="aa9fb40da53ace389513c65d82b8fd4637fe46312c46dda0e7fb222fd4c6361606c493b5d763941d514b8ba27533b92224640d99fb5416be09753ffd38e8c0c8f26b12df891ae0616649c0f1931ca8496d520000000000000000000000000000"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000780)='./file0\x00') r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r9, 0x8, r5) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01042ddd7000fcdbdf24f40000001400030008000818000000000800087200000000000800068030001f00792b0c9ab7"], 0x1}}, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000600)=""/138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r2}, 0x10) [ 962.379100] hid-generic 0000:0000:0000.002D: unknown main item tag 0xe [ 962.388013] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 962.399681] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 962.416501] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 962.426429] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 962.435676] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 962.450696] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 962.472500] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 962.520045] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz1 12:43:41 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000600)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x8860000, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000005c0)={'veth1\x00'}) r3 = fcntl$dupfd(r1, 0x0, r1) accept4$unix(r3, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000008021df250f0000000c0001000800080000000000"], 0x1}}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) execve(&(0x7f0000000400)='./file1\x00', &(0x7f0000000a40), &(0x7f00000009c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)="0000000000000000000000000200", 0xffffffffffffff9c}, 0x10) socket$inet6(0xa, 0x80001, 0x800) 12:43:41 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000600)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x8860000, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000005c0)={'veth1\x00'}) r3 = fcntl$dupfd(r1, 0x0, r1) accept4$unix(r3, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000008021df250f0000000c0001000800080000000000"], 0x1}}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) execve(&(0x7f0000000400)='./file1\x00', &(0x7f0000000a40), &(0x7f00000009c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)="0000000000000000000000000200", 0xffffffffffffff9c}, 0x10) socket$inet6(0xa, 0x80001, 0x800) 12:43:41 executing program 0: r0 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0x0, &(0x7f00000001c0)) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) clone(0x80000000, &(0x7f0000000740), &(0x7f0000000200), &(0x7f0000000580), &(0x7f0000000600)="2d364b2fde328b3f79da3cad7caa5bdfb21ce8c79d15bca1e9bf0e532aac15738ca4be76c5ee9bae9f0f3c4a4e01ab980a0d8b74515f8de5dda063036e3be1be68c33750f5fb39ddeed16f7c295e3ddcc699423f735c1a31796a0355205fb204f5f3200205d4541eadecf255c5f96bf661212c03930d530bd109da846bc79f38b14f1f8f2ff2c15d259f") ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f00000004c0)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x20, 0x8, 0x0, 0x0, 0x0, 0x5, 0xffffffff80000000, 0x0, 0xec, 0xfffffffffffeffff, 0x0, 0x0, 0x1000, 0x39d, 0x3, 0x0, 0x3, 0x4376, 0x6, 0x0, 0x2, 0x0, 0x3, 0x101, 0x7fffffff, 0x0, 0x3ea, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7af1fd3, 0x7f}, 0x0, 0x18c, 0x0, 0x7, 0x6, 0x5, 0x1000}) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) ptrace(0x4207, r3) ptrace$setregs(0xffffffffffffffff, r3, 0x8, &(0x7f0000000440)="e100265c2f14a9db91bad7782c48a90e1795c60408a6829cc4eb4a7b29c39007eb07021cc93eb776ceebecd78160a20c2d8f8649b58123f6ceff66618ad8d57151616e4495842a079b16d4513dcb2aff44f7a5a84444b618e28edd") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x0) ptrace$setregset(0x4209, r3, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000280)={r5, 0x1, 0x6, @dev={[], 0x21}}, 0x10) 12:43:42 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x1, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000980)={0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000480)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0x3f, &(0x7f0000000380)) syz_open_procfs(r7, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x4040000000) r8 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="aa9fb40da53ace389513c65d82b8fd4637fe46312c46dda0e7fb222fd4c6361606c493b5d763941d514b8ba27533b92224640d99fb5416be09753ffd38e8c0c8f26b12df891ae0616649c0f1931ca8496d520000000000000000000000000000"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000780)='./file0\x00') r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r9, 0x8, r5) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01042ddd7000fcdbdf24f40000001400030008000818000000000800087200000000000800068030001f00792b0c9ab7"], 0x1}}, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000600)=""/138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r2}, 0x10) 12:43:42 executing program 0: r0 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0x0, &(0x7f00000001c0)) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) clone(0x80000000, &(0x7f0000000740), &(0x7f0000000200), &(0x7f0000000580), &(0x7f0000000600)="2d364b2fde328b3f79da3cad7caa5bdfb21ce8c79d15bca1e9bf0e532aac15738ca4be76c5ee9bae9f0f3c4a4e01ab980a0d8b74515f8de5dda063036e3be1be68c33750f5fb39ddeed16f7c295e3ddcc699423f735c1a31796a0355205fb204f5f3200205d4541eadecf255c5f96bf661212c03930d530bd109da846bc79f38b14f1f8f2ff2c15d259f") ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f00000004c0)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x20, 0x8, 0x0, 0x0, 0x0, 0x5, 0xffffffff80000000, 0x0, 0xec, 0xfffffffffffeffff, 0x0, 0x0, 0x1000, 0x39d, 0x3, 0x0, 0x3, 0x4376, 0x6, 0x0, 0x2, 0x0, 0x3, 0x101, 0x7fffffff, 0x0, 0x3ea, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7af1fd3, 0x7f}, 0x0, 0x18c, 0x0, 0x7, 0x6, 0x5, 0x1000}) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) ptrace(0x4207, r3) ptrace$setregs(0xffffffffffffffff, r3, 0x8, &(0x7f0000000440)="e100265c2f14a9db91bad7782c48a90e1795c60408a6829cc4eb4a7b29c39007eb07021cc93eb776ceebecd78160a20c2d8f8649b58123f6ceff66618ad8d57151616e4495842a079b16d4513dcb2aff44f7a5a84444b618e28edd") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x0) ptrace$setregset(0x4209, r3, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000280)={r5, 0x1, 0x6, @dev={[], 0x21}}, 0x10) 12:43:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x1, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000980)={0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000480)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0x3f, &(0x7f0000000380)) syz_open_procfs(r7, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x4040000000) r8 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="aa9fb40da53ace389513c65d82b8fd4637fe46312c46dda0e7fb222fd4c6361606c493b5d763941d514b8ba27533b92224640d99fb5416be09753ffd38e8c0c8f26b12df891ae0616649c0f1931ca8496d520000000000000000000000000000"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000780)='./file0\x00') r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r9, 0x8, r5) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01042ddd7000fcdbdf24f40000001400030008000818000000000800087200000000000800068030001f00792b0c9ab7"], 0x1}}, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000600)=""/138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r2}, 0x10) 12:43:42 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000600)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x8860000, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000005c0)={'veth1\x00'}) r3 = fcntl$dupfd(r1, 0x0, r1) accept4$unix(r3, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000008021df250f0000000c0001000800080000000000"], 0x1}}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) execve(&(0x7f0000000400)='./file1\x00', &(0x7f0000000a40), &(0x7f00000009c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)="0000000000000000000000000200", 0xffffffffffffff9c}, 0x10) socket$inet6(0xa, 0x80001, 0x800) 12:43:42 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x1, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000980)={0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000480)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0x3f, &(0x7f0000000380)) syz_open_procfs(r7, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x4040000000) r8 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="aa9fb40da53ace389513c65d82b8fd4637fe46312c46dda0e7fb222fd4c6361606c493b5d763941d514b8ba27533b92224640d99fb5416be09753ffd38e8c0c8f26b12df891ae0616649c0f1931ca8496d520000000000000000000000000000"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000780)='./file0\x00') r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r9, 0x8, r5) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01042ddd7000fcdbdf24f40000001400030008000818000000000800087200000000000800068030001f00792b0c9ab7"], 0x1}}, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000600)=""/138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r2}, 0x10) 12:43:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x1, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000980)={0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000480)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0x3f, &(0x7f0000000380)) syz_open_procfs(r7, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x4040000000) r8 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="aa9fb40da53ace389513c65d82b8fd4637fe46312c46dda0e7fb222fd4c6361606c493b5d763941d514b8ba27533b92224640d99fb5416be09753ffd38e8c0c8f26b12df891ae0616649c0f1931ca8496d520000000000000000000000000000"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000780)='./file0\x00') r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r9, 0x8, r5) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01042ddd7000fcdbdf24f40000001400030008000818000000000800087200000000000800068030001f00792b0c9ab7"], 0x1}}, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000600)=""/138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r2}, 0x10) 12:43:43 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000600)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x8860000, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000005c0)={'veth1\x00'}) r3 = fcntl$dupfd(r1, 0x0, r1) accept4$unix(r3, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000008021df250f0000000c0001000800080000000000"], 0x1}}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) execve(&(0x7f0000000400)='./file1\x00', &(0x7f0000000a40), &(0x7f00000009c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)="0000000000000000000000000200", 0xffffffffffffff9c}, 0x10) socket$inet6(0xa, 0x80001, 0x800) 12:43:43 executing program 0: r0 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0x0, &(0x7f00000001c0)) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) clone(0x80000000, &(0x7f0000000740), &(0x7f0000000200), &(0x7f0000000580), &(0x7f0000000600)="2d364b2fde328b3f79da3cad7caa5bdfb21ce8c79d15bca1e9bf0e532aac15738ca4be76c5ee9bae9f0f3c4a4e01ab980a0d8b74515f8de5dda063036e3be1be68c33750f5fb39ddeed16f7c295e3ddcc699423f735c1a31796a0355205fb204f5f3200205d4541eadecf255c5f96bf661212c03930d530bd109da846bc79f38b14f1f8f2ff2c15d259f") ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f00000004c0)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x20, 0x8, 0x0, 0x0, 0x0, 0x5, 0xffffffff80000000, 0x0, 0xec, 0xfffffffffffeffff, 0x0, 0x0, 0x1000, 0x39d, 0x3, 0x0, 0x3, 0x4376, 0x6, 0x0, 0x2, 0x0, 0x3, 0x101, 0x7fffffff, 0x0, 0x3ea, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7af1fd3, 0x7f}, 0x0, 0x18c, 0x0, 0x7, 0x6, 0x5, 0x1000}) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) ptrace(0x4207, r3) ptrace$setregs(0xffffffffffffffff, r3, 0x8, &(0x7f0000000440)="e100265c2f14a9db91bad7782c48a90e1795c60408a6829cc4eb4a7b29c39007eb07021cc93eb776ceebecd78160a20c2d8f8649b58123f6ceff66618ad8d57151616e4495842a079b16d4513dcb2aff44f7a5a84444b618e28edd") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x0) ptrace$setregset(0x4209, r3, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000280)={r5, 0x1, 0x6, @dev={[], 0x21}}, 0x10) 12:43:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x1, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000980)={0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000480)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0x3f, &(0x7f0000000380)) syz_open_procfs(r7, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x4040000000) r8 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="aa9fb40da53ace389513c65d82b8fd4637fe46312c46dda0e7fb222fd4c6361606c493b5d763941d514b8ba27533b92224640d99fb5416be09753ffd38e8c0c8f26b12df891ae0616649c0f1931ca8496d520000000000000000000000000000"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000780)='./file0\x00') r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r9, 0x8, r5) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01042ddd7000fcdbdf24f40000001400030008000818000000000800087200000000000800068030001f00792b0c9ab7"], 0x1}}, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000600)=""/138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r2}, 0x10) 12:43:44 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x1, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000980)={0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000480)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0x3f, &(0x7f0000000380)) syz_open_procfs(r7, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x4040000000) r8 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="aa9fb40da53ace389513c65d82b8fd4637fe46312c46dda0e7fb222fd4c6361606c493b5d763941d514b8ba27533b92224640d99fb5416be09753ffd38e8c0c8f26b12df891ae0616649c0f1931ca8496d520000000000000000000000000000"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000780)='./file0\x00') r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r9, 0x8, r5) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01042ddd7000fcdbdf24f40000001400030008000818000000000800087200000000000800068030001f00792b0c9ab7"], 0x1}}, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000600)=""/138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r2}, 0x10) 12:43:44 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x1, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000980)={0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000480)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0x3f, &(0x7f0000000380)) syz_open_procfs(r7, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x4040000000) r8 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="aa9fb40da53ace389513c65d82b8fd4637fe46312c46dda0e7fb222fd4c6361606c493b5d763941d514b8ba27533b92224640d99fb5416be09753ffd38e8c0c8f26b12df891ae0616649c0f1931ca8496d520000000000000000000000000000"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000780)='./file0\x00') r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r9, 0x8, r5) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01042ddd7000fcdbdf24f40000001400030008000818000000000800087200000000000800068030001f00792b0c9ab7"], 0x1}}, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000600)=""/138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r2}, 0x10) 12:43:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000240), 0x4) 12:43:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x1, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000980)={0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000480)=0x0) r7 = getpgid(r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) io_setup(0x3f, &(0x7f0000000380)) syz_open_procfs(r7, &(0x7f0000000140)='net/xfrm_stat\x00') unshare(0x4040000000) r8 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000008c0)=ANY=[@ANYBLOB="aa9fb40da53ace389513c65d82b8fd4637fe46312c46dda0e7fb222fd4c6361606c493b5d763941d514b8ba27533b92224640d99fb5416be09753ffd38e8c0c8f26b12df891ae0616649c0f1931ca8496d520000000000000000000000000000"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)="3551cd5de31f9ecfe97350c599e969766e35515d9a6d393a5d245dcc170da11336651abe42e2c1ff04000000fbf90f866e8ff8b8cf186302aaee84a1e4de5b6eae81c14924900ab58f371729a8d2c293db06a5622da734604739bbd0e8d6c21fa545896c13c4bf4612f418071f9df9520923ddc978f37ba51477c09f69e58c7a87c3a85bb40d7b9ce604ffbe295102753c11ada3977a29bb4e857f714f47f61e60aa8c6bdb817b48624e7048573878be85ad89fe6db64dfeaf28da1cc1af33173531f856df49b0dd8dfb1f5d38770997a6a409eccc2e641896a3bf160053c0b232da82b2ba5dd251b95db2c6d8fa31bcfb19", 0x1000, &(0x7f0000000100)) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000780)='./file0\x00') r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r9, 0x8, r5) io_setup(0x800, &(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01042ddd7000fcdbdf24f40000001400030008000818000000000800087200000000000800068030001f00792b0c9ab7"], 0x1}}, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000600)=""/138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='eth1\x00', r2}, 0x10) 12:43:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000240), 0x4) 12:43:44 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="8907e10300", 0x5) 12:43:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000240), 0x4) 12:43:44 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="8907e10300", 0x5) 12:43:44 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="8907e10300", 0x5) 12:43:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000240), 0x4) 12:43:44 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="8907e10300", 0x5) 12:43:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) unlink(0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x40}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 12:43:46 