00000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:21:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) capget(&(0x7f0000feaff9)={0x20080522}, 0x0) 03:21:57 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x6175}], 0x1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000023c0), 0x1000000000000252) 03:21:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x102}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) dup3(r0, r1, 0x0) 03:21:57 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x6175}], 0x1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000023c0), 0x1000000000000252) [ 796.069140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:21:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:21:57 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000140)={0xfffffffffffffd1f}, 0x3) open(0x0, 0x4000, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@sha1={0x1, "557705131342bd6834c39e84724a39c1dd64f86c"}, 0x15, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r2, 0x3, 0x0, 0x8020003) writev(r2, &(0x7f0000000380)=[{0x0}], 0x1) lseek(r2, 0x0, 0x3) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x24c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff9}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6aa7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c36}]}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa34}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa247}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff4d4}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe12a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfa11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40000890}, 0x84054) accept4(r1, &(0x7f0000000480)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000500)=0x80, 0x800) fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000004000000000000", @ANYRES32, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB="040001000000000008000d00", @ANYRES32, @ANYBLOB="08000600", @ANYRES32, @ANYBLOB="10000100000000002000050000000000"], 0x4c, 0x0) 03:21:57 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x6175}], 0x1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000023c0), 0x1000000000000252) [ 796.245672] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 796.290712] audit: type=1400 audit(1574133717.700:230): avc: denied { read } for pid=31780 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 03:21:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:21:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_deladdr={0x34, 0x15, 0x3b93baa10eb688ed, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFA_FLAGS={0x8}]}, 0x34}}, 0x0) 03:21:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x6175}], 0x1, 0x0, 0x0) writev(r0, 0x0, 0x0) [ 796.643194] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:21:58 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r0, 0x2040000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000800)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x68, 0x2}}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4000080) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00E8\xddV\x82li\x1d/y6\xa2\xea\xff7\xcaz\xb1\x04\xa5\x14[\x1d+5B\\q.\x11\x91Y\xe0\xcb\xc5.$\x13h\xac\x89\xca\x86\x11\x03\x1c\x9d\x06KB\x05,\x84>\x84i\x10\x96\xf1BC\xb31\x7f\x96\x7f\x82\"2\x00\x00\x00\x00\x00') r6 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="d2218924a99e6430837f5f192e1e925fceabafc841cb9635568f21bf63eea80b840c96334bfc51cc3818a02278976feacab9cda285c9c22474fc9cf7d440bfedc9ccfb32b1f836e5aab53a096da1a36810dfd7d8364d666676fd"]}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000004c0)={'netdevsim0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="680000000008000006000004ff014011067f05418000000040000000ff07016400080000305b800005000000"]}) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101}) linkat(r5, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000300)='./bus\x00', 0x400) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000580)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000009c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="10002cbd7000fcdbdf2515000000440009080800020000000000080001000000000008000200e55d0000080002009104000008000200a800000008000100f7ffffff08000200980e000008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef385"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r7}, 0x18, 0x0) r8 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_gstrings={0x1b, 0x5}}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000c80)={{{@in=@broadcast, @in=@multicast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) r9 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6100) write$FUSE_INIT(r4, &(0x7f00000003c0)={0x50, 0xfffffffffffffffe, 0x1, {0x7, 0x1f, 0x0, 0x0, 0x1a27, 0x0, 0x8, 0x4}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r9, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000540)) fcntl$getown(0xffffffffffffffff, 0x9) r10 = gettid() ptrace$setopts(0x4206, r10, 0x0, 0x0) tkill(r10, 0x3c) ptrace$cont(0x18, r10, 0x0, 0x0) ptrace$setregs(0xd, r10, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r10, 0x0, 0x0) r11 = gettid() ptrace$setopts(0x4206, r11, 0x0, 0x0) tkill(r11, 0x3c) ptrace$cont(0x18, r11, 0x0, 0x0) ptrace$setregs(0xd, r11, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r11, 0x0, 0x0) getpgrp(r11) 03:21:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r4}]]}}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x34}}, 0x0) 03:21:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x6175}], 0x1, 0x0, 0x0) writev(r0, 0x0, 0x0) 03:21:58 executing program 0: clone(0x1000000000011, 0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 03:21:58 executing program 4: socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, &(0x7f0000000040)) dup2(r0, r1) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) 03:21:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:21:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x6175}], 0x1, 0x0, 0x0) writev(r0, 0x0, 0x0) 03:21:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 796.773187] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:21:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b", 0x39}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 03:21:58 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$setregs(0x11, r0, 0x0, &(0x7f0000000140)) 03:21:58 executing program 3: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='net/arp\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r3 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000100)) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendfile(r0, r2, 0x0, 0x20020102000007) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="f95dcdfb2b9198141d3c52867e7d7d16266752837bc614b3c0554bf947a0"], 0x1e) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xffffffffffffff74, 0x100100, &(0x7f0000000180)=@abs, 0xfffffffffffffd21) syz_open_procfs(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) [ 796.920002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:21:58 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) read(r4, &(0x7f0000000000)=""/250, 0xedf1d44) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r7, 0x4, 0x40400) write$FUSE_WRITE(r7, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x6100) fdatasync(r1) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400006a, 0x0) 03:21:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000001c0), 0x0, 0x0, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r3) rt_tgsigqueueinfo(r3, r3, 0x12, &(0x7f0000001180)={0x0, 0x0, 0xffffbfffffffc58e}) ptrace(0x4208, r3) 03:21:58 executing program 4: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80c00) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x2, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfe}}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0xb309a17e871cc587}, 0x14}}, 0x0) fsetxattr$security_ima(r2, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000440)=@sha1={0x1, "f6c22f460365f9360c48948b1b0b911ab5185102"}, 0x15, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000340)=@md5={0x1, "86ee741e65596c5d12183d4e4a409aa4"}, 0x11, 0x2) ioctl$FIBMAP(r1, 0x1, &(0x7f00000004c0)=0x2) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r3, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="9033877ace25a0cd47de5752f2fe725302f5297240df794a3f9e8efd1c159b2bb4cfdc71f2cd4ccab950100494", 0x2d}, {&(0x7f0000001c40)}, {&(0x7f00000002c0)="f7fc370763ed7a4dbfaf549cd1dc94c047d2bfd2da573ebddcf5db435637f045346375f1b75c21a0106605fa2c283aaa0014062099dc4b58d700b3a07dbc83010c24cb730b30aee0103d81b75a4f6ce90dd0237bd4b22d66e95966a0ad75b3f8338268b29e2dd7c90b5b33722b010ce947eab220e38600b4", 0x78}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000080)="4326b5be4c72829e48001bfdce33d9a34689f07e340cec408be4e862cc21d93ea75e6e79c33cb2966b5a3e0a60677b6dbbb84bd6946d811304b2269c4dfbf4b532516ea09b4413681d63ea", 0x4b}, {&(0x7f0000000b40)="70799d7f93aee25740609238367b30d5bd2da4a8a782f1e2bfe6e09ea5587d2488139bce0b6720aa3beec624a66fba665935593f143410e814194574d6c5caa5a0a643a77a6837f10a97664379ac508c2c604e84b914cca11d7c13c7516775c47b89811abd1b86bdc06b4c2df598cc7f7707a1c0400e52e98972dcc961b5a697d45539c7b8f008ed83ff", 0x8a}, {0x0}, {&(0x7f0000000f40)="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", 0x358}], 0x4}}], 0x2, 0x80) sendto$inet(r3, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2) [ 796.966493] ptrace attach of "/root/syz-executor.4"[32274] was attempted by "/root/syz-executor.4"[32275] 03:21:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:21:58 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000400)='8Q\x17 \x00\x00\x00\x00\x00\x00\x00\x15\x00', 0x2, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x3494440244f91bbc, 0x100000022) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fsetxattr$security_smack_entry(r2, &(0x7f0000000180)='security.SMACK64IPOUT\x00', 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x46800) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000000)={0x2c1, 0xf3226e0cd8426bd8, 0x0, {0x7, 0x1f, 0x2, 0x80000}}, 0x13) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='\xce\x00\x00\x00\x00#\x00', 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, 0x1, {0x1000}}, 0x290) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r6) r7 = dup(r5) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002a80)={'rose0\x00'}) sendto$inet(r8, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x3d2) setsockopt$sock_int(r8, 0x1, 0x1000000000008, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000480)={{{@in=@empty}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000580)=0xfe3e) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x8000}, 0x480) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x2) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r10 = socket$inet(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x8000, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0xffffffffffffff3b) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r10, &(0x7f0000000480), 0xc4, 0xe9281191071944d, 0x0, 0x0) listen(r10, 0x4) 03:21:58 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) renameat(r0, &(0x7f00000002c0)='./bus\x00', r0, &(0x7f0000000500)='./file0\x00') [ 797.079281] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:21:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:21:58 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x4001f0, 0xffffffff}) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/105, 0x69, 0x10100, 0x0, 0x0) getrandom(&(0x7f0000002380)=""/106, 0xfffffffffffffff6, 0x0) [ 797.201370] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 797.228453] tc_dump_action: action bad kind 03:21:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:21:58 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x15}, {0x80000006}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 03:21:58 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:21:58 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xf94e717e5e7e4597}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r4, &(0x7f0000000d00), 0x1bdd307, 0x0) 03:21:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:21:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 797.744633] net_ratelimit: 26 callbacks suppressed [ 797.744641] protocol 88fb is buggy, dev hsr_slave_0 [ 797.754741] protocol 88fb is buggy, dev hsr_slave_1 03:21:59 executing program 4: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r5 = openat$full(0xffffffffffffff9c, 0x0, 0xf630652407c83dd8, 0x0) getpeername$packet(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0x8000fffffffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x0, 0x2, 0x0) r6 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000001800)=""/151) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8020003) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0x7, 0x0, 0x1, 0x0, 0x0, 0x88021}, 0x100) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x88000, 0x0) pipe(&(0x7f0000000200)) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x42, 0x0) 03:21:59 executing program 3: sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0), 0x4) sendto$inet(r2, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000180), 0x144, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) recvmmsg(r2, &(0x7f0000003a40), 0x8000078, 0x2, &(0x7f0000003bc0)={0x0, r3+30000000}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000100)) 03:21:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:21:59 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:21:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x2a, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000"/26, @ANYPTR, @ANYPTR=&(0x7f00000000c0)=ANY=[]], 0x0, 0x0, 0x0}) [ 798.056155] binder: 520:524 ioctl c0306201 20000000 returned -14 03:21:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xde5}, 0x1c) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffbfffe) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000000080)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x526987c9) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0x526987c9) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) connect$inet6(r3, 0x0, 0x2b7) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(r0, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x0, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0xded3740f62a47da, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) write(r6, &(0x7f0000000340), 0xffffffec) recvfrom$inet6(r6, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r8 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 03:21:59 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:21:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:21:59 executing program 5: pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') setns(r0, 0x0) 03:21:59 executing program 3: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000014, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getsig(0x4209, r0, 0x75fffc, 0x0) [ 798.304639] protocol 88fb is buggy, dev hsr_slave_0 [ 798.309808] protocol 88fb is buggy, dev hsr_slave_1 [ 798.315004] protocol 88fb is buggy, dev hsr_slave_0 [ 798.320092] protocol 88fb is buggy, dev hsr_slave_1 03:21:59 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 798.354765] binder: 737:740 ioctl c0306201 20000000 returned -14 03:21:59 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 798.433886] binder: 798:845 ioctl c0306201 20000000 returned -14 03:21:59 executing program 4: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000001180)={0x0, 0x0, 0xffffbfffffffc58e}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) readv(r1, &(0x7f00000002c0), 0x1a5) 03:21:59 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) 03:21:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x0, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:21:59 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 798.480764] binder: 921:923 ioctl c0306201 20000000 returned -14 03:21:59 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="0400cd80"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe1f6adb3b91e7f1ffd7e4ab569f8eb9808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd913acf060c10300000082fc399eaab8787f0dd1510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d00020160d1f3f3c0da4b0638b1d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea942494855d4bd3388b68af3", @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRESDEC], 0x0, 0x11c}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:22:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'\x02\xfb8', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r0, &(0x7f0000000000), 0x0) 03:22:00 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:00 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) accept4$unix(r3, &(0x7f0000000500)=@abs, 0x0, 0x100000) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x19e6}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) clock_settime(0x0, 0x0) close(r0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x2, 0x8012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') lseek(0xffffffffffffffff, 0x20400000, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000040)="b7", 0x1}], 0x1) r5 = creat(0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000740)={@mcast2, 0x5f, r6}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000700)={'team0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20020}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x184) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') 03:22:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x0, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 798.573227] binder: 1028:1076 ioctl c0306201 20000000 returned -14 03:22:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000006b00)={@local, @loopback}, &(0x7f00000073c0)=0xc) 03:22:00 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:00 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x905) [ 798.661909] binder: 1087:1088 ioctl c0306201 20000000 returned -14 03:22:00 executing program 4: stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) syz_open_dev$loop(0x0, 0x4, 0x51d00) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) write(r1, &(0x7f00000001c0), 0xfffffef3) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r3, r0) 03:22:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x0, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:22:00 executing program 0: pipe2(&(0x7f0000000140), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0, 0x31}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket(0x100000800000011, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x100000800000011, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4034ccdbf2bb01402120148d0f34"], 0xe}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 798.738051] binder: 1110:1129 ioctl c0306201 20000000 returned -14 03:22:00 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:00 executing program 5: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x80000, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80c00) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x25, &(0x7f0000000440), &(0x7f00000004c0)=0x4) r0 = socket(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfb120eb7) ioctl$PIO_FONT(r0, 0x4b61, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents(r4, &(0x7f0000000040)=""/253, 0xfd) r5 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB='~\n\x00\x00\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040029bd7000ffdbdf25020000000c000110080009002b0000001800010008000200870000000c0007002000000005000000080004003100000054000200080004000100000008000900210800000800030004000000080005004000000008000300020000000800050065090000"], 0x3}, 0x1, 0x0, 0x0, 0x30000000}, 0x801) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x42400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000880)={0x128, r6, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x9fee2aad287305cc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DEST={0x78, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x6c65991dc333d6de}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="09f89eaa1d216a9e0d02e0978a7af49c"}]}]}, 0x128}}, 0x1) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000007c0)) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r3, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="9033877ace25a0cd47de5752f2fe725302f5297240df794a3f9e8efd1c159b2bb4cfdc71f2cd4ccab950100494a6edc071a5b8facd4080eb02bd8342acfb2c0241fa15a8f3b27755b25c65f4ab48338111ffa1fe393a425c0ba2c13067100170698a151664c4152a8824af1cb68d98f0259494c6d057", 0x76}, {&(0x7f0000001c40)="b03e2e48783b8582415ce86a7743d604df2b69b6fd9abdd925bdfba510ca05650a2e02e055478b69776dc114eb3a27d3a3d589710f2aafda3a453fe3770255d56a43a3e27e3fe045e5bd482c81660aa0caa7625bf9dcf80569541a0019dba3b36e53f753c03a8f530a2392f87754d16e1eb02a3075ce111a9a4172cb6bebd607bfc82a8f5086ff43d355b7209f31230649fd10b930e461dfe37ed688cb8e4564ad7777e6d18872ef4e41c8d201f8dc68f6c61dc88b939b738e43fd8d86387ba54fe9a3689bbde86d7d52ffcbd30f8491a007d231212ec410337cd1b12721cf7c06f25620c7dc12752d7355fb70a53309d7f39ffa3a781b10", 0xf8}, {&(0x7f00000002c0)="f7fc370763ed7a4dbfaf549cd1dc94c047d2bfd2da573ebddcf5db435637f045346375f1b75c21a0106605fa2c283aaa0014062099dc4b58d700b3a07dbc83010c24cb730b30aee0103d81b75a4f6ce90dd0237bd4b22d66e95966a0ad75b3f8338268b29e2dd7c90b5b33722b010ce947eab220e38600b4", 0x78}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000080)="4326b5be4c72829e48001bfdce33d9a34689f07e340cec408be4e862cc21d93ea75e6e79c33cb2966b5a3e0a60677b6dbbb84bd6946d811304b2269c4dfbf4b532516ea09b4413681d63ea", 0x4b}, {&(0x7f0000000b40)="70799d7f93aecd5740609238367b30d5bd2da4a8a782f1e2bfe6e09ea5587d2488139bce0b6720aa3beec624a66fba665935593f143410e814194574d6c5caa5a0a643a77a6837f10a97664379ac508c2c604e84b914cca11d7c13c7516775c47b89811abd1b86bdc06b4c2df598cc7f7707a1c0400e52e98972dcc961b5a697d45539c7b8f018ed83ff9a7e106143298689be64290c67", 0x97}, {&(0x7f0000000d40)="268c50b6257e6caa1f09d6d765bcc675095694fb75e62bee459311dc547354cfaab92fa9670d7f1dab24", 0x2a}, {&(0x7f0000000f40)}], 0x4}}], 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) sendto$inet(r3, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000140)={{0x10, @dev={0xac, 0x14, 0x14, 0x2a}, 0x4e22, 0x2, 'wlc\x00', 0x4b, 0x8, 0x61}, {@rand_addr=0x40, 0x4e22, 0x2000, 0x863, 0xfffffffe, 0x8}}, 0x44) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) add_key$keyring(&(0x7f0000001580)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, 0x0, &(0x7f00000016c0), 0x0, 0xfffffffffffffff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) [ 798.784642] protocol 88fb is buggy, dev hsr_slave_0 [ 798.789892] protocol 88fb is buggy, dev hsr_slave_1 [ 798.803130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25961 sclass=netlink_route_socket pig=1176 comm=syz-executor.3 03:22:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x10, 0x80003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:22:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 03:22:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x10, 0x80003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:22:00 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000001c0)={0x0, {0x0, 0x1823}}) [ 798.939494] binder: 1323:1325 ioctl c0306201 20000000 returned -14 [ 798.944720] protocol 88fb is buggy, dev hsr_slave_0 [ 798.951277] protocol 88fb is buggy, dev hsr_slave_1 [ 798.974664] input: syz1 as /devices/virtual/input/input90 03:22:00 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') sendfile(r0, r1, 0x0, 0x88004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000340)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000580)={0xa, 0x0, 0x0, @rand_addr="5ce03a98669138256b86c3ceda7e8c84"}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x3fffe83, 0x0) 03:22:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004f40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0xd2, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3}]}}}], 0x18}}], 0x2, 0x0) [ 799.098784] binder: 1451:1452 ioctl c0306201 20000000 returned -14 [ 799.141082] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 799.164489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 799.181775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 799.202229] input: syz1 as /devices/virtual/input/input93 03:22:01 executing program 4: socket$inet6(0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xd) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/policy\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190820ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a01009164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190820ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a01009164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') read$FUSE(r4, &(0x7f0000000000), 0x1170) write$FUSE_NOTIFY_POLL(r4, 0x0, 0x15) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0x8) fchdir(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x2, 0xfffffffffffffffb, 0x6}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') r7 = dup3(0xffffffffffffffff, r6, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0xb00}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x30a) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x0) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r12, 0x0, r12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='pids.events\x00', 0x275a, 0x0) ptrace(0x10, r5) wait4(r5, 0x0, 0x2, 0x0) 03:22:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x10, 0x80003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:22:01 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x11, 0x1b1, 0x7) 03:22:01 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000700)=[{0x0}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x4011) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000180), 0x144, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) recvmmsg(r3, &(0x7f0000003a40), 0x8000078, 0x2, &(0x7f0000003bc0)={0x0, r4+30000000}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$packet(0x11, 0x40800000000003, 0x300) ppoll(&(0x7f0000000140)=[{r5}], 0x1, 0x0, 0x0, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x16}, 0x14) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000100)=0x162, 0x3e) sendto$inet6(r5, &(0x7f0000000040)="0104000073d1600000000000fbf55b42b905166fb82ee3ea2cfccadb4d916502c555cf09570300a44b29d9fde6ea94211af8e74bab5b98aa9d89060000c846781d1aab3668c64de00004000000791608f2003ee478efddfc86a15aaaf3cd1ad1dfff004000000033e0", 0x69, 0x4000000, 0x0, 0x0) r6 = socket$packet(0x11, 0x40800000000003, 0x300) ppoll(&(0x7f0000000140)=[{r6}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmmsg$inet6(r7, &(0x7f00000052c0)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000980)={0xa, 0x4e23, 0x2, @loopback}, 0x1c, 0x0}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r11}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000014000105000037000000000002", @ANYRES32=r11, @ANYBLOB="08000200e0000001"], 0x3}}, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r12, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmmsg$inet6(r12, &(0x7f00000052c0)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000980)={0xa, 0x4e23, 0x2, @loopback}, 0x1c, 0x0}}], 0x2, 0x0) getsockopt$inet6_mreq(r12, 0x29, 0x0, &(0x7f0000000640)={@mcast1, 0x0}, &(0x7f0000000680)=0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'j\b\x80\x00 \x00', r13}) bind$packet(r6, 0x0, 0x0) 03:22:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=@setlink={0xa8, 0x13, 0x281, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x5}, @IFLA_XDP={0x80, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}, @IFLA_XDP_FLAGS={0x8}]}]}, 0xa8}}, 0x0) 03:22:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, 0x0, 0x0) [ 799.636285] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 799.641033] binder: 1667:1672 ioctl c0306201 20000000 returned -14 03:22:01 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, 0x0, 0x0) 03:22:01 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001380)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc158bb2b03b5b2461179f5f90bba001b5080da6218a8106df2858ec973328e5a2c078a3fe3b52020203517e25ee74e82ba80a0fa881e689f7615baf78f08ea33bcb860d6a0b61193d4a1cb622431d42fee5e", 0xa4}], 0x1000000000000039, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 03:22:01 executing program 5: sched_setattr(0x0, &(0x7f0000000040)={0x2e2}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) getdents(0xffffffffffffffff, 0x0, 0x2) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{&(0x7f0000000300), 0x10, 0x0}}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 799.816609] binder: 1884:1886 ioctl c0306201 20000000 returned -14 [ 799.941070] ptrace attach of "/root/syz-executor.4"[1916] was attempted by "/root/syz-executor.4"[1994] [ 799.952793] IPVS: ftp: loaded support on port[0] = 21 03:22:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @dev}}, 0x1e9) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2e) wait4(0x0, 0x0, 0x0, 0x0) 03:22:01 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:01 executing program 3: r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x84000002) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ftruncate(r0, 0x0) 03:22:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, 0x0, 0x0) 03:22:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1800007, 0x11, r3, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 03:22:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000340)={0x8, "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", 0x1000}, 0x1006) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) [ 800.104453] binder: 2103:2105 ioctl c0306201 20000000 returned -14 03:22:01 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:01 executing program 0: socket$inet(0x2, 0x4000020000000001, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0xfffffec9, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0xffffeb4}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket(0x20000000000000a, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001000)='/proc/self\x00', 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="4034abbb0140212014250f34"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) tkill(r1, 0x40) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 03:22:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 03:22:01 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r0, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 800.203710] ptrace attach of "/root/syz-executor.4"[2296] was attempted by "/root/syz-executor.4"[2297] [ 800.233861] binder: 2343:2373 ioctl c0306201 20000000 returned -14 03:22:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x03\xc3 \b\x00@\x00', 0x2}) r4 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) pwritev(r4, &(0x7f0000000440)=[{&(0x7f00000000c0)="10dbb4c9cd05d50993cfcb10df045bdbf1202a3274c589913a11fffeef9b5eb07eaf6993639ea1b3a7abc0f571aab813d7ff4ab40e07c77d8d83b653628d2f8c5474a44efd05140b90438296615820fc0f7e7b0ac8706b081aa9d1e0e94edc95d6820155147d4a36bcc86c331fbbe906d2dbbb60611ab2ad34c1fd897cbce07d8d", 0x81}], 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)) 03:22:01 executing program 5: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/create\x00', 0x2, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000000)={'system_u:object_r:semanage_read_lock_t:s0', 0x20, 'system_u:object_r:public_content_t:s0', 0x20, 0x0, 0x20, '%nconfY\xaci+eG\xd8R\x9c\xb6\xba\xbe\xa8\xa7\xde\xec\xca\xdc%B5\xc4n}lK\xb4rn,\x1e\x1aq\xa2)\xbc\x14\xbc\xd7-\xa8E\xc6y\x19i\xb6\x7f\xceX\na\xac\xaa++o\x96L\xca\x0e\xbe\x04%\xb7\xfc\x84\xf8\xd2H\xb7\x80n\xe2S\xb8\xb0\xa5\x10Z\xa4R5\x8dF\xa0&?\xce\xa40\xeb\xfb\x90\xd4|\x91\xc9\x86E(P\xf4\xbe\xd7\xac\x9e\x9cL\xf4\xc5\x13\x9b\xc1\'\x93<\xbe\xcf\xa4\xe4\xfam\xdf\xe4L\xe8v\xdft\x86\xad\xd4n\xf8\xb3<\x1f\xd2\x9c\xe96\x98\x84|\x124\xfcu'}, 0x100) 03:22:01 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000000)) socket$inet6(0x10, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000340)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) ptrace(0x8, r2) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000380)) fcntl$lock(r0, 0x5, &(0x7f00000003c0)={0x4, 0x0, 0x1, 0xffffffff, r2}) prctl$PR_SET_PDEATHSIG(0x1, 0x28) open(&(0x7f00000000c0)='./file0\x00', 0x200001, 0x40) sendto(0xffffffffffffffff, &(0x7f0000000400)="78942fdbee152e72d0074822d43aa83a72c2b1d82485e44dcaeb0f7444d4cd5b2381fdbc1467ac19cd8651459fefffbc74d2f01ad85361ebef68c6cc7e65a3bb177a4c1a0356a30c5c22cd7ceff164eba66f5790e3c1718fab", 0x59, 0x800, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r4, 0x5}) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7f) ioctl$TCXONC(r5, 0x540a, 0x0) ptrace(0x10, r3) wait4(0x0, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000040)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000040)) r8 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x402) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0x323) r9 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r9, 0x1, 0x39, 0x0, &(0x7f00000000c0)) write$FUSE_POLL(r8, &(0x7f0000000540)={0xffffffffffffffc0, 0x0, 0x1}, 0x18) sendfile(r8, r9, &(0x7f0000000140), 0x8fff) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000040)=0x0) getpgid(r10) request_key(&(0x7f0000000300)='rxrpc_s\x00', 0x0, &(0x7f00000001c0)='\x00', 0xfffffffffffffffc) syz_genetlink_get_family_id$SEG6(0x0) 03:22:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 03:22:01 executing program 5: sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) dup2(0xffffffffffffffff, r1) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x28, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8}}}, 0x28}}, 0x2050) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba0009008d2633568e00000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x3) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r5) r7 = open(&(0x7f0000002000)='./bus\x00', 0x504c2, 0x0) ftruncate(r7, 0x2007fff) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r10, 0xffffffffffffffff) write(r9, &(0x7f00000001c0), 0xfffffef3) read(r8, &(0x7f0000000b80)=""/270, 0xb37af43) sendfile(r0, r7, &(0x7f0000d83ff8), 0x8000fffffffe) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x15004, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 03:22:01 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000080)={0x4, 0x3ff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x1}) 03:22:01 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r0, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f000000a540)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@flowinfo={{0x14, 0x29, 0xb, 0x31}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) 03:22:01 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r0, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 800.539935] audit: type=1400 audit(1574133721.950:231): avc: denied { block_suspend } for pid=2457 comm="syz-executor.0" capability=36 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 03:22:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 800.583173] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:22:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:02 executing program 3: timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f0000000740)={{}, {0x77359400}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000540)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, r1+30000000}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000540)=0x0) timer_settime(r2, 0x1, &(0x7f0000000740)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:22:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0xce58c231dd7225d1, 0x53) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x8000, @remote}, {}, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @rand_addr=0x8}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000080)='hsr0\x00', 0x2, 0xffff, 0x3f}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x70, 0x10, 0x705, 0x3, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x8000}, [@IFLA_LINKINFO={0x50, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x44, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1b}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_PROTO={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @empty}, @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x70}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0xc05, 0x9, 0x400, 0x8560, 0x20, r4}) 03:22:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)}, 0x0) [ 800.776163] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 800.798032] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 800.807665] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 800.815612] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 800.825163] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 800.827418] IPVS: ftp: loaded support on port[0] = 21 [ 800.845985] binder: 2780:2788 ioctl c0306201 20000000 returned -14 [ 801.047787] IPVS: ftp: loaded support on port[0] = 21 03:22:02 executing program 3: syz_genetlink_get_family_id$tipc2(0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = creat(0x0, 0x0) dup2(0xffffffffffffffff, r3) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 03:22:02 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="0400cd80"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe1f6adb3b91e7f1ffd7e4ab569f8eb9808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd913acf060c10300000082fc399eaab8787f0dd1510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d00020160d1f3f3c0da4b0638b1d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea942494855d4bd3388b68af3", @ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b30eecd4f9ad03000000dfdaf3", @ANYRESDEC], 0x0, 0x16d}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:22:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 03:22:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:02 executing program 4: gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:02 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 03:22:02 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000014c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x100) ioctl$TUNGETSNDBUF(r1, 0x800454d3, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x0, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r2, &(0x7f00000000c0), 0x20000000000001d2) 03:22:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)}, 0x0) [ 801.165734] binder: 3060:3064 ioctl c0306201 20000000 returned -14 03:22:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:02 executing program 4: gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:02 executing program 0: capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@empty}, 0x14) 03:22:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 03:22:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045438, 0x71dffd) [ 801.332358] binder: 3324:3346 ioctl c0306201 20000000 returned -14 03:22:02 executing program 4: gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:02 executing program 5: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x84, 0x20000000, 0xca}) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:22:02 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:02 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), 0xfffffffffffffdae) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x27, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000300)={0x0, 0x0}, 0x10) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1700260000000000000000080000000000004b28f21144b86eb2eb1d480c7fbd278d8c018f2eea44b187ab42536b79a49bde3219bd7c63bf0ce4e7d519cbf9b300a5aa0a8b670fc103aa492f3bb9f3cab63b884d8ffc0fcdac99ea8f678ee136df6585df3fb3fe6442485663c0d5e8b01cc0292452c03b4c9a37283345f59e8f55398cd1bce5d41268e4ebe300d2080000000000000dddf2f902a6a2c4d88cf88c4543fd8c6d423f1c8abb1b77c1faba2f3902e35551e6fdbe7b4fc8f9b7333ce181ffe6dffceded7f46bd3e20010001000000000000000993b88935826be7a3afa6d0f3320e682e26559f5c97473dfcdb15b3e6000000f9000000000000000000000062893c4bd8aae1ca8c77fe8a3e07000000c60af2d48be5f189aab8b5602086125bdf1dd6263847ac00ae00000069016d31a2199ae8b75ce57d5d9c5a5fdf926346e1dcac9984a2171a1f28ce017dba0ab09daeda470a1a56003c8407753a39ed0969b1b46b17b8f2805b11fdc85420967681babdec364d14611062270df2f8b2dde445bae9fd6581"], 0x1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r2, 0x0) pipe(&(0x7f0000001440)) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000180)) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x402) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) syz_genetlink_get_family_id$tipc(0x0) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000040)) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$FUSE_POLL(r3, &(0x7f0000000540)={0xffffffffffffffc0, 0xfffffffffffffffe, 0x1}, 0x18) r7 = socket(0x10, 0x80002, 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0x34, 0x0, @thr={&(0x7f0000000640)="601d1e17eb296e55f0ec6d9277c5c6654ed7a8ee981313fec5693e3690775664bf63427aca99c38daa1d9dc465d3d4898030a2fe009556a5dd1685a2121e22a84d398c76b6d986168275a78b26ba017393fbb24dcd8a1724c197a528ede6774d33c9a95271aa4c1d35f1436b877397508b1ed8ae099d9d2e59f233fda89e2c45d54607dd66b7858a8796ca6cb47ed35a214fe5658b8920433a14", &(0x7f0000000300)="5dd1fe141a30375709aa184e1f1d"}}, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8001002}, 0xc) connect$netlink(r7, &(0x7f0000000000), 0x2d2) write(r7, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r7, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x4d9) sendfile(r3, r6, &(0x7f0000000140), 0x8fff) 03:22:02 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffe05}, {&(0x7f0000000000)=ANY=[], 0x2}], 0x4}, 0x0) tkill(r0, 0x24) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 03:22:02 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) link(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='./file0\x00') 03:22:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 03:22:02 executing program 4: gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) [ 801.559917] binder: 3478:3500 ioctl c0306201 20000000 returned -14 03:22:03 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc001084}, 0xb, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[]}, 0x1, 0x0, 0x0, 0x84}, 0x8004) fchdir(0xffffffffffffffff) creat(0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000080)={0x2000}) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:22:03 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:03 executing program 4: gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 03:22:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000280)='./file0\x00', 0x2) 03:22:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='setgroups\x00') clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1) ptrace$cont(0x18, r1, 0x0, 0x0) read$FUSE(r0, &(0x7f00000001c0), 0x1000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) [ 801.759956] binder: 3652:3716 ioctl c0306201 20000000 returned -14 03:22:03 executing program 4: gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:03 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@weak_binder, @ptr={0x70742a85, 0x0, 0x0}, @flat=@weak_binder}, &(0x7f0000000440)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001500)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000500)='t'}) 03:22:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) 03:22:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1219ae739c3c8590) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000600)=0x207, 0x2) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r2, 0x0) pipe(&(0x7f0000000400)) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000180)=0x10001) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x402) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000040)) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000000080), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$FUSE_POLL(r3, &(0x7f0000000540)={0x18, 0xfffffffffffffffe, 0x1, {0x3298}}, 0x18) r7 = socket(0x10, 0x80002, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8001002}, 0xc) connect$netlink(r7, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000b4bffc)=0x7, 0x4) sendto(0xffffffffffffffff, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x2, 0x0) sendfile(r3, r6, &(0x7f0000000140), 0x8fff) 03:22:03 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet(0x10, 0x3, 0x0) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0x0, 0x4}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={0x0, 0x0, 0x51069415c4cca95e}, 0x10) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000580)="4c0000001200ff09fffefd956fa283b724a60080000000000000006835400b908cea1d001fc41180b598bc593ab68d1148a730de33a40400c62b2ca654a6613b6aabe88f799a0d4a4c712b5137", 0x4d}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x397, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f00000001c0)={0x77359400}) r3 = syz_open_procfs(0x0, 0x0) execveat(r3, 0x0, 0x0, 0x0, 0x1000) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x7, @mcast1, 0x6}, 0x1c) geteuid() r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) fcntl$setsig(r4, 0xa, 0x1) [ 802.011550] binder: 3896:3911 ioctl c0306201 20000000 returned -14 03:22:03 executing program 4: gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) 03:22:03 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20008088) write$cgroup_type(r1, 0x0, 0x0) getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"/700], 0x29d}}, 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) fstat(r4, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0x3f, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r3, r5, 0x442, 0x10000, 0xffffffffffffffff, 0x9, 0x7ffffffffffffffd, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x8, 0x3}}, 0x77) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) fstat(r7, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0x3f, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r6, r8, 0x442, 0x10000, 0xffffffffffffffff, 0x9, 0x7ffffffffffffffd, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x8, 0x3}}, 0x77) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) fstat(r10, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0x3f, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r9, r11, 0x442, 0x10000, 0xffffffffffffffff, 0x9, 0x7ffffffffffffffd, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x8, 0x3}}, 0x77) getgroups(0x3, &(0x7f0000000dc0)=[0xee01, r8, r11]) getresuid(&(0x7f0000000fc0)=0x0, &(0x7f0000001000), &(0x7f0000001040)) mount$fuse(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000680)='fuse\x00', 0x14011, &(0x7f0000002dc0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r12}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xffffffff}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x100000000}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_user={'subj_user', 0x3d, 't%\x15/\x19Lf \x89[\x87uN\xae\x19F\xb4R\x1bi\x98a\a4\xd5\xfd\xf3\xc7\x8b\xdfR\xac\xdd\x00j\xa4\x95C\xc1~G\xa1'}}, {@uid_lt={'uid<', r13}}, {@obj_user={'owj_user'}}, {@dont_hash='dont_hash'}]}}) recvmmsg(r2, &(0x7f0000000e00)=[{{&(0x7f0000000480)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000540)=""/11, 0xb}, 0xffffffff}, {{&(0x7f0000000580)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/168, 0xa8}, {&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f0000000840)=""/200, 0xc8}, {&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/229, 0x482}, {&(0x7f0000000b00)=""/149, 0x43b}], 0x6, &(0x7f0000000bc0)=""/121, 0x62}, 0x1}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/251, 0xffffffffffffff99}], 0x2, &(0x7f0000000ec0)=""/27, 0xc}, 0xfffffffc}], 0x3, 0x200002, &(0x7f0000000c40)={0x77359400}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="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"/706], 0x29d}}, 0x0) recvmmsg(r14, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 03:22:03 executing program 0: socket$unix(0x1, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080), 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x11) fcntl$setstatus(r1, 0x4, 0x6100) set_tid_address(&(0x7f0000000040)) clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d9189) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = gettid() r5 = gettid() sendmmsg$unix(r3, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x34}], 0x1, 0x0) r6 = socket$unix(0x1, 0x0, 0x0) bind$unix(r6, 0x0, 0x0) listen(r6, 0x0) r7 = socket$unix(0x1, 0x0, 0x0) connect(r7, &(0x7f0000931ff4)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80) gettid() r8 = gettid() sendmmsg$unix(r7, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="8a647de976fcd5ce000000001c00000000000000010000000200", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x6b}], 0x1, 0x0) splice(r2, &(0x7f0000000400)=0x80000001, r6, &(0x7f0000000440)=0x1ff, 0x100, 0x0) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r9 = gettid() r10 = syz_open_procfs(r9, 0x0) pwrite64(r0, &(0x7f00000003c0), 0x0, 0x4) write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) open(&(0x7f0000022ff6)='./control\x00', 0x20000, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000380)='./bus\x00', 0x6, 0x5) 03:22:03 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:03 executing program 4: gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) 03:22:03 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r4, 0xe3ca) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) madvise(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x9) write$UHID_GET_REPORT_REPLY(r5, &(0x7f00000001c0)={0xa, 0x3}, 0xa) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 03:22:03 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 802.373310] IPVS: ftp: loaded support on port[0] = 21 03:22:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e91100002800", 0x26}], 0x1}, 0x0) 03:22:03 executing program 4: gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:04 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000400)='/sx/user\x00', 0x2, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x3494440244f91bbc, 0x100000022) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fsetxattr$security_smack_entry(r2, &(0x7f0000000180)='security.SMACK64IPOUT\x00', 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x46800) syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50}, 0x50) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='\xce\x00\x00\x00\x00#\x00', 0x0, 0x0) write$FUSE_BMAP(r5, &(0x7f00000001c0)={0x18, 0x0, 0x1, {0x1000}}, 0x18) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r7 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$EBT_SO_SET_COUNTERS(r9, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r7, &(0x7f0000000480), 0xffffffffffffff39, 0x0, 0x0, 0x150) listen(r7, 0x4) 03:22:04 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e91100002800", 0x26}], 0x1}, 0x0) 03:22:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000040)=""/58, &(0x7f0000000080)=0x3a) 03:22:04 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00') mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x7ffbf, 0x0) setns(r0, 0x0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 03:22:04 executing program 4: gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e91100002800", 0x26}], 0x1}, 0x0) [ 802.697849] binder: 4585:4591 ioctl c0306201 20000000 returned -14 03:22:04 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001380)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc158bb2b03b5b2461179f5f90bba001b5080da6218a8106df2858ec973328e5a2c078a3fe3b520", 0x79}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 802.789031] IPVS: ftp: loaded support on port[0] = 21 03:22:04 executing program 4: gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:04 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @remote}, 0x1cc) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) 03:22:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/relabel\x00', 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd2(0x0, 0x0) fcntl$dupfd(r3, 0x0, r4) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x3f7, &(0x7f0000000440)=[{0x0, 0xffffffffffffff5d}, {0x0}, {0x0}, {0x0, 0xa7}, {&(0x7f0000000400)=""/17, 0x2f2}], 0x5}}], 0x1, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4034ccdbf2bb01402120148d0f34"], 0xe}}, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x40) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r7}) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) [ 802.936312] binder: 4704:4706 ioctl c0306201 20000000 returned -14 [ 802.944633] net_ratelimit: 25 callbacks suppressed [ 802.944641] protocol 88fb is buggy, dev hsr_slave_0 [ 802.954786] protocol 88fb is buggy, dev hsr_slave_1 03:22:04 executing program 4: gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) 03:22:04 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 802.998375] device syz_tun entered promiscuous mode [ 803.034107] device syz_tun left promiscuous mode 03:22:04 executing program 5: ftruncate(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x100000000002}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1=0xe0000300}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000d80)) [ 803.072223] binder: 4716:4731 ioctl c0306201 20000000 returned -14 [ 803.104653] protocol 88fb is buggy, dev hsr_slave_0 [ 803.109854] protocol 88fb is buggy, dev hsr_slave_1 03:22:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46800) mlock2(&(0x7f0000724000/0x2000)=nil, 0x2000, 0x1) write$FUSE_INIT(r1, &(0x7f0000000000)={0x11c}, 0x10027) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x9032, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/218, 0xda, 0x0, 0x0, 0x0) creat(0x0, 0x200) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) 03:22:04 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) 03:22:04 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x16) ptrace$cont(0x18, r0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x4, 0x13}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 803.208435] binder: 4963:4967 ioctl c0306201 20000000 returned -14 03:22:04 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) dup2(r1, r4) 03:22:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) [ 803.265227] protocol 88fb is buggy, dev hsr_slave_0 [ 803.270376] protocol 88fb is buggy, dev hsr_slave_1 03:22:04 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x40002015}) timerfd_settime(r4, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x346, 0xfffffffffffffff7, 0x0, 0xfffffffffffffe0d) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f00000000c0)={0x9}) [ 803.424663] protocol 88fb is buggy, dev hsr_slave_0 [ 803.429840] protocol 88fb is buggy, dev hsr_slave_1 [ 803.457948] binder: 5141:5153 ioctl c0306201 20000000 returned -14 03:22:05 executing program 4: gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f610500020000", 0x13}], 0x1}, 0x0) 03:22:05 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:05 executing program 5: clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="13cd0f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006c00)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x13}, {0x0}, {}], 0x3}}], 0x2c7ebc5ba8d141d, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="e3011ac75cbef10a23e1f9f922f5eff9d08cf52b290da9c3279d372360802ef173a11aba1e4de8033fa1d346a827"], 0x0, 0x2e}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:22:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x405, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 03:22:05 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:05 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) [ 803.905220] binder: 5352:5359 ioctl c0306201 20000000 returned -14 [ 803.984633] protocol 88fb is buggy, dev hsr_slave_0 [ 803.989808] protocol 88fb is buggy, dev hsr_slave_1 [ 804.036589] binder: 5522:5523 ioctl c0306201 20000000 returned -14 03:22:07 executing program 3: bpf$BPF_BTF_LOAD(0x6, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 03:22:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f610500020000", 0x13}], 0x1}, 0x0) 03:22:07 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x5, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) sendfile(r0, r1, 0x0, 0xa5cc554) 03:22:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:22:07 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:07 executing program 4: gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f610500020000", 0x13}], 0x1}, 0x0) 03:22:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) shutdown(r1, 0x1) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) [ 806.351752] binder: 5575:5576 ioctl c0306201 20000000 returned -14 [ 806.359425] audit: type=1804 audit(1574133727.770:232): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir551021551/syzkaller.saXv7H/1158/bus" dev="sda1" ino=17559 res=1 03:22:07 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:07 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 03:22:07 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:07 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="2e000000260005001900e0713c444d240c000000100005400a0001000200000037153e370900040002000000d1bd", 0x2e}], 0x1}, 0x0) 03:22:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008", 0x1d}], 0x1}, 0x0) 03:22:08 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000600)) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/member\x00', 0x2, 0x0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$inet(0x2, 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="400f3400ad5486d862d5"], 0xa}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xa) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 806.609706] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 806.646513] binder: 5980:6002 ioctl c0306201 20000000 returned -14 03:22:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x25, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="01634040000000000000000000000000000000000000000000000000000000000000000058"], 0x0, 0x0, 0x0}) 03:22:08 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008", 0x1d}], 0x1}, 0x0) [ 806.659873] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 806.759195] binder: 6012:6014 ioctl c0306201 20000000 returned -14 03:22:08 executing program 4: gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_buf(r0, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:08 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() gettid() wait4(0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 03:22:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xffffff7a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000b40)='p', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 03:22:08 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008", 0x1d}], 0x1}, 0x0) 03:22:08 executing program 3: syz_open_dev$admmidi(0x0, 0x1d, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1ff, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r3, &(0x7f0000000600), 0xffffffffffffffff, &(0x7f0000000640), 0x9, 0x5) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x5, 0x8001, 0x5, 0x100, 0x3}, &(0x7f0000000300)=0x14) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f00000003c0)) syz_open_procfs(0x0, 0x0) sendto$inet6(r2, 0x0, 0xfff3, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0) [ 807.187085] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 807.199910] binder: 6117:6125 ioctl c0306201 20000000 returned -14 03:22:08 executing program 4: gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_buf(r0, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e911", 0x22}], 0x1}, 0x0) 03:22:08 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca5", 0x7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:08 executing program 0: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:22:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000058000000000000001800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="852a627300633bf6c8b9de6cb10000000000000000000000852a747000"/54], @ANYPTR64=&(0x7f0000000180)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)) 03:22:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e911", 0x22}], 0x1}, 0x0) 03:22:08 executing program 4: gettid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_buf(r0, 0x29, 0x1, 0x0, &(0x7f0000000000)) [ 807.500589] binder: 6442:6449 ioctl c0306201 20000000 returned -14 03:22:08 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000240)={'eql\x00', 0x400}) socket$kcm(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480), 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\xb6e\x80\x00\xdb\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\x05b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA-\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89\x90\x83\xe1$\x89\x9bjpQ$\x150\xdf\x86\xa8d\xd79\xa7\rX^\x99\x18\xfb\x94\xe5}>\xc6\xc8\x1b\x1f\x7f\xea\xbc;Y\x9ah\x91\'\x00\xee\x88\x14N\xb7\xcb\xde\xedt)\xb9\xfb\x11ye\xf5\x8f\xf1Yb\xba\xd6\xd6e\xbdUB\xcf6\xc8\xa2\x10\xb75\x90\x8b\x1f\x16\x82\xf5=0\x9c\xe5H\xe6pH\xd6\xb8\x9c\xd7\x98\x83\xa4p\xf02\x00\v\x82Y\xe8\xb0\x97\r&\x99\xb9&1\xd7n\x8e/\xf8\x18\x83\'\x1d\x89@\xcf\xd0;\xc0\xeb\x04\xd8\xee\xd8Oo\xc7\xed\xdb\x94\x0f\xbfP>\x19\xa9W\xdc\x1cds\xd3(\x16Uk\xbf*\x04\xec;\xf2\xee`XF\xcd\vR\xbc!l\r\xe9y\xc0\xd7\xc4\xb7\xa2\xd3\xc7\x05\xa0\x96h\x06=\v\xe6\xe5\x04\xd6\xaf\xbd\xf2\xd3\xda\xe6e\xb1\x11UWw\xd83\xd4\xc0/Q\x9df4\x1e\x9c\xb3V_\xcdZ\xb7\xa2a_f\x9f\x93m\xac\xf2\xdd\xe1D($\xb2ZI~\x1c?\xedq\x8a\x9d\xa5V\x02\xcf;H\xa8\xedy\xde\xbb\x05\x13at\x13\x01k<\x05\xbe\xdc\xf5x\xd2\xdcM\x88\xf5\xe4\x96%\xc5\xc4\xc6\xea?\xc0k\x86\x8e<\x17\x9b\xd2\xd16][\xdb\xe3\xbb\xfd^\x85\xa7\xd2\xb2\xd2\xc6[\xd0<\xf8\x996\xe0/\xaf\xee\xe9\x05L\xcf\x16\xc4\xd6', 0x26e1, 0x0) close(r1) close(r2) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x5460, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001e00)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1, 0x0, 0x6f}, 0x0) close(r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0xffffff43) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r4, 0xffffffffffffffff, 0x0, 0x1}, 0x10) 03:22:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x138) close(r0) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 03:22:09 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca5", 0x7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e911", 0x22}], 0x1}, 0x0) 03:22:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:22:09 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca5", 0x7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 807.706957] binder: 6663:6664 ioctl c0306201 20000000 returned -14 03:22:09 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa", 0xb) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 807.822345] binder: 6858:6871 ioctl c0306201 20000000 returned -14 03:22:09 executing program 0: r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x4000000000020009) r2 = socket$inet6(0xa, 0x400000000001, 0x0) eventfd(0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) 03:22:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000", 0x24}], 0x1}, 0x0) 03:22:09 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa", 0xb) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffbfffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(r0, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) flistxattr(r1, &(0x7f0000000180)=""/114, 0xfffffffffffffe72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffe35) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000000c0), 0x251) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d9189) pwrite64(r4, &(0x7f0000000500)="8f2d0b68f901b970c304881a7c0f467deff28699261da94e9957dad1060779f40d1e3467fd794bd2c5cf3ecc8e4420c793a17a7765aa22b3095e1c46fd66e58902d4df88541abfb4e779ca0dbbe2fc73a7534fae7b5bb18856c761e6778b30f7cfdb4029adf3aefb013bfde2a6e3790147250f9a388b1a3104152bcaa5b78257bd6c31793a51178b8ee4e87cc3d6c0c450b8c5bbe8ca12fb4fa7", 0x9a, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0xffffffffffffffe3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f0000000540)="8d468862c2d327e6349e4453f5d1c98cb702ff210bd7ce624c9a066eb8063a72670d16efb28b13308b2477a71986fdf10e6b8e6ec13f64ce22714dcae3106d9c7904bcb6a1bbcfe959e34df8df7fcf04e9e5086091384538050a22349b20b73c2e4a00564b7a2470863d07c587ec81e867c867a5e267cd1d17cef27688ba4540fdfe622889def35ffe12707bdd9d47a9d3b8255507fd97eed440165245add2756a238c44e5edd2317c0366882726526998b5", 0xb2) recvfrom$inet6(r2, &(0x7f0000000240)=""/38, 0x4db7b007, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0xffffffffffffff59) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 807.871933] binder: 6876:6877 ioctl c0306201 20000000 returned -14 [ 807.966985] binder: 6880:6885 ioctl c0306201 20000000 returned -14 [ 808.020185] audit: type=1804 audit(1574133729.430:233): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir551021551/syzkaller.saXv7H/1162/bus" dev="sda1" ino=17579 res=1 [ 808.144632] net_ratelimit: 27 callbacks suppressed [ 808.144640] protocol 88fb is buggy, dev hsr_slave_0 [ 808.154732] protocol 88fb is buggy, dev hsr_slave_1 [ 808.704673] protocol 88fb is buggy, dev hsr_slave_0 [ 808.709810] protocol 88fb is buggy, dev hsr_slave_1 [ 808.714971] protocol 88fb is buggy, dev hsr_slave_0 [ 808.720028] protocol 88fb is buggy, dev hsr_slave_1 [ 809.184685] protocol 88fb is buggy, dev hsr_slave_0 [ 809.189801] protocol 88fb is buggy, dev hsr_slave_1 [ 809.344616] protocol 88fb is buggy, dev hsr_slave_0 [ 809.349748] protocol 88fb is buggy, dev hsr_slave_1 [ 813.344682] net_ratelimit: 24 callbacks suppressed [ 813.344690] protocol 88fb is buggy, dev hsr_slave_0 [ 813.355059] protocol 88fb is buggy, dev hsr_slave_1 [ 813.505245] protocol 88fb is buggy, dev hsr_slave_0 [ 813.510424] protocol 88fb is buggy, dev hsr_slave_1 [ 813.664671] protocol 88fb is buggy, dev hsr_slave_0 [ 813.669840] protocol 88fb is buggy, dev hsr_slave_1 [ 813.824661] protocol 88fb is buggy, dev hsr_slave_0 [ 813.829927] protocol 88fb is buggy, dev hsr_slave_1 [ 814.384694] protocol 88fb is buggy, dev hsr_slave_0 [ 814.389811] protocol 88fb is buggy, dev hsr_slave_1 [ 818.544713] net_ratelimit: 26 callbacks suppressed [ 818.544720] protocol 88fb is buggy, dev hsr_slave_0 [ 818.554930] protocol 88fb is buggy, dev hsr_slave_1 [ 819.104695] protocol 88fb is buggy, dev hsr_slave_0 [ 819.109797] protocol 88fb is buggy, dev hsr_slave_1 [ 819.114924] protocol 88fb is buggy, dev hsr_slave_0 [ 819.119961] protocol 88fb is buggy, dev hsr_slave_1 [ 819.584731] protocol 88fb is buggy, dev hsr_slave_0 [ 819.589904] protocol 88fb is buggy, dev hsr_slave_1 [ 819.744665] protocol 88fb is buggy, dev hsr_slave_0 [ 819.749761] protocol 88fb is buggy, dev hsr_slave_1 [ 823.745186] net_ratelimit: 24 callbacks suppressed [ 823.750207] protocol 88fb is buggy, dev hsr_slave_0 [ 823.755457] protocol 88fb is buggy, dev hsr_slave_1 [ 823.904653] protocol 88fb is buggy, dev hsr_slave_0 [ 823.909948] protocol 88fb is buggy, dev hsr_slave_1 [ 824.064656] protocol 88fb is buggy, dev hsr_slave_0 [ 824.070086] protocol 88fb is buggy, dev hsr_slave_1 [ 824.224722] protocol 88fb is buggy, dev hsr_slave_0 [ 824.229852] protocol 88fb is buggy, dev hsr_slave_1 [ 824.784692] protocol 88fb is buggy, dev hsr_slave_0 [ 824.789836] protocol 88fb is buggy, dev hsr_slave_1 [ 828.944683] net_ratelimit: 26 callbacks suppressed [ 828.944691] protocol 88fb is buggy, dev hsr_slave_0 [ 828.954907] protocol 88fb is buggy, dev hsr_slave_1 [ 829.504688] protocol 88fb is buggy, dev hsr_slave_0 [ 829.509957] protocol 88fb is buggy, dev hsr_slave_1 [ 829.515118] protocol 88fb is buggy, dev hsr_slave_0 [ 829.520162] protocol 88fb is buggy, dev hsr_slave_1 [ 829.984706] protocol 88fb is buggy, dev hsr_slave_0 [ 829.989897] protocol 88fb is buggy, dev hsr_slave_1 [ 830.144652] protocol 88fb is buggy, dev hsr_slave_0 [ 830.149928] protocol 88fb is buggy, dev hsr_slave_1 [ 834.144701] net_ratelimit: 24 callbacks suppressed [ 834.144710] protocol 88fb is buggy, dev hsr_slave_0 [ 834.154953] protocol 88fb is buggy, dev hsr_slave_1 [ 834.304666] protocol 88fb is buggy, dev hsr_slave_0 [ 834.309761] protocol 88fb is buggy, dev hsr_slave_1 [ 834.464678] protocol 88fb is buggy, dev hsr_slave_0 [ 834.469811] protocol 88fb is buggy, dev hsr_slave_1 [ 834.624653] protocol 88fb is buggy, dev hsr_slave_0 [ 834.629833] protocol 88fb is buggy, dev hsr_slave_1 [ 835.184703] protocol 88fb is buggy, dev hsr_slave_0 [ 835.189838] protocol 88fb is buggy, dev hsr_slave_1 [ 839.344696] net_ratelimit: 26 callbacks suppressed [ 839.344704] protocol 88fb is buggy, dev hsr_slave_0 [ 839.354930] protocol 88fb is buggy, dev hsr_slave_1 [ 839.904675] protocol 88fb is buggy, dev hsr_slave_0 [ 839.909936] protocol 88fb is buggy, dev hsr_slave_1 [ 839.915204] protocol 88fb is buggy, dev hsr_slave_0 [ 839.920262] protocol 88fb is buggy, dev hsr_slave_1 [ 840.384676] protocol 88fb is buggy, dev hsr_slave_0 [ 840.389928] protocol 88fb is buggy, dev hsr_slave_1 [ 840.544661] protocol 88fb is buggy, dev hsr_slave_0 [ 840.549760] protocol 88fb is buggy, dev hsr_slave_1 [ 844.544697] net_ratelimit: 24 callbacks suppressed [ 844.544705] protocol 88fb is buggy, dev hsr_slave_0 [ 844.554807] protocol 88fb is buggy, dev hsr_slave_1 [ 844.704669] protocol 88fb is buggy, dev hsr_slave_0 [ 844.709785] protocol 88fb is buggy, dev hsr_slave_1 [ 844.864662] protocol 88fb is buggy, dev hsr_slave_0 [ 844.869830] protocol 88fb is buggy, dev hsr_slave_1 [ 845.024677] protocol 88fb is buggy, dev hsr_slave_0 [ 845.029935] protocol 88fb is buggy, dev hsr_slave_1 [ 845.584740] protocol 88fb is buggy, dev hsr_slave_0 [ 845.589889] protocol 88fb is buggy, dev hsr_slave_1 [ 849.744709] net_ratelimit: 26 callbacks suppressed [ 849.750192] protocol 88fb is buggy, dev hsr_slave_0 [ 849.755334] protocol 88fb is buggy, dev hsr_slave_1 [ 850.304707] protocol 88fb is buggy, dev hsr_slave_0 [ 850.310653] protocol 88fb is buggy, dev hsr_slave_1 [ 850.315836] protocol 88fb is buggy, dev hsr_slave_0 [ 850.320898] protocol 88fb is buggy, dev hsr_slave_1 [ 850.784690] protocol 88fb is buggy, dev hsr_slave_0 [ 850.789817] protocol 88fb is buggy, dev hsr_slave_1 [ 850.944674] protocol 88fb is buggy, dev hsr_slave_0 [ 850.949801] protocol 88fb is buggy, dev hsr_slave_1 [ 854.944682] net_ratelimit: 24 callbacks suppressed [ 854.949670] protocol 88fb is buggy, dev hsr_slave_0 [ 854.954849] protocol 88fb is buggy, dev hsr_slave_1 [ 855.104649] protocol 88fb is buggy, dev hsr_slave_0 [ 855.109749] protocol 88fb is buggy, dev hsr_slave_1 [ 855.264694] protocol 88fb is buggy, dev hsr_slave_0 [ 855.269898] protocol 88fb is buggy, dev hsr_slave_1 [ 855.424734] protocol 88fb is buggy, dev hsr_slave_0 [ 855.429957] protocol 88fb is buggy, dev hsr_slave_1 [ 855.984707] protocol 88fb is buggy, dev hsr_slave_0 [ 855.990088] protocol 88fb is buggy, dev hsr_slave_1 [ 860.144700] net_ratelimit: 26 callbacks suppressed [ 860.149701] protocol 88fb is buggy, dev hsr_slave_0 [ 860.154759] protocol 88fb is buggy, dev hsr_slave_1 [ 860.704696] protocol 88fb is buggy, dev hsr_slave_0 [ 860.709976] protocol 88fb is buggy, dev hsr_slave_1 [ 860.715112] protocol 88fb is buggy, dev hsr_slave_0 [ 860.720188] protocol 88fb is buggy, dev hsr_slave_1 [ 861.184699] protocol 88fb is buggy, dev hsr_slave_0 [ 861.190087] protocol 88fb is buggy, dev hsr_slave_1 [ 861.344675] protocol 88fb is buggy, dev hsr_slave_0 [ 861.349772] protocol 88fb is buggy, dev hsr_slave_1 [ 865.344709] net_ratelimit: 24 callbacks suppressed [ 865.344719] protocol 88fb is buggy, dev hsr_slave_0 [ 865.355314] protocol 88fb is buggy, dev hsr_slave_1 [ 865.504659] protocol 88fb is buggy, dev hsr_slave_0 [ 865.509822] protocol 88fb is buggy, dev hsr_slave_1 [ 865.664671] protocol 88fb is buggy, dev hsr_slave_0 [ 865.669823] protocol 88fb is buggy, dev hsr_slave_1 [ 865.824680] protocol 88fb is buggy, dev hsr_slave_0 [ 865.829847] protocol 88fb is buggy, dev hsr_slave_1 [ 866.384715] protocol 88fb is buggy, dev hsr_slave_0 [ 866.389986] protocol 88fb is buggy, dev hsr_slave_1 03:23:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) open(0x0, 0x0, 0x0) ioctl$TCGETX(0xffffffffffffffff, 0x5432, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000580)="41b76428bfba7738b2f4bcbd23bef0742b3feaf5885196f826c2db456564c6f722fbf03e685086def167793a4af59f2089763db84a71c1fabfe0eec321", 0x3d}], 0x1}}], 0x1, 0x0) close(r0) 03:23:09 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa", 0xb) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:23:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e911", 0x22}], 0x1}, 0x0) 03:23:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x18, 0xae2070906cdef9f9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}]}, 0x24}}, 0x0) 03:23:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/195, 0x200000d7}], 0x1) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[], 0xf5) 03:23:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:23:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e911", 0x22}], 0x1}, 0x0) [ 868.199368] binder: 7093:7099 ioctl c0306201 20000000 returned -14 03:23:09 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844", 0xd) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:23:09 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x6000000, 0x100000001, 0x6000000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:23:09 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000002400010f00"/20, @ANYRES32=r1, @ANYBLOB="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"], 0x64}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200)='keyring\x00', 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) 03:23:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e911", 0x22}], 0x1}, 0x0) [ 868.379854] binder: 7308:7309 ioctl c0306201 20000000 returned -14 03:23:09 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844", 0xd) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 868.443956] nla_parse: 5 callbacks suppressed [ 868.443965] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 868.502395] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 868.561142] binder: 7405:7434 ioctl c0306201 20000000 returned -14 [ 870.510393] IPVS: ftp: loaded support on port[0] = 21 [ 870.579689] chnl_net:caif_netlink_parms(): no params data found [ 870.608902] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.616165] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.623262] device bridge_slave_0 entered promiscuous mode [ 870.632499] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.639065] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.646316] device bridge_slave_1 entered promiscuous mode [ 870.664005] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 870.726331] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 870.748911] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 870.757319] team0: Port device team_slave_0 added [ 870.763311] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 870.772447] team0: Port device team_slave_1 added [ 870.778547] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 870.786944] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 870.866728] device hsr_slave_0 entered promiscuous mode [ 870.924968] device hsr_slave_1 entered promiscuous mode [ 870.965583] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 870.972987] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 871.004200] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.010720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.017440] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.023805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.072936] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 871.080038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.090164] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 871.101612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 871.109965] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.117537] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.135636] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 871.147163] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 871.153281] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.174128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 871.182531] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.188948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.205275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 871.213326] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.219742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.238051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 871.256722] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 871.264100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 871.272790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 871.280989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 871.291999] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 871.299929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 871.318046] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 871.327249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 871.334110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 871.349970] 8021q: adding VLAN 0 to HW filter on device batadv0 03:23:12 executing program 3: r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x4000000000020009) r2 = socket$inet6(0xa, 0x400000000001, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) eventfd(0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) 03:23:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e91100", 0x23}], 0x1}, 0x0) 03:23:12 executing program 5: read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="4c0000001200ff09ff1cfe956fa283b724a6008000000000000008000000150024001d001fc41180b598bc593ab6821148a730de33aa46ffecfde0258823dd8da49848c6cea97da172dcc121", 0x4c}], 0x1}, 0x0) 03:23:12 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844", 0xd) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:23:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:23:12 executing program 0: ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000480)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x9cX7\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\xad\xcb\x859\xca\x1d*e7\f=v \xb6\x990:\xa4\xc2R|\xb9ZOYf\r3\x8e\x01\xa3gl\x1b=\xde\xd9\xc4K\x00\xd6\x12\xd6\x17\xaf\x1f\x98\xd8\xab4V\xb4\xbb\x8b\x95o\xdd\xd8\x1b\t@A\xc4\xc5\xfc\xdeZc\xefK\xf9\xcb\xa0\xf8+\xd1\x99[\xfb\xd1/\x8e\xf1\xd4\xe0NzX\x1c\xc9\xd3\xbb\xd1\x86\xd9\aS\x10~\xf1\xe5@I\xc5\xf7\x86\xa4', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r4, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x2003, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 871.568922] audit: type=1804 audit(1574133792.980:234): pid=7589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir512766802/syzkaller.Y7E8Dx/1/bus" dev="sda1" ino=17041 res=1 [ 871.612909] binder: 7588:7592 ioctl c0306201 20000000 returned -14 03:23:13 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:23:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e91100", 0x23}], 0x1}, 0x0) [ 871.670185] audit: type=1804 audit(1574133793.050:235): pid=7594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir512766802/syzkaller.Y7E8Dx/1/bus" dev="sda1" ino=17041 res=1 03:23:13 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 871.769724] binder: 7595:7596 ioctl c0306201 20000000 returned -14 03:23:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e91100", 0x23}], 0x1}, 0x0) 03:23:13 executing program 5: read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="4c0000001200ff09ff1cfe956fa283b724a6008000000000000008000000150024001d001fc41180b598bc593ab6821148a730de33aa46ffecfde0258823dd8da49848c6cea97da172dcc121", 0x4c}], 0x1}, 0x0) [ 871.918731] binder: 7621:7648 ioctl c0306201 20000000 returned -14 03:23:13 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="c1c7dfea2d7f", @random="029cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x2c0}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff88, 0x0, 0x0, 0x0, [0x14, 0x0, 0x4788], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], 0x4100}, @mcast2}}}}}}}, 0x0) [ 872.405805] audit: type=1804 audit(1574133793.820:236): pid=7594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir512766802/syzkaller.Y7E8Dx/1/bus" dev="sda1" ino=17041 res=1 [ 872.432654] audit: type=1804 audit(1574133793.820:237): pid=7594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir512766802/syzkaller.Y7E8Dx/1/bus" dev="sda1" ino=17041 res=1 [ 872.459882] audit: type=1804 audit(1574133793.850:238): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir512766802/syzkaller.Y7E8Dx/1/bus" dev="sda1" ino=17041 res=1 03:23:13 executing program 3: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000280)=@nl=@unspec={0x0, 0x0, 0x0, 0xc0ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="b8000000000000002900000005000000810d020200fe80000000000000000000000000000000000000009926e81e54aac4979a93f53fcd7d00000400010000009c68a23f000000111552ff0bf85e07db2f1c320051906d8ebfd55fbbf4b94d4e342e48d5ce8f149465c90010000000000000c2f5c76b782d2d800161e6eae187acd3f8ded6dde50b00001297482ad307583d3a30eb2f85e525fe2f30ea5d80d3be3cec9f751de4c2d7e458e668c48f7de98cb328f56f6fad"], 0xb8}, 0x0) 03:23:13 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:23:13 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) dup2(0xffffffffffffffff, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)) 03:23:13 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="c1c7dfea2d7f", @random="029cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x2c0}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff88, 0x0, 0x0, 0x0, [0x14, 0x0, 0x4788], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], 0x4100}, @mcast2}}}}}}}, 0x0) 03:23:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="6d047c005d52994c0afc21be2900000047e2252cb7882bbc5b0cf39fb939010000c33f00102b0200000089da006a001499b2d1b3a4952f36def66e54e4c909c01e8c4e61f8a0e814f7e2acdd0063c7caa4"], 0x2) 03:23:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:23:14 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="c1c7dfea2d7f", @random="029cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x2c0}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff88, 0x0, 0x0, 0x0, [0x14, 0x0, 0x4788], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], 0x4100}, @mcast2}}}}}}}, 0x0) [ 872.573106] binder: 7722:7723 ioctl c0306201 20000000 returned -14 03:23:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040)='127.