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1, @in6=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 12:43:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) unlink(0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x40}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 12:43:46 executing program 0: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:43:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40000) 12:43:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet6(r1, &(0x7f00000002c0)="3f010000f70800000000000094bc4a91985e7b8e8fbe0d8e", 0x18, 0x0, &(0x7f0000000000)={0xa, 0x8100, 0x6, @local}, 0x1c) 12:43:46 executing program 4: r0 = socket(0x18, 0x0, 0x3) connect$unix(r0, &(0x7f0000006000)=@file={0x0, "380d23b51125b9288a2bb2a1086d05c800"}, 0x12) 12:43:46 executing program 4: r0 = socket(0x18, 0x0, 0x3) connect$unix(r0, &(0x7f0000006000)=@file={0x0, "380d23b51125b9288a2bb2a1086d05c800"}, 0x12) 12:43:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) unlink(0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x40}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 12:43:46 executing program 4: r0 = socket(0x18, 0x0, 0x3) connect$unix(r0, &(0x7f0000006000)=@file={0x0, "380d23b51125b9288a2bb2a1086d05c800"}, 0x12) 12:43:46 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1, @in6=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 12:43:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) unlink(0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x40}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 12:43:46 executing program 4: r0 = socket(0x18, 0x0, 0x3) connect$unix(r0, &(0x7f0000006000)=@file={0x0, "380d23b51125b9288a2bb2a1086d05c800"}, 0x12) 12:43:46 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1, @in6=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 12:43:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet6(r1, &(0x7f00000002c0)="3f010000f70800000000000094bc4a91985e7b8e8fbe0d8e", 0x18, 0x0, &(0x7f0000000000)={0xa, 0x8100, 0x6, @local}, 0x1c) 12:43:46 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r1, 0x80003) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) close(r0) 12:43:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40000) 12:43:46 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x7f7ffffc) 12:43:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet6(r1, &(0x7f00000002c0)="3f010000f70800000000000094bc4a91985e7b8e8fbe0d8e", 0x18, 0x0, &(0x7f0000000000)={0xa, 0x8100, 0x6, @local}, 0x1c) 12:43:46 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1, @in6=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 12:43:46 executing program 0: r0 = socket(0x18, 0x0, 0x3) accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x0) 12:43:46 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r1, 0x80003) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) close(r0) 12:43:46 executing program 0: r0 = socket(0x18, 0x0, 0x3) accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x0) 12:43:46 executing program 0: r0 = socket(0x18, 0x0, 0x3) accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x0) 12:43:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet6(r1, &(0x7f00000002c0)="3f010000f70800000000000094bc4a91985e7b8e8fbe0d8e", 0x18, 0x0, &(0x7f0000000000)={0xa, 0x8100, 0x6, @local}, 0x1c) [ 967.578558] audit: type=1400 audit(1543322626.356:108): avc: denied { dac_override } for pid=15824 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:43:46 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r1, 0x80003) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) close(r0) 12:43:46 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r1, 0x80003) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) close(r0) [ 967.607640] audit: type=1400 audit(1543322626.386:109): avc: denied { sys_admin } for pid=2071 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:43:46 executing program 0: r0 = socket(0x18, 0x0, 0x3) accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x0) [ 967.609392] audit: type=1400 audit(1543322626.386:110): avc: denied { net_admin } for pid=2071 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 967.628386] audit: type=1400 audit(1543322626.406:111): avc: denied { write } for pid=15824 comm="syz-executor2" name="bus" dev="sda1" ino=16536 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 967.629777] audit: type=1400 audit(1543322626.406:112): avc: denied { open } for pid=15824 comm="syz-executor2" name="bus" dev="sda1" ino=16536 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 967.655172] audit: type=1400 audit(1543322626.436:113): avc: denied { read } for pid=15824 comm="syz-executor2" name="bus" dev="sda1" ino=16536 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 967.659838] audit: type=1400 audit(1543322626.436:114): avc: denied { net_raw } for pid=15839 comm="syz-executor1" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 967.683500] audit: type=1400 audit(1543322626.456:115): avc: denied { sys_admin } for pid=2071 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:43:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40000) 12:43:46 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x7f7ffffc) 12:43:46 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r1, 0x80003) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) close(r0) 12:43:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0xf2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x80000000001c, &(0x7f00000000c0)={@remote, r1}, 0x14) 12:43:46 executing program 0: fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140)="b30b", &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) syncfs(0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r0, r3, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, 0xffffffffffffffff) fchmod(r3, 0x0) 12:43:46 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r1, 0x80003) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) close(r0) [ 967.691147] audit: type=1400 audit(1543322626.456:116): avc: denied { net_admin } for pid=2071 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 967.881487] audit: type=1400 audit(1543322626.666:117): avc: denied { write } for pid=15824 comm="syz-executor2" name="bus" dev="sda1" ino=16536 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 12:43:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0xf2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x80000000001c, &(0x7f00000000c0)={@remote, r1}, 0x14) 12:43:46 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r1, 0x80003) sendfile(r0, r1, &(0x7f00000000c0), 0x8000fffffffe) close(r0) 12:43:46 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000040)='keyring\x00', 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000006c0), &(0x7f00000001c0)="d13ff3d776", 0x0) 12:43:46 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x7f7ffffc) 12:43:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0xf2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x80000000001c, &(0x7f00000000c0)={@remote, r1}, 0x14) 12:43:46 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x1, 0x3}}) clone(0x0, &(0x7f0000000340), &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x40505412, &(0x7f0000000140)) 12:43:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40000) 12:43:47 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000040)='keyring\x00', 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000006c0), &(0x7f00000001c0)="d13ff3d776", 0x0) 12:43:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0xf2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x80000000001c, &(0x7f00000000c0)={@remote, r1}, 0x14) 12:43:47 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x7f7ffffc) 12:43:47 executing program 0: fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140)="b30b", &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) syncfs(0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r0, r3, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, 0xffffffffffffffff) fchmod(r3, 0x0) 12:43:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000240)) sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x16, &(0x7f0000000080)={0x0, @rand_addr, 0x0, 0x0, 'wrr\x00'}, 0x2c) 12:43:47 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x1, 0x3}}) clone(0x0, &(0x7f0000000340), &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x40505412, &(0x7f0000000140)) 12:43:47 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000040)='keyring\x00', 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000006c0), &(0x7f00000001c0)="d13ff3d776", 0x0) 12:43:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000015c0)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000000a000)={&(0x7f00000004c0), 0xc, &(0x7f0000012000)={&(0x7f0000000040)=@ipv6_deladdr={0x18, 0x15, 0x201, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}}, 0x18}}, 0x0) 12:43:47 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) 12:43:47 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) 12:43:47 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x1, 0x3}}) clone(0x0, &(0x7f0000000340), &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x40505412, &(0x7f0000000140)) 12:43:47 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) 12:43:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000015c0)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000000a000)={&(0x7f00000004c0), 0xc, &(0x7f0000012000)={&(0x7f0000000040)=@ipv6_deladdr={0x18, 0x15, 0x201, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}}, 0x18}}, 0x0) 12:43:47 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000040)='keyring\x00', 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000006c0), &(0x7f00000001c0)="d13ff3d776", 0x0) 12:43:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000015c0)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000000a000)={&(0x7f00000004c0), 0xc, &(0x7f0000012000)={&(0x7f0000000040)=@ipv6_deladdr={0x18, 0x15, 0x201, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}}, 0x18}}, 0x0) 12:43:48 executing program 0: fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140)="b30b", &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) syncfs(0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r0, r3, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, 0xffffffffffffffff) fchmod(r3, 0x0) 12:43:48 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x1, 0x3}}) clone(0x0, &(0x7f0000000340), &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x40505412, &(0x7f0000000140)) 12:43:48 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) 12:43:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) read(r1, &(0x7f0000000000)=""/19, 0xfffffc84) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c460608fb04ff0100000000000003003e00000000009300000038000000be0200007f000000010020000200e5f0ffff06000000000051e574640180000087080000000000000200000004"], 0x4d) 12:43:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000015c0)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000000a000)={&(0x7f00000004c0), 0xc, &(0x7f0000012000)={&(0x7f0000000040)=@ipv6_deladdr={0x18, 0x15, 0x201, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}}, 0x18}}, 0x0) 12:43:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000240)) sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x16, &(0x7f0000000080)={0x0, @rand_addr, 0x0, 0x0, 'wrr\x00'}, 0x2c) 12:43:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) close(r0) rmdir(&(0x7f0000000040)='./file0\x00') 12:43:48 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') sendfile(r0, r2, &(0x7f0000000000)=0x400000, 0x800000bf) 12:43:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) read(r1, &(0x7f0000000000)=""/19, 0xfffffc84) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c460608fb04ff0100000000000003003e00000000009300000038000000be0200007f000000010020000200e5f0ffff06000000000051e574640180000087080000000000000200000004"], 0x4d) 12:43:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) read(r1, &(0x7f0000000000)=""/19, 0xfffffc84) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c460608fb04ff0100000000000003003e00000000009300000038000000be0200007f000000010020000200e5f0ffff06000000000051e574640180000087080000000000000200000004"], 0x4d) 12:43:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) close(r0) rmdir(&(0x7f0000000040)='./file0\x00') 12:43:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000240)) sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x16, &(0x7f0000000080)={0x0, @rand_addr, 0x0, 0x0, 'wrr\x00'}, 0x2c) 12:43:48 executing program 0: fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000140)="b30b", &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) syncfs(0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r0, r3, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, 0xffffffffffffffff) fchmod(r3, 0x0) 12:43:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) read(r1, &(0x7f0000000000)=""/19, 0xfffffc84) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c460608fb04ff0100000000000003003e00000000009300000038000000be0200007f000000010020000200e5f0ffff06000000000051e574640180000087080000000000000200000004"], 0x4d) 12:43:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000240)) sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x16, &(0x7f0000000080)={0x0, @rand_addr, 0x0, 0x0, 'wrr\x00'}, 0x2c) 12:43:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) close(r0) rmdir(&(0x7f0000000040)='./file0\x00') 12:43:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) read(r1, &(0x7f0000000000)=""/19, 0xfffffc84) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c460608fb04ff0100000000000003003e00000000009300000038000000be0200007f000000010020000200e5f0ffff06000000000051e574640180000087080000000000000200000004"], 0x4d) 12:43:48 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') sendfile(r0, r2, &(0x7f0000000000)=0x400000, 0x800000bf) 12:43:49 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') sendfile(r0, r2, &(0x7f0000000000)=0x400000, 0x800000bf) 12:43:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) close(r0) rmdir(&(0x7f0000000040)='./file0\x00') 12:43:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) read(r1, &(0x7f0000000000)=""/19, 0xfffffc84) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c460608fb04ff0100000000000003003e00000000009300000038000000be0200007f000000010020000200e5f0ffff06000000000051e574640180000087080000000000000200000004"], 0x4d) 12:43:49 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') sendfile(r0, r2, &(0x7f0000000000)=0x400000, 0x800000bf) 12:43:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) close(r0) rmdir(&(0x7f0000000040)='./file0\x00') 12:43:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) read(r1, &(0x7f0000000000)=""/19, 0xfffffc84) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c460608fb04ff0100000000000003003e00000000009300000038000000be0200007f000000010020000200e5f0ffff06000000000051e574640180000087080000000000000200000004"], 0x4d) 12:43:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 12:43:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000bfcffc), &(0x7f0000000000)=0x4) 12:43:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x6c}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 12:43:49 executing program 4: r0 = socket$inet(0x2, 0x7fffd, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x46) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/172, 0xac}, {&(0x7f00000008c0)=""/112, 0x70}, {&(0x7f0000000940)=""/80, 0x50}], 0x5, &(0x7f0000000a40)=""/214, 0xd6, 0x6}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x80000002, 0x61b) getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=ANY=[], 0x0, 0x2) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$netlink(r1, &(0x7f0000000300), &(0x7f0000000400)=0xc) ioctl$TIOCEXCL(r1, 0x540c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/load\x00', 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @mcast2, 0x8001}, 0xfffffffffffffefe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x0, 0x3}, 0x14) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='veth0_to_bond\x00') write(0xffffffffffffffff, &(0x7f00000008c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r1) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$selinux_load(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 12:43:49 executing program 0: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xffffffffffffff36) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file2\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x7f}}, 0x18) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) write$P9_RGETLOCK(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="11002f73656c696e7578"], 0xa) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x8003, 0x1) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syncfs(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32], 0x8) r4 = getpgid(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2, &(0x7f00000002c0)=""/81) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/229) fcntl$getflags(0xffffffffffffffff, 0x408) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e20, @multicast1}}) 12:43:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) close(r0) rmdir(&(0x7f0000000040)='./file0\x00') 12:43:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000bfcffc), &(0x7f0000000000)=0x4) 12:43:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x6c}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 12:43:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000bfcffc), &(0x7f0000000000)=0x4) 12:43:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x6c}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 12:43:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 