+.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[]) creat(0x0, 0x0) open(0x0, 0x0, 0x0) 03:23:14 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:23:14 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="c1c7dfea2d7f", @random="029cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x2c0}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff88, 0x0, 0x0, 0x0, [0x14, 0x0, 0x4788], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], 0x4100}, @mcast2}}}}}}}, 0x0) 03:23:14 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r3, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) bind(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396) r4 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r5 = dup(r4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001100)=ANY=[]}}, 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000640)=0x1) r7 = inotify_init() lseek(r7, 0x4, 0x4) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140), 0xfd73) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe14, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}) fcntl$dupfd(0xffffffffffffffff, 0x0, r8) r9 = dup2(0xffffffffffffffff, r8) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000340)={0x3f, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8000, 0xbb4}) getsockname(r9, &(0x7f00000001c0)=@rc, &(0x7f0000000580)=0xfffffffffffffefb) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r11 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) sendmsg$netlink(r13, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000100)=ANY=[]}, 0x0) r14 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r15 = dup2(0xffffffffffffffff, r14) sendmsg$netlink(r15, 0x0, 0x0) setsockopt$inet_tcp_int(r15, 0x6, 0xa, &(0x7f0000000100)=0xffffffff80000001, 0x0) bind$inet(r10, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000000c0), 0x4) dup2(r10, r10) fcntl$setpipe(r10, 0x407, 0x7ff) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x9) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x200}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r16 = open(&(0x7f0000000480)='./bus\x00', 0x101042, 0x0) ftruncate(r16, 0x2007fff) sendfile(r5, r16, 0x0, 0x8000fffffffe) 03:23:14 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:23:14 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000000000811e6403000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0xffffffffa0008000, 0x2e, 0x0, &(0x7f0000000040)="a34747e865af5cf11e34bdff7a7a5ba0051aae5804d5a05d9b9ff68e12bb4d43a20375ea905795449b957e956aa6", 0x0, 0x401}, 0x28) creat(&(0x7f0000000100)='./file0\x00', 0x10003) [ 872.746221] 9pnet_virtio: no channels available for device 127.+.0.1 [ 872.766449] binder: 7885:7903 ioctl c0306201 20000000 returned -14 [ 872.784134] 9pnet_virtio: no channels available for device 127.+.0.1 03:23:14 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 03:23:14 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x15984a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r2) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xff54) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) 03:23:14 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 872.841120] binder: 7952:7954 ioctl c0306201 20000000 returned -14 03:23:14 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) [ 872.955282] binder: 8125:8126 ioctl c0306201 20000000 returned -14 03:23:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:23:14 executing program 1: clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4100000c, 0x0) 03:23:14 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="4c0000001200ff09ff1cfe956fa283b724a6008000000000000008000000150024001d001fc41180b598bc593ab6821148a730de33aa46ffecfde0258823dd8da49848c6cea97da172dcc121", 0x4c}], 0x1}, 0x0) 03:23:14 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:23:14 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 03:23:14 executing program 3: creat(&(0x7f0000000100)='./file0\x00', 0x0) setxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:ssh_keygen\x9b\xe0J\xea\x06Q\x8aX\xa0\xad\x82>\xd4b~\x1b\x8c\xeb\xab\xee.\xfbn=~e\'\xfb=sD\x81\xb1\x8b\x8e\xfbe\x17B\xd5\x91,\xa4\xb4c\xe6\xb5\x00\f\xdcO\xeaq-^\xaa\xf20\xbfw\xe6\xf3\xe32\x0e\xf8<\x15\xa2s\xa9\xc6l\xfdw\x14F\xa3(\xdc\x9aC\xf9\xe4\xfe\xf2V\x82\xa6M\x1a\xf2\x83\x9d\xe9|\xd0rd\xa7.\x97\x06\x04^\x8d\xecV*\xb6!\f\xcdwg5\x7f3*\xcb\xc0!X\xa4d\xcb\x14M\x05\vM', 0x9f, 0x0) 03:23:14 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xfffffe2f) unlink(&(0x7f0000000200)='./bus\x00') link(&(0x7f0000000180)='./bus\x00', &(0x7f0000000280)='./file0\x00') 03:23:14 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="c1c7dfea2d7f", @random="029cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x0, 0xffffffffffffffff, @remote={0xfe, 0x2c0}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff88, 0x0, 0x0, 0x0, [0x14, 0x0, 0x4788], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], 0x4100}, @mcast2}}}}}}}, 0x0) [ 873.421565] SELinux: Context system_u:object_r:ssh_keygen›àJêQŠX ­‚>Ôb~Œë«î.ûn=~e'û=sD±‹ŽûeBÕ‘,¤´cæµ is not valid (left unmapped). [ 873.438352] binder: 8176:8177 ioctl c0306201 20000000 returned -14 03:23:14 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:23:14 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="c1c7dfea2d7f", @random="029cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x0, 0xffffffffffffffff, @remote={0xfe, 0x2c0}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff88, 0x0, 0x0, 0x0, [0x14, 0x0, 0x4788], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], 0x4100}, @mcast2}}}}}}}, 0x0) 03:23:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, &(0x7f0000000140)) 03:23:15 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @local}}, 0x0, 0x5, 0x0, "303e4005c616f2dcd8371edea7f81cd9ea3ef18c5e9c3d6f560d0b2092024586e1679215186eec6059c7bc4d4e3f268e7dc54b4cd7f97f069f7ef68efb55ab02c5b99006119115f9cf23e89f68501344"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0xd10c) socket$packet(0x11, 0x0, 0x300) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 873.595524] binder: 8291:8293 ioctl c0306201 20000000 returned -14 03:23:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:23:15 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:23:15 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="c1c7dfea2d7f", @random="029cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x0, 0xffffffffffffffff, @remote={0xfe, 0x2c0}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff88, 0x0, 0x0, 0x0, [0x14, 0x0, 0x4788], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], 0x4100}, @mcast2}}}}}}}, 0x0) 03:23:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffa0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) accept$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)={0x0, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:23:15 executing program 5: unshare(0x20020000) unshare(0x24020400) 03:23:15 executing program 3: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "315e3fa90dbb6ad31f5a5b9522759018"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x6, "d737f94c"}, @md5sig={0x13, 0x12, "0eed0db5353ed6f9b90f9df6a8b8f8c3"}, @mss={0x2, 0x4}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}]}}}}}}}, 0x0) 03:23:15 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup2(r1, r1) syz_genetlink_get_family_id$fou(0x0) dup(r2) write(r0, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 874.329937] binder: 8411:8412 ioctl c0306201 20000000 returned -14 03:23:15 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="c1c7dfea2d7f", @random="029cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x2c0}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff88, 0x0, 0x0, 0x0, [0x14, 0x0, 0x4788], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], 0x4100}, @mcast2}}}}}}}, 0x0) 03:23:15 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r0, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:23:15 executing program 5: socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) r1 = socket$netlink(0x10, 0x3, 0xd) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@mss, @sack_perm, @mss, @window, @sack_perm], 0x20000000000001f4) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x20000084, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x4, 0x7ffffffc, 0x0, 0xffffffff}, 0x14) shutdown(r0, 0x2) 03:23:15 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r0, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:23:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x632d45e3b76ead5b) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) [ 874.704671] net_ratelimit: 12 callbacks suppressed [ 874.704678] protocol 88fb is buggy, dev hsr_slave_0 [ 874.714918] protocol 88fb is buggy, dev hsr_slave_1 03:23:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:23:16 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r0, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:23:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 03:23:16 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="4c0000001200ff09ff1cfe956fa283b724a6008000000000000008000000150024001d001fc41180b598bc593ab6821148a730de33aa46ffecfde0258823dd8da49848c6cea97da172dcc121", 0x4c}], 0x1}, 0x0) socket$inet6(0xa, 0x0, 0x0) 03:23:16 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x8, 0x0, &(0x7f0000000240)=0x10149) 03:23:16 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 875.205348] input: syz1 as /devices/virtual/input/input94 [ 875.264670] protocol 88fb is buggy, dev hsr_slave_0 [ 875.269875] protocol 88fb is buggy, dev hsr_slave_1 [ 875.275155] protocol 88fb is buggy, dev hsr_slave_0 [ 875.280242] protocol 88fb is buggy, dev hsr_slave_1 [ 875.292271] binder: 8832:8845 ioctl c0306201 0 returned -14 03:23:16 executing program 3: ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000980)=[{&(0x7f00000005c0)="e5", 0x1}], 0x1, 0x4081806) sendfile(r0, r2, 0x0, 0x20020102000007) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0) recvfrom$unix(r1, &(0x7f0000000280)=""/4, 0xfffffffffffffe16, 0x100, &(0x7f0000000100)=@abs, 0x930212) 03:23:16 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fsetxattr(r1, &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f0000000080)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='user.syz\x00') 03:23:16 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 03:23:16 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@remote, @ipv4, @dev}) 03:23:16 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) rt_sigtimedwait(&(0x7f0000000400), 0x0, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 03:23:16 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x7, 0x0, [0x4b564d01, 0xfff]}) [ 875.423125] binder: 9068:9070 ioctl c0306201 0 returned -14 03:23:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:23:17 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="0123350d37aca544c1d3fa6844fe", 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 03:23:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x9a6}], 0x1, 0x0, 0x187}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) sendmsg(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="c0831d29e97834af45ba4cbd422047e80d88ab527bae215d0779a01c0607a8447aa37f102ca4c7e89ba16ab90cf78c127b", 0x31}, {&(0x7f0000000280)="646d66f1fb274041aff71096d579de90d7db37e9f4abea6784e365687424e3d3103d63f1e9b4ea85a00c87ec5cc01925820661672a9e6edf3534dd6b21072bd156c28d4814c965d206b986d2e4fe42b59eef0d22212026bd3f349877973e947122f5de187f75f7c310229724bca931b47b05c80958aa4b18ae29d70d46e7d70ffaf5fad7e26e3375b3ec53d91d92abbc4774eaeed307acc6", 0x98}], 0x2}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = dup(r0) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES32], 0x4}}, 0x0) 03:23:17 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000002400010f00"/20, @ANYRES32=r1, @ANYBLOB="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"], 0x64}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) 03:23:17 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="4c0000001200ff09ff1cfe956fa283b724a6008000000000000008000000150024001d001fc41180b598bc593ab6821148a730de33aa46ffecfde0258823dd8da49848c6cea97da172dcc121", 0x4c}], 0x1}, 0x0) socket$inet6(0xa, 0x2, 0x0) 03:23:17 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup2(r2, r2) dup(r3) write(r1, &(0x7f00000001c0), 0xfffffef3) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 876.064228] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 876.074516] binder: 9384:9388 ioctl c0306201 0 returned -14 [ 876.088087] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 876.224632] protocol 88fb is buggy, dev hsr_slave_0 [ 876.229850] protocol 88fb is buggy, dev hsr_slave_1 03:23:17 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000480)='ramfs\x00', 0x0, 0x0) 03:23:17 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'ip6gretap0\x00', &(0x7f0000000140)=@ethtool_ts_info={0x41, 0x9, 0x1, 0x9, [0x9, 0x0, 0x6], 0x0, [0x566fd028, 0x0, 0x8]}}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x9) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000080)={0x1c0, 0x0, [0x0, 0x0, 0x0, 0x275c, 0xff], 0x1}) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4001, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {}, {[@loopback]}, {[@multicast1]}, {}]}]}}}}}}}, 0x0) 03:23:17 executing program 1: r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)={0x10000014}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000007ffc), 0x2f5) 03:23:17 executing program 2: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) 03:23:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) 03:23:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getrandom(0x0, 0x0, 0x0) [ 876.639735] IPVS: ftp: loaded support on port[0] = 21 [ 876.784686] protocol 88fb is buggy, dev hsr_slave_0 [ 876.789872] protocol 88fb is buggy, dev hsr_slave_1 03:23:18 executing program 5: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)="9033877ace25a0cd47de5752f2fe725302f5297240df794a3f9e8efd1c159b2bb4cfdc71f2cd4ccab950100494a6edc071a5b8facd4080eb02bd8342acfb2c0241fa15a8f3b27755b25c65f4ab48338111ffa1fe393a425c0ba2c13067100170698a151664c4152a8824af1cb68d98f0259494c6d057", 0x76}, {&(0x7f0000001c40)="b03e2e48783b8582415ce86a7743d604df2b69b6fd9abdd925bdfba510ca05650a2e02e055478b69776dc114eb3a27d3a3d589710f2aafda3a453fe3770255d56a43a3e27e3fe045e5bd482c81660aa0caa7625bf9dcf80569541a0019dba3b36e53f753c03a8f530a2392f87754d16e1eb02a3075ce111a9a4172cb6bebd607bfc82a8f5086ff43d355b7209f31230649fd10b930e461dfe37ed688cb8e4564ad7777e6d18872ef4e41c8d201f8", 0xae}, {&(0x7f00000002c0)="f7fc370763ed7a4dbfaf549cd1dc94c047d2bfd2da573ebddcf5db435637f045346375f1b75c21a0106605fa2c283aaa0014062099dc4b58d700b3a07dbc83010c24cb730b30aee0103d81b75a4f6ce90dd0237bd4b22d66e95966a0ad75b3f8338268b29e2d", 0x66}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000080)="4326b5be", 0x4}, {0x0}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) socket$inet6_tcp(0xa, 0x1, 0x0) 03:23:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet_int(r2, 0x0, 0x15, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:23:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:23:18 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6) recvmmsg(r0, &(0x7f0000000200), 0x2ab, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x19) sendmmsg(r0, &(0x7f00000092c0), 0x398, 0x0) 03:23:18 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000500)="00abe6d29e6101cb8b41eea5cf2e67fea541e9b7b65fe42e517d5f81d2919e1b2f4cf7f77a16fc3e961a0847916c7c2d9b77cd3160567341263cf19b3b2c6177e7065dda850c756c06aede12e9da8118bb5464ad07fa6146f6903ee57345cbd7551f547bdbe947b4f9a0b28cf29a28eda534fc6e2c9bf2c36c87da9ad79e6e7090", 0x4202692d7f740df1, 0x4000801, 0x0, 0xfffffffffffffeda) syz_open_dev$mice(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) recvfrom$inet(r0, &(0x7f0000000440)=""/98, 0x203be9be0e639dd, 0x0, 0x0, 0xffffffffffffffd7) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) read(r0, &(0x7f00000001c0)=""/244, 0xffffff52) 03:23:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x632d45e3b76ead5b) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000005c0), 0x4) [ 877.314260] IPVS: ftp: loaded support on port[0] = 21 03:23:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x6) recvmmsg(r2, &(0x7f0000000200), 0x2ab, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000080)=0x4, 0x4) connect$inet6(r2, &(0x7f0000000000), 0x19) sendmmsg(r2, &(0x7f00000092c0), 0x398, 0x0) 03:23:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r1, 0x0, 0x0) 03:23:18 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="4c0000001200ff09ff1cfe956fa283b724a6008000000000000008000000150024001d001fc41180b598bc593ab6821148a730de33aa46ffecfde0258823dd8da49848c6cea97da172dcc121", 0x4c}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) 03:23:18 executing program 5: read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) memfd_create(&(0x7f0000000700)='/dev/ful\xbb.\xddq\xafb\xd3\x91\x85\xa0\xc1l\x00', 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="4c0000001200ff09ff1cfe956fa283b724a6008000000000000008000000150024001d001fc41180b598bc593ab6821148a730de33aa46ffecfde0258823dd8da49848c6cea97da172dcc121", 0x4c}], 0x1}, 0x0) socket$inet6(0xa, 0x2, 0x0) 03:23:18 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000240)={'eql\x00', 0x400}) socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480), 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\xb6e\x80\x00\xdb\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\x05b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA-\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89\x90\x83\xe1$\x89\x9bjpQ$\x150\xdf\x86\xa8d\xd79\xa7\rX^\x99\x18\xfb\x94\xe5}>\xc6\xc8\x1b\x1f\x7f\xea\xbc;Y\x9ah\x91\'\x00\xee\x88\x14N\xb7\xcb\xde\xedt)\xb9\xfb\x11ye\xf5\x8f\xf1Yb\xba\xd6\xd6e\xbdUB\xcf6\xc8\xa2\x10\xb75\x90\x8b\x1f\x16\x82\xf5=0\x9c\xe5H\xe6pH\xd6\xb8\x9c\xd7\x98\x83\xa4p\xf02\x00\v\x82Y\xe8\xb0\x97\r&\x99\xb9&1\xd7n\x8e/\xf8\x18\x83\'\x1d\x89@\xcf\xd0;\xc0\xeb\x04\xd8\xee\xd8Oo\xc7\xed\xdb\x94\x0f\xbfP>\x19\xa9W\xdc\x1cds\xd3(\x16Uk\xbf*\x04\xec;\xf2\xee`XF\xcd\vR\xbc!l\r\xe9y\xc0\xd7\xc4\xb7\xa2\xd3\xc7\x05\xa0\x96h\x06=\v\xe6\xe5\x04\xd6\xaf\xbd\xf2\xd3\xda\xe6e\xb1\x11UWw\xd83\xd4\xc0/Q\x9df4\x1e\x9c\xb3V_\xcdZ\xb7\xa2a_f\x9f\x93m\xac\xf2\xdd\xe1D($\xb2ZI~\x1c?\xedq\x8a\x9d\xa5V\x02\xcf;H\xa8\xedy\xde\xbb\x05\x13at\x13\x01k<\x05\xbe\xdc\xf5x\xd2\xdcM\x88\xf5\xe4\x96%\xc5\xc4\xc6\xea?\xc0k\x86\x8e<\x17\x9b\xd2\xd16][\xdb\xe3\xbb\xfd^\x85\xa7\xd2\xb2\xd2\xc6[\xd0<\xf8\x996\xe0/\xaf\xee\xe9\x05L\xcf\x16\xc4\xd6', 0x26e1, 0x0) close(r1) close(r2) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x5460, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001e00)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1, 0x0, 0x6f}, 0x0) close(r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0xffffff43) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r4, r5, 0x9, 0x1}, 0x10) 03:23:19 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="4c0000001200ff09ff1cfe956fa283b724a6008000000000000008000000150024001d001fc41180b598bc593ab6821148a730de33aa46ffecfde0258823dd8da49848c6cea97da172dcc121", 0x4c}], 0x1}, 0x0) 03:23:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x2, r3}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x0, 0x0) 03:23:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:23:19 executing program 5: shmctl$IPC_INFO(0x0, 0x3, 0x0) 03:23:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xfffffe2f) unlink(&(0x7f0000000140)='./bus\x00') clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000740)='./bus\x00', 0x0, 0x1) ftruncate(r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:23:19 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[0xe0ffffff, 0x3], [], @local}}, 0x1c) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000000301ffff808fc201000000000000101ba119062e9eab80"], 0x1b}}, 0x0) recvmmsg(r1, &(0x7f00000013c0), 0x4a5, 0x0, &(0x7f0000000c40)={0x77359400}) 03:23:19 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc494) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file1/file0\x00') 03:23:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 03:23:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x7}}]}, 0x34}}, 0x0) 03:23:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x0, 0xffffffff}, 0x3c) 03:23:19 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f0000000740)={{}, {0x77359400}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000540)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, r1+30000000}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000540)=0x0) timer_settime(r2, 0x0, &(0x7f0000000740)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 892.185454] device bridge_slave_1 left promiscuous mode [ 892.191237] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.255743] device bridge_slave_0 left promiscuous mode [ 892.261319] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.692297] bond1 (unregistering): Released all slaves [ 895.766648] device hsr_slave_1 left promiscuous mode [ 895.838151] device hsr_slave_0 left promiscuous mode [ 895.878122] team0 (unregistering): Port device team_slave_1 removed [ 895.891901] team0 (unregistering): Port device team_slave_0 removed [ 895.903085] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 895.941382] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 896.031850] bond0 (unregistering): Released all slaves 03:24:19 executing program 0: 03:24:19 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400000000000017, 0x0) 03:24:19 executing program 3: gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x200, 0x0) read$usbmon(r0, &(0x7f00000002c0)=""/166, 0xfded) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(0x0, 0x1000000000016) 03:24:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x0, "8b79e98a6e9a990ceacc9e5913d3198e2099f6923e646c1d3eaad49bc3c0a86bd1683c51ec36b5d2dab5a220e04e403bbe1ccf681d083e2307d3f5597b0000770bd301ca8e1a4300"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 03:24:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:24:19 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x15984a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0x0}) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xff54) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) 03:24:19 executing program 5: 03:24:19 executing program 1: 03:24:19 executing program 5: 03:24:19 executing program 1: 03:24:19 executing program 5: 03:24:19 executing program 1: socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="0400cd80"], 0x4}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c65b6ae2e133d5f00003c1c12e2fc00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2], 0x2c}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x0, 0x120, 0xa55c91fed3cc2212}, 0x20) tkill(r1, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 939.840435] IPVS: ftp: loaded support on port[0] = 21 [ 939.905109] chnl_net:caif_netlink_parms(): no params data found [ 939.932089] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.938671] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.946193] device bridge_slave_0 entered promiscuous mode [ 939.953128] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.959619] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.967205] device bridge_slave_1 entered promiscuous mode [ 939.982267] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 939.992422] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 940.010241] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 940.018023] team0: Port device team_slave_0 added [ 940.023668] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 940.031376] team0: Port device team_slave_1 added [ 940.037077] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 940.044717] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 940.107699] device hsr_slave_0 entered promiscuous mode [ 940.174955] device hsr_slave_1 entered promiscuous mode [ 940.226508] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 940.233735] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 940.252097] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.258714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.265403] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.271757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.308246] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 940.314932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.323546] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 940.333307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 940.341075] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.358723] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.367228] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 940.378378] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 940.384843] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.394449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 940.402240] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.408630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.425392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 940.433115] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.439516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.455175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 940.463088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 940.472388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 940.485898] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 940.496706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 940.507744] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 940.514340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 940.522443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 940.535123] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 940.545055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 940.552035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 940.559123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 940.570002] 8021q: adding VLAN 0 to HW filter on device batadv0 03:24:22 executing program 0: mkdir(&(0x7f0000000040)='./control\x00', 0x0) chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00000002c0)='./control\x00', 0xc40beb2474df942a, 0x0) 03:24:22 executing program 5: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r2, 0x1000000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000001540)='cgroup.subtree_control\x00', 0x2, 0x0) sendfile(r4, r2, 0x0, 0xfffffdef) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) creat(0x0, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xa0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) epoll_create1(0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x4000000000000004) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xa0) 03:24:22 executing program 1: syz_open_procfs(0x0, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 03:24:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:24:22 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x206802, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000140)=[{{0x77359400}, 0x12, 0x7, 0x71}, {{0x77359400}, 0x15, 0x3ff, 0xfffffffe}, {{0x77359400}, 0x3, 0x7fff, 0xecd}, {{0x0, 0x2710}, 0x2, 0x9}, {{}, 0x5}, {{0x77359400}, 0x1f, 0x0, 0x4}, {{0x77359400}, 0x3a, 0x3, 0xa4d8}, {{r3, r4/1000+30000}, 0x3, 0x0, 0x40}, {{0x0, 0x7530}, 0x15, 0x1ff, 0xffff}], 0xd8) r5 = dup2(r2, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400f7ffbb68cde2395df08942448c37a09c9f855fcccb8921824d8387122974b89b38d78dc3a35bbb0036891b9101bb5119d9e448e204b5aa17834170f0c0618713bcb5ab10b46c325d8d46722c5b6f59089a9cc25d0325f3c205538860", @ANYRES16=r6, @ANYBLOB="00032bbd7000fcdbdf250100000000000000074100000018001800000b0469623a6e657464657673696d30000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x84) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x80) r9 = creat(&(0x7f0000000700)='./bus\x00', 0x80) r10 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) fsetxattr$security_smack_entry(r10, &(0x7f0000000180)='security.SMACK64IPOUT\x00', 0x0, 0x0, 0x1) fcntl$setstatus(r9, 0x4, 0x46800) r11 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') preadv(r11, &(0x7f0000001980), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r8, &(0x7f0000000000)={0x50}, 0x50) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000018c0)={[], 0x5, 0x10001, 0x3f, 0xf6, 0x5}) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r9, &(0x7f0000000200)='threaded\x00', 0x175d900f) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 03:24:22 executing program 2: syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x83, 0x0, 0x0, 0x0, 0x7f, 0x20090, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfdbc7f3278ee7c4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/user\x00', 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') perf_event_open(&(0x7f0000000400)={0x3, 0x70, 0x0, 0x8, 0x9, 0x0, 0x0, 0xffffffffffffff8f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x0, 0x392}, 0xd86113be646f5d43, 0x7, 0x4, 0x3, 0x9, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0) getuid() creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x19b) unshare(0x60000000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) poll(&(0x7f0000000000)=[{}, {}, {r1}], 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) lseek(0xffffffffffffffff, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r2, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000007880)='cpu.stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='devpts\x00vh\xd2p!s\n@ha.\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\\\xcen\bC \x81', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 03:24:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x38}}, 0x0) [ 940.713462] IPVS: ftp: loaded support on port[0] = 21 03:24:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8}]}, 0x30}}, 0x0) 03:24:22 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@getlink={0x19, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x0) 03:24:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2fffffffe}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) [ 940.882634] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 940.906823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 03:24:22 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = gettid() tkill(r1, 0x1000000000016) 03:24:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') faccessat(r0, &(0x7f0000000040)='.\x00', 0x3, 0x0) 03:24:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') faccessat(r0, &(0x7f0000000040)='.\x00', 0x3, 0x0) [ 941.128054] audit: type=1400 audit(1574133862.540:239): avc: denied { write } for pid=12181 comm="syz-executor.3" name="ns" dev="proc" ino=106862 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 03:24:22 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r4 = gettid() recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x4000000000000c1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x1004000000013) 03:24:22 executing program 5: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) mlock(&(0x7f0000003000/0x3000)=nil, 0x3000) [ 941.290318] audit: type=1804 audit(1574133862.700:240): pid=12374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="bus" dev="sda1" ino=16592 res=1 [ 941.342175] audit: type=1804 audit(1574133862.710:241): pid=12374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="bus" dev="sda1" ino=16592 res=1 03:24:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:24:22 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x383600, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0xfffffffc, {{0x2, 0x4e24, @rand_addr=0x7ff}}}, 0x2c4) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x9, 0x82dfc41ded2d26a0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') listen(0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000900)='trusted.overlay.redirect\x00', &(0x7f0000000940)='./bus\x00', 0x6, 0xbc6e85b86cb554d) read$eventfd(r1, 0x0, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000340)={0x20}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x80000000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="0f819ca0c73a91bc7fd7dc080c6a97ebdfb9fc0da14db8a19822f5832b4539afa4acab9aeda43d1b", 0x28, 0xffffffffffffffc6, 0x0, 0x0, r0}, &(0x7f00000001c0)) 03:24:24 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002000010000000000000000000200000000000001"], 0x1}}, 0x0) r4 = dup2(r3, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:24:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x10000) 03:24:24 executing program 0: clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="13cd0f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)="ba", 0x1}], 0x3}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1f7d11114e5d6ed860136292289c000c3ce4b5fa700f83aea349a501b8f4926c9601b122bf81c40e3c4d0864b268fa71a491699d044621659396a16561dc23320c090feda54fb9d01dff1b216a98c012356bc30a784b62cf0650e87944cc25e6"], 0x0, 0x60}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:24:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:24:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:24:24 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800230300000000000000000a0000000900000000000000080001"], 0x1}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:24:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) [ 942.758235] ptrace attach of "/root/syz-executor.0"[12590] was attempted by "/root/syz-executor.0"[12591] 03:24:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000fee000/0x8000)=nil, 0x8000}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r1, 0x0) fchdir(r0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) writev(r2, &(0x7f00000003c0), 0x63) [ 942.859266] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:24:24 executing program 5: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000000)) creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) getxattr(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140)=@random={'user.', '/dev/ptmx\x00'}, 0x0, 0x0) 03:24:24 executing program 1: capset(&(0x7f00000fc000)={0x800000019980330}, &(0x7f000047efe8)) prctl$PR_CAPBSET_DROP(0x18, 0x0) 03:24:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) [ 942.915341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12629 comm=syz-executor.2 [ 942.927980] audit: type=1400 audit(1574133864.320:242): avc: denied { map } for pid=12808 comm="syz-executor.0" path="socket:[106935]" dev="sockfs" ino=106935 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=packet_socket permissive=1 03:24:24 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x2, 0xca}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 942.985610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12629 comm=syz-executor.2 [ 943.012963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12629 comm=syz-executor.2 [ 943.055494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12629 comm=syz-executor.2 [ 943.075581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12629 comm=syz-executor.2 [ 943.135553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12629 comm=syz-executor.2 [ 943.165217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12629 comm=syz-executor.2 [ 943.178391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12629 comm=syz-executor.2 [ 943.191432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12629 comm=syz-executor.2 [ 943.204099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12629 comm=syz-executor.2 03:24:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440000000000e630c400000000000000000000000000f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 03:24:25 executing program 5: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xf) socket$key(0xf, 0x3, 0x2) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x34}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:24:25 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0417cd8034"], 0xae}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES64, @ANYBLOB="b7e41205a1300249b93350095d95d195a83517dd6210479b1078284a3ba12d9101ac559e6c59a730307b0d9f48c80344c7c6d7a2636d794c822b5c1748689ac03ad8ca976f368524dafcfcf947d2b9e07239ae87f6323d0ef51895f46216eb0ee7f056dfba2c84137a5e3ad6fe3d2dd11f2994a07a2a986671345798ae8f431b0aa9a3b0aed0671e997b8da71edecc93f26fb2f3098ef02edef41d2cd164eb6871dcc5d57408de137a2b5b654153b963d1789dfc", @ANYPTR, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC, @ANYPTR64, @ANYBLOB="b4fda7b24f8e34ed989b1f84834a0d2dc4b0f0a947b1d6d8fc296b35d2f9971dfc71cb4f230bc9ea28c14e7e42a35bbd0ac60f252ce247d9f2f3b9e614e6890db5756ab1996624f08ad89a7b0391143114"], 0x0, 0x13d}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:24:25 executing program 1: setrlimit(0x2, &(0x7f0000000080)={0x0, 0x2000000}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\b\xc0\xbf4\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) munmap(&(0x7f00001db000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x403, 0x2000000000032, 0xffffffffffffffff, 0x0) 03:24:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:24:25 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x7, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 03:24:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:24:25 executing program 0: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) fcntl$getflags(r0, 0x40a) [ 943.713154] mmap: syz-executor.1 (13028): VmData 35274752 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. 03:24:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x0, &(0x7f00000000c0)=0x0) io_submit(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000400)) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r3, &(0x7f00000008c0)=ANY=[], 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000080), 0x0) io_cancel(r2, 0x0, &(0x7f0000000200)) fchdir(r0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f00000002c0)) ppoll(&(0x7f0000000280)=[{}, {}, {r1, 0x50}], 0x3, 0x0, &(0x7f0000000340), 0x8) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0x4000000000020009) r6 = socket$inet6(0xa, 0x400000000001, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) close(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) close(0xffffffffffffffff) 03:24:25 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x5, 0x1f3}) readv(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001480)=""/25, 0x19}], 0x2) 03:24:25 executing program 0: capset(&(0x7f0000000800)={0x20080522}, &(0x7f0000000840)) r0 = socket(0xa, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 03:24:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:24:25 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)=ANY=[], 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) wait4(0x0, 0x0, 0x0, 0x0) 03:24:25 executing program 2: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x3d9) 03:24:25 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b7000000005e1c04650000000000000095000040000000002d604796cf1ba3e7b0c3881b1cee7060da5aa451074e93787fafe54b970e7fb365d748e7695d4768902cd9cdab0b5c335736292da1eeea6a0300156f0da515b48eb4731c057410dd95ad567826014ae3094162ff4499c5066e5480f4b4d02ad9d618ba6c14f42ea7ac1b23eb206f91cfa8df3c3e0466ace0e3765c618116ec896a6d55c0"], &(0x7f0000000140)='GPL\x00', 0x1, 0xc3, &(0x7f0000000240)=""/195}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000006c0)=r0, 0x4) sendmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0xff48, 0x0}}], 0x400000000000284, 0x2000850) 03:24:25 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x103b0e93b836670b, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, r0+30000000}}, 0x0) r1 = gettid() tkill(r1, 0x14) futex(&(0x7f0000000280), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 03:24:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) splice(r4, 0x0, r5, 0x0, 0x422000a7b, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000540)=0x4, 0xfffffffffffffff9) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) writev(r7, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) getxattr(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000240)=""/126, 0x7e) read(r2, &(0x7f0000000000)=""/250, 0xedf1d44) fcntl$setstatus(r1, 0x4, 0x6100) getrandom(&(0x7f00000003c0)=""/124, 0x7c, 0x2) timer_create(0x2, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) openat(r1, &(0x7f0000000480)='./file0\x00', 0x200, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 03:24:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) [ 944.064301] ptrace attach of "/root/syz-executor.3"[13257] was attempted by "/root/syz-executor.3"[13260] 03:24:25 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) fstat(0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x43e) write$binfmt_script(r2, &(0x7f0000002300)={'#! ', './file0'}, 0xb) close(r2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x43e) write$binfmt_script(r3, &(0x7f0000002300)={'#! ', './file0'}, 0xb) close(r3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1c) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',defcontext=']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) 03:24:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:24:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f00000001c0)=0x54) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x15) wait4(0x0, 0x0, 0x0, 0x0) 03:24:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, 0xffffffffffffffff) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:24:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:24:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, 0xffffffffffffffff) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:24:26 executing program 3: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)={&(0x7f0000000440)='./file0\x00'}, 0x10) r1 = socket(0xa, 0x0, 0x9) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x7, 0x0, &(0x7f0000000040)) accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000480)=0x17, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x1) socket(0x0, 0x4939d7c56c66683, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfb120eb7) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000440)) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) add_key$keyring(0x0, &(0x7f00000015c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="a08423da09c129c8383f0141c92e10f7", 0xfe2a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf, 0x1f, 0x0, 0x3}, 0xf) r6 = syz_open_procfs(0x0, 0x0) r7 = memfd_create(&(0x7f0000000300)='keyringsycgroup\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xafS\xb7(\xd7\xd5d\xe6\t\xd10xffffffffffffffff}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r13, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r13, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r13, &(0x7f0000000100)='f', 0x1, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r12, 0x0, 0x1, 0x0) pipe(&(0x7f00000000c0)) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r14, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) pipe(&(0x7f00000000c0)) r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r15, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r15, 0x6, 0x14, 0x0, 0x0) connect$inet(r15, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r15, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4490d8c1ef070ee3, &(0x7f0000000180)=0x100000001, 0x2fd) connect$inet(r14, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r14, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 03:24:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000000c0), 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 03:24:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, 0xffffffffffffffff) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:24:27 executing program 1: getresgid(&(0x7f0000007fc0), &(0x7f0000008000), &(0x7f0000008040)) 03:24:27 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) ioctl$void(r0, 0x5450) 03:24:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) dup2(r0, r0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:24:27 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 03:24:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) dup2(r0, r0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000000)) [ 945.984627] protocol 88fb is buggy, dev hsr_slave_0 [ 945.989859] protocol 88fb is buggy, dev hsr_slave_1 [ 945.995046] protocol 88fb is buggy, dev hsr_slave_0 [ 946.000218] protocol 88fb is buggy, dev hsr_slave_1 03:24:28 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0xa, 0x300) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r6, 0xfffffffffffffffd, 0x0) dup2(r3, r5) 03:24:28 executing program 0: r0 = socket$packet(0x11, 0x40800000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0xb5481f3e129391aa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="234278df7be8"}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @remote}, 0x10) sendto$inet6(r0, &(0x7f0000000040)="1004000073d1600000000000fbf55b42b90516db4d916502c5", 0x19, 0x0, 0x0, 0x0) 03:24:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) dup2(r0, r0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000000)) 03:24:28 executing program 1: socket(0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(0xffffffffffffffff) close(r0) 03:24:28 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) creat(&(0x7f0000000700)='./bus\x00', 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fchmodat(r6, &(0x7f0000000080)='./bus\x00', 0xbdbdb0538d907469) sendfile(r3, r5, 0x0, 0xa5cc554) 03:24:28 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [{0x2, 0x0, 0xffffffffffffffff}], {}, [{}, {}, {}, {}, {}, {}, {0x8, 0x0, 0xee00}]}, 0x3, 0x0) 03:24:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000140)=0x8000000010000006, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) 03:24:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, &(0x7f0000000000)) 03:24:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000001580), 0x4) 03:24:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)) bind(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000300), 0xc, 0x0}, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='tmpfs\x00\x80\n\x0f\xa0\'\x87\x9e\xee\xde.$^\x19\x15\xb8.\x19\x1c\xae\xf6\xbf\x9c\xda~\xf7\xb4lE\x82j\x00\x88\xfb_\xab\xf8\x9c\x1f\xc59\xd4\xb5\xd9\x19', 0x2000002, 0x0) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) umount2(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x80000000002) fchdir(r0) 03:24:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, &(0x7f0000000000)) 03:24:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x20, 0x0, 0x100000000) [ 947.504656] protocol 88fb is buggy, dev hsr_slave_0 [ 947.509821] protocol 88fb is buggy, dev hsr_slave_1 03:24:29 executing program 5: capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 03:24:29 executing program 2: unshare(0x40000000) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='\x00\x01\x00\x00\x04\x00', 0x9) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) r1 = socket(0x11, 0x80003, 0x0) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000100), 0x4) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e24, @local}, 0x70fbda26299973e5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='rose0\x00', 0x7, 0x1, 0x5}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) getpeername(0xffffffffffffffff, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$cont(0x9, 0x0, 0x0, 0x0) 03:24:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, &(0x7f0000000000)) 03:24:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x5}) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x7}) 03:24:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, 0x0) [ 947.728724] IPVS: ftp: loaded support on port[0] = 21 03:24:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f0000000000)="f90000001c000704ab092506090007000aab0800050000000200c093210001", 0x1f) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:24:29 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 03:24:29 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'lo\x00'}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000003c0)="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") clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) fallocate(r1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0x201, 0xfffffffffffefffe}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) getrusage(0x0, &(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='loginuid\x00') write(r4, 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fstat(r5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0x3f, 0x19, 0x1, {0x2d82, {0x0, 0x0, 0x6}, 0x100010010, 0x0, r6, 0x442, 0x10000, 0x0, 0x9, 0x7ffffffffffffffd, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x0, 0x8, 0x3}}, 0x77) lstat(&(0x7f0000000040)='./bus\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0x3f, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, 0x0, 0x442, 0x10000, 0x0, 0x9, 0x7ffffffffffffffd, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x8, 0x3}}, 0x77) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) fstat(r8, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0x3f, 0x19, 0x0, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r7, r9, 0x0, 0x10000, 0xffffffffffffffff, 0x9, 0x7ffffffffffffffd, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x0, 0x0, 0x3}}, 0x77) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000b80)) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) fstat(r10, 0x0) getgroups(0x1, &(0x7f0000000740)=[0x0]) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) fstat(r12, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0x3f, 0x19, 0x1, {0x2d82, {0x0, 0x2}, 0x0, r11, r13, 0x442, 0x10000, 0x0, 0x9, 0x7ffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x8, 0x3}}, 0x77) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) fstat(r15, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0x3f, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r14, r16, 0x442, 0x10000, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x8, 0x3}}, 0x77) 03:24:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, 0x0) [ 947.920584] IPVS: ftp: loaded support on port[0] = 21 03:24:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, 0x0) 03:24:29 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x61, &(0x7f0000000040)=""/42, &(0x7f0000d23000)=0x2a) [ 948.028678] netlink: 177 bytes leftover after parsing attributes in process `syz-executor.3'. 03:24:29 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0017fdeb685dee7bea4941b50c605a772af84c0538300133daa6684a5bd030cea791503e3fffa1927f004c70673295736ba4115faad6a3ca545daa7bc882f011ceddd5a8e2654a5af1d0902ae31f5b504c5a4662649d8b45140d9b7f556d0ed3", 0x60}, {&(0x7f0000000340)="ccc064d454bf8d14fbd303e83e7848cff718", 0x12}, {&(0x7f00000004c0)="0539b5003fb76cea7cac97c3b6f1d768a48ef9aaab8369919d3eda033eddcfe3e6839accea2f4c67997c58f04b66d61edba1ada5486844035170af2d4e0baff93ddc9394682a92c7ed441d149a10b5b92af22ed7234cbfad470058fba5f15b413be6d39dc6d4cbfa0879d3e3c0566f98d8a2e8ec203d7796ebed9742c5ee06b8a6c80f8d8c78641b99a6df62ee28c4e4a9d334f7c7c4e508d752cc0329163ce30db12de085f2e072dbfe287da56c814faba5ff80f944f42fbe980b5cb5f3bdb86a45f9f4c56838bbba5c36f51382d02b417848eb3cae27a580ff179edf14", 0xde}, {&(0x7f0000000380)="7b21b7cca8453f5ded1a5d4da04600a76b0d1759690e93d0b9b3279ba83c1b8800", 0x21}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c40)="a4b4523de7fc7354cb7fae0c522c4182034991bb78c9fd4d2cd7e9c4c8ce3ce8a858a65d6e5b6cca94b92af406e437fe3e941125d3a211e7c137ec1624b781df9cf4a7571ac5c020d11615b347b8bd3c1280d83346fb133ccff206bb107225b99e31752fec3a71e8", 0x68}], 0x1}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000b00)="910b2945cc78686ecf55aaced5eb172d9dbb9f56d0c7df06497cc674", 0x1c}, {&(0x7f0000001f80)="f632ed4832c8a74a4d72260f0f10799d64bf7eb834cd259642a4550b91ecc3180c49a2045e752ccd27de13485c23fb09a43273959ff07a1c1db9d143690009924d43ac4d1bca5879fefdbefbc5500d9a180103c249f619386c4c75c573f1ab87a80b113ac572847fef37a910b338583b43eea341d06b6191835488065ffb685d949e25ffb8a3acb3bf98ee94e2d6a5a873ea2ab64e507f514d08f217cf57c83a589562acf2bb9cf90efad0255e0b1a54d87211f6639abf8f6d885705729b28fc99e533711e311758e95f9594e482373c03e82118aa878fb7a06803f437426b5f85ad1aefa8ce6879f9f0c8c040c7b3f5d1708e9b4ab484fafc28d500494eb543870324f7b381c044488e2ee512935564621c94b595ab690f5c084fa78776b3f164864fdf6530c379236dc578c6f7fdfd311c92d2d4364fb110b5039c84903c321de33983249a9dbefe96353a9e7724a87c4c08285f69462241e24fcbc95f8be818eecd97a28ec75aa0fa74c3a70d677b7ffb8dcc9d1ab1bdbd42959cb125758df82a392db07371245c3274110f68da0831de54b7004d8ecb0705e7089e63067b919480db199bc87f3f91677388a67caac328a46e5e19f644b0a3216accc6b0cfa7155a0d69b7663f3d79db8347f59e718e545dfd6e6c5dee42ad2763d1cc2b8fe260567d85741c49e2946ee82b3581ff71aa81bc008f909f65101480421f64a89d298a535c6a869b10af6f8ebe8560351cbb4a200af050b24a039ea00bcb3286da9208ce277ecbcbef019ac38ac39db1f5806d1496bb33d8a96766bf27b5f51a8e3c46d89f4c9ebd816560d2726fa869d0d8828f54eb79a3077b5ca92c863b1bdb69953af107b3939568f25edc42fcf0a796a70265c72409fff50506af6b2674c522ffeb42cae7d89bd18bf1c0ad2e1ac06bc0d91e2b908fdd2e75dd1119fa284bde2c708258c68cc9c601ac59acfd1f7d9556cad233d435ccb556db65342e24b6d5626ae0e299e67c5ab4d4a22501f4be4a572b79cb48e993c6803b7faf523310b45416a01b1f1d8730420a3a76759e7a0d17a4cd04c56952d5ab3e3ff470da95d35773789c889e993535738c5d743c1aae1fedee1cfaf32468b5e129e682f91a4f2c695122483911e09882234208356ffbaab256b7356b33f2f6d106f523235f107015e2fe342dc97127a687daabc68a1cd8908c23479be55666aa2027b22f6df5d035111430c13136616e3d81ea9e37701f2be65a16109ce40f79d490346076f6760c3228404877c46eccfead68579157f5d322917cf88e9f6e0f81fce04cfef9efe573bbe98e261268145435c2767453078bd9c87a076f1891cb0ce594160d4a2cf858998e742f4078fee8ccafae2043a1008491a0572811f665f918b3f91ef877079eebefa51c08d790a359b78411656c54632ee627236f38e16d40f20633fbe93140968405fab94834e5bc9e33023a42b58d6fe13942baa002393c2c1b5175bc89a5555b376dffecfcd6c858104e784c9ad5af118ae73944694f4ed2eb96c5792f2772001800a2da210787f594cee1cd70a4739e9a3dddf26ac6eb8248ef157035fb12bf574b55e4252f815cceeab715da2561c77bc5d0d76c3a6f08c530403f46a9b226051236a89a3d724129e1e30b0cc86600e9b0dd849582f4c8f794d72f9420c14ffd5eee71e07f2a66b125818944d1ed5ff10a82bb949b90519de00a8ef8928d5c0f7061776e0d09d53badb54c91c07da28d6a3547286a0e4075d01f2fe3cb6c6a3b28b303b71228337365ded195322e7accd392e5e8a99e8103623ed5eeac29bbb0ed241c928d6b606f9c89c6bb6415cc50ba5194ae6813e1550965a4229826555d93f68e42273b30eb65a9a03654ee3feffdee3b6bac29fb68c4a28eedb5f5cc98ba2a437edfc5ed4df9ad6a4734ecdb53edabe01a1577618a682555450d2d1137d073517fc73b279df70f035f51f506e3c000370e0cb27b771e162066fc6e9bd95c5d53fbaf42a577c0daf395fdde1d5af80808ae8f6095a13952f8ee0bfc93c95bd8840b702dba52136d67bcb8675c3453c49892083259d3a6f5b79a5901af91286bf1f816852f890eff357553a99df9f47fdb4cfe416a4b3223c27fba00c51951d90246d5d266d1ccc6f351754764f8db97c385b3f274316d55c344511cbda0de3ca63a1e6b15f6576acaaeb727312ac97fef287722826db9c8821f55f28afb9133507d7a18c20199aa6528b4387e7e6f8a5b885bda344fe3ddb13e2143945bf7d47edec564ad0dcd30f7f21c9c1def08f30bb1bfd1cc2048e2deabdeb8f1d60d36dfc5d6b4ab64c4aadbe2b5ee6654f270758abbf4577913b498a8b4ac2d74e3acfd0ed764c2caef6bb1f5150ef88312a0c6a34a812d3b3d3a0a1a07fef71dfcd32a103685f5638306c29d61a997d1a74d424bf7f376aa6884a263cf77bfa78a38eac8146500438bbcd0ddfc207d7461ffd82c671e4a5fc94d45de277aaeb02f9c1a18be406b4c2f3d308ae6baea76f7d56e843a9dcafba9fc5a1412c444c2e64d7742af1aa49ab3f6999531b10dc7239ad142cb6f09f500e5625d3c1437a28b41edfd314c5e3023065a439cf77ff431d95bba8cbb8d9321c88e30941e74a63273416eb08e4e9a2eb473e36c9b1068eddcbd277d47670f4ba31fa31cd74d0a142485991d1f4168aa0e9e43c0aa09ac28a2e448d9b80ab4c968cd73090b4cfa4a81b39dc5ecdfbd23b3eaed97f49b2a631e18aa37d2cd876d7e5867ebe2a6b3ae561ea66837ce26e9a8813e06e351e4c9dded4088980f5d89d84ccfcb73e16845f8cc09871f916dba6be3f359d65a7fa8c147f67a90dc1f5aab23cc4b98f9d9d1b5fb886e0d960b3abce343bd44d4a7b9384aaa7954e2a59e272b3c877984454e7ce1dfb1f5f0de6910b9127b6ff998877fdf807409ee4a8f6a91f296e14335331492e7c8faf817f4355ab606da0d2b21678dec3f9c979053e58614446211d1cd331f308df38d595914190377f9164f3df5f8f56125c0bbeff2f9c500293cefa59417db93923dbe791652d7cb4d02178a034cfcbca08dfb312d2df3354aa69bdf781f5f609cb9a35f2f9182ab8789bb85a6090e78fa3cc29ad4f10b302c5092ffe1fddd0ee4e09bb86470750308d2afa7ba08dd7834581709c7535ff7f8b95e1ba9a3c4f534fcd40864bb02bd32c7d3d9ba8388fdde99a421521398a0864a3e2ca5d01e5a3d5acc8a0ba139da441b0c79975845099c48d34644d6eb42b462d17ae349812f6fb865ac60c58de61f4b2c9390c8d8d227a058620c7489893b1783d17148f4e5754c790760488d131455a5350c41fa061359c2653a148130b58a3dc73b7f4c2caae8c6ce84706ccf2ed809a73cb75ace57ef3656b3282cc7bcbbfd9cb538a81005c073b189872b770ef1608976d6e24b9c873ea4dc738eec02ef8d5878007e491ad0b0018b71caebb53fd7743a33ac1aed2fda6bed6026a01f2ebb2ec614ba9dc6956a770eb85ea741943d6fbd097a2476f42c3ed8088c4c5113e6d32d5326fcb99c0325a80a140a01a5e200fff17c7cffe8c63dd5d7c40d0a2d11558c584975dc9bbc570c3fab8d3bb1ad5c444f07f128c5c84be3738c1b81f8ca63983dc07dd8c3317cc783ddce93992baf6824d11a3fcc413df8309100c787902560994ff764955ac34600cd5fe4bbbf451867c384c295a7242a2c93260ced265a3094af079c1f947e487ed2c6045c437612e5f9a00e4f86eefac0f7e654732685881c684fbf3558470fc6a49cc154427d7c36adb1fe5050dd437c1d0cba4424751b5e9fdd44b47c74ff927a68f92d11f5e5643f1ae1ab249688a0b52cfc860d0a946bc09fa74788ef85f1d81fb76f6cb127bc76e05d82845c70d4b888e33039d287999c0c62356e4290afd3da4f689ee9202a10c689b4cd31539b405fb09c845a205e521836a248f6ce57834c97c5b2b75e9bd043b19f3690491770d7ddceb18f59215eebd2c37e2cbc597795ed309f846b76b5f4d5efcdf9d0277bd688f2b4d5522c19051613d5a6f8fbeec3c79b604ba8e9972e9008b7acd7dea053aa23e7651537c200df8f20b3c56407d8411967beb2759d4c507065d95533c08629d6d727bf9315685873fbe7b488a616318007b74e61ee90ef179864bb9850dfb34525b4c5701c22fe7757b025d18f32615f7a30b61665b2360619b78981c22ff237f44d743291ea03a879a806f46fe304062d49c1ef3a188ede9e3c17b2b994dab50b22e9d0cc7ba0d0340ee39c4bc67943b9b0a969e53994a1d94ab61e9cd5caddc016ea9e732a973ab559a21d87f59e8711bf8dcc794048110e3656f4f8a37b53f479cc193897d81b164548a7beb16c1b3e6e98d446d4e0fe01563549a6c8a9d304ccd891726f91d9157504e4317c7b6af2b3c6cfa918eedd50aa7dbd08f8f0d9f0eda4f25e74c94c60c3ec836bdc05587f2cb51d29eac6a8db0326527f89d00b7c00fc73f2761082ec2d5c3302542054853f4b90ad54359ab1f41745886e9ec2a668509d59532549dbde6488f8349b728a3d1c88f5deb8a59c82dcb9f79c2088baaac4651e01d1cb8562365b47c78c36ad07336ed2a03a8a977469fedac3572b8cb6652a3ef94ee725ae03bc4e7ae81d3288589681cacbf0ae778a01a8050b9eb8d50f484729ed1015d8dc30879503dcd2a67b2ab954d5bbd03ef95749847cac91a62b4e6c2188d10093272f13b013e8041b3542f996195d7887190030a2e2a6edc50835e0a9094e4192060823f53047bd24f6e858fc235f0a68114444e11900c5131219e8e0bb37d31f020109a0bda2914f897536101300dda9da5d5b49aab6e7d94e1309fbad44d5975c9de86dba7090e776b268c865dd7bbc54d7098b46d42ad76b6496c4670a40a9ef06095009fe0e4f51e8cbea5bddf6b3bd05dca25782d7a075de89d56ed85962e6e49138b587476c2062b26e7236a4db95f6e1719d635d6c9a48d62b1435714cfc0f150c435ee2da1854bb2e11e64be047539c02bf0ed1f8f974b9804223a0d4481a330a6585ce6eeb74fa7d3006c89e5a9f5f79cdf72946d80c15bdfd4f63d732683b4e8aa9f653956566fbff260e1845e0c3ee651f0aedec01be99664d6c5b2364c7a9e69b57962fed6e744ae398f7b1a2deeed2f15ea8c36a12ef37d9b8ad86983ae3682bbf53e08c5930f1c96d2a13fba585f3b21b5e69c20c0e2c29452551990fc764e92580ad94e8e9faaf9b0ae002669141be3c6879e921f9a27b5380a1865484f63988f1a6157d85a2b8b5be67f8fef92afaecb241b05c9537bca0e33729e1e1fbd7af8cbe9fc9507d49dc7fb4666e6244328843e013d9c2f05e63000e984b01c622a2a8fd489c0cc5c52a8991857db3cfeac6337871a8e178edc4b0693f8837744a4ced81ef537126dea67d8e3fb653931f2f93d40a76cc49b668fefaa266ecaf7afe5db4abac4f4794c3ccd60d2b927916605c7ed45fb4e224d411d5945bac0b98a763846dcc8a8914c5f75ccc6ad2479f7166df76165b8560bc75273838e1caa498d9d27cbfe7aa0817b105cf1db68ffad1eaa14cade101f25c945927abb86df7ce51a06258266ca4b15e25813bf16d51ae2db68e3ef1373c42a11303f796d8ffe23350d2e64458ade464c5e5686d84bb4c9b0a8ef539bc76d7b8bf7198bc9cbb4a752777c0709614657a4092728c97e3b1fda0c79b769452e0391d9cd328d2d519fef648dc3fa06c1bb8d8172491d6f0fa0e0d930d0416056f1a8f9bd587b2dd39181b445b04be6ea1", 0x1000}, {&(0x7f0000000e40)="be74d9ffd4c3ed2a218dc5e8de1a250288d5d033f344f1f2ca8836a7a59e63c11d1e115a6afdffc8d099440e2d2764bfe70229a0ebb365f68b6eb819b3373486ed9adb39b7134f59d675bc635e9288b19526305cc03b832d15e60f3d93e717427ebaf3ecbd3e2d9c1acb5ee1a0248b19b0bcccc3d6138e94ff829f8f7ac878d992c05e52", 0x84}], 0x3}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x1c3, 0x4000002, 0x0, 0x199) [ 948.083922] selinux_nlmsg_perm: 1909 callbacks suppressed [ 948.083938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14399 comm=syz-executor.3 03:24:29 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0xc0ed0000, 0x0) 03:24:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000600)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r4, 0x2000000e, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r6, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 03:24:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='0! &'], 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) [ 948.135474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14399 comm=syz-executor.3 [ 948.181765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14399 comm=syz-executor.3 [ 948.212243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14399 comm=syz-executor.3 [ 948.235318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14399 comm=syz-executor.3 [ 948.257589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14399 comm=syz-executor.3 [ 948.272692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14399 comm=syz-executor.3 [ 948.292909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14399 comm=syz-executor.3 [ 948.305716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14399 comm=syz-executor.3 [ 948.318625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14399 comm=syz-executor.3 03:24:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x5}) unshare(0x400) fcntl$lock(r3, 0x7, &(0x7f0000000080)) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x7}) 03:24:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000054c0)=""/210, 0xd2}], 0xe7, 0x0, 0x8c}}], 0x1, 0x20000180, 0x0) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) 03:24:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff50700000000000009c7000000000000095000000000000007af4413df8580e8b07d9ff0af86bf4aa35339f4b382c4cb79db6fa7a9b857b7aabaca1d0fb2b2ff5023744e29625fb427559ef37fdc3b962dd000000000000000000000000000000007a0085b0"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 03:24:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltfilter={0x28, 0x2d, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}}}, 0x28}}, 0x0) [ 948.795468] netlink: 177 bytes leftover after parsing attributes in process `syz-executor.3'. 03:24:30 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x5, &(0x7f0000000200)) [ 948.870242] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 03:24:30 executing program 1: socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000bc0), 0x4000000000002e5, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000040), 0x3da, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x7, 0x4) 03:24:30 executing program 5: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r1, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r5 = dup(r2) connect$unix(r5, &(0x7f0000000280)=@file={0x0, './bus\x00'}, 0x6e) 03:24:30 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x5, &(0x7f0000000200)) 03:24:30 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000014000105000020000000000002000000", @ANYRES32=r5, @ANYBLOB="08000200e0000001"], 0x20}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 949.024625] protocol 88fb is buggy, dev hsr_slave_0 [ 949.029794] protocol 88fb is buggy, dev hsr_slave_1 03:24:30 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x5, &(0x7f0000000200)) 03:24:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountstats\x00') pread64(r2, 0x0, 0x0, 0x344ddbf3) 03:24:30 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x5, &(0x7f0000000200)) [ 949.264660] protocol 88fb is buggy, dev hsr_slave_0 [ 949.269793] protocol 88fb is buggy, dev hsr_slave_1 03:24:31 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 user_u'], 0x31) 03:24:31 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20008088) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x100000198) r3 = getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r4, &(0x7f0000000200)=""/250, 0xffffff7e) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f0000000180)) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x1) lseek(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r3, 0x5, &(0x7f0000000200)) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x1b, 0x2}, 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 03:24:31 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x20) keyctl$revoke(0x3, r0) 03:24:31 executing program 2: fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000200)) 03:24:31 executing program 1: eventfd2(0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000080)=""/10, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = eventfd2(0x0, 0x0) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x280080) sendfile(r2, r3, 0x0, 0x2008004fffffffe) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) 03:24:31 executing program 3: getitimer(0x2, &(0x7f0000000380)) 03:24:31 executing program 2: fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000200)) [ 949.648896] audit: type=1804 audit(1574133871.060:243): pid=15444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="bus" dev="sda1" ino=16712 res=1 03:24:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00^\x01\x03\x03\xf0\x00', @ifru_mtu}) 03:24:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x20008) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)={0x0, 0x80000000, 0x1}) 03:24:31 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 user_u'], 0x31) 03:24:31 executing program 1: r0 = creat(0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000c80)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) chdir(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0), 0x1, 0x0, 0x0, 0xc0}, 0x0) inotify_init() socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@rand_addr="4efe67d966015a6d2bc557ac95c12112"}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) write$P9_RSETATTR(r0, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x40000000}, 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x80000000}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:24:31 executing program 2: fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000200)) 03:24:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x124) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000300)={0x8b1, {{0xa, 0x4e21, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xf1a}}, {{0xa, 0x4e21, 0x8, @loopback, 0x4}}}, 0x108) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @local}, 0xc) setsockopt$inet_group_source_req(r8, 0x0, 0x2f, &(0x7f0000000080)={0x40001, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000200)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00\x00\x00\x80\x00', r3}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x14, &(0x7f0000000040), 0x50) 03:24:31 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r1, 0x10, 0x0, 0x110003) lseek(r1, 0x0, 0x4) 03:24:31 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 user_u'], 0x31) 03:24:31 executing program 2: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000200)) 03:24:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0xfffffffffffffffd, 0x25d) 03:24:31 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 user_u'], 0x31) 03:24:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r1, r2, 0x0) 03:24:31 executing program 2: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000200)) 03:24:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 03:24:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r1, r2, 0x0, 0x88001) [ 950.198905] input: syz1 as /devices/virtual/input/input95 03:24:31 executing program 4: unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xd, 0x4000000000000800, 0x1}, 0x14) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001340)={&(0x7f0000001300)='./file0\x00', r0}, 0x10) 03:24:31 executing program 2: epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000200)) 03:24:31 executing program 0: write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 user_u'], 0x31) [ 950.337485] input: syz1 as /devices/virtual/input/input96 03:24:31 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f000002cffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f000001bff4)='./file0/bus\x00', 0x0) r0 = open$dir(&(0x7f0000000140)='./file0/bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x1, 0x100000000a012, r0, 0x0) creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) 03:24:31 executing program 4: open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 03:24:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 03:24:31 executing program 0: write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 user_u'], 0x31) 03:24:31 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)) [ 950.521115] audit: type=1804 audit(1574133871.930:244): pid=16091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="bus" dev="sda1" ino=16711 res=1 03:24:31 executing program 3: eventfd2(0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000003c0), 0xffffffeb) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = eventfd2(0x0, 0x0) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000280)={'system_u:object_r:devicekit_power_exec_t:s0', 0x20, 'system_u:object_r:devpts_t:s0', 0x20, 0x0, 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, 0x8d) ftruncate(r3, 0x280080) sendfile(r2, r3, 0x0, 0x2008004fffffffe) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) 03:24:32 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)) 03:24:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = gettid() r2 = eventfd2(0x87, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) r4 = getpgid(r3) syz_open_procfs(r4, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') timer_create(0x4, &(0x7f0000000040)={0x0, 0x2a, 0x0, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r5, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000480)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in=@multicast1}, 0xa, @in6=@mcast2}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000580)=@updpolicy={0x1100, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@algo_auth={0x1048, 0x1, {{'sha3-224-ce\x00'}, 0x8000, "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"}}]}, 0x1100}}, 0x40006c40) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10004004) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x2c, r9, 0x1301, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'rose0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044011}, 0x10101) sendmsg$nl_xfrm(r8, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc000000190001000000000000000000ff010000000000000000000000000001ac1414aa00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000edff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500e000000100000000000000000000000000000000000000000a000000ff02000000000000000000000000000100000000000000000000000000000000000000004137f9e5c85bee9302303aed38999669112e6dc225c3903dfa90739ee97620ea5b80446cf61ba757f0064b21b313f38077e55527760ae77836"], 0xfc}}, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000013) 03:24:32 executing program 1: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="0400cd80"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961", @ANYRESDEC], 0x0, 0x72}, 0x20) tkill(r0, 0x39) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:24:32 executing program 0: write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 user_u'], 0x31) [ 950.602505] audit: type=1804 audit(1574133871.930:245): pid=16091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="bus" dev="sda1" ino=16711 res=1 [ 950.631950] ptrace attach of "/root/syz-executor.4"[16098] was attempted by "/root/syz-executor.4"[16215] 03:24:32 executing program 4: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r1 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r0, 0xf, &(0x7f0000fa4000)={0x0, r1}) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) fcntl$notify(r0, 0xa, 0x34) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000008c0)='/selinux/enforce\x00', 0x0, 0x0) dup2(r3, r2) 03:24:32 executing program 1: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c38f19c0417cd8034fd5df33d"], 0x10}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR64=&(0x7f0000000380)=ANY=[], @ANYPTR64, @ANYBLOB="c5538b70c8227c79054323e860c4cad41983b9fb85a20e18ddec0828fc2021a2a7d5b03342cd851c5faf5683f106cac267a13aa109dbf21a76a13a769d9ac3fc8729472269715e1ea5dd57b20335102ca1ccc7c45f180403ae84fb8d2129aa07d45646e0367ee98b794891059169f13ab36c1295814d060921692bccf48ff8c48cc4ea9db5ef", @ANYRESOCT, @ANYPTR64], 0x0, 0xbd}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 950.774321] audit: type=1804 audit(1574133871.930:246): pid=16091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="bus" dev="sda1" ino=16711 res=1 03:24:32 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 user_u'], 0x31) 03:24:32 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)) 03:24:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) [ 950.817968] audit: type=1804 audit(1574133872.180:247): pid=16243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir090754336/syzkaller.qP2Byz/233/file0" dev="sda1" ino=16722 res=1 03:24:32 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0xfffffd33}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') preadv(r2, &(0x7f00000017c0), 0x315, 0x800000) 03:24:32 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r4, &(0x7f0000000240), 0x5c3, 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r5, 0x4, 0x40400) write$FUSE_WRITE(r5, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) [ 950.986113] audit: type=1804 audit(1574133872.230:248): pid=16248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir090754336/syzkaller.qP2Byz/233/file0" dev="sda1" ino=16722 res=1 [ 951.198754] audit: type=1800 audit(1574133872.610:249): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16713 res=0 03:24:33 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="d3d2b93c3801040408cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x0, 0x26}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:24:33 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 user_u'], 0x31) 03:24:33 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x5, 0x0) 03:24:33 executing program 4: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\xcaCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:\x97I\xa3\xd4\xcc\x94H\xaa\n\x04\xe7\x87]\xf3\xe1:\xe1\x1d\x19q\xa4\x06O\xb7:>\xd2\xcb\xfegclUL\xae\xef\x1b\x94\xf18M\xaa\xb6\x02\x89e\xa2=\xb5h\xf9B\x87|<\xb8\xceA\xcdE\x1a\x02\xee\xd35\x82TU\x82lsi\xcb\x9a\x1f\xde4\xcf3\xccj\xe8\xdd\xbb?