12:43:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) close(r0) rmdir(&(0x7f0000000040)='./file0\x00') 12:43:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000bfcffc), &(0x7f0000000000)=0x4) 12:43:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 12:43:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x6c}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 12:43:50 executing program 4: r0 = socket$inet(0x2, 0x7fffd, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x46) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/172, 0xac}, {&(0x7f00000008c0)=""/112, 0x70}, {&(0x7f0000000940)=""/80, 0x50}], 0x5, &(0x7f0000000a40)=""/214, 0xd6, 0x6}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x80000002, 0x61b) getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=ANY=[], 0x0, 0x2) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$netlink(r1, &(0x7f0000000300), &(0x7f0000000400)=0xc) ioctl$TIOCEXCL(r1, 0x540c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/load\x00', 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @mcast2, 0x8001}, 0xfffffffffffffefe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x0, 0x3}, 0x14) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='veth0_to_bond\x00') write(0xffffffffffffffff, &(0x7f00000008c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r1) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$selinux_load(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 12:43:50 executing program 0: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xffffffffffffff36) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file2\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x7f}}, 0x18) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) write$P9_RGETLOCK(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="11002f73656c696e7578"], 0xa) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x8003, 0x1) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syncfs(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32], 0x8) r4 = getpgid(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2, &(0x7f00000002c0)=""/81) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/229) fcntl$getflags(0xffffffffffffffff, 0x408) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e20, @multicast1}}) 12:43:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0xf62c}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f00000014c0), 0x20, 0x0) 12:43:50 executing program 2: ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f0000001100)=""/186) unshare(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='auxv\x00') getpriority(0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x0) 12:43:50 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', &(0x7f00009b9000)="05000900667300", 0x801008, &(0x7f0000000000)) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') sync() renameat2(r1, &(0x7f0000000180)='./file0/file0/file0/file0\x00', r1, &(0x7f00000000c0)='./file0/file0/file0/file0\x00', 0x0) 12:43:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 12:43:50 executing program 2: ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f0000001100)=""/186) unshare(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='auxv\x00') getpriority(0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x0) 12:43:50 executing program 3: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xffffffffffffff36) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file2\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x7f}}, 0x18) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) write$P9_RGETLOCK(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="11002f73656c696e7578"], 0xa) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x8003, 0x1) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syncfs(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32], 0x8) r4 = getpgid(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2, &(0x7f00000002c0)=""/81) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/229) fcntl$getflags(0xffffffffffffffff, 0x408) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e20, @multicast1}}) 12:43:50 executing program 2: ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f0000001100)=""/186) unshare(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='auxv\x00') getpriority(0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x0) 12:43:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0xf62c}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f00000014c0), 0x20, 0x0) 12:43:50 executing program 2: ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f0000001100)=""/186) unshare(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='auxv\x00') getpriority(0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x0) 12:43:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0xf62c}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f00000014c0), 0x20, 0x0) 12:43:50 executing program 4: r0 = socket$inet(0x2, 0x7fffd, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x46) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/172, 0xac}, {&(0x7f00000008c0)=""/112, 0x70}, {&(0x7f0000000940)=""/80, 0x50}], 0x5, &(0x7f0000000a40)=""/214, 0xd6, 0x6}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x80000002, 0x61b) getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=ANY=[], 0x0, 0x2) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$netlink(r1, &(0x7f0000000300), &(0x7f0000000400)=0xc) ioctl$TIOCEXCL(r1, 0x540c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/load\x00', 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @mcast2, 0x8001}, 0xfffffffffffffefe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x0, 0x3}, 0x14) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='veth0_to_bond\x00') write(0xffffffffffffffff, &(0x7f00000008c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r1) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$selinux_load(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 12:43:50 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', &(0x7f00009b9000)="05000900667300", 0x801008, &(0x7f0000000000)) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') sync() renameat2(r1, &(0x7f0000000180)='./file0/file0/file0/file0\x00', r1, &(0x7f00000000c0)='./file0/file0/file0/file0\x00', 0x0) 12:43:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0xf62c}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f00000014c0), 0x20, 0x0) 12:43:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0xf62c}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f00000014c0), 0x20, 0x0) 12:43:50 executing program 0: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xffffffffffffff36) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file2\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x7f}}, 0x18) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) write$P9_RGETLOCK(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="11002f73656c696e7578"], 0xa) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x8003, 0x1) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syncfs(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32], 0x8) r4 = getpgid(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2, &(0x7f00000002c0)=""/81) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/229) fcntl$getflags(0xffffffffffffffff, 0x408) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e20, @multicast1}}) 12:43:50 executing program 3: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xffffffffffffff36) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file2\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x7f}}, 0x18) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) write$P9_RGETLOCK(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="11002f73656c696e7578"], 0xa) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x8003, 0x1) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syncfs(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32], 0x8) r4 = getpgid(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2, &(0x7f00000002c0)=""/81) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/229) fcntl$getflags(0xffffffffffffffff, 0x408) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e20, @multicast1}}) 12:43:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0xf62c}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f00000014c0), 0x20, 0x0) 12:43:50 executing program 1: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xffffffffffffff36) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file2\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x7f}}, 0x18) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) write$P9_RGETLOCK(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="11002f73656c696e7578"], 0xa) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x8003, 0x1) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syncfs(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32], 0x8) r4 = getpgid(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2, &(0x7f00000002c0)=""/81) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/229) fcntl$getflags(0xffffffffffffffff, 0x408) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e20, @multicast1}}) 12:43:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0xf62c}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f00000014c0), 0x20, 0x0) 12:43:51 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', &(0x7f00009b9000)="05000900667300", 0x801008, &(0x7f0000000000)) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') sync() renameat2(r1, &(0x7f0000000180)='./file0/file0/file0/file0\x00', r1, &(0x7f00000000c0)='./file0/file0/file0/file0\x00', 0x0) 12:43:51 executing program 2: r0 = socket$inet(0x2, 0x7fffd, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x46) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/172, 0xac}, {&(0x7f00000008c0)=""/112, 0x70}, {&(0x7f0000000940)=""/80, 0x50}], 0x5, &(0x7f0000000a40)=""/214, 0xd6, 0x6}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x80000002, 0x61b) getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=ANY=[], 0x0, 0x2) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$netlink(r1, &(0x7f0000000300), &(0x7f0000000400)=0xc) ioctl$TIOCEXCL(r1, 0x540c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/load\x00', 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @mcast2, 0x8001}, 0xfffffffffffffefe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x0, 0x3}, 0x14) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='veth0_to_bond\x00') write(0xffffffffffffffff, &(0x7f00000008c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r1) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$selinux_load(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 12:43:51 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', &(0x7f00009b9000)="05000900667300", 0x801008, &(0x7f0000000000)) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') sync() renameat2(r1, &(0x7f0000000180)='./file0/file0/file0/file0\x00', r1, &(0x7f00000000c0)='./file0/file0/file0/file0\x00', 0x0) 12:43:51 executing program 4: r0 = socket$inet(0x2, 0x7fffd, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x46) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/172, 0xac}, {&(0x7f00000008c0)=""/112, 0x70}, {&(0x7f0000000940)=""/80, 0x50}], 0x5, &(0x7f0000000a40)=""/214, 0xd6, 0x6}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x80000002, 0x61b) getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=ANY=[], 0x0, 0x2) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$netlink(r1, &(0x7f0000000300), &(0x7f0000000400)=0xc) ioctl$TIOCEXCL(r1, 0x540c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/load\x00', 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @mcast2, 0x8001}, 0xfffffffffffffefe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x0, 0x3}, 0x14) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='veth0_to_bond\x00') write(0xffffffffffffffff, &(0x7f00000008c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r1) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$selinux_load(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 12:43:51 executing program 5: r0 = socket$inet(0x2, 0x7fffd, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x46) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/172, 0xac}, {&(0x7f00000008c0)=""/112, 0x70}, {&(0x7f0000000940)=""/80, 0x50}], 0x5, &(0x7f0000000a40)=""/214, 0xd6, 0x6}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x80000002, 0x61b) getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=ANY=[], 0x0, 0x2) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$netlink(r1, &(0x7f0000000300), &(0x7f0000000400)=0xc) ioctl$TIOCEXCL(r1, 0x540c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/load\x00', 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @mcast2, 0x8001}, 0xfffffffffffffefe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x0, 0x3}, 0x14) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='veth0_to_bond\x00') write(0xffffffffffffffff, &(0x7f00000008c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r1) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$selinux_load(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 12:43:51 executing program 3: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xffffffffffffff36) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file2\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x7f}}, 0x18) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) write$P9_RGETLOCK(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="11002f73656c696e7578"], 0xa) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x8003, 0x1) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syncfs(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32], 0x8) r4 = getpgid(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2, &(0x7f00000002c0)=""/81) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/229) fcntl$getflags(0xffffffffffffffff, 0x408) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e20, @multicast1}}) 12:43:51 executing program 1: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xffffffffffffff36) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file2\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x7f}}, 0x18) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) write$P9_RGETLOCK(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="11002f73656c696e7578"], 0xa) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x8003, 0x1) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syncfs(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32], 0x8) r4 = getpgid(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2, &(0x7f00000002c0)=""/81) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/229) fcntl$getflags(0xffffffffffffffff, 0x408) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e20, @multicast1}}) 12:43:51 executing program 0: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xffffffffffffff36) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file2\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x7f}}, 0x18) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) write$P9_RGETLOCK(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="11002f73656c696e7578"], 0xa) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x8003, 0x1) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syncfs(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32], 0x8) r4 = getpgid(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2, &(0x7f00000002c0)=""/81) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/229) fcntl$getflags(0xffffffffffffffff, 0x408) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e20, @multicast1}}) 12:43:52 executing program 2: r0 = socket$inet(0x2, 0x7fffd, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x46) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/172, 0xac}, {&(0x7f00000008c0)=""/112, 0x70}, {&(0x7f0000000940)=""/80, 0x50}], 0x5, &(0x7f0000000a40)=""/214, 0xd6, 0x6}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x80000002, 0x61b) getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=ANY=[], 0x0, 0x2) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$netlink(r1, &(0x7f0000000300), &(0x7f0000000400)=0xc) ioctl$TIOCEXCL(r1, 0x540c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/load\x00', 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @mcast2, 0x8001}, 0xfffffffffffffefe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x0, 0x3}, 0x14) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='veth0_to_bond\x00') write(0xffffffffffffffff, &(0x7f00000008c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r1) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$selinux_load(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 12:43:53 executing program 1: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xffffffffffffff36) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file2\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x7f}}, 0x18) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) write$P9_RGETLOCK(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="11002f73656c696e7578"], 0xa) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x8003, 0x1) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syncfs(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32], 0x8) r4 = getpgid(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2, &(0x7f00000002c0)=""/81) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/229) fcntl$getflags(0xffffffffffffffff, 0x408) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e20, @multicast1}}) 12:43:53 executing program 2: r0 = socket$inet(0x2, 0x7fffd, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x46) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/172, 0xac}, {&(0x7f00000008c0)=""/112, 0x70}, {&(0x7f0000000940)=""/80, 