\x9d\xa8\x8e\xf05\xc5k\x99{\'.q}f\xaf\b\x14s\xc0\xd5c-\x8c\x85\xe7k\x90T\xe39u\x87|\x10\xee<\xe8\xf3\xd9M\xea[\x93\xe6!7\xef\xc9\xf3t!.\x1a\xbe\xc9N2G\t\f+.>\x95j\xd6LH\x10\xde\x82L\xed\xe90mJ\b\x9c\xec\xe4\x13\x0eWJ0\r\xc0]\xc0Y\xc1\x03\xa9U\xcd\xa0d_\x95x\xb2(2\xa2<\xa2\xc3\xfd\x84*\x98\xff\nS\x1f\xed\x83\xc6\xc0') open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',defcontext=']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) dup(0xffffffffffffffff) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 03:24:33 executing program 1: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe1f6adb3b91e7f1ffd7e4ab569f8eb9808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd913acf060c10300000082fc399eaab8787f0dd1510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d00d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea942494855d4bd3388b6", @ANYPTR64, @ANYRESOCT, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c"], 0x0, 0x10c}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:24:33 executing program 5: syz_genetlink_get_family_id$tipc(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet(r0, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) epoll_create1(0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) epoll_create1(0x0) epoll_create1(0x0) epoll_create1(0x0) close(0xffffffffffffffff) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000000d00)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32], @ANYRES16], 0xc) setsockopt$sock_int(r0, 0x1, 0x1000000000008, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 03:24:33 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x5, 0x0) 03:24:33 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 user_u'], 0x31) 03:24:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x7d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e5080000273d26ce5e525601226e94e12c24405681e0ffffff00000000000000000000000000000000004000", "0ec806aa37c991831eb25895d52dc4092a46931c5c1959d6b4be05e571a62983"}) [ 951.769537] SELinux: security_context_str_to_sid(þ7qéô) failed for (dev ramfs, type ramfs) errno=-22 [ 951.805680] ptrace attach of "/root/syz-executor.4"[16580] was attempted by "/root/syz-executor.4"[16581] [ 951.832537] SELinux: security_context_str_to_sid(þ7qéô) failed for (dev ramfs, type ramfs) errno=-22 03:24:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004000)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}], 0x2, 0x0) 03:24:33 executing program 5: mkdir(&(0x7f0000000080)='./file1\x00', 0x0) rmdir(&(0x7f0000000140)='./file1\x00') 03:24:33 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x5, 0x0) 03:24:33 executing program 0: openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 user_u'], 0x31) 03:24:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 03:24:33 executing program 1: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x80000, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x408002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0xffffffffffffff91, 0x0, 0xfffffffffffffd67, 0x0, 0xffffffffffffff64}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfb120eb7) ioctl$PIO_FONT(r0, 0x4b61, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r3, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)="9033877ace25a0cd47de5752f2fe725302f5297240df794a3f9e8efd1c159b2bb4cfdc71f2cd4ccab950100494a6edc071a5b8facd4080eb02bd8342acfb2c0241fa15a8f3b27755b25c65f4ab48338111ffa1fe393a425c0ba2c13067100170698a151664c4152a8824af1cb68d98f0259494c6d057", 0x76}, {&(0x7f0000001c40)="b03e2e48783b8582415ce86a7743d604df2b69b6fd9abdd925bdfba510ca05650a2e02e055478b69776dc114eb3a27d3a3d589710f2aafda3a453fe3770255d56a43a3e27e3fe045e5bd482c81660aa0caa7625bf9dcf80569541a0019dba3b36e53f753c03a8f530a2392f87754d16e1eb02a3075ce111a9a4172cb6bebd607bfc82a8f5086ff43d355b7209f31230649fd10b930e461dfe37ed688cb8e4564ad7777e6d18872ef4e41c8d201f8dc68f6c61dc88b939b738e43fd8d86387ba54fe9a3689bbde86d7d52ffcbd30f8491a007d231212ec410337cd1b12721cf7c06f25620c7dc12752d7355fb70a53309d7", 0xf1}, {&(0x7f00000002c0)="f7fc370763ed7a4dbfaf549cd1dc94c047d2bfd2da573ebddcf5db435637f045346375f1b75c21a0106605fa2c283aaa0014062099dc4b58d700b3a07dbc83010c24cb730b30aee0103d81b75a4f6ce90dd0237bd4b22d66e95966a0ad75b3f8338268b29e2dd7c90b", 0x69}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000b40)="70799d7f93aee25740609238367b30d5bd2da4a8a782f1e2bfe6e09ea5587d2488139bce0b6720aa3beec624a66fba665935593f143410e814194574d6c5caa5a0a643a77a6837f10a97664379ac508c2c604e84b914cca11d7c13c7516775c47b89811abd1b86bdc06b4c2df598cc7f7707a1c0400e52e98972dcc961b5a697d45539c7b8f008ed83ff9a7e106143298689be64290c67", 0x97}, {&(0x7f0000000f40)="54a0e828872fe6e9bda086485e7f3bde08422042e5a05f13bea1486085300093f4a5a4abda46a4397be6331a2788d84995d0682db2ecba4cc024be1f493430feba24e7ef0e3987eb5ab799e035467f84ea4affb56e6ec3c3ec6bedb3a146f7d5ac1dd0fbbe738f75eec6fcfb55946d08623418c6a554fa5ae4bab3e352df47136233937c1c3ddd6c5bee1826a294c32a78eca238409a18e551720236a1187feb5975a28f5bbb83c8ad97f63537144bdffef8a43b62aa89d46cfed06318678870256e07a42a6f989ca29cce7992fdbbecb9407eceea5cd8b6daac884fc609af653c90b36f4ff03477eaebeeb62ade20c9c0a65cee56e82e9168cbebc2fbddf931caaa483bc10127aa87b13e88929aaba33011d800a0771d8d90cd838a4f34cd7faa044f9713f5d3e2d7be15ec44f4196799fe8f6705af7e23a81e33f5d3dd1236ecbec240ef8ebfe4df5bd1783f8730828da1357f7e1a66bb475d76bacbeb41818e016de90130f5796cf7ffa4cc28fca35fa3db8a271c150ee10c296bee997fdf46b06372b7f1b2a7d8159baaee675a02e5b4185fb68c337a3ccf92ebb8b836f6a70342c533229f978ba5f3ebb9460df23739be87b9aa01bd1a804f40d744d0cc060b44a520a4a1dd3e95c86150a9fb914d34bc6b61d91f344aacee3c94c1040e867d5cd4d37687bf685a27216307431b31f486b22da39374da24ad1cd61b98855c1eb493245ba97333227c45cb4e5743e119423a42cf73721e1ca0e5cade1f4c0f1c7d098ce5baa5adcd1d73eee5f7498617c5bd00181f3364d7f1a0f54f5633aa8e7ec42244f023b2d5a311933e9a52f68e8c3e46caa6d9611ca5d3216caf842275c9bcaf6503245ccda6d53907ca4ac3af4452896044b41ab55884d5cdbcf048044eb5d1cc5691f5142751f3c7e214afaede155e713e72cb9634e4de1f661527cca426983d788e31d6b0c831383d2140a7b9b134f6e68b0378589532b11bba1008347dfb481ff083177ca4d4454c32011fd1e9fa1bfe8698f1791a4097bc5ec4e0b1d8a93f457a2263d391d158eb7dfa29b59c6fec5cd9316a91c839e2f39d91d384e16eb06c400bd05ae53022fa967e0059163eae2f1572048694ac53be7db2e9be6ca9da6c160fed9533e286cad88c8eea6865659b9451351de37d9d4a33da3a8714ae348f091e528e1b7f151916d9077dd5", 0x354}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) sendto$inet(r3, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x1) keyctl$join(0x1, &(0x7f0000000380)={'syz', 0x2}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r5, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x5460, &(0x7f0000000000)) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000440)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000340), 0x0) [ 951.968837] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:24:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) fstat(r3, &(0x7f00000011c0)) 03:24:33 executing program 0: openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 user_u'], 0x31) 03:24:33 executing program 3: utimes(0x0, &(0x7f0000000080)={{0x0, 0xfffffffffffffe01}}) 03:24:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x0, 0x0, 0x0}) 03:24:33 executing program 4: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000080)="240000005800010000000000002304000a04f51108000100020100020800038005000000", 0x275) 03:24:33 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)]) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="00d3bb0800000014660f3422"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40020000000c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x40000005, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 03:24:33 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a0005"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 03:24:33 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x130, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x54}, [@ldst]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 03:24:33 executing program 0: openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 user_u'], 0x31) 03:24:33 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000140)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="706525100d3399638b176ffdc58da76aefba154046c2d4dd5b0493b5faac3950dba6b5aecded837864") r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000002300)="104113ba46a509469d1b68f5fb31a90d7b0092de14b4698de7158d2693520231f1f334984c34cb7414030c3ff28e6235a0343c51199105ab596a5fe019521473fd4afb9947de8ac6ae4ba7373ed43cbe117892afd00f8cb533493cfcc61d9146c62c8306a686e1097715e451ef86a613a899d4c1e5f53ca85a117ae578a5558df91f46f2ff6fae93c3") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000100)={0x0, 0x10}) [ 952.262213] ptrace attach of "/root/syz-executor.3"[16854] was attempted by "/root/syz-executor.3"[16870] 03:24:33 executing program 3: pipe(&(0x7f0000000540)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r2}]]}}}]}, 0x38}}, 0x0) 03:24:33 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, 0x0, 0x0) 03:24:33 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000080)={0xffffffffffffeffa}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x6ffff}) rt_sigtimedwait(&(0x7f0000000200)={0x7fffffffffffff61}, &(0x7f0000a72ff0), 0x0, 0x8) 03:24:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000003b80)=""/102400, &(0x7f0000000100)=0x109) 03:24:33 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0x10, 0x8000000100000003, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00.\x00'], 0x1}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 03:24:33 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, 0x0, 0x0) 03:24:33 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) listen(0xffffffffffffffff, 0x4) setuid(0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x80000, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000000080)}, 0xfffffffffffffea8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r6}]]}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000023c0)={'sit0\x00', r6}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000002580)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'ip6gretap0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 03:24:34 executing program 2: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10, 0xc1800) dup2(0xffffffffffffffff, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = fcntl$dupfd(r1, 0x0, r0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2cb8436828c7e6f1cd80"], 0xa}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x4) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 03:24:34 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[], 0x0) 03:24:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@rand_addr="e32cb1c2d12ea067a80d04e434758857"}}, [@policy_type={0xc}]}, 0x5c}, 0x8}, 0x0) 03:24:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x3cd, 0x0}}, {{&(0x7f0000000500)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000001a40)=[@flowinfo={{0x14}}, @flowinfo={{0x7}}], 0x30}}], 0x2, 0x0) 03:24:34 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, [{r4}, {}, {}, {r2}]}) 03:24:34 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[], 0x0) 03:24:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') readv(r2, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r2, &(0x7f0000000580), 0x3c1) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 03:24:34 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self//exe\x00', 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchown(r0, 0x0, 0x0) 03:24:34 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) [ 953.493496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 03:24:35 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) set_tid_address(0x0) 03:24:35 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x218}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="020100021000000000000600000000000800130000ffff400000cfa82be90000e592c35c260cf34c000080000000f9ffdf000001df00000000000000000035000000000000000000000000ff00000000030006000000000002000004000800bb0000e0000000000003000500000000000200423b0000000000e70040000000e0c01b8446bdeba4580f49140d94ecda0ca68eedd5ea506eaf7e31ab65b8c11d6d27d1dc583ebd6bc7dfcac2b3fd02810b229920db3f5eddbb00bd6454c6288a42599dcc440b8f088607cecd801df8ae931f0100f0c8cac0b1b82696908d1176f54f734f3b8f0c5d86587031ce112345af849456a7b28c4d69d0ab5302c12b5a149322a02ccf02ce0c04c460acfd55f3d5994c0fdc2976a29cf366e5f508e50879d9a77df70cc42fd4aed4897fd0c9d3b7e3fbc715d4661b53eb6a2135277de5d89429c213181e14b807e64550574d1c97507829e041dbdbb7f5d5dc56dcef00000000000000000000000080e4f0537dc4fae6f9470100000000000000e4d2e659b81b11889cea69b6ad8f58ba6802d47320a59d6ef9101033956784cc9d15b629bfd84c830c397e7c59481f16af147585e369327e49815eb2828e24a88b7df7008da4a5e31e7afdef50a52019e1f17dd0f5729c0c827fc3be2c3a899848c3607bf9c707f9e13327b7d3ad98562ad93e7b94e14ef2bed93fe799a3d60d5f7c3c8f7fe526bfcf3f74c87840186d771c91d9a9a1e9c01ad94a"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 03:24:35 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 03:24:35 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fad47e86712ef1022bc377dc21ae02a1645525ba049f1f954acf9d99cb041be57b4572d6c74b2f089d64ade23709050eaa90e1d3a32d1bd55f2ca8dd682573164b9d140ea1084e380100d5876154de4174bcf5c4358238a2ba05ead52e0752ab421e2617e5df5c65a744f4b9fdda9fe54f1c4e47cad71d7285e80f76f41793f580ba9d0a11e67fe50f71b163fd43c1ce742c604f840fa03847cb018863c790244f7c587f73e9ad21765d01000000357bb64a0822f1a1baa16a937186cbda55d70ea1b55dfb9632b8cf85e8c999979c75bfbd5e0c1ef852270b4e65eac4b16c2f6df92ec6b82b22f4f9db0224538ac6d13e88d66bc440e55ab2339bb354967e9d59852d61fea0fbdc9cfe6f5892490584c8ff2def8a05e48484c121647bed264b5cbaaae295c60110336f9a"], 0x0, 0x12b}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:24:35 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0417cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES64, @ANYPTR, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC], 0x0, 0x30}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:24:35 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 03:24:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) r2 = dup2(r1, r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x1320a6) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$setstatus(r1, 0x4, 0x427fd) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:24:35 executing program 4: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xfffffffffffffcf1) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r4 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f00000000c0)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r7 = dup(r6) setsockopt$inet_int(r7, 0x0, 0x5, 0x0, 0x0) getsockopt$inet_buf(r7, 0x0, 0x0, &(0x7f00000003c0)=""/82, &(0x7f0000000140)=0x52) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000000000ffeb000000"]}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) write$binfmt_aout(r3, &(0x7f0000000780), 0x20) sendfile(r4, r8, 0x0, 0x8000fffffffe) [ 953.787088] ptrace attach of "/root/syz-executor.3"[17890] was attempted by "/root/syz-executor.3"[17897] 03:24:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000001540)=0x8, 0x4) r4 = dup2(r1, r0) write$P9_RLOPEN(r4, 0x0, 0x0) 03:24:35 executing program 2: pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=0x6e) fchdir(r3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000740)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x35, r2}) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x2008000fffffffe) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) mount(&(0x7f0000005fc0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000000300)="e1eb034b07e4e4ec2afa9b817b651ae57aa1e98b56f2b078bd01c40e6aba655ce3586b2a0529386027d6662c166f3aecfb9c95a101a6806080355fc14d8e5bedb5080121b51dd46819405919e6bdfdc645eedcdd1f27905eaa4adac105a9", 0x5e}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000780)="7a5cf868500921c1bb15451b4951166cda18ca7ec83d1edf145e2756f40e543263e4193af5eeaf5568dddaa94c38dda8a9ab34479072bae6adfcafd956d705de8bb70f673a6609171aba5447dc4e2ce21e58b9c5a0cfcafde4e95e5edbd140a49295614d19ae76af3eedc0b5bb14540e32b62b3b256bf5d85eb4e58613921dde4dbb99ae9bb99d05eaa43997ca7abe4229a7a5d77d51406c58d0416dae526a82e24bbc78d34e50de", 0xa8}, {0x0}, {&(0x7f0000000b80)}], 0x6, &(0x7f0000005e40)=ANY=[]}}, {{&(0x7f0000002f00)={0xa, 0x0, 0x0, @local, 0xfffffff7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000004480)="d3", 0x1}, {&(0x7f00000000c0)="8d8db56910f3db5a73032bb4306d4f7e3f", 0x11}, {0x0}], 0x3, &(0x7f0000002fc0)=ANY=[@ANYBLOB]}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005c40)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dstopts={{0x18, 0x29, 0x37, {0x2f}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1ff}}], 0x58}}], 0x4, 0x2821) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup(r6) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f00000004c0)) 03:24:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000058000000000000001800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="852a627300633bf6c8"], @ANYPTR64=&(0x7f0000000180)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000400)=[@increfs_done={0x40106308, 0x1}, @enter_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle, @fd}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @dead_binder_done], 0x36, 0x0, &(0x7f0000000300)="c6141b6bc06fa03f5f2322ffb0a4d88865894d1b719f397c38d9941fe210d906777f3d3e00a24d8dfc60b56b84e52f1930bf3ff29f88"}) 03:24:35 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 03:24:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) pipe(&(0x7f00000006c0)) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x3f7, &(0x7f0000000440)=[{0x0, 0xffffffffffffff5d}, {0x0}, {0x0}, {0x0, 0xa7}, {&(0x7f0000000400)=""/17, 0x2f2}], 0x5}}], 0x1, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000200), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) pipe2(&(0x7f0000000140), 0x0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4022f7dbf2bb01402120148d0f34"], 0xe}}, 0x0) dup(r0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r4}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 03:24:35 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:ins'], 0x19) 03:24:35 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000180)=0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) sched_setparam(r5, &(0x7f0000000140)) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x11) fcntl$setstatus(r6, 0x4, 0x6100) set_tid_address(&(0x7f0000000040)) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0xfffffffffffffffe}, 0x50) clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x11000490) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d9189) socket(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r7 = gettid() r8 = syz_open_procfs(r7, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r8, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) accept4$unix(r8, 0x0, &(0x7f0000000000), 0x800) write$smack_current(r8, &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r9 = open(&(0x7f0000022ff6)='./control\x00', 0x20000, 0x0) getdents64(r9, &(0x7f0000fc4fbe)=""/80, 0x50) unlinkat(r9, &(0x7f0000000140)='./control\x00', 0x0) 03:24:35 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:ins'], 0x19) [ 954.167704] ptrace attach of "/root/syz-executor.3"[18134] was attempted by "/root/syz-executor.3"[18167] 03:24:35 executing program 1: r0 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80c00) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfb120eb7) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x2, 0xff) ioctl$TIOCCONS(r2, 0x541d) r3 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r3, &(0x7f00000003c0)='security.ima\x00', 0x0, 0x0, 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x5}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setitimer(0x0, &(0x7f0000000340)={{0x0, 0x7530}, {r5}}, 0x0) mmap$binder(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x1, 0x11, 0xffffffffffffffff, 0x10001) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000380)={0xad, 0x80000001, 0x5, 0x1, 0x12, 0x2, 0x81, 0x7, 0x0, 0x1, 0x0, 0x8}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) pwrite64(r0, &(0x7f0000000580)="01ee2b7e3604b14040b57b164cf871d626656d809dc5415b2fb5275edeca95e850588d8acb1bdd09eb00ad251a4ca3ef1320f6acfe5166af81c4805479d761a81a238bb2bdcc2023043a291616dcb1080c3af300ec0305e4898969b65deee03f89073569fe46a353ec0b716495c5c250a9ff142a7405a1b3c8e187eb0f6c245bd7", 0x81, 0x200) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r4, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="9033877ace25a0cd47de5752f2fe725302f5297240df794a3f9e8efd1c159b2bb4cfdc71f2cd4ccab950100494", 0x2d}, {0x0}, {&(0x7f00000002c0)="f7fc370763ed7a4dbfaf549cd1dc94c047d2bfd2da573ebddcf5db435637f045346375f1b75c21a0106605fa2c283aaa0014062099dc4b58d700b3a07dbc83010c24cb730b30aee0103d81b75a4f6ce90dd0237bd4b22d66e95966a0ad75b3f8338268b29e2dd7c90b5b33722b010ce947eab220e38600", 0x77}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000080)="4326b5be4c72829e48001bfdce33d9a346", 0x11}, {&(0x7f0000000b40)}, {0x0}, {&(0x7f0000000f40)="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", 0x357}], 0x4}}], 0x2, 0x80) sendto$inet(r4, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2) 03:24:35 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:ins'], 0x19) [ 954.488162] IPVS: ftp: loaded support on port[0] = 21 03:24:36 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="dfd2cd80e173ce21689eddf5b8"], 0xd}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregset(0x4205, r0, 0x2, &(0x7f00000001c0)={&(0x7f0000000440)="695fd0286d7923c3f948d557c0eb6cb4", 0x10}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 954.739884] IPVS: ftp: loaded support on port[0] = 21 03:24:36 executing program 4: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000080)={'system_u:object_r:restorecond_var_run_t:s0', 0x20, 'unconfined'}, 0x4b) 03:24:36 executing program 2: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/57, 0x44d) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)={0x0, 0x40, 0x8000, 0xffffffff, 0x98, 0xa7b}) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)={&(0x7f0000000440)='./file0\x00'}, 0x10) r1 = socket(0x200000000000011, 0x0, 0xdd86) r2 = socket(0xa, 0x1, 0x9) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x7, 0x0, &(0x7f0000000040)) accept4$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000480)=0x17, 0x0) sendmmsg$inet(r1, &(0x7f0000000bc0), 0x400000000000350, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x1) socket(0x0, 0x4939d7c56c66683, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfb120eb7) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000440)) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) add_key$keyring(0x0, &(0x7f00000015c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) connect$inet6(r7, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @local}, 0x1c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="a08423da09c129c8383f0141c92e10f7", 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf, 0x1f, 0x2, 0x3}, 0xf) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') r9 = memfd_create(&(0x7f0000000300)='keyringsycgroup\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xafS\xb7(\xd7\xd5d\xe6\t\xd10xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x60082, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 03:24:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800002, 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r4, 0x3, 0x0, 0x8020003) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) r5 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) write$binfmt_misc(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="11"], 0x1) ftruncate(r3, 0x2081fc) 03:24:36 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) 03:24:36 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.'], 0x25) 03:24:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @local}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21c00082}) 03:24:36 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) 03:24:36 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0xffffffffffffff7e}, {0x0, 0x1da}, {0x0}, {&(0x7f00000001c0)="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"/326, 0x146}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 03:24:36 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.'], 0x25) 03:24:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 955.143717] audit: type=1800 audit(1574133876.550:250): pid=18401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16758 res=0 03:24:36 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000280), 0x1000) r2 = open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0) write$selinux_attr(r3, &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x5571) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x2008000fffffffe) 03:24:36 executing program 2: pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/30}) chdir(&(0x7f00000003c0)='./file0\x00') r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) sendfile(r2, r2, &(0x7f0000000240), 0x2008000fffffffe) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, 0x0) ptrace(0xffffffffffffffff, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000380)='./file0\x00', 0x0, 0x18000, &(0x7f0000000480)='ramfs\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000600)={0xa0, 0x0, 0x8, {{0x0, 0x1, 0x0, 0x5, 0x6, 0x20ddbcfd, {0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x21e7, 0x0, 0xffffffff, 0xfff, 0xfffffffffffeffff}}, {0x0, 0x8}}}, 0xa0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup(r3) ppoll(&(0x7f00000000c0)=[{r1, 0x70d4}], 0x1, &(0x7f0000000280), &(0x7f00000002c0), 0x8) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f00000004c0)=0xb59) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x94e45a7f380e65b1}, 0xc) bind$netlink(r4, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc}, 0xc) write$binfmt_misc(r4, &(0x7f0000000500)={'syz0', "49e0759e1bb79eadcd5eae1b8dd5a57f61cc70e90e09625cb916afc855e2edcac58597e5367773c8c2a0ecbb0ec5a5f2cb975ead339c2df5bf0400cd4af7f6714be2571bd198c4b00452c5615a5ec024a9284081f7b25d9355bfb88a9da22392b2251c3b7c48e2fc2ecab1e4e0762a11d7ddfc05670ebd146ba5fda6a236394ab2a2458a01ab4a5db6e146d659787e48cb8a6fd15561b48280744c702669cf347475250d27c1ff451abeba616b47e1e2f710a35f2636c2d511cb23b311705cf525988e5bbce8be9916b7977af5236dfd4f9e38921732f2ac2a0d7f15cb06a6fb95b3d9f61fd9"}, 0xea) 03:24:36 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffd) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) getpid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000140)=0x7) syncfs(r1) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000100)={0x0, r6}) 03:24:36 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000480)='./file0/file0\x00', 0x42) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = open(&(0x7f0000000400)='./file0/file0\x00', 0x115182, 0xa) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) read(r4, &(0x7f0000000000)=""/250, 0xedf1d44) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r7, 0x4, 0x40400) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fchdir(r8) r9 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fchdir(r10) fallocate(r10, 0x8, 0x100000000000000, 0x10000) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_STATUS(r9, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xb, &(0x7f0000000380)={&(0x7f0000000340)={0xfffffffffffffd4c, r11, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x3f0}, 0x1, 0x0, 0x0, 0x4020000}, 0x0) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c68a1b0291775eca1e1ad5e09ba3805ea43e568c52c5438ada29f041ffdff07474e9538dc3b848d19444b63dae61e4b7e4fd3b6bb", @ANYRES16=r11, @ANYBLOB="000427bd7000fddbdf25010000000c00050004000000000000000c0003000100000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) write$FUSE_WRITE(r7, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 03:24:36 executing program 3: unshare(0x40000000) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x9) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x40000000) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='\x00\x01\x00\x00\x04\x00', 0x9) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) r2 = socket(0x11, 0x80003, 0x11) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000100)=0xd3, 0x4) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e24, @local}, 0x70fbda26299973e5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='rose0\x00', 0x7, 0x1, 0x5}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) 03:24:36 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 '], 0x2b) [ 955.365101] IPVS: ftp: loaded support on port[0] = 21 03:24:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x13c, 0x10, 0x701, 0x0, 0x0, {{@in6=@loopback, @in6=@local}, {@in6=@ipv4={[], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4={[], [], @remote}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x4c, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, 'M'}}]}, 0x13c}}, 0x0) 03:24:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 03:24:36 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 '], 0x2b) [ 955.504654] protocol 88fb is buggy, dev hsr_slave_0 [ 955.509847] protocol 88fb is buggy, dev hsr_slave_1 03:24:37 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 '], 0x2b) [ 955.650159] IPVS: ftp: loaded support on port[0] = 21 03:24:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_INIT(r1, &(0x7f0000000000)={0x50}, 0xff05) clone(0x2102801ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:24:37 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 use'], 0x2e) 03:24:37 executing program 1: r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x1a011, r0, 0x0) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 03:24:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r4}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000014000100000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000200e000000238489d4aff2c2460bf01a07cfb6bdc43fcb38a5380c97b272039b15209000000000000000aa01a6c184a"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 03:24:37 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_attr(r1, &(0x7f0000000080)='system_u:object_,g\xb4\xbau\x94\xd1\xbb\n\xd8t\x1b{r:useradd_exec_t:s0\x00', 0x31) ftruncate(r1, 0x108200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) 03:24:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x2001) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) 03:24:37 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 use'], 0x2e) 03:24:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x203, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, 0x10, 0x82d, 0x0, 0x0, {0x3}}, 0x1c}}, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000040)={'syz_tun\x00', 0x3}) socket$inet(0x2, 0x1, 0xfe) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x400}, 0x8, 0x0) syz_open_procfs(0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) 03:24:37 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, &(0x7f0000000080)={0x1, 0x3, 0x10001}) fchmod(r2, 0x800000100000024) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:37 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x400000000088001) 03:24:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000b67000), &(0x7f0000000140)=0xfffffffffffffdb9) 03:24:37 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 use'], 0x2e) [ 956.221739] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 03:24:37 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:37 executing program 5: r0 = epoll_create(0x4) ioctl$void(r0, 0x5451) [ 956.366950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 03:24:37 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, &(0x7f0000000080)={0x1, 0x3, 0x10001}) fchmod(r2, 0x800000100000024) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:37 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 user_'], 0x30) 03:24:37 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) getxattr(0x0, &(0x7f0000000140)=@known='system.sockprotoname\x00', 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() r5 = dup(r3) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="1354f3c1000000000a00000000000000ff020000000000000001000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000b30000000000000100000000000000"], 0x90) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x10010000000035) fcntl$setstatus(r3, 0x4, 0x80000000002c00) 03:24:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) wait4(0x0, 0x0, 0x0, 0x0) 03:24:37 executing program 2: r0 = socket(0x18, 0x0, 0x3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect(r0, &(0x7f0000000000)=@sco, 0x12) 03:24:37 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:37 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x800006, 0x0, 0x0, 0x1}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 03:24:38 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 user_'], 0x30) 03:24:38 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, &(0x7f0000000080)={0x1, 0x3, 0x10001}) fchmod(r2, 0x800000100000024) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:38 executing program 2: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{0x0, 0x1cf}, {0x0}, {&(0x7f0000000140)}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d59e49ecefedf29f150f48fa7ec5cab66b559969cd332a5eeff075656d6b7d21bf145e62166c6b31cfef16b080776ad79c7e8683ac61d859a63668db03b6806e1b26df4787c75fc0388de8c24377fd0d27caaedc7fe84aa5720e631ec2d22f2e89e6ca403bc571aa6039de4795e200f35134cf25758a8b7542ea6c3c37c4ebddc0e1f658765e4dce904fcb1cbaa5e0f946a89856208a8019f2a1b814f82d7baaac880e70040bbdc8c7b899f9aabf63655d2ef56c542588c3357943df75", @ANYBLOB="27fb1299e4fd3329137c495a519f5cbbc5b9c6fab5f3020449d80a91f54bbeae0ac0df19e4e33ec4a3a933a7f8cf9d024714db9fc0ba87957bcd818a047fd5372ba53a64675bb97095675a601c9c684a78bdca0e197f27a4a232e4288e53a4c1e08d3a420f97a361e81f9fa3521d88b7158c281f5abb0ce7d25d80"], 0x0, 0x138}, 0x20) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) close(0xffffffffffffffff) 03:24:38 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:38 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, &(0x7f0000000080)={0x1, 0x3, 0x10001}) fchmod(r2, 0x800000100000024) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:38 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c0.c1023 user_'], 0x30) [ 956.852806] ptrace attach of "/root/syz-executor.2"[19841] was attempted by "/root/syz-executor.2"[19842] 03:24:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x06^\x01\x03\x03\xf0\n', @ifru_mtu=0x1}) [ 957.024682] protocol 88fb is buggy, dev hsr_slave_0 [ 957.029833] protocol 88fb is buggy, dev hsr_slave_1 [ 957.035027] protocol 88fb is buggy, dev hsr_slave_0 [ 957.040100] protocol 88fb is buggy, dev hsr_slave_1 03:24:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x400000000000251, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 03:24:38 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:38 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, &(0x7f0000000080)={0x1, 0x3, 0x10001}) fchmod(r2, 0x800000100000024) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e1c, 0x0, @loopback}, 0x1c) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000f61000), 0x4e5, 0x2040, 0x0) [ 957.184661] protocol 88fb is buggy, dev hsr_slave_0 03:24:39 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, &(0x7f0000000080)={0x1, 0x3, 0x10001}) fchmod(r2, 0x800000100000024) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:39 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:39 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffefffe, 0x400000000000004}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xffd, 0x5, 0x800000000000}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:24:39 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000000), &(0x7f0000000080), 0x8) 03:24:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e1c, 0x0, @loopback}, 0x1c) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000f61000), 0x4e5, 0x2040, 0x0) 03:24:39 executing program 5: close(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001440)=""/226, 0xe2}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/sockstat\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) 03:24:39 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:39 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') 03:24:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x0) 03:24:39 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, &(0x7f0000000080)={0x1, 0x3, 0x10001}) fchmod(r2, 0x800000100000024) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:39 executing program 5: write(0xffffffffffffffff, &(0x7f0000000000)="1f", 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000025c0)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 03:24:39 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x3e4, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 03:24:39 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:39 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, &(0x7f0000000080)={0x1, 0x3, 0x10001}) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0xfffffff9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x9}) 03:24:39 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe81}, 0x48) 03:24:39 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0xff}, 0x0, @in6}}, 0xe8) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 03:24:39 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, &(0x7f0000000080)={0x1, 0x3, 0x10001}) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:40 executing program 2: getrandom(&(0x7f0000000040)=""/15, 0xf, 0x3) 03:24:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@mcast2, @in=@loopback, 0xfffe, 0x8000, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in=@dev}}, 0xe8) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 03:24:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x400) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc040100}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x50, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffff8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x136d}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) clock_adjtime(0x0, &(0x7f00000003c0)={0xea, 0x2, 0xfc9, 0xed03, 0x0, 0x8, 0x6, 0x1f, 0x100, 0x80000000, 0x2, 0x400, 0x9, 0x7, 0x0, 0x0, 0x1, 0x94, 0x0, 0xfffffffffffffffb, 0x8, 0x5, 0x5, 0x0, 0x0, 0x2}) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r5, 0x0) mmap(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x0, 0x11, r5, 0x0) read(r3, &(0x7f0000000000)=""/250, 0x128b9372) r6 = accept4$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c, 0x80000) fcntl$getflags(r6, 0x40a) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 03:24:40 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:40 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfdfdffff}) 03:24:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b7000000ffdd00006f000000000000001d000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 03:24:40 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, &(0x7f0000000080)={0x1, 0x3, 0x10001}) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:40 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) syz_open_pts(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(r0, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0xffffffffffffff89) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0xfffffffffffffe0e) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000000c0), 0x4) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d9189) pwrite64(r4, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0xffffffffffffffe3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write(r3, &(0x7f0000000540)="8d468862c2d327e6349e4453f5d1c98cb702ff210bd7ce624c9a066eb8063a72670d16efb28b13308b2477a71986fdf10e6b8e6ec13f64ce22714dcae3106d9c7904bcb6a1bbcfe959e34df8df7fcf04e9e5086091384538050a22349b20b73c2e4a00564b7a2470863d07c587ec81e867c867a5e267cd1d17cef27688ba4540fdfe622889def35ffe12707bdd9d47a9d3b8255507fd97eed440165245add2756a238c44e5edd2317c0366882726526998b5", 0xb2) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 03:24:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x3) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x16) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x20) r2 = dup3(r1, r0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 03:24:40 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) syz_open_pts(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:40 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PHYS(r3, 0x4008556c, 0x0) 03:24:40 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) fchdir(r0) pipe(0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000380)="8828a486") ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x0, 0x13, 0x14, 0x9, 0x7, 0x2, 0x6}) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x107fffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) write$P9_RCLUNK(r4, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) readahead(0xffffffffffffffff, 0x7f, 0x210a) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) io_setup(0x8000009, &(0x7f0000000180)) prctl$PR_SET_SECUREBITS(0x1c, 0x33) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_void(r6, 0x1, 0x36, 0x0, 0x0) 03:24:40 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) syz_open_pts(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:40 executing program 2: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5500000018007f5800fe01b2a4661d930a06000015290dcd30aeda5e3900090008000c000100000019000cc9150001000000000000dc1338d54400009b84136ef75afb830200000000000000007f7a941a4559e655", 0x55}], 0x1}, 0x0) 03:24:40 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00\xebf\xba\n\xa1\xb6\x1d\x17\x8c\fP6\b\x8bS\x93\xbf\x15\x06\xa5\xe9Ef\xe0\x86\xbc\xf2\x82\x8e4\x91\xd9D\xc1\x8ed\xa4k\xf7\xc9\xaa\xd8#m\x05\xebY=X\xee!nV') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) sendfile(r1, r0, 0x0, 0x10000007) 03:24:40 executing program 2: socket(0x0, 0x2, 0xfa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x6) gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) poll(0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) getsockopt(0xffffffffffffffff, 0x7, 0x20, 0x0, &(0x7f00000003c0)) ioctl(0xffffffffffffffff, 0x8ebd6, &(0x7f0000000380)='\x00\x00') ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$TIOCCBRK(r1, 0x5428) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x107fffffff) socketpair(0x5, 0x800, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f00000004c0)) io_setup(0x8000009, &(0x7f0000000180)) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0xff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0xc6) write$cgroup_type(r4, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) 03:24:40 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) dup2(0xffffffffffffffff, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 959.664751] net_ratelimit: 3 callbacks suppressed [ 959.664759] protocol 88fb is buggy, dev hsr_slave_0 [ 959.674860] protocol 88fb is buggy, dev hsr_slave_1 03:24:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x1f}, 0x45c) open(0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) dup3(r1, r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) 03:24:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x7}, 0x8) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000000), 0xd4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:24:41 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:41 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) dup2(0xffffffffffffffff, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r4}]]}}}]}, 0x40}}, 0x0) 03:24:41 executing program 0: openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x1ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() syz_open_procfs(r2, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) write(r3, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5) ptrace(0x4206, r2) tkill(r2, 0x800000009) 03:24:41 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="02071604020000000e0101000001002025f10f022f5c6b796fdec5eba45d92d5f0b248000b17a103004a076462284d8bf691568bc7fd070165bd1bd624f7030000000060cddccd3758426c871390b0a68fbd3dfc6679b089f6d4abe572ce762d3c9eaf4ded5fef07d8ad4946cf00"/125], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600008000000a00f50000000001800000007f6699001d00000000d6dbb905d1f86beb0000000d000800e0020000b89cc4b2bd01a12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe174e404721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084adbe40039649673b73383b717e127c6a36da871a86cc8c8dda850000000002000100000000000000060080ffffff05000500000000000a000000de7af7bd3e10c05ce0099eb0f8374525b1f361d6c7358f00002000fe04654184a88aa49a679449f6d3385443608204fd2f0a8e7f36b51b8c111a11526cc92a34da97348aa1e55e86429a374167641de7060933bfc02befaf8fd06658ea9c382b5cacba6d7e1a8c9e627a6c5d885d96d8c456caa29fa7592f4872f237d960f9bd3e93872452834345b9138bd1e1ce35e8634023f06a625c651fa3c9e7840cd45f500b8d475d9e1f4a44f035848a8345330609d7a6b882b9abcb07e08dc4c81289a3e6dc9c6274769e51f79512b3628b00f3f903f5ce0dd00192aa31aef1a418d93d47123fae14a368b81069de22c692d1aaad9e46f06dd074665fe032dad38def1bc9f01b656fe7a4feceea9216fd5808f4a6ba1f46acb154d50bab14a60bec1d9d578c8ee1d1dc6f10bdf1a0dd31015a814f8a39d8a90aef37"], 0xd8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400006a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4000, 0x0, @rand_addr="4ae5b260659db3413e7535a265185a40", 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e24, 0xfffffffc, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000740)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x35, r1}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x10000, @mcast2, 0xffff}, 0x1c) r3 = accept4$inet6(r2, 0x0, &(0x7f0000000000), 0x80000) ftruncate(r3, 0x9) [ 960.041088] input: syz1 as /devices/virtual/input/input97 03:24:41 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) dup2(0xffffffffffffffff, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:41 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:41 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000030307031dfffd946ff20c0020200a0009000300021d8568021baba20400ff7e", 0x24}], 0x14}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) [ 960.206875] input: syz1 as /devices/virtual/input/input98 03:24:41 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 960.249505] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:24:41 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, 0x0, 0x0) personality(0x400000a) timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) clone(0x8300a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed0869c9f9dc0100df77c4"], 0x30) mlockall(0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) [ 960.405895] SELinux: ebitmap start bit (-998777088) is beyond the end of the bitmap (1762192832) [ 960.462016] SELinux: failed to load policy 03:24:42 executing program 5: clone(0x203102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x1) write$FUSE_ATTR(r2, &(0x7f0000000440)={0x78, 0x0, 0x2, {0x33, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x77189ae1, 0x5, 0x0, 0x2, 0x6, 0x8, 0xffffffff, r3, 0x0, 0x4, 0x80000000}}}, 0x78) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x400, 0x0, 0xaf2, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 03:24:42 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:42 executing program 2: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xd899) shutdown(r0, 0x1) r2 = dup3(r0, r1, 0x0) shutdown(r2, 0x0) 03:24:42 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="13f80f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYBLOB="0cda366f0001aeac44b8055fadbfac2a7dfe5d4965c1dcbe2544be6077bf0925f49126b4bd2dcbf0c45ceecc872b56070000000000000036bc9e892451c93db0ed05311b9e56d77397f8640c", @ANYBLOB="8a7cfcb0bd543a07372504167b455ddfd0640764ef04ff46cf47e8137f38ee38898fd565996a1a1f4cd1b86a0e031dff9943c97285dbf286b2e0b83f0811181559c36195a08057260cfc8bbb0acb262dea59bfe1401033d00242995373652a8d036ff9eef59a5ea1849f5630c3a9fe2fc5e879590b2deae7095bef0a19efee20c3d4c19e222f3f51e3c9703ec7637297733385130d"], 0x0, 0xf3}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:24:42 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffffffa}]}, 0x10) fsetxattr$security_evm(r3, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@ng={0x4, 0x7, "0524a1abe6d20d4242c627e25977fb9df1ac"}, 0x14, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 03:24:42 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) 03:24:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00\xebf\xba\n\xa1\xb6\x1d\x17\x8c\fP6\b\x8bS\x93\xbf\x15\x06\xa5\xe9Ef\xe0\x86\xbc\xf2\x82\x8e4\x91\xd9D\xc1\x8ed\xa4k\xf7\xc9\xaa\xd8#m\x05\xebY=X\xee!nV') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe1f6adb3b91e7f1ffd7e4ab569f8eb9808e0b61a0bf7a301ffe8dac0773d9e5", @ANYRESOCT, @ANYRESOCT, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8d", @ANYRESDEC], 0x0, 0xba}, 0x20) tkill(r2, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) mlockall(0x0) [ 960.639317] ptrace attach of "/root/syz-executor.3"[21633] was attempted by "/root/syz-executor.3"[21634] 03:24:42 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) 03:24:42 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:42 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00000000c0)={0x7ffffffd}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x4000000000000007, &(0x7f0000000100)={0x0, 0x0, 0x4fffc}) rt_sigtimedwait(&(0x7f0000000080)={0x7fffffffffffff66}, &(0x7f0000000000), 0x0, 0x8) 03:24:42 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0), 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') ioctl$RTC_WIE_OFF(r0, 0x7010) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x2, @in=@dev, 0x0, 0x3, 0x0, 0x5}}, 0xe8) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) [ 960.758875] ptrace attach of "/root/syz-executor.3"[21734] was attempted by "/root/syz-executor.3"[21765] 03:24:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/11, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r4, r5, 0x0, 0x80000001) 03:24:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="7f"], 0x1) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0xffffff83) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:24:42 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) 03:24:42 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup2(r0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:42 executing program 2: socket$inet(0x2, 0x4000020000000001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0xfffffec9, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0xffffeb4}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$inet(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x20000000000000a, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40349bbb0140212014520f34"], 0xc}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) tkill(r2, 0x40) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 03:24:42 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0), 0x800) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) [ 961.012348] selinux_nlmsg_perm: 1073 callbacks suppressed [ 961.012429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=22018 comm=syz-executor.3 03:24:42 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup2(r0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netdevsim0\x00', 0x1}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'bridge_slave_0\x00', 0x400}) 03:24:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:24:42 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0), 0x800) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) 03:24:42 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup2(r0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:43 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f00000001c0)) socket$inet6(0x10, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000340)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) ptrace(0x8, r2) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000380)) fchdir(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000003c0)={0x0, 0x0, 0x80000000, 0x2}) prctl$PR_SET_PDEATHSIG(0x1, 0x28) open(&(0x7f00000000c0)='./file0\x00', 0x200001, 0x40) sendto(0xffffffffffffffff, &(0x7f0000000400)="78942fdbee152e72d0074822d43aa83a72c2b1d82485e44dcaeb0f7444d4cd5b2381fdbc1467ac19cd8651459fefffbc74d2f01ad85361ebef68c6cc7e65a3bb177a4c1a0356a30c5c22cd7ceff164eba66f5790e3c1718fab", 0x59, 0x800, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7f) ioctl$TCXONC(r5, 0x540a, 0x0) ptrace(0x10, r3) wait4(0x0, 0x0, 0x2, 0x0) getpgid(0x0) request_key(&(0x7f0000000300)='rxrpc_s\x00', 0x0, &(0x7f00000001c0)='\x00', 0xfffffffffffffffc) syz_genetlink_get_family_id$SEG6(0x0) 03:24:43 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0), 0x800) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) 03:24:43 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:43 executing program 5: read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000480)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2b) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x0, 0x0, 0x0, 0x7}, 0x20) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 03:24:43 executing program 3: pipe(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getuid() creat(0x0, 0x0) pipe(&(0x7f00000000c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000788ffc), 0xfdf6) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) poll(&(0x7f0000000000)=[{}, {}, {r1}], 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) socket$inet6(0xa, 0x0, 0x0) 03:24:43 executing program 2: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10, 0xc1800) dup2(0xffffffffffffffff, r1) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f00000002c0)=""/41, 0x29) 03:24:43 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) 03:24:43 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 962.168204] ptrace attach of "/root/syz-executor.0"[22503] was attempted by "/root/syz-executor.0"[22505] [ 962.314842] IPVS: ftp: loaded support on port[0] = 21 [ 962.478553] ptrace attach of "/root/syz-executor.0"[22598] was attempted by "/root/syz-executor.0"[22505] [ 962.610299] IPVS: ftp: loaded support on port[0] = 21 03:24:44 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:44 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) 03:24:44 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x28090aa, 0x0) 03:24:44 executing program 4: eventfd2(0x0, 0x0) epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket(0x10, 0x802, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b400000000e4ffff620a20ff000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0xfffffffffffffef3}, 0x15) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000002c0)=r6, 0x4) write(0xffffffffffffffff, &(0x7f0000000140)="1f0000000104ff", 0x7) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a430) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 03:24:44 executing program 3: r0 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="a504", 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x3e8, 0x0, 0xffffffffffffff37) 03:24:44 executing program 4: eventfd2(0x0, 0x0) epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:44 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket(0x200000100000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}]) 03:24:44 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$describe(0x6, r1, &(0x7f00000001c0)=""/4, 0x4) 03:24:44 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:44 executing program 4: eventfd2(0x0, 0x0) epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:44 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000001440)=""/207) 03:24:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000400000000000000810000000400"/44], 0x2c) sendfile(r2, r2, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 03:24:44 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:44 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) [ 963.264619] protocol 88fb is buggy, dev hsr_slave_0 [ 963.269781] protocol 88fb is buggy, dev hsr_slave_1 [ 963.274947] protocol 88fb is buggy, dev hsr_slave_0 [ 963.280030] protocol 88fb is buggy, dev hsr_slave_1 [ 963.434650] protocol 88fb is buggy, dev hsr_slave_0 [ 963.440020] protocol 88fb is buggy, dev hsr_slave_1 [ 963.584652] protocol 88fb is buggy, dev hsr_slave_0 03:24:45 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) 03:24:45 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 03:24:45 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:45 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:45 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@broadcast}, {@in6=@empty, 0x0, 0x2b}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x13c}}, 0x0) 03:24:45 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:45 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3) fcntl$setstatus(r2, 0x4, 0x0) 03:24:45 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:45 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:45 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 03:24:45 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:45 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:45 executing program 5: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x200000100000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)}, 0x0) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0xc) fcntl$setsig(r5, 0xa, 0x2b) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400400, 0x0, 0x1, 0x9, 0x2, 0x8}, 0x20) r11 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r12}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r9, 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r9, 0x0, 0xfffffffffffffffc) sendfile(r3, r9, &(0x7f0000000040), 0x8000fffffffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8005) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$TUNSETTXFILTER(r13, 0x400454d1, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000004db261a5817eca963c2099276dec644cf34c1d461653ae4f9a3663167e171fcc5e86bab1e24e8a4542029360a0de16bf773739ceb5a6fdd0"]) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(r14, 0x400454d1, &(0x7f0000000100)) accept4$inet6(r5, 0x0, &(0x7f0000000140), 0x0) r15 = socket(0x10, 0x80002, 0x0) recvmmsg(r15, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x0, 0x0) r16 = socket(0x10, 0x80002, 0x0) connect$netlink(r16, 0x0, 0x0) recvmmsg(r16, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)={&(0x7f00000004c0)='./bus\x00', 0x0, 0x8}, 0x10) r17 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x402) write$binfmt_misc(r17, &(0x7f0000000000)=ANY=[], 0x323) open(0x0, 0x0, 0x0) write$FUSE_POLL(r17, 0x0, 0x0) sendfile(r17, 0xffffffffffffffff, 0x0, 0x8fff) eventfd2(0x5, 0x1) openat$cgroup_procs(r2, &(0x7f0000000700)='cgroup.procs\x00', 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r18 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000540)={0xffffffffffffffc0}, 0x18) sendfile(0xffffffffffffffff, r18, 0x0, 0x8fff) fstat(0xffffffffffffffff, &(0x7f0000000980)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r20, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14) r21 = accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x140000) r22 = dup3(r21, r2, 0x0) ioctl$EVIOCGNAME(r22, 0x80404506, &(0x7f0000001800)=""/151) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xfffffffffffffefe, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto(r22, 0x0, 0x0, 0x4000000, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r24 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, r24, 0x0, 0x2, 0x0) ioctl$PPPIOCGNPMODE(r23, 0xc008744c, &(0x7f0000000380)={0x2b, 0x1}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/72) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000300)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r1, 0x0) 03:24:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = creat(0x0, 0x0) r4 = creat(&(0x7f0000000440)='./bus\x00', 0x0) ftruncate(r4, 0xe3ca) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) madvise(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x9) write$UHID_GET_REPORT_REPLY(r5, &(0x7f00000001c0)={0xa, 0x3}, 0xa) 03:24:45 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:45 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:45 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:45 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x131}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000280)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:24:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x4) ptrace$cont(0x4203, r1, 0x0, 0x719000) 03:24:45 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:45 executing program 2: r0 = socket(0x10, 0x3, 0x0) poll(&(0x7f0000000000)=[{}, {}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) 03:24:46 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r2, &(0x7f0000004f40), 0x3ffffffffffff80, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000013) 03:24:46 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:46 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00\x00\x00\f\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489592572ca0aed6de1b4bc6da12572c", 0x0, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r7}]]}}}]}, 0x38}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000940)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5efb1eee, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x40}, @ldst={0x0, 0x3, 0x2, 0x5, 0xa, 0x50, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x9, 0x8, 0x0, 0x8, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x729cbc4}, @generic={0x16, 0xd, 0x8, 0x6, 0x10001}, @call={0x85, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd046, 0x0, 0x0, 0x0, 0x7fffffff}, @ldst={0x3, 0x0, 0x1, 0x3, 0xa, 0x475afe9149d6272d, 0x10}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000180)='GPL\x00', 0x80000000, 0xd3, &(0x7f00000002c0)=""/211, 0x41000, 0x3, [], r7, 0x15, r9, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xa, 0x1, 0xcc4}, 0x10}, 0x70) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 03:24:46 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) fchdir(r0) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x4000000000020009) r3 = socket$inet6(0xa, 0x400000000001, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r4, 0x0, 0x80001d00c0d0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='threaded\x00', 0x9) close(0xffffffffffffffff) 03:24:46 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:46 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:46 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000000)=""/34) 03:24:46 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8fff) 03:24:46 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:46 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0xfffffffffffffffd, 0x0) dup2(r0, r2) 03:24:46 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:46 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000000)=""/34) 03:24:46 executing program 2: fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xfb, 0x3c, 0x0, 0x0, "b9be90f3f8b000a47a15597dec0f6f1a", "55298258ec6e4a3a5879a68a3cf3e6e30e5279554a02caa05730b0774130cdaa5ed1a436179ab1"}, 0x3c, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x84, 0x0, 0xca}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:24:46 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:46 executing program 5: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000200)) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setns(r0, 0x0) 03:24:46 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000000)=""/34) 03:24:46 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:46 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x3) r1 = socket$packet(0x11, 0x3, 0x300) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) write$P9_RSTAT(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="6c0000007e010001005500000000d923c29200030300f95bc17aa5f10000009ccd2ab10800160100656c696e75782f706c69637977782f70676c6963385546870c6c453fff6d6e23541677358f1c035dd1cf6fdaaff72e7100"/113], 0x5a) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000240)={0x27, 0x0, 0x7}) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000180)=""/147) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r5 = accept$inet6(r4, 0x0, &(0x7f00000003c0)) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x4e22, 0xff, @mcast1, 0x80}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/relabel\x00', 0x2, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x880) tee(r7, r8, 0x3, 0x8) r9 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x2b}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x400, 0x0, 0x21c00082, r3}) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f00000000c0)={'yam0\x00', 0x40}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) pipe2(&(0x7f0000000100), 0x2000) 03:24:46 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:46 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe1f6adb3b91e7f1ffd7e4ab569f8eb9808e0b61a0bf7a301ffe8dac0773d9e5411b2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37b968e2f3323d61ca62ef8d48f42ffd913acf060c10300000882fc399eaab8787f0dd1510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d00d331", @ANYRESOCT=0x0, @ANYPTR64, @ANYPTR64, @ANYRESDEC], 0x0, 0xd1}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:24:46 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[], @ANYRES64], 0x0, 0x0, 0x0}) 03:24:46 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:47 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x34) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) [ 965.578238] ptrace attach of "/root/syz-executor.3"[24568] was attempted by "/root/syz-executor.3"[24569] 03:24:47 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:47 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x2f03, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x33}, [{}]}, 0x78) 03:24:47 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents(r1, &(0x7f00000000c0)=""/65, 0x41) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe1f6adb3b91e7f1ffd7e4ab569f8eb9808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd913acf060c10300000082fc399eaab8787f0dd1510490b0f420326bcc4e2b65e7c68bacee7877a627", @ANYPTR64, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961", @ANYRESDEC], 0x0, 0xf0}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:24:47 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:47 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:47 executing program 2: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x40001) 03:24:47 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:47 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r0, 0x0, 0x0) 03:24:47 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:47 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:47 executing program 3: ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000200)={0x4, 0x6, 0x10001, 0xbec}) unshare(0x40000000) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r1 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r2 = dup3(r0, r1, 0x180000) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xc) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffffffffffed1) socket$packet(0x11, 0x2, 0x300) r3 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000140)='./file0\x00', r3, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000500)=0x40006, 0xfffffffffffffeda) r4 = socket(0x11, 0x80003, 0x0) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000100), 0x4) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e24, @local}, 0x70fbda26299973e5, 0x0, 0x0, 0x0, 0x7f, &(0x7f00000001c0)='rose0\x00', 0x7, 0x1, 0x5}) r5 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000140)='./file0\x00', r5, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r6 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000140)='./file0\x00', r6, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f0000000480)={'icmp6\x00'}, 0x0) openat$cgroup_type(r5, 0x0, 0x2, 0x0) r7 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000140)='./file0\x00', r7, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) ptrace$setopts(0xe70f, 0x0, 0x39ed, 0x8) getpeername(0xffffffffffffffff, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) r8 = open(0x0, 0x0, 0x0) renameat2(r8, &(0x7f0000000140)='./file0\x00', r8, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) fcntl$getownex(r8, 0x10, &(0x7f00000003c0)={0x0, 0x0}) ptrace$cont(0x1f, r9, 0x3, 0x1) r10 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000140)='./file0\x00', r10, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x43, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) 03:24:47 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:47 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@raw=[@map_val, @ldst], &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000000), 0xfffffffffffffe22}, 0x48) 03:24:47 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:47 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000200)) ptrace$setregs(0xd, 0x0, 0x0, 0x0) 03:24:47 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x90, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 966.207203] IPVS: ftp: loaded support on port[0] = 21 03:24:47 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:47 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:47 executing program 0: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:47 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) inotify_init() ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, &(0x7f00000002c0)='\x1a\xa86\x8a\x9b\xf8]\xc5\x06c\x9a\x11V!\xad?