0x50}], 0x5, &(0x7f0000000a40)=""/214, 0xd6, 0x6}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x80000002, 0x61b) getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=ANY=[], 0x0, 0x2) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$netlink(r1, &(0x7f0000000300), &(0x7f0000000400)=0xc) ioctl$TIOCEXCL(r1, 0x540c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/load\x00', 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @mcast2, 0x8001}, 0xfffffffffffffefe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x0, 0x3}, 0x14) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='veth0_to_bond\x00') write(0xffffffffffffffff, &(0x7f00000008c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r1) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$selinux_load(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 12:43:53 executing program 0: r0 = socket$inet(0x2, 0x7fffd, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x46) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/172, 0xac}, {&(0x7f00000008c0)=""/112, 0x70}, {&(0x7f0000000940)=""/80, 0x50}], 0x5, &(0x7f0000000a40)=""/214, 0xd6, 0x6}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x80000002, 0x61b) getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=ANY=[], 0x0, 0x2) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$netlink(r1, &(0x7f0000000300), &(0x7f0000000400)=0xc) ioctl$TIOCEXCL(r1, 0x540c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/load\x00', 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @mcast2, 0x8001}, 0xfffffffffffffefe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x0, 0x3}, 0x14) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='veth0_to_bond\x00') write(0xffffffffffffffff, &(0x7f00000008c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r1) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$selinux_load(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 12:43:53 executing program 5: r0 = socket$inet(0x2, 0x7fffd, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x46) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/172, 0xac}, {&(0x7f00000008c0)=""/112, 0x70}, {&(0x7f0000000940)=""/80, 0x50}], 0x5, &(0x7f0000000a40)=""/214, 0xd6, 0x6}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x80000002, 0x61b) getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=ANY=[], 0x0, 0x2) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$netlink(r1, &(0x7f0000000300), &(0x7f0000000400)=0xc) ioctl$TIOCEXCL(r1, 0x540c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/load\x00', 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @mcast2, 0x8001}, 0xfffffffffffffefe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x0, 0x3}, 0x14) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='veth0_to_bond\x00') write(0xffffffffffffffff, &(0x7f00000008c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r1) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$selinux_load(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 12:43:53 executing program 3: getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={0x0}) 12:43:53 executing program 3: r0 = socket(0x10, 0x100000003, 0x0) write(r0, &(0x7f0000000040)="2400000021002551ff00c0048b98bfdc0200000900f906000ee100060800060000000000", 0x24) 12:43:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62736e16dce1"], @ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) 12:43:53 executing program 3: r0 = socket(0x10, 0x100000003, 0x0) write(r0, &(0x7f0000000040)="2400000021002551ff00c0048b98bfdc0200000900f906000ee100060800060000000000", 0x24) [ 974.741102] binder: 16196:16197 unknown command 536870912 [ 974.790799] binder: 16196:16197 ioctl c0306201 20000440 returned -22 12:43:53 executing program 3: r0 = socket(0x10, 0x100000003, 0x0) write(r0, &(0x7f0000000040)="2400000021002551ff00c0048b98bfdc0200000900f906000ee100060800060000000000", 0x24) 12:43:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r2) close(r1) 12:43:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r2) close(r1) 12:43:53 executing program 3: r0 = socket(0x10, 0x100000003, 0x0) write(r0, &(0x7f0000000040)="2400000021002551ff00c0048b98bfdc0200000900f906000ee100060800060000000000", 0x24) 12:43:54 executing program 3: futex(&(0x7f0000000080), 0x5, 0x0, &(0x7f0000f64000)={0x0, 0x989680}, &(0x7f0000000000), 0xffffffff80000000) 12:43:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r2) close(r1) 12:43:54 executing program 5: r0 = socket$inet(0x2, 0x7fffd, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x46) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/172, 0xac}, {&(0x7f00000008c0)=""/112, 0x70}, {&(0x7f0000000940)=""/80, 0x50}], 0x5, &(0x7f0000000a40)=""/214, 0xd6, 0x6}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x80000002, 0x61b) getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=ANY=[], 0x0, 0x2) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$netlink(r1, &(0x7f0000000300), &(0x7f0000000400)=0xc) ioctl$TIOCEXCL(r1, 0x540c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/load\x00', 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @mcast2, 0x8001}, 0xfffffffffffffefe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x0, 0x3}, 0x14) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='veth0_to_bond\x00') write(0xffffffffffffffff, &(0x7f00000008c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r1) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$selinux_load(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 12:43:54 executing program 2: socket(0x18, 0x0, 0x3) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 12:43:54 executing program 0: r0 = socket$inet(0x2, 0x7fffd, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x46) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/172, 0xac}, {&(0x7f00000008c0)=""/112, 0x70}, {&(0x7f0000000940)=""/80, 0x50}], 0x5, &(0x7f0000000a40)=""/214, 0xd6, 0x6}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x80000002, 0x61b) getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=ANY=[], 0x0, 0x2) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$netlink(r1, &(0x7f0000000300), &(0x7f0000000400)=0xc) ioctl$TIOCEXCL(r1, 0x540c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/load\x00', 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @mcast2, 0x8001}, 0xfffffffffffffefe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x0, 0x3}, 0x14) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='veth0_to_bond\x00') write(0xffffffffffffffff, &(0x7f00000008c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r1) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$selinux_load(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 12:43:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f74}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x2e6, &(0x7f00001a7f05)=""/251}, 0x48) 12:43:54 executing program 3: futex(&(0x7f0000000080), 0x5, 0x0, &(0x7f0000f64000)={0x0, 0x989680}, &(0x7f0000000000), 0xffffffff80000000) 12:43:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r2) close(r1) 12:43:54 executing program 3: futex(&(0x7f0000000080), 0x5, 0x0, &(0x7f0000f64000)={0x0, 0x989680}, &(0x7f0000000000), 0xffffffff80000000) 12:43:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f74}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x2e6, &(0x7f00001a7f05)=""/251}, 0x48) 12:43:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) read(r0, &(0x7f0000000380)=""/98, 0xfffffffffffffec2) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xfffffffffffffec8) shutdown(r0, 0x1) 12:43:54 executing program 2: socket(0x18, 0x0, 0x3) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 12:43:54 executing program 3: futex(&(0x7f0000000080), 0x5, 0x0, &(0x7f0000f64000)={0x0, 0x989680}, &(0x7f0000000000), 0xffffffff80000000) [ 975.523105] audit_printk_skb: 69 callbacks suppressed [ 975.523117] audit: type=1400 audit(1543322634.306:141): avc: denied { prog_run } for pid=16222 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 12:43:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f74}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x2e6, &(0x7f00001a7f05)=""/251}, 0x48) 12:43:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) read(r0, &(0x7f0000000380)=""/98, 0xfffffffffffffec2) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xfffffffffffffec8) shutdown(r0, 0x1) 12:43:54 executing program 2: socket(0x18, 0x0, 0x3) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 12:43:54 executing program 0: r0 = socket$inet(0x2, 0x7fffd, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x46) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/172, 0xac}, {&(0x7f00000008c0)=""/112, 0x70}, {&(0x7f0000000940)=""/80, 0x50}], 0x5, &(0x7f0000000a40)=""/214, 0xd6, 0x6}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x80000002, 0x61b) getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=ANY=[], 0x0, 0x2) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$netlink(r1, &(0x7f0000000300), &(0x7f0000000400)=0xc) ioctl$TIOCEXCL(r1, 0x540c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/load\x00', 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @mcast2, 0x8001}, 0xfffffffffffffefe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x0, 0x3}, 0x14) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='veth0_to_bond\x00') write(0xffffffffffffffff, &(0x7f00000008c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r1) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) write$selinux_load(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 12:43:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 12:43:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f74}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x2e6, &(0x7f00001a7f05)=""/251}, 0x48) 12:43:54 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) 12:43:54 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) 12:43:54 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) 12:43:54 executing program 2: socket(0x18, 0x0, 0x3) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 12:43:54 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) 12:43:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 12:43:54 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) [ 975.992484] binder: 16256:16260 ioctl c0306201 0 returned -14 [ 976.028248] binder: 16256:16271 ioctl c0306201 0 returned -14 [ 976.081904] binder: 16278:16279 ioctl c0306201 0 returned -14 12:43:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) read(r0, &(0x7f0000000380)=""/98, 0xfffffffffffffec2) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xfffffffffffffec8) shutdown(r0, 0x1) 12:43:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xfffffdfe) fcntl$setstatus(r3, 0x4, 0x800) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="10", 0x1}], 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="fc"], 0x1) 12:43:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 12:43:55 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) 12:43:55 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) 12:43:55 executing program 0: syz_open_procfs(0x0, &(0x7f0000002900)='mounts\x00') unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 12:43:55 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) read(r0, &(0x7f0000000380)=""/98, 0xfffffffffffffec2) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xfffffffffffffec8) shutdown(r0, 0x1) 12:43:55 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_INPUT(r1, &(0x7f0000000300)={0x8, "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", 0x1000}, 0x1006) close(r1) memfd_create(&(0x7f0000000040)='\v!GPL\x00', 0x0) splice(r0, 0x0, r1, &(0x7f00000002c0), 0x3fffffffffff, 0x0) 12:43:55 executing program 0: syz_open_procfs(0x0, &(0x7f0000002900)='mounts\x00') unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 12:43:55 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4000000000000002) add_key(&(0x7f0000000880)="6b657972696e670036f9126c12054f5c0e18c6522573dd79f1a0a3a60957d6c729ad856cd8f0df9c04d18e57904b1c05209dee12f5ccc12d98a70037673436610faac88bcf9681918789c2ad473665984b17868d9c5e90813e9ec1f73fdebf5638f9c01f8821f1f78ebac984e3852ee10000000000000000000000", &(0x7f0000000840)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)="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", 0x0) 12:43:55 executing program 0: syz_open_procfs(0x0, &(0x7f0000002900)='mounts\x00') unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 12:43:55 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_INPUT(r1, &(0x7f0000000300)={0x8, "02853a9f76b881992e2a8e7150fbb3d6d9d8a1e71e6d8afd5d49f20f044ecd4cc1c648ae577b8c64bb4ae924278487cf498ddd80ab2ffdc274b41f36e6bec6435a1ce8a016279f90fb02708bd64019300279f230b8bb6821510eb65690eaa9ba3983f6b6e2b238ca7806dcc49484c15d9af76865f8e7e6dae572355a3a29a5844dfd3fcf27383fcc8d1e13fdccd239bcea4354cd18fcbf036e980e38908f1a1d4dd7ca49aed19b28d5fd827de026f730e67a80a0c5cbb4773ebf2e8bc01177a00b184b05c26355c5cb810709bdd157e83e170b8399422cb56d712f6dadb7030627b6f05cd5c13991282a382cd2b74a92f5b81734883901568756f1845ba706fcf1df0502c5522f8d6b1f83f0ccfae11417d000e223ee0d0dcdf0939eb2c77480a9a9e4c0d04fb79afe53cd5239c07a9fef99fc17076c1691ba25b2156016770e831c099406d6ab4dfdd88590c1cd71ac2719da881aebec55614b364d7d294d43f8588321b3fc9e345febe7b8dfbf3ee5165e32e426e4567c69fdf73e1e53cbd60f43413c0c658d9a539a53409cdeac733e38f38133232b8d18a32f55d7dca3d87cff3fbef147dd60eba2398322a90af74b3828170bce331a00cc6fca91d0243a2adbdd267eafa5eeb1e7070fd3d8b20643ddf7e5930741ff20f3a96890f4b217d2fd3162a610d4a2d536c1fb92095e019310c71ae9492e08a390b5bb653b83df2d95e6567e24b7540551980a511d0c2ac789f3379e36b0f90498093ad6f536ea233b58bf6a84c89b4bae9109c8e241acd581681341226ef24fcf2b1a4dc6bce13b106a664b04ad9e6432c3feb9e3520ffa375f9fb1c759c36b41277760095f733261b951419b841b80efbc86493100261c9940a18e3df9fc7e51fbeb07ac0cffac5f0d8960b34812c753221fc3a6231564ecc3ed6c0928024e72d03aff6321068f26d90aa8d3b4278f882f0595f00ca5516e2ff77959682e6fa1f8c96ecb63437a41ee0bc94399ab21dc91034e522dbe319240d60d658a8a61e6414139785dff0382ad1f1ed2d3ce1e33f1763bcab19d5b26ca495e6614433ae36f518bac26abd95e5a76eb84710405250d95e25d6b6a59ae35ac22329cf51334dd581bc8bd1842128eb59bf4fb7c7b0ba2c70c2edd75012fbef102963a360d7b1c3ec0cce86963c5dd3ed57ab4971d88fbfdd19758b19a5345f29f4c5b35f456b61fa5c0e044ee003925f2e154c5e3ee32f372411d77443244dc404ea9520b148d6f4ebdb1aacf015a10f045d8f84f4ba435ac814cfb99a87715f676440337796982353ab4a7316d80c9c3175725dad4029207700f491f6aaef4f695291572c6d6ac2fe33405fed48fe3f4188ec719565ad789acb17aa2ac2615ef1fc002a9181baf571a283d0272cf4c3c9b00dd24b427de1fe5ec9b38f704e142495fec724d88c852dea22e9c9ae5bc903bc7ffe5746791fa95a371e4027566441e9f72d174f09f660697954536d4b45bc7214ddd1b44b030cdce00f639f822bcdcf31c6f247433bcbe46af7233916501d6390f6cce76ae471ecd7c7a2ae0c78703835727d24361385576864680aac31657a061868c60083cb2eaa8cde238d85ba3da585ded2808e8a82c41b29cf2ae6109eaf4009c1d56518f6a862b38149b335f3828c77b65f1fb6863880c030fc219a315a836fa782366884aafdf910d32901ddbc266014c629b67e342abd8bbf08f7ab1a9052f4c1fdd2f0a509f3f761e20ee150d191542618495ac5dd9b03586c938318755cc38df557b2f8c2ac65f3c56649d4f4ff5ee264141eb7bc11202adb4f671ef74a1531eb95f84f39dcc925e16f96a36a1dd3dd55d5ed91db3d30d3eaaddcac04e62783ef293c5c828850de219e65182341f5c7d298dcdd283a35816f590ab1150619bb0fd6d5ba1d63c7cf0cc161973f2dc20025a6ecaa7dbd4a1cb4bf908887d356726bea4bfd0357b2cccf5b24cb49563e57cd1faca2cbb5c97d3cc571f556400b43537c51e2d70718df4459b3ff7701cdbdd223af8cd4c0976e916e7f755b0c3793788541afddb51f6ae0f75d909ffed1a1ee347cc39af19b60013e5e2beb099f5bea4b9de2775efb5fc3f39cdbcbe929f9adc8edad951f9506763f8e66559bd4aeee3d091450650c52cfd0d3b6801be4f6d1a0a2361faab902353ad8a77245287f697518a0be57006f843dd0ce4b54a4e8202ed6483c82caf8677a5c1848cfbb4c7820fd87ccadae9fc5e6ae073d96a12d0581ad1c83bf8d2497d1ac476375cfd7c63152906ca87849a60557c1d5fd929ed8f9f9cf83cbbf90d2c9315fee8596e1b97fee0afa9503ae5eaea6bd9fd6dd5cd2d563904070930889317002acfd913154aa0fbc065b37f54b0bf748f7ad93370f37d75906002d78ecb7eaaacc5e7cb23fcf0b772f82cd0feed993f1f27f324b28cffdb607d85150d05b0d65f9660f557d0cdef9a1be8f112a3ee3d40acd9a1dd67d0fa91c4689e1605292ecd59dbe8f02a47150612669584c79c21ade0beae465746589d491513dfd012b672637ae2b5f664b902f208dd21412f70f17970b4235e7b9335e4a1609673f4871114026a2cb20c3e03c23f4bd0748db2db99ce5d395c2e6db22c0061b2348ff2353f1149684b88a7fb8e9b3428ae1b69146b26833ebd4e90ea18cc353991d144f1bfb2f8e34d139339c4ce1a0f0796c9b7db252fcc7a701c9382b68fe4c2b5abba3c75acc761f31e628a14ec496fe59a34492c573da318727e64beca74e45bd1c4f0158930de4f1f4bcdddf2a3a5e4f29d88e6e92692c697924799f81cf7f622bc558f1ae3564cd010dcaa510bbf52656cc27bdcc6519bf9abf7b3bbbd69c344a241600ed8a385fe6b02515de3b244209eea35b90b2b2314610f8950ac6bbef1d17159f6379a714334ef3fc42355a91cb65f7e98c5fdc39e691ba908f00623ee218a6f2f59dc3ca30924999d9fcf40b045a3b39c47ba8ce690fd12a7aec95af20b98e3bd400aed747303f22c5ec070f8f4f48e7f63726fe9a2a61ebe88d639928e66f31d1a8f475a765a1fc478169db6fa3c0d34fad0b1975c66735592b4c91a56b290ecb2db52ece76d6cb3ed4fa22885244f4604e232bb595a5d5e6964335bd19046a9ba52cc1e3d06e9592ac96178309d1a0319d07a485c06c6eb1e36bae2daf7f6018024727540e2817ee20762cf1f2a2a5d47399051d71a0c33e422c07c3545d69127664c5c5f5e76076c7ddd52bf7b74d1025619165f6dd9e028615cf0e685b559b5fbe3950d8de0873e46abdd19c5960c833776d2c1b9044ccad32b09b31654d56992ed5dba510dbbabdf44649afa2c4d9629d7cd6771c2b0a3c8fd0e0a218ca4c68ed092f8f793966e4bea08d3ca47291487638bbd8916d1fd7177e25c6ed64476c82c71dcab833f00b7462a0cfe1b167b95237d3e18bbb5376c9eaecafca639e7060fb5599cb144c91f66a4b3250fca49e0480519e7ce1ee77c42d868976eb7918d892d4af58e860c84ce47c6f813846609e3b7370a3b22eafc0e5238e295fd502d64b40c2b20d5f3b40071be0027c27bf14105f8f772664198b31d0c95d6f1bf3a58f2dbec0656a3c9bcf5c6619d14343fd9cbc11e29ebecc74ea243d405a5b0527564e33d5f7d850c54fa79cd6fdceb7c9275dda686fd7f34686833a9df7962cf0787af6c0a100c1d3898cb2ef21b27048c98556d0dca256f23e6a5fb0905f01c2843d0b8cfa662e7e99cf93fda97cfe9a331a281473f022d3cbb792cc07ec485cb977bfc4d3a26a68e2d41da069c423966968d85b3744523a667b57b2d74f3b8382da2d8b55a85781de3527e99edf473eda0b36b43600d2311723c97e250d43755bc080b142ddf587536cdf717d22a00762cd468b3175c45175caeba152e14ae635a1257ceb43988b3098f45178fce02c4c01a8080b289bccf56244fedd99ecedd287364aa5fb6e4c138425bdbdad3f1f6b24d384a70bbd6258e850c0a5767015e17d2aa7754b54e407e3f5dd81f762a9ad26baa287eb440ee2ef170ceef005df1d3585f256904e20388925d0627b3f220dfa1bca0ef32cc996edda2bf1a817461ecf7cb75794803c1e3621acc0c5b0a3387b0aa98f708bfd8d022af988f93b27fb0bf83098585ad0b56800f3943b63a588c507f48180d52af414396b06f2e2f9721e79a415f548a884062e1c8c49eca86a09e6588582383862704df22607cc506e5974602b1abf72ce43c84c1f6d737c212451fdc119e563ad1a5a43c8d9b567252d758a8b3cea370245ac9d091c4372ca172cd0d0620d7377d06367ffe96deb81d5ccbc549d2f060837b341936b9e7d4f60f418391dcf8bd29d0b0126d675d1f40a7dcbf57f5891eeb87999171604bb996210ecd6250c4a17861d55b294cdadea7fd8c7f1c32b5b2ad2f18334ae14263eacacac56701b8ff101e684ec5620be5fccba81243b9efc15fcf7ab7f45a5b3f220a20b7624196a504b868c07c5ed16e16c410281e035cb9519d918b840b25285c57468088b9ee153e005f899b13bdc107f95b8f553546ea7b6f36b1d774bbc8ec8ef56567ce78702d3b6be6b9e0c60e56586e0beb400d207f66de77f2491ff6a967de8604dee8b2a611fd02857ca2ce3e0f935903b82d837cacab407fc702ed00d88bcceed7740b25a0883ec449fd64ce792828927e3dbb8afc9f247472837e6b899f2bd26de3639d1a5d84ed6e0fa3dc02246e62ea512f8a21e7833d6ede89f3a95bf31b9c0de6cca69dc8a520c3a5cbedefc206eb04cd30be7865292b109bf9287d3f09d8020bd6fc1cf1d119be6bd64f74297c4bc2f1416bfa4322b758bd33351519ce1ade7d476cdad21ef6b97211cd82746cb08115e562908736a7f9a3d9c0ed8fdc5ef28aabc16c818be1fdf980bb7caf856abd77a89b07873c8e339c63c3994bc221cfb4c81e2f50334bd6a8bfb8036fad6a905bd348087842c3134ebe01f16513aa19dd422eff6e0aa5c9cfb62d70640cb2e93f33b54a41b9c0d42f1fbe58ab6755676ec6125c1b6faf5e23d49a1aeb21785fb56e07684cdd8fd09d033302814c160564bf691effa039786915b18b51d7ca99c89f21db545b243121e8fcde350db82423d42f5e741e94e131614b510fc2bf0d324196772e8cdd4c641799faf6e2de2282d4663d77fb07e32ef7c4edc611fa3985870a1553abb8edb57b17d206057408ecc1f27e67ab7fd798640ff46c0f5738ca05e1fd4c3269af4f93209ae5c53151f977babdb9d41086a1a1664009c191109fbac4f5b762ce44e8c34b81e4b03e69cd9510e9cde9477430680cd6dd04b1e32f8443d524aa8e8bf9b3e07065b0441095133b0885d614322a12cf290f686f646b7bd4b9837a30cd2626fcaef91dfbc8273f933fe6547782db287b4eade1ae40e3defcc334902b774bb1ca0081ba99e98df1daee222da49d26f6713fedc15a3784cb9ee11049bf3022d1f4389030bf7c3fda9c2461d0fef36f317c56e1ed3b3ca1d0806fdd3b2081e10aed1840e636cb32d2c9d53b7889421bde40c28d752099ad7e738ab2e97f854eb797f0c034f55dd7a0e58e03c1ba5bcab79f8635f057a4930da975bbd68a09cb42bf030f091c3e0570a2a9a36cf60e7b3d83e2a1d0c9fe81b7f01fe7e5e4ab7fc91ea54ae2c39de79cd6b6c6d021391b373875fd30722fab3890540c844205a7657e25a4f7e22f2b9b5f15f31a63019dc73554dc163159f5f7a4c23e2dd0b80ceb005e056e5bfa0f2de755456577294ee2a3ab3364db7270c3461a7b758813e59fc2", 0x1000}, 0x1006) close(r1) memfd_create(&(0x7f0000000040)='\v!GPL\x00', 0x0) splice(r0, 0x0, r1, &(0x7f00000002c0), 0x3fffffffffff, 0x0) 12:43:55 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4000000000000002) add_key(&(0x7f0000000880)="6b657972696e670036f9126c12054f5c0e18c6522573dd79f1a0a3a60957d6c729ad856cd8f0df9c04d18e57904b1c05209dee12f5ccc12d98a70037673436610faac88bcf9681918789c2ad473665984b17868d9c5e90813e9ec1f73fdebf5638f9c01f8821f1f78ebac984e3852ee10000000000000000000000", &(0x7f0000000840)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)="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", 0x0) [ 976.384827] binder: 16299:16300 ioctl c0306201 0 returned -14 12:43:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xfffffdfe) fcntl$setstatus(r3, 0x4, 0x800) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="10", 0x1}], 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="fc"], 0x1) 12:43:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 12:43:55 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4000000000000002) add_key(&(0x7f0000000880)="6b657972696e670036f9126c12054f5c0e18c6522573dd79f1a0a3a60957d6c729ad856cd8f0df9c04d18e57904b1c05209dee12f5ccc12d98a70037673436610faac88bcf9681918789c2ad473665984b17868d9c5e90813e9ec1f73fdebf5638f9c01f8821f1f78ebac984e3852ee10000000000000000000000", &(0x7f0000000840)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)="00774a678867e69b4f70a1379742aeb115a21482350d3fa6c090e1f6b9243358cdb6ee005b071a43578295b93e5bb5c8d99c298a5022a853d2a2c5a6e0ad49bd2f64d7929d96da0e9263d7bc06941b6f9efb8420a847ba991c74b3a7c9d6bc472720274f6c15722f200b917ed520d4a4e9c5580bc0ef1a7f374c991cc5cd7bee6d1a5e89c1e53aa6f2c0dc7c19114b7b22bc2858ba0fec7b86c01f424dc658253b855f5c89c7685e8c11938d50ccf54aa5ea4e896b0d07964082f9e7d41a9b7b5146ecf0b39c52d9aa8ca0c97ce143c5c42ada8b70e0128acfbe16af2c05b2d932c968b8b39ba7c26bebccbe27e18206137130a7f60b950bfd71", 0x0) 12:43:55 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_INPUT(r1, &(0x7f0000000300)={0x8, "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", 0x1000}, 0x1006) close(r1) memfd_create(&(0x7f0000000040)='\v!GPL\x00', 0x0) splice(r0, 0x0, r1, &(0x7f00000002c0), 0x3fffffffffff, 0x0) 12:43:55 executing program 0: syz_open_procfs(0x0, &(0x7f0000002900)='mounts\x00') unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) [ 976.485666] binder: 16331:16340 ioctl c0306201 0 returned -14 12:43:55 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_INPUT(r1, &(0x7f0000000300)={0x8, "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", 0x1000}, 0x1006) close(r1) memfd_create(&(0x7f0000000040)='\v!GPL\x00', 0x0) splice(r0, 0x0, r1, &(0x7f00000002c0), 0x3fffffffffff, 0x0) 12:43:55 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4000000000000002) add_key(&(0x7f0000000880)="6b657972696e670036f9126c12054f5c0e18c6522573dd79f1a0a3a60957d6c729ad856cd8f0df9c04d18e57904b1c05209dee12f5ccc12d98a70037673436610faac88bcf9681918789c2ad473665984b17868d9c5e90813e9ec1f73fdebf5638f9c01f8821f1f78ebac984e3852ee10000000000000000000000", &(0x7f0000000840)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)="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", 0x0) 12:43:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xfffffdfe) fcntl$setstatus(r3, 0x4, 0x800) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="10", 0x1}], 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="fc"], 0x1) 12:43:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xfffffdfe) fcntl$setstatus(r3, 0x4, 0x800) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="10", 0x1}], 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="fc"], 0x1) 12:43:55 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4000000000000002) add_key(&(0x7f0000000880)="6b657972696e670036f9126c12054f5c0e18c6522573dd79f1a0a3a60957d6c729ad856cd8f0df9c04d18e57904b1c05209dee12f5ccc12d98a70037673436610faac88bcf9681918789c2ad473665984b17868d9c5e90813e9ec1f73fdebf5638f9c01f8821f1f78ebac984e3852ee10000000000000000000000", &(0x7f0000000840)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)="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", 0x0) 12:43:55 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4000000000000002) add_key(&(0x7f0000000880)="6b657972696e670036f9126c12054f5c0e18c6522573dd79f1a0a3a60957d6c729ad856cd8f0df9c04d18e57904b1c05209dee12f5ccc12d98a70037673436610faac88bcf9681918789c2ad473665984b17868d9c5e90813e9ec1f73fdebf5638f9c01f8821f1f78ebac984e3852ee10000000000000000000000", &(0x7f0000000840)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)="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", 0x0) 12:43:55 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000180)='./file0//ile0\x00') 12:43:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xfffffdfe) fcntl$setstatus(r3, 0x4, 0x800) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="10", 0x1}], 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="fc"], 0x1) 12:43:55 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4000000000000002) add_key(&(0x7f0000000880)="6b657972696e670036f9126c12054f5c0e18c6522573dd79f1a0a3a60957d6c729ad856cd8f0df9c04d18e57904b1c05209dee12f5ccc12d98a70037673436610faac88bcf9681918789c2ad473665984b17868d9c5e90813e9ec1f73fdebf5638f9c01f8821f1f78ebac984e3852ee10000000000000000000000", &(0x7f0000000840)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)="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", 0x0) 12:43:55 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4000000000000002) add_key(&(0x7f0000000880)="6b657972696e670036f9126c12054f5c0e18c6522573dd79f1a0a3a60957d6c729ad856cd8f0df9c04d18e57904b1c05209dee12f5ccc12d98a70037673436610faac88bcf9681918789c2ad473665984b17868d9c5e90813e9ec1f73fdebf5638f9c01f8821f1f78ebac984e3852ee10000000000000000000000", &(0x7f0000000840)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)="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", 0x0) 12:43:55 executing program 5: unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) seccomp(0x1, 0x1, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x20000000006, 0x0, 0x0, 0x407ffffffc}]}) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0), 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 12:43:55 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4000000000000002) add_key(&(0x7f0000000880)="6b657972696e670036f9126c12054f5c0e18c6522573dd79f1a0a3a60957d6c729ad856cd8f0df9c04d18e57904b1c05209dee12f5ccc12d98a70037673436610faac88bcf9681918789c2ad473665984b17868d9c5e90813e9ec1f73fdebf5638f9c01f8821f1f78ebac984e3852ee10000000000000000000000", &(0x7f0000000840)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)="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", 0x0) 12:43:55 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4000000000000002) add_key(&(0x7f0000000880)="6b657972696e670036f9126c12054f5c0e18c6522573dd79f1a0a3a60957d6c729ad856cd8f0df9c04d18e57904b1c05209dee12f5ccc12d98a70037673436610faac88bcf9681918789c2ad473665984b17868d9c5e90813e9ec1f73fdebf5638f9c01f8821f1f78ebac984e3852ee10000000000000000000000", &(0x7f0000000840)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)="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", 0x0) 12:43:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000240)=[{0x20, 0x29, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x20}}], 0x1, 0x0) 12:43:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xfffffdfe) fcntl$setstatus(r3, 0x4, 0x800) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="10", 0x1}], 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="fc"], 0x1) 12:43:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xfffffdfe) fcntl$setstatus(r3, 0x4, 0x800) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="10", 0x1}], 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="fc"], 0x1) 12:43:55 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000340)={0xfffffffffffffffb, 0x100}) write(r1, &(0x7f00000001c0), 0xfffffef3) fremovexattr(0xffffffffffffffff, &(0x7f0000000600)=@known='security.apparmor\x00') read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCEXCL(r0, 0x540c) linkat(r1, &(0x7f0000000440)='./file0\x00', r2, &(0x7f0000000480)='./file0/file0\x00', 0x400) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080)={0x0, @speck128}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000300)=0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e20, 0xfffffffffffffff7, @empty, 0xffffffffffff5d54}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$inet6(0xa, 0x80003, 0xec, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000700)=""/208, &(0x7f0000000400)=0xd0) fchdir(r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x4e20, 0xffff, @dev, 0x8}, {0xa, 0x4e20, 0xfffffffffffff882, @mcast1}, 0x0, [0x4, 0x1, 0x7, 0x5, 0xfff, 0xffffffffffffff81, 0x8001, 0x6]}, 0x5c) 12:43:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000240)=[{0x20, 0x29, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x20}}], 0x1, 0x0) 12:43:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000240)=[{0x20, 0x29, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x20}}], 0x1, 0x0) 12:43:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xfffffdfe) fcntl$setstatus(r3, 0x4, 0x800) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="10", 0x1}], 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="fc"], 0x1) 12:43:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000240)=[{0x20, 0x29, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x20}}], 0x1, 0x0) 12:43:55 executing program 5: unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) seccomp(0x1, 0x1, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x20000000006, 0x0, 0x0, 0x407ffffffc}]}) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0), 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 12:43:55 executing program 3: unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) seccomp(0x1, 0x1, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x20000000006, 0x0, 0x0, 0x407ffffffc}]}) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0), 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 12:43:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xfffffdfe) fcntl$setstatus(r3, 0x4, 0x800) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="10", 0x1}], 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="fc"], 0x1) 12:43:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xfffffdfe) fcntl$setstatus(r3, 0x4, 0x800) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="10", 0x1}], 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="fc"], 0x1) 12:43:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x7ffffffc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) 12:43:55 executing program 5: unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) seccomp(0x1, 0x1, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x20000000006, 0x0, 0x0, 0x407ffffffc}]}) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0), 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 12:43:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x7ffffffc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) 12:43:56 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000340)={0xfffffffffffffffb, 0x100}) write(r1, &(0x7f00000001c0), 0xfffffef3) fremovexattr(0xffffffffffffffff, &(0x7f0000000600)=@known='security.apparmor\x00') read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCEXCL(r0, 0x540c) linkat(r1, &(0x7f0000000440)='./file0\x00', r2, &(0x7f0000000480)='./file0/file0\x00', 0x400) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080)={0x0, @speck128}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000300)=0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e20, 0xfffffffffffffff7, @empty, 0xffffffffffff5d54}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$inet6(0xa, 0x80003, 0xec, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000700)=""/208, &(0x7f0000000400)=0xd0) fchdir(r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x4e20, 0xffff, @dev, 0x8}, {0xa, 0x4e20, 0xfffffffffffff882, @mcast1}, 0x0, [0x4, 0x1, 0x7, 0x5, 0xfff, 0xffffffffffffff81, 0x8001, 0x6]}, 0x5c) 12:43:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x7ffffffc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) 12:43:56 executing program 3: unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) seccomp(0x1, 0x1, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x20000000006, 0x0, 0x0, 0x407ffffffc}]}) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0), 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 12:43:56 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="acd54dc3803c270b6f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write(r1, &(0x7f0000000080)="260000005e00ff030000eaf83a000000000000000100000468ffff000008db1ee9ff4435eade", 0x26) 12:43:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) r6 = getpgrp(0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000080)=0x1) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@ng={0x4, 0xd, "fe79af5415"}, 0x7, 0x2) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r7, &(0x7f0000000280)=""/243, 0xf3) 12:43:56 executing program 5: unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) seccomp(0x1, 0x1, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x20000000006, 0x0, 0x0, 0x407ffffffc}]}) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0), 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 12:43:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x7ffffffc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) 12:43:56 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000340)={0xfffffffffffffffb, 0x100}) write(r1, &(0x7f00000001c0), 0xfffffef3) fremovexattr(0xffffffffffffffff, &(0x7f0000000600)=@known='security.apparmor\x00') read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCEXCL(r0, 0x540c) linkat(r1, &(0x7f0000000440)='./file0\x00', r2, &(0x7f0000000480)='./file0/file0\x00', 0x400) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080)={0x0, @speck128}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000300)=0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e20, 0xfffffffffffffff7, @empty, 0xffffffffffff5d54}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$inet6(0xa, 0x80003, 0xec, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000700)=""/208, &(0x7f0000000400)=0xd0) fchdir(r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x4e20, 0xffff, @dev, 0x8}, {0xa, 0x4e20, 0xfffffffffffff882, @mcast1}, 0x0, [0x4, 0x1, 0x7, 0x5, 0xfff, 0xffffffffffffff81, 0x8001, 0x6]}, 0x5c) 12:43:56 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="acd54dc3803c270b6f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write(r1, &(0x7f0000000080)="260000005e00ff030000eaf83a000000000000000100000468ffff000008db1ee9ff4435eade", 0x26) 12:43:56 