\x9ate\xe9\xe0\x7f^\x03c\xd8\x00\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc68*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00l\x00W\xe6XT\\l\xd6J\xf2\x12\xc4\x9e\xd4\xbe8<\v\x868%l0\xa17\x8bjY%\xb3\x1b,g\x8d\xfa\x9e\f&\xc4\xc0\x81\x9a\x91\x9e\xe3\xe6\xa6\xd8\xb80\xe4NW=\x10\x8d\xcc\xcbU\x1dg\xd9\xc5\x92\x94\x95\x10\xe3\xe8\xa8\xbfW\x00\x16\x90o=\x80`\xe2\xd1\xb2\xac\x92\x95F\xc0\xb5,\a\x00\x00\x00\xe7\xd6A\x8b\x11Qx\xa0\xa4\xa2_h\xcc\xe0\nXpo\x9f=\xa4\xff\xaf\xb4\x02P\xaa\r46X\x8b\xfb\xc7/\x8b\xa5\x06\x11\xc9\x0fl\x00'/243) [ 966.693484] IPVS: ftp: loaded support on port[0] = 21 [ 966.885608] device bridge_slave_1 left promiscuous mode [ 966.891188] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.935801] device bridge_slave_0 left promiscuous mode [ 966.941539] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.657575] device hsr_slave_1 left promiscuous mode [ 970.699613] device hsr_slave_0 left promiscuous mode [ 970.759751] team0 (unregistering): Port device team_slave_1 removed [ 970.770857] team0 (unregistering): Port device team_slave_0 removed [ 970.782876] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 970.810348] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 970.896940] bond0 (unregistering): Released all slaves 03:24:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @local, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b5010e, r2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 03:24:52 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x100000198) r3 = getpid() read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xffffff7e) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sched_setscheduler(r3, 0x5, &(0x7f0000000200)) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x1b, 0x2}, 0x7) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 03:24:52 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:52 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:52 executing program 0: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:52 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x1045) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 03:24:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x40830, &(0x7f0000000280)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@context={'context', 0x3d, 'system_u'}}]}}) 03:24:52 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) syz_open_pts(r0, 0x0) dup2(0xffffffffffffffff, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:52 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:52 executing program 0: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:52 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r1, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 03:24:52 executing program 5: syz_open_procfs(0x0, 0x0) clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x29) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x2, 0x0, 0x149}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 971.511107] SELinux: security_context_str_to_sid(system_u) failed for (dev ramfs, type ramfs) errno=-22 03:24:53 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) syz_open_pts(r0, 0x0) dup2(0xffffffffffffffff, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x9, 0x0, 0x0, [{}, {}]}]}}}], 0x20}, 0x0) 03:24:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r2, &(0x7f0000000ea9)=""/407, 0x197) 03:24:53 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:53 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) [ 971.742181] audit: type=1326 audit(1574133893.150:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=25449 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x0 03:24:53 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) syz_open_pts(r0, 0x0) dup2(0xffffffffffffffff, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 03:24:53 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:53 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) [ 971.951975] binder_alloc: binder_alloc_mmap_handler: 25726 20ffc000-20fff000 already mapped failed -16 03:24:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) [ 972.083497] binder_alloc: binder_alloc_mmap_handler: 25733 20ffc000-20fff000 already mapped failed -16 03:24:53 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) read(r0, 0x0, 0x0) 03:24:53 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:53 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:53 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) fchdir(r0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) ioctl$FICLONE(r1, 0x40049409, r5) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$ION_IOC_HEAP_QUERY(r6, 0xc0184908, &(0x7f00000001c0)={0x34, 0x0, &(0x7f00000000c0)}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) io_setup(0x8000009, &(0x7f0000000180)) r9 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r9, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) 03:24:53 executing program 2: r0 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="232198d15ea30d55ea1652525bcaecde3ef509a8f243552a9dea6d1ec1436f0c35e4a8346b5873e8a6085e61f2cd1a24b0affae7520299f03efcce75acbdae8cb3ed637389484f21a65102ba7276cac30a79a08bece1e15fdd2687a79e5ea418e48e9ac77d4a09f3"], 0x2) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') fchdir(r1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 972.481734] audit: type=1326 audit(1574133893.890:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=25449 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x0 03:24:54 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) recvfrom$inet(0xffffffffffffffff, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r4, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) 03:24:54 executing program 3: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) sendmmsg(r0, &(0x7f0000004180), 0x11f, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r4 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0xffffffffffffff24}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r7, 0x0, 0x0, 0x110003) lseek(r7, 0x0, 0x3) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r9 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0x20008) socket$inet6_udp(0xa, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0xdd) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r4, r10, 0x0, 0x8000fffffffe) 03:24:54 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:54 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b63c38f19c0408cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c785255f9", @ANYRESHEX=0x0, @ANYRESOCT], 0x0, 0x3b}, 0x20) tkill(r2, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 03:24:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:24:54 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) recvfrom$inet(0xffffffffffffffff, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r4, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) 03:24:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000000)) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:24:54 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) [ 972.852882] audit: type=1804 audit(1574133894.260:253): pid=25969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir512766802/syzkaller.Y7E8Dx/74/bus" dev="sda1" ino=16804 res=1 [ 972.902066] audit: type=1804 audit(1574133894.270:254): pid=25969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir512766802/syzkaller.Y7E8Dx/74/bus" dev="sda1" ino=16804 res=1 03:24:54 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) recvfrom$inet(0xffffffffffffffff, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r4, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) 03:24:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:24:54 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) [ 973.653254] audit: type=1804 audit(1574133895.060:255): pid=25969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir512766802/syzkaller.Y7E8Dx/74/bus" dev="sda1" ino=16804 res=1 03:24:55 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="1c", 0x1, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000100)={'\xdaBz', 0x3}, &(0x7f00000001c0)='keyring\x00', 0x0) 03:24:55 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 973.680277] audit: type=1804 audit(1574133895.070:256): pid=25969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir512766802/syzkaller.Y7E8Dx/74/bus" dev="sda1" ino=16804 res=1 03:24:55 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:24:55 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:55 executing program 2: socket$inet6(0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = dup2(r2, r3) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000080)=0x1b, 0x4) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000001280)) read$FUSE(0xffffffffffffffff, &(0x7f0000000000), 0x1170) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x15) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000380)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0x8) fchdir(0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair(0x8, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r6, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x14040, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x30a) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BLKROTATIONAL(r8, 0x127e, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r8, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x0, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001300)={{{@in=@empty, @in6=@initdev}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000001400)=0xe8) getpeername$packet(r8, &(0x7f0000003bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000001000)='pids.events\x00', 0x275a, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) pread64(r0, &(0x7f0000000040)=""/49, 0x31, 0x0) ptrace(0x10, r5) wait4(r5, 0x0, 0x2, 0x0) 03:24:55 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:24:55 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:55 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:55 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:55 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:24:55 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:55 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe1f6adb3b91e7f1ffd7e4ab569f8eb9808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd913acf060c10300000082fc399eaab8787f0dd1510490b0f420326bcc4e2b65", @ANYRES32=0x0, @ANYRESOCT], 0x0, 0x99}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:24:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@newsa={0x154, 0x10, 0x40d, 0x0, 0x0, {{@in, @in=@local}, {@in=@local, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@dev}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x154}}, 0x0) 03:24:55 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:55 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r3 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r3, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r3, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r4, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(0xffffffffffffffff, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) 03:24:55 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:55 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:24:55 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:24:55 executing program 2: openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x5}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r2, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)}, {&(0x7f0000001c40)}, {&(0x7f00000002c0)="f7fc370763ed7a4dbfaf549cd1dc94c047d2bfd2da573ebddcf5db435637f045346375f1b75c21a0106605fa2c283aaa0014062099dc4b58d700b3a07dbc83010c24cb730b30aee0103d81b75a4f6ce90dd0237bd4b22d66e95966a0ad75b3f8338268b29e2dd7c90b5b33722b010ce947", 0x71}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000080)="4326b5be4c72829e48001bfdce33d9a34689f07e340cec408be4e862cc21d93ea75e6e79c33cb2966b5a3e0a60677b6dbbb84bd6946d811304b2269c4dfbf4b532516ea09b4413681d63ea", 0x4b}, {&(0x7f0000000b40)="70799d7f93aee25740609238367b30d5bd2da4a8a782f1e2bfe6e09ea5587d2488139bce0b6720aa3beec624a66fba665935593f143410e814194574d6c5caa5a0a643a77a6837f10a97664379ac508c2c604e84b914cca11d7c13c7516775c47b89811abd1b86bdc06b4c2df598cc7f7707a1c0400e52e98972dcc961b5a697d45539c7b8f008ed83ff", 0x8a}, {0x0}, {&(0x7f0000000f40)="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", 0x355}], 0x4}}], 0x2, 0x80) sendto$inet(r2, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000140)={{0x73, @dev, 0x4e22, 0x2, 'wlc\x00', 0x4b, 0xb, 0x61}, {@rand_addr=0x40, 0x4e22, 0x2000, 0x863, 0xfffffffe, 0x8}}, 0x44) socket$netlink(0x10, 0x3, 0x2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) 03:24:55 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 974.250203] ptrace attach of "/root/syz-executor.3"[26329] was attempted by "/root/syz-executor.3"[26330] 03:24:55 executing program 3: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6174000000000000000000001c0000e2ff000000000000000000000000000002000000000000000000000000000000000000bf43edc5b0fa63e700"/72], 0x48) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000300)={'mangle\x00'}, &(0x7f0000000380)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000003c0)={'raw\x00'}, &(0x7f00000004c0)=0x54) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000700)=""/49, &(0x7f0000000740)=0x31) socketpair$unix(0x1, 0x3, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r2, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) r3 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r3, 0x1) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r4, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000100)={'s`z', 0x0}, 0x0, 0xfffffd80, 0x0) request_key(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, r5}, &(0x7f0000000400)=""/48, 0x30, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f00000000c0)="36773c127a740cf686ea08a42779c117e3cfd809", 0x14, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'\x02\xfb8', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r6, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000100)={'s`z', 0x0}, 0x0, 0xfffffd80, r7) keyctl$KEYCTL_MOVE(0x1e, 0x0, r6, r8, 0x1) 03:24:55 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r3 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r3, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r3, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r4, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(0xffffffffffffffff, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) 03:24:55 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:55 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) [ 974.381136] IPVS: ftp: loaded support on port[0] = 21 03:24:55 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:55 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f0000000100000000000000000000000fe80000000000000002e0727d92e32d96700007f2417b8a39bea5300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000000000000ac1414bb"], 0x4}}, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:24:55 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:24:55 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r3 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r3, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r3, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r4, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(0xffffffffffffffff, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) 03:24:55 executing program 2: clock_nanosleep(0x8, 0x0, &(0x7f0000000400)={0x0, 0x1c9c380}, 0x0) 03:24:56 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 03:24:56 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) [ 974.653234] audit: type=1400 audit(1574133896.060:257): avc: denied { wake_alarm } for pid=26461 comm="syz-executor.2" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 974.668523] IPVS: ftp: loaded support on port[0] = 21 03:24:56 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x11, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000600)=0x209, 0xfffffffffffffdae) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000300)={0x0, 0x0}, 0xd) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="1700260000000000000000080000000000004b28f21144b86eb2eb1d480d7fbd278d8c018f2eeab187ab42536b79a49bde3219bd7c63bf0ce4e7d519cbf9b300a5aa0a8b670fc103aa492f3bb9f3cab63b884d8ffc0fcdac99ea8f678ee136df6585df3fb34b8479ea9bf6508cfb136641fe6442485663c0d5e8b01cc0292452c03b4c9a37283345f59e8f55398cd1bce5d41268e4ebe300d2080000000000000dddf2f902a6a2c4d88cf88c4543fd8c6d423f1c8abb1b77c1faba2f3902e35551e6fdbe7b4fc8f9b7333ce181ffe6dffceded7f46bd3e20010001000000000000000993b88935826be7a3afa6d0f3320e682e26559f5c97473dfcdb15b3e6000000f9000000000000000000000062893c4bd8aae18a8c77fe8a3ed7369a75c60af2d48be5f1891dd6263847ac00ae00000069016d31a2199ae8b75ce57d5d9c5a5fdf926346e1dcac9984a2171a1f28ce017dba0ab09daeda470a1a56003c8407753a39ed0969b1b46b17b8f2805b11fdc85420967681babdec364d46b983210e99d980e2dacb14611062270dd9f8b2dde445bae9fd6581fa2fbed1358aef78f413c5afc7000000000000000000"], 0x8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r3, 0x0) pipe(&(0x7f0000000400)) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x408000000000004, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x402) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) mlockall(0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') r5 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000040)) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r7, 0x1, 0x39, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$FUSE_POLL(r4, &(0x7f0000000540)={0xffffffffffffffc0, 0xfffffffffffffffe, 0x1}, 0x18) r8 = socket(0x10, 0x80002, 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0x34, 0x0, @thr={&(0x7f0000000640)="601d1e17eb296e55f0ec6d9277c5c6654ed7a8ee981313fec5693e3690775664bf63427aca99c38daa1d9dc465d3d4898030a2fe009556a5dd1685a2121e22a84d398c76b6d986168275a78b26ba017393fbb24dcd8a1724c197a528ede6774d33c9a95271aa4c1d35f1436b877397508b1ed8ae099d9d2e59f233fda89e2c45d54607dd66b7858a8796ca6cb47ed35a214fe5658b8920433a1403a74c4b3520883786632d15fe06e841dec5283f8a1a26", &(0x7f0000000300)="5dd1fe141a30375709aa184e1f1d"}}, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r5) bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8001002}, 0xc) connect$netlink(r8, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) write(r8, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) times(0x0) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000b4bffc)=0x7, 0x4) sendto(r8, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x2, 0x0) sendfile(r4, r7, &(0x7f0000000140), 0x8fff) 03:24:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 03:24:56 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:56 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:56 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="0400cd80"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netstat\x00\xb4Z0\xc0\xb7\x8d\x00\x00\x00\x00\x00\x00\x00B\x81F\x85\x86\xe2\x13\x95\xce\xa7;+\f\xa0VJ\xc4v*\xc5\x9b{\x81\x1d9O\xd1\x8f\xbb\x8f\xf6\xfb A\xaf\x8f\x87\xd5\xb6R\x01\x96\x9e\"_C\xca\xc9[\xa3\xf9\xa2\xb7:\xa7\xeb2\x98]\xddL\x01?^\x1a\x9dkJ\xe7\xe6\xca\xad\x8f\xa2q\\m\x03\x80n\x85^\xd0\xd3\xd8xj\x83\x18\xe9\xb1+E\x9bD\x1ddb\xfdj89:\xce._\x84hP|\xe7?\x81\x9a\xe0@7At\xe0\x1cW(\x89\x8a\r\xcf|v\x13\xdc\xa6\x06\b\xd7L]\xc0\xc8\x17PQ\'~\xa5\x8d\x0f@\xd4z\xdec\xe1\xa5\xdf\x84\xb6\v\xcd\x1d<\x8c\xa5$\x18-G\x86\n\x94\x96]nZ\x8c\x91\xbbi8\xf9\xb9\"\xae\x98\xd7vL\xdf\xa1\xd1/\x84\xe3\x82\x11T') preadv(r1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="e6c55c5d9eb8a20e510100010029a741efca44f937d0492482ba837296d9612405000c734057548c402cc43b3896cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b30eecd4f9ad03000000dfdaf3", @ANYPTR], 0x0, 0x91}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:24:56 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(0x0, 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 03:24:56 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:56 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xffffffaa}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYPTR64, @ANYBLOB="27fb1299e4fd3329137c495a519f5cbbc5b9c6fab5f3020449d80a91f54bbeae0ac0df19d9e33ec4c243e68a213963a12f3e378bfd689c2e1cc27e81009606ac57efc9fec74c31c40b1ba8b2c75182691b7ea10f3b57515be8af81c379b45c5a3662358b9ea5d8"], 0x0, 0x6f}, 0x20) tkill(r0, 0xf) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:24:56 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(0x0, 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:56 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 974.945742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26479 comm=syz-executor.3 03:24:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, 0x0, 0x1, 0xfffff000}, 0x0) [ 975.734977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26495 comm=syz-executor.3 03:24:59 executing program 3: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:24:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0xe, 0x0, &(0x7f0000000080)=0xb100) 03:24:59 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:59 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(0x0, 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:59 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:24:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, 0x0, 0x1, 0xfffff000}, 0x0) 03:24:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, 0x0, 0x1, 0xfffff000}, 0x0) 03:24:59 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:24:59 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 978.190994] sock: process `syz-executor.2' is using obsolete getsockopt SO_BSDCOMPAT [ 978.226525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26509 comm=syz-executor.3 03:24:59 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:24:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0xb, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x2c}}, 0x0) 03:24:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={0x0}, 0x1, 0xfffff000}, 0x0) [ 979.044727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26509 comm=syz-executor.3 03:25:02 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="8a7cfcb0bd543a07372504167b455ddfd0640764ef"], 0x0, 0x15}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:25:02 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:02 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:25:02 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={0x0}, 0x1, 0xfffff000}, 0x0) 03:25:02 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 03:25:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={0x0}, 0x1, 0xfffff000}, 0x0) 03:25:02 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) [ 980.721602] ptrace attach of "/root/syz-executor.3"[26635] was attempted by "/root/syz-executor.3"[26636] 03:25:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:02 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:25:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x0, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:25:02 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:02 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:02 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, 0x0, 0x0) 03:25:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:02 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="13f80f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYBLOB="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", @ANYRES64], 0x0, 0x14e}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:25:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x0, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:25:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x0, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:25:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/relabel\x00', 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x3f7, &(0x7f0000000440)=[{0x0, 0xffffffffffffff5d}, {0x0}, {0x0}, {0x0, 0xa7}, {&(0x7f0000000400)=""/17, 0x2f2}], 0x5}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4034ccdbf2bb01402120148d0f34"], 0xe}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r5}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 03:25:02 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:02 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:25:02 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'.\x0ez', 0x0}, 0x0, 0x0, 0x0) 03:25:02 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:03 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, 0x0, 0x0) 03:25:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:25:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:03 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000017c0)) r2 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r3 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r3, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r2, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r3, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r4, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r2, 0x401) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) 03:25:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000240), 0x4) 03:25:03 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1}}, [@policy_type={0xc, 0x10, {0x1}}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:25:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 03:25:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffd}, 0x0, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2d, 0x4, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={0xfffffffffffffdb0}, 0x8, 0x0) r4 = gettid() tkill(r4, 0x16) read(r3, &(0x7f0000000700)=""/128, 0xfc25) 03:25:03 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000017c0)) r2 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r3 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r3, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r2, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r3, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r4, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r2, 0x401) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) 03:25:03 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xb8, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 03:25:04 executing program 4: eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, 0x0, 0x0) 03:25:04 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000017c0)) r2 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r3 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r3, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r2, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r3, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r4, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r2, 0x401) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) 03:25:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xb8, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 03:25:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 03:25:04 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000004, 0x100000000000031, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080), 0x4) 03:25:04 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xb8, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 03:25:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 03:25:04 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:25:04 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:04 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:04 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = gettid() ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @broadcast}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1}) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) r1 = socket$inet(0x10, 0x2000000000000003, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00\x00\x00\x00\x00r\xed\x02\x00', @ifru_flags=0x2}) 03:25:04 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:25:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:04 executing program 4: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x200000100000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r8 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x4, 0x1, 0x7}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r9, r9, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r10}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r10}) bind$packet(r7, &(0x7f00000003c0)={0x11, 0x4, r10, 0x1, 0x6, 0x6, @dev={[], 0x27}}, 0x14) lseek(r3, 0x0, 0x2) sendfile(r3, r7, 0x0, 0xfffffffffffffffc) sendfile(r3, r7, 0x0, 0x8000fffffffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8005) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) 03:25:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x5, 0x0, 0x0, {{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc}]}, 0xc4}, 0x1, 0xfffff000}, 0x0) 03:25:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:05 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:05 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) syz_open_pts(r0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) dup3(0xffffffffffffffff, r0, 0x0) 03:25:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x4, 0x0, &(0x7f0000000000)="df8a7600"}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 03:25:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x3f7, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304400000000012634840000000000000000000000000000000005800000000000000feffffffffffffff00"/60, @ANYPTR, @ANYPTR, @ANYRES64], 0x0, 0x0, 0x0}) 03:25:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) syz_open_pts(r0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) dup3(0xffffffffffffffff, r0, 0x0) 03:25:05 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) close(r2) 03:25:05 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:05 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(0xffffffffffffffff) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000017c0)) r2 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r3 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r3, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r2, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r3, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r4, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r2, 0x401) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r5) 03:25:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000008040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:25:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a0665bc45ff81054e220000000058000b480400945f64009400050038925a01000000000500000000f0fffeffe809000000fff5dd0500000700010009080800418e00000004fcff", 0x58}], 0x1) 03:25:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) syz_open_pts(r0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) dup3(0xffffffffffffffff, r0, 0x0) 03:25:05 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(0xffffffffffffffff) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000017c0)) r2 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r3 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r3, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r2, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r3, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r4, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r2, 0x401) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r5) 03:25:05 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r2, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 03:25:05 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1}, 0x10) 03:25:05 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(0xffffffffffffffff) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000017c0)) r2 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r3 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r3, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r2, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r3, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r4, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r2, 0x401) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r5) 03:25:05 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x1000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r1, r0, 0x0, 0x40801001) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x4000000000000001, 0x0) set_tid_address(0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 03:25:05 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100), 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r1, &(0x7f0000000300), 0x121, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x40, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000001b9, 0x0) 03:25:05 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:05 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0xfffffffffffffffd) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[]}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x2}}, 0x0) pipe(&(0x7f00000001c0)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x3) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000b80)=""/270, 0xb37af43) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 03:25:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:05 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x228242) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r5 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280)={0x99}, 0xff7f) syncfs(r1) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0x0, r5, 0x1, 0x3, 0x8}) [ 984.384631] net_ratelimit: 1 callbacks suppressed [ 984.384638] protocol 88fb is buggy, dev hsr_slave_0 [ 984.395028] protocol 88fb is buggy, dev hsr_slave_1 03:25:05 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100), 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:05 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) [ 984.418706] audit: type=1804 audit(1574133905.830:258): pid=27702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="bus" dev="sda1" ino=16939 res=1 03:25:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:06 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_TRUST={0xc}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 03:25:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r6}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x28}}, 0x0) [ 984.574103] audit: type=1800 audit(1574133905.980:259): pid=27702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16939 res=0 03:25:06 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) [ 984.624672] protocol 88fb is buggy, dev hsr_slave_0 [ 984.629827] protocol 88fb is buggy, dev hsr_slave_1 [ 984.701255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 03:25:06 executing program 4: clone(0x2000922100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="d5cfb8039fb396665b2e21d272ed08895b87c7c8c9f95bd35db034f7914c56f0aa49582bb018e1f04966733b02d9aa"], 0x0, 0x2f}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:25:06 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100), 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:06 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x102800) dup3(r0, 0xffffffffffffffff, 0x0) 03:25:06 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe1f6adb3b91e7f1ffd7e4ab569f8eb9808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd913acf060c10300000082fc399eaab8787f0dd1510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d00d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea942494855d4bd3388b6", @ANYRESOCT, @ANYRESOCT, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b30eecd4f9ad03000000dfdaf3d0fef2", @ANYRESDEC], 0x0, 0x151}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:25:06 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001900)) r1 = syz_open_pts(r0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) dup2(r2, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) 03:25:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="604afe58", 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x1, 0x0, 0x3, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:25:06 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x102800) dup3(r0, 0xffffffffffffffff, 0x0) 03:25:06 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:06 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x0, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:06 executing program 4: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f00000000c0)="1f0000000303ff007d4354c007110040f305010008000100010423daffdf00", 0x1f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 985.036522] ptrace attach of "/root/syz-executor.4"[28160] was attempted by "/root/syz-executor.4"[28163] 03:25:06 executing program 2: clock_adjtime(0x0, &(0x7f0000000240)={0xfffffffffffff003}) 03:25:06 executing program 5: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8904, &(0x7f0000000140)='lo:&\xb7`Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 03:25:06 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:06 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x102800) dup3(r0, 0xffffffffffffffff, 0x0) [ 985.144435] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 03:25:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x100004}, 0x10) write(r2, &(0x7f0000000380)="240000001a00110214f9f407000904001100000000020000000200000800040003000000", 0x24) [ 985.212868] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 03:25:06 executing program 5: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000340)}, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) 03:25:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:06 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x0, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:06 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0xfe8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e60, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x3ffff73, 0x45833af92e4b39ff, 0x0) 03:25:06 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400006a, 0x0) 03:25:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:06 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:06 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x2, {0xa, 0x4e24, 0x9, @rand_addr="7cc0584b1e896feddd70b3bf95ae1081", 0x4}}}, 0x80) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396) r3 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r4 = dup(r3) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="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"/1114], 0x30e}}, 0x1) ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000640)) r6 = inotify_init() lseek(r6, 0x8, 0x2) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x5, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0xfd73) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x3}) fcntl$dupfd(0xffffffffffffffff, 0x0, r7) r8 = dup2(0xffffffffffffffff, r7) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000340)={0x3f, 0x0, 0x0, 0x1, 0x16, 0x1, 0x0, 0x0, 0x0, 0xbb4, 0xfff}) getsockname(0xffffffffffffffff, &(0x7f00000001c0)=@rc, &(0x7f0000000580)=0xfffffffffffffefb) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r10 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) sendmsg$netlink(r12, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[@ANYPTR], 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e653e5f1633427f6f5343c6efe", @ANYRES32=r10], 0x4}, 0x0) r13 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r14 = dup2(0xffffffffffffffff, r13) sendmsg$netlink(r14, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000d300000100e2dc4103"], 0xe}, 0x0) setsockopt$inet_tcp_int(r14, 0x6, 0xa, &(0x7f0000000100), 0x0) bind$inet(r9, &(0x7f0000738ff0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) dup2(0xffffffffffffffff, r9) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7ff) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x9) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x200}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r15 = open(&(0x7f0000000480)='./bus\x00', 0x101042, 0x0) ftruncate(r15, 0x2007fff) sendfile(r4, r15, 0x0, 0x8000fffffffe) 03:25:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:06 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x0, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) r1 = dup2(0xffffffffffffffff, r0) execve(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 03:25:07 executing program 1: r0 = gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 03:25:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="604afe58", 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x1, 0x0, 0x3, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:25:07 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x0, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:07 executing program 1: r0 = gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) [ 986.154638] protocol 88fb is buggy, dev hsr_slave_0 [ 986.159823] protocol 88fb is buggy, dev hsr_slave_1 [ 986.164977] protocol 88fb is buggy, dev hsr_slave_0 [ 986.170036] protocol 88fb is buggy, dev hsr_slave_1 [ 986.304667] protocol 88fb is buggy, dev hsr_slave_0 03:25:07 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 03:25:07 executing program 1: r0 = gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:07 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x0, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:07 executing program 5: read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="4c0000001200ff09ff1cfe956fa283b724a6008000000000000008000000150024001d001fc41180b598bc593ab6821148a730de33aa46ffecfde0258823dd8da49848c6cea97da172dcc121", 0x4c}], 0x1}, 0x0) 03:25:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x2000000000040}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003040), 0x40000000000046b, 0x0) 