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="acd54dc3803c270b6f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write(r1, &(0x7f0000000080)="260000005e00ff030000eaf83a000000000000000100000468ffff000008db1ee9ff4435eade", 0x26) 12:43:56 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="acd54dc3803c270b6f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write(r1, &(0x7f0000000080)="260000005e00ff030000eaf83a000000000000000100000468ffff000008db1ee9ff4435eade", 0x26) 12:43:56 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="acd54dc3803c270b6f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write(r1, &(0x7f0000000080)="260000005e00ff030000eaf83a000000000000000100000468ffff000008db1ee9ff4435eade", 0x26) [ 977.481550] audit: type=1400 audit(1543322636.256:142): avc: denied { create } for pid=16487 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:43:56 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000340)={0xfffffffffffffffb, 0x100}) write(r1, &(0x7f00000001c0), 0xfffffef3) fremovexattr(0xffffffffffffffff, &(0x7f0000000600)=@known='security.apparmor\x00') read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCEXCL(r0, 0x540c) linkat(r1, &(0x7f0000000440)='./file0\x00', r2, &(0x7f0000000480)='./file0/file0\x00', 0x400) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080)={0x0, @speck128}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000300)=0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e20, 0xfffffffffffffff7, @empty, 0xffffffffffff5d54}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$inet6(0xa, 0x80003, 0xec, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000700)=""/208, &(0x7f0000000400)=0xd0) fchdir(r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x4e20, 0xffff, @dev, 0x8}, {0xa, 0x4e20, 0xfffffffffffff882, @mcast1}, 0x0, [0x4, 0x1, 0x7, 0x5, 0xfff, 0xffffffffffffff81, 0x8001, 0x6]}, 0x5c) 12:43:56 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="acd54dc3803c270b6f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write(r1, &(0x7f0000000080)="260000005e00ff030000eaf83a000000000000000100000468ffff000008db1ee9ff4435eade", 0x26) 12:43:56 executing program 3: unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) seccomp(0x1, 0x1, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x20000000006, 0x0, 0x0, 0x407ffffffc}]}) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0), 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 12:43:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0xfffffece) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') close(r0) [ 977.973091] audit: type=1400 audit(1543322636.756:143): avc: denied { write } for pid=16487 comm="syz-executor4" path="socket:[182516]" dev="sockfs" ino=182516 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:43:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) r6 = getpgrp(0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000080)=0x1) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@ng={0x4, 0xd, "fe79af5415"}, 0x7, 0x2) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r7, &(0x7f0000000280)=""/243, 0xf3) 12:43:56 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000340)={0xfffffffffffffffb, 0x100}) write(r1, &(0x7f00000001c0), 0xfffffef3) fremovexattr(0xffffffffffffffff, &(0x7f0000000600)=@known='security.apparmor\x00') read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCEXCL(r0, 0x540c) linkat(r1, &(0x7f0000000440)='./file0\x00', r2, &(0x7f0000000480)='./file0/file0\x00', 0x400) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080)={0x0, @speck128}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000300)=0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e20, 0xfffffffffffffff7, @empty, 0xffffffffffff5d54}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$inet6(0xa, 0x80003, 0xec, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000700)=""/208, &(0x7f0000000400)=0xd0) fchdir(r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x4e20, 0xffff, @dev, 0x8}, {0xa, 0x4e20, 0xfffffffffffff882, @mcast1}, 0x0, [0x4, 0x1, 0x7, 0x5, 0xfff, 0xffffffffffffff81, 0x8001, 0x6]}, 0x5c) 12:43:56 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="acd54dc3803c270b6f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write(r1, &(0x7f0000000080)="260000005e00ff030000eaf83a000000000000000100000468ffff000008db1ee9ff4435eade", 0x26) 12:43:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) r6 = getpgrp(0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000080)=0x1) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@ng={0x4, 0xd, "fe79af5415"}, 0x7, 0x2) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r7, &(0x7f0000000280)=""/243, 0xf3) 12:43:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0xfffffece) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') close(r0) 12:43:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x541f, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) [ 978.287660] tty_warn_deprecated_flags: 'syz-executor3' is using deprecated serial flags (with no effect): 00008700 12:43:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x891e, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_flags}) 12:43:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0xfffffece) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') close(r0) [ 978.467868] audit: type=1400 audit(1543322637.246:144): avc: denied { net_raw } for pid=16574 comm="syz-executor3" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 12:43:58 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000340)={0xfffffffffffffffb, 0x100}) write(r1, &(0x7f00000001c0), 0xfffffef3) fremovexattr(0xffffffffffffffff, &(0x7f0000000600)=@known='security.apparmor\x00') read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCEXCL(r0, 0x540c) linkat(r1, &(0x7f0000000440)='./file0\x00', r2, &(0x7f0000000480)='./file0/file0\x00', 0x400) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080)={0x0, @speck128}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000300)=0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e20, 0xfffffffffffffff7, @empty, 0xffffffffffff5d54}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$inet6(0xa, 0x80003, 0xec, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000700)=""/208, &(0x7f0000000400)=0xd0) fchdir(r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x4e20, 0xffff, @dev, 0x8}, {0xa, 0x4e20, 0xfffffffffffff882, @mcast1}, 0x0, [0x4, 0x1, 0x7, 0x5, 0xfff, 0xffffffffffffff81, 0x8001, 0x6]}, 0x5c) 12:43:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0xfffffece) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') close(r0) 12:43:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @loopback}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 12:43:58 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000340)={0xfffffffffffffffb, 0x100}) write(r1, &(0x7f00000001c0), 0xfffffef3) fremovexattr(0xffffffffffffffff, &(0x7f0000000600)=@known='security.apparmor\x00') read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCEXCL(r0, 0x540c) linkat(r1, &(0x7f0000000440)='./file0\x00', r2, &(0x7f0000000480)='./file0/file0\x00', 0x400) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080)={0x0, @speck128}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000300)=0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e20, 0xfffffffffffffff7, @empty, 0xffffffffffff5d54}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$inet6(0xa, 0x80003, 0xec, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000700)=""/208, &(0x7f0000000400)=0xd0) fchdir(r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x4e20, 0xffff, @dev, 0x8}, {0xa, 0x4e20, 0xfffffffffffff882, @mcast1}, 0x0, [0x4, 0x1, 0x7, 0x5, 0xfff, 0xffffffffffffff81, 0x8001, 0x6]}, 0x5c) 12:43:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) r6 = getpgrp(0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000080)=0x1) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@ng={0x4, 0xd, "fe79af5415"}, 0x7, 0x2) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r7, &(0x7f0000000280)=""/243, 0xf3) 12:43:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') ioctl$void(r0, 0x5451) 12:43:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @loopback}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 12:43:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) r6 = getpgrp(0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000080)=0x1) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@ng={0x4, 0xd, "fe79af5415"}, 0x7, 0x2) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r7, &(0x7f0000000280)=""/243, 0xf3) 12:43:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') ioctl$void(r0, 0x5451) 12:43:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') ioctl$void(r0, 0x5451) 12:43:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') ioctl$void(r0, 0x5451) 12:43:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @loopback}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 980.137178] device lo left promiscuous mode 12:43:59 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@broadcast}}}, 0x0) setxattr$security_capability(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) rename(0x0, &(0x7f0000000640)='./file0\x00') mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, &(0x7f0000000780)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) 12:43:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @loopback}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 12:43:59 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x4000000000000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001300)='/dev/full\x00', 0x280, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fe) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r1 = gettid() r2 = gettid() clone(0x20120000, &(0x7f0000000100)="866633c1d416452332dcc8cbf8c623369de21b6b7dcf785ff9b0274c1f4e2bef0300018c54f0fa4c51cf93cad9437bfda26cdffaa17ce15e53e9ecd6abd4b1ebc1cc", &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240)="21b5637a9a1e4a59fa5d917c15b4") timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) gettid() gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) socket$key(0xf, 0x3, 0x2) tkill(r2, 0x1000000000016) tkill(r1, 0x1000000000016) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000001c0)=0x3ff) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000240)="bb8571ac3dd58acfbd9efbd8a3ec4dfc4b3c4e454b1935c01586d6389f0ef5ba9cbde25a0de00c7f1f12848fbde32797a810babe5dac7ca8e10c0d3ae827c660e2c9ff4c486d8ac69df213152ce4ce99070dc7545ab2e76d3b0e0199605926b129fe99592c5a5aba14c7a7d3e9a4180a299976b65c025589e53ead2e3ecf3656f0baaaa42af0a50ba051113eda90b30d2ef7c600443df0388c0d18cb438aee2483766177a0db3b27283e9015c3fb9cbea9bd55a5fd39fd1bb8977662bb07b6bb56851e9ddc888cb5e9865a6a40bf9f926c9b464d914cd8d61dc1599184") ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={"6c6f00000000000000000000000200"}) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x9) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) socket$inet6(0xa, 0x400000000003, 0x0) 12:43:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @loopback}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 980.278742] SELinux: duplicate or incompatible mount options [ 980.287779] SELinux: duplicate or incompatible mount options 12:44:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) r6 = getpgrp(0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000080)=0x1) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@ng={0x4, 0xd, "fe79af5415"}, 0x7, 0x2) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r7, &(0x7f0000000280)=""/243, 0xf3) 12:44:00 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@broadcast}}}, 0x0) setxattr$security_capability(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) rename(0x0, &(0x7f0000000640)='./file0\x00') mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, &(0x7f0000000780)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) 12:44:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @loopback}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 12:44:00 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x4000000000000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001300)='/dev/full\x00', 0x280, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fe) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r1 = gettid() r2 = gettid() clone(0x20120000, &(0x7f0000000100)="866633c1d416452332dcc8cbf8c623369de21b6b7dcf785ff9b0274c1f4e2bef0300018c54f0fa4c51cf93cad9437bfda26cdffaa17ce15e53e9ecd6abd4b1ebc1cc", &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240)="21b5637a9a1e4a59fa5d917c15b4") timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) gettid() gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) socket$key(0xf, 0x3, 0x2) tkill(r2, 0x1000000000016) tkill(r1, 0x1000000000016) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000001c0)=0x3ff) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000240)="bb8571ac3dd58acfbd9efbd8a3ec4dfc4b3c4e454b1935c01586d6389f0ef5ba9cbde25a0de00c7f1f12848fbde32797a810babe5dac7ca8e10c0d3ae827c660e2c9ff4c486d8ac69df213152ce4ce99070dc7545ab2e76d3b0e0199605926b129fe99592c5a5aba14c7a7d3e9a4180a299976b65c025589e53ead2e3ecf3656f0baaaa42af0a50ba051113eda90b30d2ef7c600443df0388c0d18cb438aee2483766177a0db3b27283e9015c3fb9cbea9bd55a5fd39fd1bb8977662bb07b6bb56851e9ddc888cb5e9865a6a40bf9f926c9b464d914cd8d61dc1599184") ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={"6c6f00000000000000000000000200"}) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x9) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) socket$inet6(0xa, 0x400000000003, 0x0) 12:44:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, 0x0, 0xfffffdef) r6 = getpgrp(0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000080)=0x1) fsetxattr$security_ima(r4, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@ng={0x4, 0xd, "fe79af5415"}, 0x7, 0x2) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r7, &(0x7f0000000280)=""/243, 0xf3) 12:44:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @loopback}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 12:44:00 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@broadcast}}}, 0x0) setxattr$security_capability(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) rename(0x0, &(0x7f0000000640)='./file0\x00') mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, &(0x7f0000000780)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) [ 981.319850] SELinux: duplicate or incompatible mount options 12:44:00 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@broadcast}}}, 0x0) setxattr$security_capability(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) rename(0x0, &(0x7f0000000640)='./file0\x00') mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, &(0x7f0000000780)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) [ 981.412903] SELinux: duplicate or incompatible mount options [ 981.571106] SELinux: duplicate or incompatible mount options 12:44:00 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f75702e637075002a508f7202071613637ace8933066c294bb15e7e1a203dfd5893698f1ace33f72a3f2c7f5f5cca9324913053f73693537781e18477f9b1a223127b6c43f374e465f506ae88ff4091256188a1ce8bf2d2e738a1fbc7620db08e972cc1ebb3e4a8a566e4576f5eb174399be3cba55013960112d03559fdf8645eabbea015221705d0c00d581f626457121ebcb90cbbfde2cc1038b2b8f128c9e502e30b547a8e17d731e512276118c7b74609d46a5a9fa601a41a388348bf289093cdd39400fba1a5eebbd2c91d", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x2000006100) ftruncate(r1, 0x208200) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x9, 0x8}) chroot(&(0x7f0000000280)='./file0\x00') mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) fcntl$setlease(r1, 0x400, 0x800000080000) fsync(0xffffffffffffffff) faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x120, 0x1000) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, &(0x7f0000000480)=0x10, 0x80000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, &(0x7f0000000340)=""/62) tkill(0x0, 0x1000000000016) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) open(&(0x7f0000000240)='./file0\x00', 0x84040, 0x4) sync_file_range(r0, 0x7, 0x81, 0x5) unshare(0x40000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="ff06040306084000fe800000000000000000000000000013ff010000000000000000000000000001fe00000000fd000000000000000000aa"], 0x1) 12:44:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}, [@ldst={0x3fd}]}, &(0x7f0000000080)="47504c049c3514bf772da07ae82e76590a36f6493ec1ab91b397e42abf1ea6cd8cd77427fc9a9e2b7165f52b4107bf0850d899dc52d013175ddb1b2f46203c2a05b722e33e556fb2e3f39a3cde1fca53640337ec956146bdbfcb115070195631de5d21a5ea9e638c2bdb78a501ca4b6ea313d82568f9382c2c3f6faba6b4ee54793b4ed26dae3e52225029bb2ac0007f77754c3f23ceda9809b9a9684a940abcaa8cfcc7133ec422e9c83888318d41e9a493f0195fe2599651b89504f5dba14625ce2366f33d95dba92f867279cabf4aceddc85a8af7a0fa68d767ce5136b9d0d1966c499cb6bf34c2988666970000000000000000000000", 0x0, 0xffffffe4, &(0x7f000000cf3d)=""/195}, 0x16) 12:44:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r1}, 0x199) 12:44:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}, [@ldst={0x3fd}]}, &(0x7f0000000080)="47504c049c3514bf772da07ae82e76590a36f6493ec1ab91b397e42abf1ea6cd8cd77427fc9a9e2b7165f52b4107bf0850d899dc52d013175ddb1b2f46203c2a05b722e33e556fb2e3f39a3cde1fca53640337ec956146bdbfcb115070195631de5d21a5ea9e638c2bdb78a501ca4b6ea313d82568f9382c2c3f6faba6b4ee54793b4ed26dae3e52225029bb2ac0007f77754c3f23ceda9809b9a9684a940abcaa8cfcc7133ec422e9c83888318d41e9a493f0195fe2599651b89504f5dba14625ce2366f33d95dba92f867279cabf4aceddc85a8af7a0fa68d767ce5136b9d0d1966c499cb6bf34c2988666970000000000000000000000", 0x0, 0xffffffe4, &(0x7f000000cf3d)=""/195}, 0x16) 12:44:01 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f75702e637075002a508f7202071613637ace8933066c294bb15e7e1a203dfd5893698f1ace33f72a3f2c7f5f5cca9324913053f73693537781e18477f9b1a223127b6c43f374e465f506ae88ff4091256188a1ce8bf2d2e738a1fbc7620db08e972cc1ebb3e4a8a566e4576f5eb174399be3cba55013960112d03559fdf8645eabbea015221705d0c00d581f626457121ebcb90cbbfde2cc1038b2b8f128c9e502e30b547a8e17d731e512276118c7b74609d46a5a9fa601a41a388348bf289093cdd39400fba1a5eebbd2c91d", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x2000006100) ftruncate(r1, 0x208200) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x9, 0x8}) chroot(&(0x7f0000000280)='./file0\x00') mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) fcntl$setlease(r1, 0x400, 0x800000080000) fsync(0xffffffffffffffff) faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x120, 0x1000) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, &(0x7f0000000480)=0x10, 0x80000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, &(0x7f0000000340)=""/62) tkill(0x0, 0x1000000000016) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) open(&(0x7f0000000240)='./file0\x00', 0x84040, 0x4) sync_file_range(r0, 0x7, 0x81, 0x5) unshare(0x40000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="ff06040306084000fe800000000000000000000000000013ff010000000000000000000000000001fe00000000fd000000000000000000aa"], 0x1) 12:44:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}, [@ldst={0x3fd}]}, &(0x7f0000000080)="47504c049c3514bf772da07ae82e76590a36f6493ec1ab91b397e42abf1ea6cd8cd77427fc9a9e2b7165f52b4107bf0850d899dc52d013175ddb1b2f46203c2a05b722e33e556fb2e3f39a3cde1fca53640337ec956146bdbfcb115070195631de5d21a5ea9e638c2bdb78a501ca4b6ea313d82568f9382c2c3f6faba6b4ee54793b4ed26dae3e52225029bb2ac0007f77754c3f23ceda9809b9a9684a940abcaa8cfcc7133ec422e9c83888318d41e9a493f0195fe2599651b89504f5dba14625ce2366f33d95dba92f867279cabf4aceddc85a8af7a0fa68d767ce5136b9d0d1966c499cb6bf34c2988666970000000000000000000000", 0x0, 0xffffffe4, &(0x7f000000cf3d)=""/195}, 0x16) 12:44:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r1}, 0x199) 12:44:01 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x4000000000000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001300)='/dev/full\x00', 0x280, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fe) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r1 = gettid() r2 = gettid() clone(0x20120000, &(0x7f0000000100)="866633c1d416452332dcc8cbf8c623369de21b6b7dcf785ff9b0274c1f4e2bef0300018c54f0fa4c51cf93cad9437bfda26cdffaa17ce15e53e9ecd6abd4b1ebc1cc", &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240)="21b5637a9a1e4a59fa5d917c15b4") timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) gettid() gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) socket$key(0xf, 0x3, 0x2) tkill(r2, 0x1000000000016) tkill(r1, 0x1000000000016) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000001c0)=0x3ff) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000240)="bb8571ac3dd58acfbd9efbd8a3ec4dfc4b3c4e454b1935c01586d6389f0ef5ba9cbde25a0de00c7f1f12848fbde32797a810babe5dac7ca8e10c0d3ae827c660e2c9ff4c486d8ac69df213152ce4ce99070dc7545ab2e76d3b0e0199605926b129fe99592c5a5aba14c7a7d3e9a4180a299976b65c025589e53ead2e3ecf3656f0baaaa42af0a50ba051113eda90b30d2ef7c600443df0388c0d18cb438aee2483766177a0db3b27283e9015c3fb9cbea9bd55a5fd39fd1bb8977662bb07b6bb56851e9ddc888cb5e9865a6a40bf9f926c9b464d914cd8d61dc1599184") ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={"6c6f00000000000000000000000200"}) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x9) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) socket$inet6(0xa, 0x400000000003, 0x0) 12:44:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f75702e637075002a508f7202071613637ace8933066c294bb15e7e1a203dfd5893698f1ace33f72a3f2c7f5f5cca9324913053f73693537781e18477f9b1a223127b6c43f374e465f506ae88ff4091256188a1ce8bf2d2e738a1fbc7620db08e972cc1ebb3e4a8a566e4576f5eb174399be3cba55013960112d03559fdf8645eabbea015221705d0c00d581f626457121ebcb90cbbfde2cc1038b2b8f128c9e502e30b547a8e17d731e512276118c7b74609d46a5a9fa601a41a388348bf289093cdd39400fba1a5eebbd2c91d", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x2000006100) ftruncate(r1, 0x208200) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x9, 0x8}) chroot(&(0x7f0000000280)='./file0\x00') mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) fcntl$setlease(r1, 0x400, 0x800000080000) fsync(0xffffffffffffffff) faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x120, 0x1000) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, &(0x7f0000000480)=0x10, 0x80000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, &(0x7f0000000340)=""/62) tkill(0x0, 0x1000000000016) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) open(&(0x7f0000000240)='./file0\x00', 0x84040, 0x4) sync_file_range(r0, 0x7, 0x81, 0x5) unshare(0x40000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="ff06040306084000fe800000000000000000000000000013ff010000000000000000000000000001fe00000000fd000000000000000000aa"], 0x1) 12:44:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f75702e637075002a508f7202071613637ace8933066c294bb15e7e1a203dfd5893698f1ace33f72a3f2c7f5f5cca9324913053f73693537781e18477f9b1a223127b6c43f374e465f506ae88ff4091256188a1ce8bf2d2e738a1fbc7620db08e972cc1ebb3e4a8a566e4576f5eb174399be3cba55013960112d03559fdf8645eabbea015221705d0c00d581f626457121ebcb90cbbfde2cc1038b2b8f128c9e502e30b547a8e17d731e512276118c7b74609d46a5a9fa601a41a388348bf289093cdd39400fba1a5eebbd2c91d", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x2000006100) ftruncate(r1, 0x208200) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x9, 0x8}) chroot(&(0x7f0000000280)='./file0\x00') mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) fcntl$setlease(r1, 0x400, 0x800000080000) fsync(0xffffffffffffffff) faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x120, 0x1000) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, &(0x7f0000000480)=0x10, 0x80000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, &(0x7f0000000340)=""/62) tkill(0x0, 0x1000000000016) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) open(&(0x7f0000000240)='./file0\x00', 0x84040, 0x4) sync_file_range(r0, 0x7, 0x81, 0x5) unshare(0x40000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="ff06040306084000fe800000000000000000000000000013ff010000000000000000000000000001fe00000000fd000000000000000000aa"], 0x1) 12:44:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}, [@ldst={0x3fd}]}, &(0x7f0000000080)="47504c049c3514bf772da07ae82e76590a36f6493ec1ab91b397e42abf1ea6cd8cd77427fc9a9e2b7165f52b4107bf0850d899dc52d013175ddb1b2f46203c2a05b722e33e556fb2e3f39a3cde1fca53640337ec956146bdbfcb115070195631de5d21a5ea9e638c2bdb78a501ca4b6ea313d82568f9382c2c3f6faba6b4ee54793b4ed26dae3e52225029bb2ac0007f77754c3f23ceda9809b9a9684a940abcaa8cfcc7133ec422e9c83888318d41e9a493f0195fe2599651b89504f5dba14625ce2366f33d95dba92f867279cabf4aceddc85a8af7a0fa68d767ce5136b9d0d1966c499cb6bf34c2988666970000000000000000000000", 0x0, 0xffffffe4, &(0x7f000000cf3d)=""/195}, 0x16) 12:44:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r1}, 0x199) 12:44:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r1}, 0x199) 12:44:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r1}, 0x199) 12:44:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r1}, 0x199) 12:44:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x1, 0x81, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={r0, &(0x7f0000000080), &(0x7f0000000040)}, 0x85) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000)='N', &(0x7f0000000100)=""/96}, 0x18) [ 982.341211] audit: type=1400 audit(1543322641.116:145): avc: denied { ioctl } for pid=16721 comm="syz-executor4" path="/syzcgroup/cpu/syz4/bus" dev="sda1" ino=16535 ioctlcmd=0x4b4d scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 982.433997] audit: type=1400 audit(1543322641.216:146): avc: denied { map_create } for pid=16735 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 982.459232] audit: type=1400 audit(1543322641.236:147): avc: denied { map_read map_write } for pid=16735 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 12:44:01 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f75702e637075002a508f7202071613637ace8933066c294bb15e7e1a203dfd5893698f1ace33f72a3f2c7f5f5cca9324913053f73693537781e18477f9b1a223127b6c43f374e465f506ae88ff4091256188a1ce8bf2d2e738a1fbc7620db08e972cc1ebb3e4a8a566e4576f5eb174399be3cba55013960112d03559fdf8645eabbea015221705d0c00d581f626457121ebcb90cbbfde2cc1038b2b8f128c9e502e30b547a8e17d731e512276118c7b74609d46a5a9fa601a41a388348bf289093cdd39400fba1a5eebbd2c91d", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x2000006100) ftruncate(r1, 0x208200) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x9, 0x8}) chroot(&(0x7f0000000280)='./file0\x00') mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) fcntl$setlease(r1, 0x400, 0x800000080000) fsync(0xffffffffffffffff) faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x120, 0x1000) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, &(0x7f0000000480)=0x10, 0x80000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, &(0x7f0000000340)=""/62) tkill(0x0, 0x1000000000016) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) open(&(0x7f0000000240)='./file0\x00', 0x84040, 0x4) sync_file_range(r0, 0x7, 0x81, 0x5) unshare(0x40000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="ff06040306084000fe800000000000000000000000000013ff010000000000000000000000000001fe00000000fd000000000000000000aa"], 0x1) 12:44:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080), 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@remote, r1}, 0x199) 12:44:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x1, 0x81, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={r0, &(0x7f0000000080), &(0x7f0000000040)}, 0x85) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000)='N', &(0x7f0000000100)=""/96}, 0x18) 12:44:01 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x4000000000000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001300)='/dev/full\x00', 0x280, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fe) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r1 = gettid() r2 = gettid() clone(0x20120000, &(0x7f0000000100)="866633c1d416452332dcc8cbf8c623369de21b6b7dcf785ff9b0274c1f4e2bef0300018c54f0fa4c51cf93cad9437bfda26cdffaa17ce15e53e9ecd6abd4b1ebc1cc", &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240)="21b5637a9a1e4a59fa5d917c15b4") timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) gettid() gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) socket$key(0xf, 0x3, 0x2) tkill(r2, 0x1000000000016) tkill(r1, 0x1000000000016) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000001c0)=0x3ff) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000240)="bb8571ac3dd58acfbd9efbd8a3ec4dfc4b3c4e454b1935c01586d6389f0ef5ba9cbde25a0de00c7f1f12848fbde32797a810babe5dac7ca8e10c0d3ae827c660e2c9ff4c486d8ac69df213152ce4ce99070dc7545ab2e76d3b0e0199605926b129fe99592c5a5aba14c7a7d3e9a4180a299976b65c025589e53ead2e3ecf3656f0baaaa42af0a50ba051113eda90b30d2ef7c600443df0388c0d18cb438aee2483766177a0db3b27283e9015c3fb9cbea9bd55a5fd39fd1bb8977662bb07b6bb56851e9ddc888cb5e9865a6a40bf9f926c9b464d914cd8d61dc1599184") ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={"6c6f00000000000000000000000200"}) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x9) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) socket$inet6(0xa, 0x400000000003, 0x0) 12:44:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f75702e637075002a508f7202071613637ace8933066c294bb15e7e1a203dfd5893698f1ace33f72a3f2c7f5f5cca9324913053f73693537781e18477f9b1a223127b6c43f374e465f506ae88ff4091256188a1ce8bf2d2e738a1fbc7620db08e972cc1ebb3e4a8a566e4576f5eb174399be3cba55013960112d03559fdf8645eabbea015221705d0c00d581f626457121ebcb90cbbfde2cc1038b2b8f128c9e502e30b547a8e17d731e512276118c7b74609d46a5a9fa601a41a388348bf289093cdd39400fba1a5eebbd2c91d", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x2000006100) ftruncate(r1, 0x208200) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x9, 0x8}) chroot(&(0x7f0000000280)='./file0\x00') mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) fcntl$setlease(r1, 0x400, 0x800000080000) fsync(0xffffffffffffffff) faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x120, 0x1000) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, &(0x7f0000000480)=0x10, 0x80000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, &(0x7f0000000340)=""/62) tkill(0x0, 0x1000000000016) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) open(&(0x7f0000000240)='./file0\x00', 0x84040, 0x4) sync_file_range(r0, 0x7, 0x81, 0x5) unshare(0x40000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="ff06040306084000fe800000000000000000000000000013ff010000000000000000000000000001fe00000000fd000000000000000000aa"], 0x1) 12:44:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f75702e637075002a508f7202071613637ace8933066c294bb15e7e1a203dfd5893698f1ace33f72a3f2c7f5f5cca9324913053f73693537781e18477f9b1a223127b6c43f374e465f506ae88ff4091256188a1ce8bf2d2e738a1fbc7620db08e972cc1ebb3e4a8a566e4576f5eb174399be3cba55013960112d03559fdf8645eabbea015221705d0c00d581f626457121ebcb90cbbfde2cc1038b2b8f128c9e502e30b547a8e17d731e512276118c7b74609d46a5a9fa601a41a388348bf289093cdd39400fba1a5eebbd2c91d", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x2000006100) ftruncate(r1, 0x208200) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x9, 0x8}) chroot(&(0x7f0000000280)='./file0\x00') mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) fcntl$setlease(r1, 0x400, 0x800000080000) fsync(0xffffffffffffffff) faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x120, 0x1000) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, &(0x7f0000000480)=0x10, 0x80000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, &(0x7f0000000340)=""/62) tkill(0x0, 0x1000000000016) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) open(&(0x7f0000000240)='./file0\x00', 0x84040, 0x4) sync_file_range(r0, 0x7, 0x81, 0x5) unshare(0x40000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="ff06040306084000fe800000000000000000000000000013ff010000000000000000000000000001fe00000000fd000000000000000000aa"], 0x1) 12:44:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x1, 0x81, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={r0, &(0x7f0000000080), &(0x7f0000000040)}, 0x85) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000)='N', &(0x7f0000000100)=""/96}, 0x18) 12:44:01 executing program 3: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4}, 0x20) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x24) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unlink(&(0x7f0000000500)='./file0\x00') ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000880)) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000680)={'syz'}, &(0x7f0000000700), 0x0, 0xfffffffffffffff9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000008c0)={@in6={{0xa, 0x0, 0x0, @mcast2, 0x6}}, 0x0, 0x4022, 0x800, "5a271b3006d9974803ad0266198f099424bca4b0e856f7351870610e37af2e78dae8317a05f313c879204d3ec88ea958536aa4c46f2466bc344aa1fccca41ff5305e771735b6519254b153fabba41944"}, 0xd8) open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x18) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) 12:44:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x1, 0x81, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={r0, &(0x7f0000000080), &(0x7f0000000040)}, 0x85) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000)='N', &(0x7f0000000100)=""/96}, 0x18) 12:44:02 executing program 2: r0 = socket(0x1, 0x1, 0x7) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth0\x00', 0x4}, 0x18) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) stat(&(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)) syncfs(r1) fchdir(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000380)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ppoll(&(0x7f0000000140)=[{}, {r5}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) close(r6) sendfile(r4, r3, 0x0, 0x800) r7 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000680)=0x3) pwrite64(r7, &(0x7f0000000240)='U', 0x1, 0x0) fcntl$setown(r4, 0x8, r2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, 0xffffffffffffffff, 0x0) write$FUSE_LK(r5, &(0x7f0000000280)={0x28, 0x0, 0x8, {{0x1, 0x200, 0x1, r2}}}, 0x28) fcntl$setstatus(r4, 0x4, 0x6100) ioctl$TCGETA(r3, 0x5405, &(0x7f00000002c0)) sendfile(r4, r3, &(0x7f0000000080), 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="0100010000000000030000000000000002000000590000000600000000000000f7d93c18000000006300000000000000000000000000004000000000000000000000000000000000000200000000000000000000000000000800000000000000faffffffffffffff0500000000000000000000000000000000000000000000000200000000000000000000000000000002000000000000000104000000000000000000800000000000000000000000000000000000000000001000000000000000000000000000000104000000000000090000000000000000000000000000fa70b5bb0e0800000000000000000000000000000000821300000000000000000000000000007f000000000000000700000000000000ffffff7f000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff0800000000000000050000000000000000000000000000000000000000000000020000000000000000"]) 12:44:02 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f75702e637075002a508f7202071613637ace8933066c294bb15e7e1a203dfd5893698f1ace33f72a3f2c7f5f5cca9324913053f73693537781e18477f9b1a223127b6c43f374e465f506ae88ff4091256188a1ce8bf2d2e738a1fbc7620db08e972cc1ebb3e4a8a566e4576f5eb174399be3cba55013960112d03559fdf8645eabbea015221705d0c00d581f626457121ebcb90cbbfde2cc1038b2b8f128c9e502e30b547a8e17d731e512276118c7b74609d46a5a9fa601a41a388348bf289093cdd39400fba1a5eebbd2c91d", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x2000006100) ftruncate(r1, 0x208200) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x9, 0x8}) chroot(&(0x7f0000000280)='./file0\x00') mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) fcntl$setlease(r1, 0x400, 0x800000080000) fsync(0xffffffffffffffff) faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x120, 0x1000) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, &(0x7f0000000480)=0x10, 0x80000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, &(0x7f0000000340)=""/62) tkill(0x0, 0x1000000000016) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) open(&(0x7f0000000240)='./file0\x00', 0x84040, 0x4) sync_file_range(r0, 0x7, 0x81, 0x5) unshare(0x40000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="ff06040306084000fe800000000000000000000000000013ff010000000000000000000000000001fe00000000fd000000000000000000aa"], 0x1) 12:44:02 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f75702e637075002a508f7202071613637ace8933066c294bb15e7e1a203dfd5893698f1ace33f72a3f2c7f5f5cca9324913053f73693537781e18477f9b1a223127b6c43f374e465f506ae88ff4091256188a1ce8bf2d2e738a1fbc7620db08e972cc1ebb3e4a8a566e4576f5eb174399be3cba55013960112d03559fdf8645eabbea015221705d0c00d581f626457121ebcb90cbbfde2cc1038b2b8f128c9e502e30b547a8e17d731e512276118c7b74609d46a5a9fa601a41a388348bf289093cdd39400fba1a5eebbd2c91d", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x2000006100) ftruncate(r1, 0x208200) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x9, 0x8}) chroot(&(0x7f0000000280)='./file0\x00') mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) fcntl$setlease(r1, 0x400, 0x800000080000) fsync(0xffffffffffffffff) faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x120, 0x1000) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, &(0x7f0000000480)=0x10, 0x80000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, &(0x7f0000000340)=""/62) tkill(0x0, 0x1000000000016) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) open(&(0x7f0000000240)='./file0\x00', 0x84040, 0x4) sync_file_range(r0, 0x7, 0x81, 0x5) unshare(0x40000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="ff06040306084000fe800000000000000000000000000013ff010000000000000000000000000001fe00000000fd000000000000000000aa"], 0x1) 12:44:02 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f75702e637075002a508f7202071613637ace8933066c294bb15e7e1a203dfd5893698f1ace33f72a3f2c7f5f5cca9324913053f73693537781e18477f9b1a223127b6c43f374e465f506ae88ff4091256188a1ce8bf2d2e738a1fbc7620db08e972cc1ebb3e4a8a566e4576f5eb174399be3cba55013960112d03559fdf8645eabbea015221705d0c00d581f626457121ebcb90cbbfde2cc1038b2b8f128c9e502e30b547a8e17d731e512276118c7b74609d46a5a9fa601a41a388348bf289093cdd39400fba1a5eebbd2c91d", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x2000006100) ftruncate(r1, 0x208200) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x9, 0x8}) chroot(&(0x7f0000000280)='./file0\x00') mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) fcntl$setlease(r1, 0x400, 0x800000080000) fsync(0xffffffffffffffff) faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x120, 0x1000) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, &(0x7f0000000480)=0x10, 0x80000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, &(0x7f0000000340)=""/62) tkill(0x0, 0x1000000000016) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) open(&(0x7f0000000240)='./file0\x00', 0x84040, 0x4) sync_file_range(r0, 0x7, 0x81, 0x5) unshare(0x40000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="ff06040306084000fe800000000000000000000000000013ff010000000000000000000000000001fe00000000fd000000000000000000aa"], 0x1) 12:44:02 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xffffffffffffffff) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) ptrace$getregs(0xe, r0, 0x0, &(0x7f0000000280)=""/4096) 12:44:02 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xffffffffffffffff) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) ptrace$getregs(0xe, r0, 0x0, &(0x7f0000000280)=""/4096) 12:44:02 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xffffffffffffffff) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) ptrace$getregs(0xe, r0, 0x0, &(0x7f0000000280)=""/4096) 12:44:02 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xffffffffffffffff) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) ptrace$getregs(0xe, r0, 0x0, &(0x7f0000000280)=""/4096) 12:44:02 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xffffffffffffffff) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) ptrace$getregs(0xe, r0, 0x0, &(0x7f0000000280)=""/4096) 12:44:02 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xffffffffffffffff) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) ptrace$getregs(0xe, r0, 0x0, &(0x7f0000000280)=""/4096) [ 984.041245] audit: type=1400 audit(1543322642.816:148): avc: denied { getattr } for pid=16761 comm="syz-executor2" path="/syzcgroup/cpu/syz2/bus" dev="sda1" ino=16536 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 12:44:03 executing program 3: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4}, 0x20) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x24) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unlink(&(0x7f0000000500)='./file0\x00') ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000880)) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000680)={'syz'}, &(0x7f0000000700), 0x0, 0xfffffffffffffff9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000008c0)={@in6={{0xa, 0x0, 0x0, @mcast2, 0x6}}, 0x0, 0x4022, 0x800, "5a271b3006d9974803ad0266198f099424bca4b0e856f7351870610e37af2e78dae8317a05f313c879204d3ec88ea958536aa4c46f2466bc344aa1fccca41ff5305e771735b6519254b153fabba41944"}, 0xd8) open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x18) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) 12:44:03 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xffffffffffffffff) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) ptrace$getregs(0xe, r0, 0x0, &(0x7f0000000280)=""/4096) 12:44:03 executing program 2: r0 = socket(0x1, 0x1, 0x7) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth0\x00', 0x4}, 0x18) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) stat(&(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)) syncfs(r1) fchdir(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000380)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ppoll(&(0x7f0000000140)=[{}, {r5}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) close(r6) sendfile(r4, r3, 0x0, 0x800) r7 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000680)=0x3) pwrite64(r7, &(0x7f0000000240)='U', 0x1, 0x0) fcntl$setown(r4, 0x8, r2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, 0xffffffffffffffff, 0x0) write$FUSE_LK(r5, &(0x7f0000000280)={0x28, 0x0, 0x8, {{0x1, 0x200, 0x1, r2}}}, 0x28) fcntl$setstatus(r4, 0x4, 0x6100) ioctl$TCGETA(r3, 0x5405, &(0x7f00000002c0)) sendfile(r4, r3, &(0x7f0000000080), 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]) 12:44:03 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xffffffffffffffff) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) ptrace$getregs(0xe, r0, 0x0, &(0x7f0000000280)=""/4096) 12:44:03 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4}, 0x20) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x24) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) unlink(&(0x7f0000000500)='./file0\x00') ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000880)) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000680)={'syz'}, &(0x7f0000000700), 0x0, 0xfffffffffffffff9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000008c0)={@in6={{0xa, 0x0, 0x0, @mcast2, 0x6}}, 0x0, 0x4022, 0x800, "5a271b3006d9974803ad0266198f099424bca4b0e856f7351870610e37af2e78dae8317a05f313c879204d3ec88ea958536aa4c46f2466bc344aa1fccca41ff5305e771735b6519254b153fabba41944"}, 0xd8) open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x18) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) 12:44:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pipe(&(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0}, 0x20) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x8) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 12:44:03 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xffffffffffffffff) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) ptrace$getregs(0xe, r0, 0x0, &(0x7f0000000280)=""/4096) 12:44:03 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f7000fe01b2a4a280930a600080fea8430291000000390009002300fbff010000000d0005000be9ffffffffc68b65082314e9030b9d566885b16732009b84e7b1df136ef75af90000000000000000", 0x55}], 0x1}, 0x0) 12:44:03 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xffffffffffffffff) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) ptrace$getregs(0xe, r0, 0x0, &(0x7f0000000280)=""/4096) 12:44:03 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f7000fe01b2a4a280930a600080fea8430291000000390009002300fbff010000000d0005000be9ffffffffc68b65082314e9030b9d566885b16732009b84e7b1df136ef75af90000000000000000", 0x55}], 0x1}, 0x0) 12:44:03 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x7}, 0x50) r1 = getpgrp(0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[]}}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fcntl$lock(r2, 0x7, &(0x7f00000003c0)={0x1, 0x4, 0x0, 0x8, r1}) ftruncate(r2, 0x2007fff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0), &(0x7f0000000540)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r4, 0x5422) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0/file1\x00') creat(&(0x7f0000000400)='./file0/file1\x00', 0x80) write$P9_RWALK(r4, &(0x7f0000000680)={0x64, 0x6f, 0x2, {0x7, [{0xac, 0x4}, {0x4c, 0x1, 0x8}, {0x3, 0x1, 0x6}, {0x40, 0x3, 0x3}, {0xb0, 0x4, 0x1}, {0x0, 0x2, 0x4}, {0x0, 0x0, 0x8}]}}, 0x64) stat(&(0x7f00000005c0)='./file0/file1\x00', &(0x7f0000000600)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000500)=0xa, 0x4) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0x6cb90d1f582379b2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) mount$fuse(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000140)='fuse\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="08df9fd76cd6e2649c9775f028060073a42009c4beb3"]) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) [ 985.058473] audit: type=1400 audit(1543322643.836:149): avc: denied { associate } for pid=16847 comm="syz-executor5" name="file1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 985.140012] ================================================================== [ 985.147416] BUG: KASAN: use-after-free in disk_unblock_events+0x51/0x60 [ 985.154172] Read of size 8 at addr ffff88019ca4f3e0 by task syz-executor4/16835 [ 985.161608] [ 985.163226] CPU: 0 PID: 16835 Comm: syz-executor4 Not tainted 4.9.140+ #22 [ 985.170226] ffff8801d94f76e8 ffffffff81b42e79 ffffea0006729200 ffff88019ca4f3e0 [ 985.178294] 0000000000000000 ffff88019ca4f3e0 0000000000000000 ffff8801d94f7720 [ 985.186352] ffffffff815009b8 ffff88019ca4f3e0 0000000000000008 0000000000000000 [ 985.194443] Call Trace: [ 985.197030] [] dump_stack+0xc1/0x128 [ 985.202386] [] print_address_description+0x6c/0x234 [ 985.209041] [] kasan_report.cold.6+0x242/0x2fe [ 985.215262] [] ? disk_unblock_events+0x51/0x60 [ 985.221487] [] __asan_report_load8_noabort+0x14/0x20 [ 985.228235] [] disk_unblock_events+0x51/0x60 [ 985.234285] [] __blkdev_get+0x6b6/0xd60 [ 985.239903] [] ? __blkdev_put+0x840/0x840 [ 985.245692] [] ? blkdev_get+0x466/0x920 [ 985.251317] [] blkdev_get+0x488/0x920 [ 985.256763] [] ? bd_may_claim+0xd0/0xd0 [ 985.262379] [] ? bd_acquire+0x27/0x250 [ 985.267909] [] ? bd_acquire+0x88/0x250 [ 985.273437] [] ? _raw_spin_unlock+0x2c/0x50 [ 985.279404] [] blkdev_open+0x1a5/0x250 [ 985.284938] [] do_dentry_open+0x3ef/0xc90 [ 985.290748] [] ? blkdev_get_by_dev+0x70/0x70 [ 985.296802] [] vfs_open+0x11c/0x210 [ 985.302071] [] ? may_open.isra.20+0x14f/0x2a0 [ 985.308363] [] path_openat+0x542/0x2790 [ 985.313983] [] ? path_mountpoint+0x6c0/0x6c0 [ 985.320037] [] ? trace_hardirqs_on+0x10/0x10 [ 985.326088] [] ? trace_hardirqs_on+0x10/0x10 [ 985.332146] [] ? expand_files.part.3+0x3a9/0x6d0 [ 985.338544] [] do_filp_open+0x197/0x270 [ 985.344162] [] ? may_open_dev+0xe0/0xe0 [ 985.349783] [] ? _raw_spin_unlock+0x2c/0x50 [ 985.355749] [] ? __alloc_fd+0x1d7/0x4a0 [ 985.361371] [] do_sys_open+0x30d/0x5c0 [ 985.366901] [] ? filp_open+0x70/0x70 [ 985.372260] [] ? __compat_put_timespec.isra.3+0xc7/0x140 [ 985.379352] [] ? compat_SyS_clock_gettime+0x131/0x1b0 [ 985.386189] [] ? compat_SyS_clock_settime+0x1a0/0x1a0 [ 985.393026] [] compat_SyS_open+0x2a/0x40 [ 985.398738] [] ? compat_SyS_getdents64+0x280/0x280 [ 985.405333] [] do_fast_syscall_32+0x2f1/0xa10 [ 985.411489] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 985.418154] [] entry_SYSENTER_compat+0x90/0xa2 [ 985.424384] [ 985.426000] Allocated by task 16835: [ 985.429719] save_stack_trace+0x16/0x20 [ 985.433687] kasan_kmalloc.part.1+0x62/0xf0 [ 985.438019] kasan_kmalloc+0xaf/0xc0 [ 985.441746] kmem_cache_alloc_trace+0x117/0x2e0 [ 985.446409] alloc_disk_node+0x54/0x3a0 [ 985.450373] alloc_disk+0x18/0x20 [ 985.453813] loop_add+0x368/0x7a0 [ 985.457256] loop_probe+0x14f/0x180 [ 985.460873] kobj_lookup+0x223/0x410 [ 985.464597] get_gendisk+0x39/0x2d0 [ 985.468218] blkdev_get+0xf6/0x920 [ 985.471748] blkdev_open+0x1a5/0x250 [ 985.475454] do_dentry_open+0x3ef/0xc90 [ 985.479430] vfs_open+0x11c/0x210 [ 985.482874] path_openat+0x542/0x2790 [ 985.486684] do_filp_open+0x197/0x270 [ 985.490484] do_sys_open+0x30d/0x5c0 [ 985.494193] compat_SyS_open+0x2a/0x40 [ 985.498155] do_fast_syscall_32+0x2f1/0xa10 [ 985.502471] entry_SYSENTER_compat+0x90/0xa2 [ 985.506869] [ 985.508488] Freed by task 16835: [ 985.511853] save_stack_trace+0x16/0x20 [ 985.515837] kasan_slab_free+0xac/0x190 [ 985.519914] kfree+0xfb/0x310 [ 985.523012] disk_release+0x259/0x330 [ 985.526805] device_release+0x7e/0x220 [ 985.530680] kobject_put+0x148/0x250 [ 985.534399] put_disk+0x23/0x30 [ 985.537671] __blkdev_get+0x616/0xd60 [ 985.541470] blkdev_get+0x488/0x920 [ 985.545095] blkdev_open+0x1a5/0x250 [ 985.548803] do_dentry_open+0x3ef/0xc90 [ 985.552772] vfs_open+0x11c/0x210 [ 985.556213] path_openat+0x542/0x2790 [ 985.560003] do_filp_open+0x197/0x270 [ 985.563811] do_sys_open+0x30d/0x5c0 [ 985.567518] compat_SyS_open+0x2a/0x40 [ 985.571399] do_fast_syscall_32+0x2f1/0xa10 [ 985.575720] entry_SYSENTER_compat+0x90/0xa2 [ 985.580117] [ 985.581732] The buggy address belongs to the object at ffff88019ca4ee80 [ 985.581732] which belongs to the cache kmalloc-2048 of size 2048 [ 985.594550] The buggy address is located 1376 bytes inside of [ 985.594550] 2048-byte region [ffff88019ca4ee80, ffff88019ca4f680) [ 985.606587] The buggy address belongs to the page: [ 985.611508] page:ffffea0006729200 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 985.621736] flags: 0x4000000000004080(slab|head) [ 985.626486] page dumped because: kasan: bad access detected [ 985.632180] [ 985.633797] Memory state around the buggy address: [ 985.638720] ffff88019ca4f280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 985.646069] ffff88019ca4f300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 985.653418] >ffff88019ca4f380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 985.660764] ^ [ 985.667261] ffff88019ca4f400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 985.674609] ffff88019ca4f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 985.681958] ================================================================== [ 985.689304] Disabling lock debugging due to kernel taint [ 985.699514] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=16848 comm=syz-executor5 [ 985.705836] Kernel panic - not syncing: panic_on_warn set ... [ 985.705836] [ 985.705845] CPU: 0 PID: 16835 Comm: syz-executor4 Tainted: G B 4.9.140+ #22 [ 985.705857] ffff8801d94f7648 ffffffff81b42e79 ffffffff82e37460 00000000ffffffff [ 985.705871] 0000000000000000 0000000000000000 0000000000000000 ffff8801d94f7708 [ 985.705880] ffffffff813f7125 0000000041b58ab3 ffffffff82e2b45b ffffffff813f6f66 [ 985.705881] Call Trace: [ 985.705895] [] dump_stack+0xc1/0x128 [ 985.705903] [] panic+0x1bf/0x39f [ 985.705910] [] ? add_taint.cold.5+0x16/0x16 [ 985.705919] [] ? ___preempt_schedule+0x16/0x18 [ 985.705929] [] kasan_end_report+0x47/0x4f [ 985.705936] [] kasan_report.cold.6+0x76/0x2fe [ 985.705945] [] ? disk_unblock_events+0x51/0x60 [ 985.705953] [] __asan_report_load8_noabort+0x14/0x20 [ 985.705960] [] disk_unblock_events+0x51/0x60 [ 985.705967] [] __blkdev_get+0x6b6/0xd60 [ 985.705974] [] ? __blkdev_put+0x840/0x840 [ 985.705980] [] ? blkdev_get+0x466/0x920 [ 985.705987] [] blkdev_get+0x488/0x920 [ 985.705993] [] ? bd_may_claim+0xd0/0xd0 [ 985.706000] [] ? bd_acquire+0x27/0x250 [ 985.706006] [] ? bd_acquire+0x88/0x250 [ 985.706014] [] ? _raw_spin_unlock+0x2c/0x50 [ 985.706020] [] blkdev_open+0x1a5/0x250 [ 985.706027] [] do_dentry_open+0x3ef/0xc90 [ 985.706034] [] ? blkdev_get_by_dev+0x70/0x70 [ 985.706041] [] vfs_open+0x11c/0x210 [ 985.706048] [] ? may_open.isra.20+0x14f/0x2a0 [ 985.706055] [] path_openat+0x542/0x2790 [ 985.706062] [] ? path_mountpoint+0x6c0/0x6c0 [ 985.706070] [] ? trace_hardirqs_on+0x10/0x10 [ 985.706076] [] ? trace_hardirqs_on+0x10/0x10 [ 985.706084] [] ? expand_files.part.3+0x3a9/0x6d0 [ 985.706091] [] do_filp_open+0x197/0x270 [ 985.706098] [] ? may_open_dev+0xe0/0xe0 [ 985.706104] [] ? _raw_spin_unlock+0x2c/0x50 [ 985.706111] [] ? __alloc_fd+0x1d7/0x4a0 [ 985.706119] [] do_sys_open+0x30d/0x5c0 [ 985.706126] [] ? filp_open+0x70/0x70 [ 985.706134] [] ? __compat_put_timespec.isra.3+0xc7/0x140 [ 985.706142] [] ? compat_SyS_clock_gettime+0x131/0x1b0 [ 985.706150] [] ? compat_SyS_clock_settime+0x1a0/0x1a0 [ 985.706158] [] compat_SyS_open+0x2a/0x40 [ 985.706165] [] ? compat_SyS_getdents64+0x280/0x280 [ 985.706171] [] do_fast_syscall_32+0x2f1/0xa10 [ 985.706179] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 985.706188] [] entry_SYSENTER_compat+0x90/0xa2 [ 985.711887] Kernel Offset: disabled [ 985.999480] Rebooting in 86400 seconds..