03:25:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:08 executing program 1: accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(0x0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r0) sched_rr_get_interval(0x0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000017c0)) r2 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r3 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r3, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r2, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r0, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r3, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r4, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r2, 0x401) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r5) 03:25:08 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fallocate(r0, 0x0, 0x0, 0x8000) fallocate(r0, 0x3, 0x5, 0xfff9) 03:25:08 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x0, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 03:25:08 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x21000) 03:25:08 executing program 1: accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(0x0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r0) sched_rr_get_interval(0x0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000017c0)) r2 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r3 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r3, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r2, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r0, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r3, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r4, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r2, 0x401) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r5) 03:25:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000440), 0x0}}, 0x0) timer_delete(0x0) [ 986.862522] input: syz1 as /devices/virtual/input/input99 03:25:08 executing program 1: accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(0x0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r0) sched_rr_get_interval(0x0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000017c0)) r2 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r3 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r3, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r2, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r0, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r3, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r4, &(0x7f0000000180)=""/4095, 0x11f8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r2, 0x401) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r5) 03:25:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 03:25:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:08 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) [ 986.968524] input: syz1 as /devices/virtual/input/input100 03:25:08 executing program 1: r0 = gettid() accept(0xffffffffffffffff, 0x0, &(0x7f0000001400)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:08 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000480)=""/186, 0x50}, 0x120) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xb5}], 0x8) 03:25:08 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 03:25:08 executing program 1: r0 = gettid() accept(0xffffffffffffffff, 0x0, &(0x7f0000001400)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:08 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) [ 987.179940] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.215899] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 03:25:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@empty}}, 0xe8) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 987.251767] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.271032] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.292497] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 03:25:08 executing program 1: r0 = gettid() accept(0xffffffffffffffff, 0x0, &(0x7f0000001400)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) [ 987.326337] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.338761] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.361494] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.389706] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.412790] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.430574] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 03:25:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0x0}) 03:25:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:08 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/34) 03:25:08 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 03:25:08 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) [ 987.439373] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.460954] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.472317] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.480826] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.513055] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.533550] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.544108] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.553906] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.567979] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.578297] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.590398] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.600246] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.611069] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.627928] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.643177] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.657112] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.663965] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.670973] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.677970] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.685245] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.692078] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.699098] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.706127] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.712925] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.719916] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.726978] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.733780] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.742332] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.749374] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.756372] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.763171] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.770159] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.780039] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.790652] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.800521] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.811290] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.821549] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.833177] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.843379] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.854020] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.863756] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.872888] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.881489] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.890842] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.899380] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.908336] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.916767] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.923480] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.933567] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.942988] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.953302] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.962952] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.972386] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.980864] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.990351] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 987.998797] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 988.008511] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 988.018033] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 988.026921] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 988.033963] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 988.042483] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 988.051339] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 988.059694] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 988.066692] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 988.073493] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 03:25:09 executing program 4: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000140)='lo:&\xb7`Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 03:25:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:09 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:09 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000000)=""/34) 03:25:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x101}, 0x13) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x101}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000240)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000080)='GPL\x00', 0x800, 0x2ed, &(0x7f0000000280)=""/176, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff97}, 0x48) dup2(r1, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f0000000240)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x800, 0x2ed, &(0x7f0000000280)=""/176, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffed, 0x10, &(0x7f0000000000), 0xffffffffffffff97}, 0x48) 03:25:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r3, @ANYBLOB="4f000000000000001800120008000100767469000c00020008000100", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) [ 988.080300] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 988.087158] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 988.093920] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 988.100674] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 988.108550] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz0] on syz0 03:25:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:09 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:09 executing program 4: r0 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000000000)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffff9}, 0x0, 0x0, 0x8) creat(&(0x7f0000fdeff8)='./file1\x00', 0x0) 03:25:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f00000000c0)=""/11, 0x3ef) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = syz_open_pts(r0, 0x0) dup2(r0, r2) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) 03:25:09 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 03:25:09 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000000)=""/34) 03:25:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:09 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:09 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000040), 0x4) 03:25:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:09 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) dup3(r1, r0, 0x0) 03:25:09 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000000)=""/34) 03:25:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/100, 0x64}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x4000000}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}, 0x1400}], 0x0, 0x0, 0x0}) [ 988.576243] syz-executor.5 (29923) used greatest stack depth: 21456 bytes left 03:25:10 executing program 4: clone(0x2000922100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6e7400000100ce156385b1080fb8c86310f90900563039e4444d7a646fca63c33cb775870020002bed400005000000c75e56d9489a9879000000001018039cdd09f00000ac01000000003f49590000000000fece"], 0x1) 03:25:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x0) dup3(r1, r0, 0x0) 03:25:10 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) dup2(r0, r1) 03:25:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="fc37b399b94e768703ac89974d5b709d7cf7e8e5d380b3a6d5f5e1515ab5f2218fcc72aa15", 0x25}, {&(0x7f0000000340)="1a453a29bd7ba2b818e3dcaa4b66169a75d92920163210c9945d48866960a9db41e52aec94f767fe903fe4fbe91dc0ab2a6a87036ecd879ccbf8b1a89b67868f9ee6e7e6988dfef23e6245ad7acb7cbf176938019526836baa19843a3d064c07effeae810319d7f0c1e80a00814d7d4e5612337deba82caf58b076619727b0102875962a290c089279ab1cb0b6a099b855c80d26065d1556987b0ee5a752d0c09b3bd44d", 0xa4}], 0x2}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000a80)='?', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000031c0)='^', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000035c0)='Q', 0x1}], 0x1}}], 0x4, 0x80) 03:25:10 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) 03:25:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x0) dup3(r1, r0, 0x0) 03:25:10 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(0x0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:10 executing program 5: r0 = socket(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)={0x10000014}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000007ffc), 0x2f5) 03:25:10 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) 03:25:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x0) dup3(r1, r0, 0x0) 03:25:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000040), 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:25:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000200)="e5", 0x1, 0x0, 0x0, 0x0) 03:25:10 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(0x0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:10 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 03:25:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(0xffffffffffffffff, r0, 0x0) 03:25:11 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x476, 0x101102) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x63, 0x2}], 0xff49) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) 03:25:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(0xffffffffffffffff, r0, 0x0) 03:25:11 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(0x0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) [ 989.664621] net_ratelimit: 5 callbacks suppressed [ 989.664631] protocol 88fb is buggy, dev hsr_slave_0 [ 989.675142] protocol 88fb is buggy, dev hsr_slave_1 03:25:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(0xffffffffffffffff, r0, 0x0) 03:25:11 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:11 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df772655010002000000000000005f"], 0x92) 03:25:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, 0xffffffffffffffff, 0x0) [ 989.891958] SELinux: ebitmap: start bit 0 comes after start bit 1593835392 [ 989.920519] SELinux: failed to load policy [ 989.940165] SELinux: ebitmap: start bit 0 comes after start bit 1593835392 03:25:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffa0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 989.966154] SELinux: failed to load policy 03:25:11 executing program 4: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8902, &(0x7f0000000140)='lo:&\xb7`Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 03:25:11 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, 0xffffffffffffffff, 0x0) 03:25:11 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x664f89b3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 03:25:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000015c0)=""/235) 03:25:11 executing program 5: 03:25:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, 0xffffffffffffffff, 0x0) 03:25:11 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) [ 990.475835] audit: type=1804 audit(1574133911.890:260): pid=30779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir468106889/syzkaller.QDUOHC/120/bus" dev="sda1" ino=16958 res=1 03:25:11 executing program 4: 03:25:12 executing program 5: 03:25:12 executing program 2: [ 990.575325] audit: type=1804 audit(1574133911.890:261): pid=30779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir468106889/syzkaller.QDUOHC/120/bus" dev="sda1" ino=16958 res=1 03:25:12 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:12 executing program 5: 03:25:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000000380)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 990.684461] audit: type=1804 audit(1574133912.070:262): pid=30779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir468106889/syzkaller.QDUOHC/120/bus" dev="sda1" ino=16958 res=1 03:25:12 executing program 0: 03:25:12 executing program 3: openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = getpid() ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) sched_setscheduler(r3, 0x5, &(0x7f0000000180)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write$P9_RSTAT(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="6c0000007e0100000055000000000000000303000000040000000000000000000000000000000100160000000000001c000010002fa9656c696e75782f706f6c69637975782f706f6c6963794e3ee3e73f9269916f75702f73797a3100040077727200000000"], 0x66) sendto(r5, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') ioctl(r0, 0x8, &(0x7f0000000580)) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$binfmt_misc(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b520000006000000e0517f08000000a72ed763cff694bd7f4ecab21e4a9ddec7483eee198c4f6efe09c408b6e91abe2e58ee53ab99de20f7d97f667e5c0f5604417042409a3f28e040eeb799c98c7ae4c1311a57724b2bcbb637e994a89d4610df8321088bf93a7b7c4c3b7bb156c1d51b26a96ea9e8c6d0268b83"], 0x79) clone(0x0, &(0x7f0000000640)="e1fea4c5bb0f699682fd37c5ad1a14d20afc2093db1a28cd359bd0ae7b53802fe27accc96526d718565c81ae3d4a901e0a1f01e37e5fcba72ad07c592309a4825b50a25a0884a172a71e035d3156888f8ae12bfbc4e837ba972d9a23cf4b56611f539eb172aa8978fc38a02b7b4349d39671579350b6d4969b18185ece417bc621f2043e734e95d87597df4e32c7", &(0x7f00000000c0), &(0x7f00000003c0), &(0x7f0000000700)="f1ea51d793d343ef785f269e27bc9b35c756a451c99cbdeb5d648ed9b1580c18f187e2995f273c52d3391c28b1683e5809aca445a286b013970945b55c23a3e82daa89d13cd66835e8ec0f39eb2e796f4ed003a859d79c2991ea0323ae2e822e5ec3110d58c4ca2294a4677dae26c6e4a9c7cdbca39458cd49ae1102a26bae5045287a8e69ece03c3462dca17c7e8a6e06e86b06d0db4e41b2c54c0cf3bef45b637fe0e4781bd864f9a72c51cafa76302a19aee7b4fc7aa00817dac545e7ed4e533b7058") ioctl$TCSETSW(r4, 0x5403, 0x0) getxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="7379fedd49ff36185e5de0589cc9fb169b199f03d5a66e55070491ee41fd5ec4fc860000000000000000dca85e8f0000000000008e42a559329fa85b744cbf2256a38a77537dbf63016e1e36c3d007b20ac48662dbe236cd8c"], &(0x7f0000000800)=""/159, 0x9f) sendfile(r1, r4, &(0x7f0000000080), 0x9001) 03:25:12 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:12 executing program 2: 03:25:12 executing program 5: 03:25:12 executing program 2: 03:25:12 executing program 5: 03:25:12 executing program 0: [ 990.839533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12152 sclass=netlink_route_socket pig=30910 comm=syz-executor.3 [ 990.864641] protocol 88fb is buggy, dev hsr_slave_0 [ 990.870037] protocol 88fb is buggy, dev hsr_slave_1 03:25:12 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:12 executing program 0: 03:25:12 executing program 4: 03:25:12 executing program 2: 03:25:12 executing program 5: [ 991.184628] protocol 88fb is buggy, dev hsr_slave_0 [ 991.190778] protocol 88fb is buggy, dev hsr_slave_1 [ 991.671266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12152 sclass=netlink_route_socket pig=30927 comm=syz-executor.3 03:25:13 executing program 3: 03:25:13 executing program 2: 03:25:13 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:13 executing program 5: 03:25:13 executing program 0: 03:25:13 executing program 4: 03:25:13 executing program 4: 03:25:13 executing program 2: 03:25:13 executing program 0: 03:25:13 executing program 5: 03:25:13 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:13 executing program 3: 03:25:14 executing program 0: 03:25:14 executing program 4: 03:25:14 executing program 3: 03:25:14 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:14 executing program 5: 03:25:14 executing program 2: 03:25:14 executing program 0: 03:25:14 executing program 4: 03:25:14 executing program 3: 03:25:14 executing program 5: 03:25:14 executing program 2: 03:25:14 executing program 4: 03:25:14 executing program 3: 03:25:14 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:14 executing program 0: 03:25:14 executing program 5: 03:25:14 executing program 4: 03:25:14 executing program 3: 03:25:14 executing program 2: 03:25:14 executing program 5: 03:25:14 executing program 4: 03:25:14 executing program 0: 03:25:14 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:14 executing program 3: 03:25:14 executing program 2: 03:25:14 executing program 5: 03:25:14 executing program 4: 03:25:14 executing program 0: 03:25:14 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:14 executing program 3: 03:25:14 executing program 4: 03:25:14 executing program 5: 03:25:14 executing program 0: 03:25:14 executing program 2: 03:25:14 executing program 4: 03:25:14 executing program 2: 03:25:14 executing program 3: 03:25:14 executing program 5: 03:25:14 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:14 executing program 0: 03:25:14 executing program 4: 03:25:14 executing program 5: 03:25:14 executing program 3: 03:25:14 executing program 4: 03:25:14 executing program 2: 03:25:14 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:14 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)='\t\x00\x00\x00\x00\x00', 0x6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:25:14 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000180)) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RSTAT(r2, &(0x7f0000000480)=ANY=[@ANYBLOB='l'], 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x1420000a77, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) openat$random(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/urandom\x00', 0x100, 0x0) sendfile(r1, r4, 0x0, 0x9001) 03:25:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000400)}, 0x10) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) r2 = dup(r1) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x36, 0x23, 0xd}) epoll_create1(0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000340)={0x5, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}}, 0x88) poll(0x0, 0x0, 0x10080c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) splice(r5, 0x0, r6, 0x0, 0x8ec0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff48, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0xfff}}}, 0x60) io_cancel(0x0, 0x0, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 03:25:14 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r0, 0x2040000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000800)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x68, 0x2}}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4000080) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) pipe(&(0x7f0000000680)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$FUSE_NOTIFY_POLL(r5, 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000380)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x80000000, 0x2, r6}) r7 = syz_open_procfs(r6, &(0x7f0000000ac0)='net/ip6_mr_cac\x00\x00\x00') r8 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="d2218924a99e6430837f5f192e1e925fceabafc841cb9635568f21bf63eea80b840c96334bfc51cc3818a02278976feacab9cda285c9c22474fc9cf7d440bfedc9ccfb32b1f836e5aab53a096da1a36810dfd7d8364d666676fd"]}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000004c0)={'netdevsim0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="680000000008000006000004ff014011067f05418000000040000000ff07016400080000305b800005000000"]}) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101}) linkat(r7, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000300)='./bus\x00', 0x400) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000580)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000009c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="10002cbd7000fcdbdf2515000000440009080800020000000000080001000000000008000200e55d0000080002009104000008000200a800000008000100f7ffffff08000200980e000008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef385"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r9}, 0x18, 0x0) socket(0x2, 0x2, 0x0) write$FUSE_INIT(r4, &(0x7f00000003c0)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x0, 0x0, 0x1a27, 0x0, 0x8, 0x4}}, 0x50) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r10 = gettid() ptrace$setopts(0x4206, r10, 0x0, 0x0) [ 993.516040] ptrace attach of "/root/syz-executor.0"[30995] was attempted by "/root/syz-executor.0"[30998] 03:25:14 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:14 executing program 0: 03:25:15 executing program 4: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='comm\x00') clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) bind$inet(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 993.554131] audit: type=1804 audit(1574133914.960:263): pid=31001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="bus" dev="sda1" ino=17014 res=1 03:25:15 executing program 0: syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x8004) creat(0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:25:15 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0x0, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x70, 0x5, 0x2, 0xf7, 0x4, 0x0, 0x1000, 0x20, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb18, 0xb20b}, 0x34090, 0x1, 0x8001, 0x9, 0x80000001, 0x2, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x9) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x400, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100ffffffff0800000000000000", 0x24) sendto$inet(r1, 0x0, 0x0, 0x8051, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x2) fcntl$notify(r3, 0x402, 0x4) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100ffffffff0800000000000000", 0x24) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000001c0)=0x2, 0x4) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) write(r2, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100ffffffff0800000000000000", 0x24) recvfrom$inet(r2, &(0x7f0000000080)=""/249, 0xf9, 0x40, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) 03:25:15 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0x0, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r2, 0x0) dup3(r5, r0, 0x0) [ 993.824650] protocol 88fb is buggy, dev hsr_slave_0 [ 993.830506] protocol 88fb is buggy, dev hsr_slave_1 [ 993.873603] [ 993.875848] ============================= [ 993.880150] WARNING: suspicious RCU usage [ 993.884572] 4.19.84 #0 Not tainted [ 993.888424] ----------------------------- [ 993.893060] include/linux/radix-tree.h:241 suspicious rcu_dereference_check() usage! [ 993.901667] [ 993.901667] other info that might help us debug this: [ 993.901667] [ 993.910094] [ 993.910094] rcu_scheduler_active = 2, debug_locks = 1 [ 993.917467] 2 locks held by syz-executor.5/31228: [ 993.923668] #0: 000000008135e015 (&sb->s_type->i_mutex_key#12){+.+.}, at: memfd_fcntl+0x235/0x1750 [ 993.933606] #1: 00000000cc527ab0 (&(&(&mapping->i_pages)->xa_lock)->rlock){-.-.}, at: memfd_fcntl+0x4bc/0x1750 [ 993.944872] [ 993.944872] stack backtrace: [ 993.949490] CPU: 0 PID: 31228 Comm: syz-executor.5 Not tainted 4.19.84 #0 [ 993.957026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.966725] Call Trace: [ 993.969532] dump_stack+0x197/0x210 [ 993.973213] lockdep_rcu_suspicious+0x153/0x15d [ 993.977929] memfd_fcntl+0xfdf/0x1750 [ 993.981866] ? __fget+0x340/0x540 [ 993.985436] ? find_held_lock+0x35/0x130 [ 993.989709] ? __fget+0x340/0x540 [ 993.993198] ? memfd_file_seals_ptr+0x160/0x160 [ 993.998047] ? lock_downgrade+0x880/0x880 [ 994.002462] ? kasan_check_read+0x11/0x20 [ 994.006798] do_fcntl+0x200/0x1020 [ 994.010367] ? f_getown+0xc0/0xc0 [ 994.013846] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 994.019346] ? selinux_file_fcntl+0x74/0x140 [ 994.023785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 994.029408] ? security_file_fcntl+0x8d/0xc0 [ 994.033849] __x64_sys_fcntl+0x16d/0x1e0 [ 994.038034] do_syscall_64+0xfd/0x620 [ 994.041868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.047237] RIP: 0033:0x45a639 [ 994.050449] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:25:15 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0x0, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) [ 994.070418] RSP: 002b:00007f25e6855c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 994.078325] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639 [ 994.085939] RDX: 0000000000000008 RSI: 0000000000000409 RDI: 0000000000000005 [ 994.093571] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 994.101289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25e68566d4 [ 994.108589] R13: 00000000004c1068 R14: 00000000004d3c60 R15: 00000000ffffffff 03:25:15 executing program 3: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000200)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{}]}) 03:25:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) r2 = syz_open_dev$loop(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) fallocate(0xffffffffffffffff, 0x11, 0x0, 0x0) dup2(r2, r1) sendfile(r0, r1, 0x0, 0x180003) 03:25:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@ipx, 0x3f7, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) dup(r0) clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4034ccdbf2bb01402120148d0f34"], 0xe}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 03:25:15 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/15, 0xf}], 0x1}}], 0x2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sched\x00') sendto$inet(r0, &(0x7f00000012c0)='2', 0x1, 0x0, 0x0, 0x0) 03:25:15 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x1, 0xc3, &(0x7f0000000240)=""/195}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000006c0)=r0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0xff48, 0x0}}], 0x400000000000284, 0x2000850) [ 994.489953] audit: type=1800 audit(1574133915.900:264): pid=31016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16987 res=0 03:25:16 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000400)='/sx/user\x00', 0x2, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000010000503000000000000000000110000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100736974000c00020008000f0035b80000"], 0x38}}, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x29) fsetxattr$security_smack_entry(r4, &(0x7f0000000180)='security.SMACK64IPOUT\x00', 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x46800) syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50}, 0x50) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='\xce\x00\x00\x00\x00#\x00', 0x0, 0x0) write$FUSE_BMAP(r6, &(0x7f00000001c0)={0x18, 0x0, 0x1}, 0x18) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r8, &(0x7f0000000480), 0xffffffffffffff39, 0x0, 0x0, 0x150) listen(r8, 0x4) 03:25:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x2000000000040}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000003040), 0x40000000000046b, 0x0) 03:25:16 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:16 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind(r0, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000018c0), 0x2, 0x140, 0x0) 03:25:16 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8}) write$UHID_INPUT(r2, &(0x7f0000000340)={0x8, "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", 0x1000}, 0x1006) 03:25:16 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:16 executing program 0: keyctl$join(0x1, &(0x7f0000000000)={'.\xfe\x00', 0x3}) 03:25:16 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000770000/0x1000)=nil, 0x1000, 0x3) 03:25:16 executing program 5: ioperm(0x8, 0x0, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xffffffaa}], 0x3}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$peek(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0cda366f0001aeac44b8055fadbfac2a7dfe5d4965c1dcbe2544be6077bf0925f49126b4bd2dcbf0c45c7737872b56070000000000000036bc9e892451c93db0ed05311b9e56d77397f8640cef47628488498f2c8c6624e7369e5b17f60fe94e963686a647bbcdc296ee0bbcaa5dcf8ba43ed492f3f09724f47cc81e2d510d0adc925db6a74f33ddb4513e", @ANYBLOB="8a7c08b1bd543a07372504167b455ddfd0640764ef04ff46cf47e8137f38a3729f9fbaa545c0c343d9b3bec2feff1f63caf2a574ca1619d1bf75eab0661b"], 0x0, 0xcd, 0x0, 0x8000}, 0x20) tkill(r0, 0x3b) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:25:16 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f00000000c0)) 03:25:16 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a7a000/0x3000)=nil, 0x3000, 0x3) 03:25:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) 03:25:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="00000000000000000000000000000001"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x90) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:25:16 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:16 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_load(r0, &(0x7f0000000040)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f030002000000"}, 0xff) 03:25:16 executing program 5: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f00000001c0), 0x1c) fstat(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x2797ef3f}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r4, &(0x7f0000000700), 0x31f, 0x10400003) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0xbdcc}, 0xf) syz_genetlink_get_family_id$ipvs(0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmsg$nl_netfilter(r4, &(0x7f00000044c0)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004480)={&(0x7f0000003180)={0x12d8, 0x5, 0xb, 0x4, 0x70bd2c, 0x25dfdbff, {0xc, 0x0, 0x9}, [@nested={0x1174, 0x7a, [@generic="efd581d834658aca46caa1b677bbb43e7d4c3cfdf3dfce8349781fff5edcd2b0a79110b4c33615decdc59bceaefd53e0b24bb225f337ab1a71ef77fe50d6aea3e6198cc63033d826b228ff35cea163cdea93a3f23ea4e7dc0eb96b37652fe841cb9d0d3f291c34c51004a4ae06655279701abe936515632121674b66899952e5f4e2a0dba75b3ff2808837cdbf255ec19cbc8b808956840ef345652647d2450ad5318578e326566098a6cc", @generic="913886be44443490ec8e159aae9f282cd8c42d667a1a019b29c333b6a651b214600260d3f5ffd445b6f43a42b72eb6caf67f869d2d844d02a066e397c1660413931a74d540", @generic="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", @generic="8ef8e8f482aad089d7b9fa42b48121f2b94ac7b88014384caeec1a8cda81683bf88f8b0083d1fbe004ab66223fcd91523d6621702737a5e98f1a8b4b66a4ff3c0da34bb2272d128fd72e8e97d4306a06efc06613fd82dae07243be20d3cb12ae0e62ddc004e1e9eaedc19b370d2b115ad68e6ea7b300d8c401ee51fde90af65a"]}, @typed={0x14, 0x54, @ipv6=@loopback}, @typed={0x8, 0x8b, @uid=r3}, @typed={0x8, 0x80, @u32=0x6}, @nested={0x12c, 0x70, [@typed={0x8, 0x24, @fd=r0}, @typed={0x4, 0x76}, @generic="40cff70f80cbb6bd7d85fa1efc8f209ef693d26ad2af2df58a7b46f3db6cb5eb576391f74b90c55e9091bfacee77f4bf38f64dc5c262942c8f8878ab4399ec7995ee0fcf0b60ae89e8a51a9b7349674f2a7791c4b94756cd9329c35b63c34f50fb4788ddb8ddb83506e813a17a115f1564a33e5b7455a5a5595b0019ed8b240355d30e0f5f843eb1a7068ad244eeeea1150c6dec07ef5f1884743b3872a81889d51e5e03b0729770672111fd56259e6db9ad02fd3d4f0ff81cbd39adb6e68955b0c24060e9415dc62567", @typed={0x8, 0x3f, @u32=0xfffffffe}, @generic="658e410dcc8cd55f0bd8f961ce7d2b507e9dc64de226845d796400efe2f465a9e49898844164bcf26f693d7f0205b86c386b9d87413ff14bb2b5d9a05181838b45fcf2c9cd2ee068f3"]}]}, 0x12d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000004540)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000004640)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004600)={&(0x7f0000004580)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf25010000000000000009410000004c00180000000373797a3000"/98], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x6880) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x100, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000500)=0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000003080)=[{{&(0x7f0000000200)=@l2={0x1f, 0x7ff, {0x6, 0x8, 0x4, 0x0, 0x20, 0x1}, 0x6, 0x2}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="a90a6e4f3b03d937641846eb3646433c31fcb0658ac4691611d251822434ac206cd55a154f4d81c7be0d2cefdb8d88e5e20865dcfe806554df7dd2d7f043", 0x3e}, {&(0x7f0000000600)="dd1b928130dd998a89fa523a25c897db72ece865600feeb31bd2b02fc96d405797eff308a28e44e5a6c9dd69780a49cd542e0364149131358d8077223fb4beb1bcaac5439d317d5f17d8a7118bf40f88d69761852e3a459dd6a42af157b798f26f70f62aa9533832db36d0906703d353ea2d4469e83af5315172172e05b824d5a9180ca36936d804c90f5600d6c89ec70917a9fbce6652b06bc040a15483803d052d4b7bb96e8de9fdcb8b136abfff6ffb64531741be7464067f4c95d349fcfe1b18", 0xc2}, {&(0x7f0000000700)="94312b6038e6daea1e8d21f52efba04fedf0fab1e6b4983bb36a745d48132640586f222a6b92de4e560e8de5c5f9f537a6023c26bbadb7ec1abd8fb62375599299fc36e5af9d2beff55d2b1a4d9ae9c150ad55f3c67b9029ddf90e0606cab3636c46c38287b0614cec9ce5a38391fd573927e14a1224afb78b280fb625c608a5b407d7af2d862b8755e574affca094fd437985edcf89f87d05b6f9cdb868119f82755a6e3f9bff0767bf86beea2417f3626b98fb0ec36a927c757d50cf3a95595aaf6f48e49c58bfe8f7b8585397c737f2c3b1e78f0e55b44906e442815e5985c144113171", 0xe5}, {&(0x7f00000002c0)="57aea0a0b42b7762e7f9461e26d00edbbc2942fef26e3c8506ee6ebc8a240289f5164226a3d963024e68f5bec32506a76195173c4eeef93cc46e0fb8b4cf0fb8dd0e65f465c741886838a50ccc2d5a7d3ce3785e9a86f4cf415446a473eab058c8ed66d40122e4944b6705e855623af82d9e689a69889ec3f8b5c59bdffcc2d4650ef5bf6c918f1c797e181504ace50e6d58713fb8d3de7f1ff8340e39edb2389d6d31749223476dfa9384aa871dc9904f48c38f427dd17196cd037f3f09aec0", 0xc0}, {&(0x7f00000003c0)="e6b51dc9218d35902d1f6f656c47be5775b1f3c7a638481161d9773b74db49caab53344f268a903d", 0x28}, {&(0x7f0000000400)="dc0c7e9ab363", 0x6}, {&(0x7f0000000440)="f9b451db898ea19949c3d1dd7ca4078d93cb5f1bb65c625d9758491d1096ded5ca9a19d47defb73711af101370435c56777b3840e1", 0x35}, {&(0x7f00000046c0)="baaecabf5a33464299da53320515c3fccf46289e2ee54abc5f8f74dacff9552392391b139240e081b0181fcf42cbcfa14c5e3e2e60e45bcf186f3b0da604e97e6a6a701abb10c0d83f21c095467b2b182632b05d63111bee3fcf9480dea30c0fdde00810827faf38cfe81f9587901249b983d3509799704943520def597333d99d433d562aca34bca20f5f4fda41af93c6a48f48afd4a133cffdb59ec3d4071aace1341552dbc69e8dadea4b80", 0xad}], 0x8}}, {{&(0x7f0000000800)=@caif=@dgm={0x25, 0xf84, 0x7}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000880)="c5cafef2a6084fcb27eb0ea5c99c44101474873bbf207bc0419f29064b69710b7007b878a826dceb04220db2021e05ce69ebf013910bb777ccc3d9d81da37a13e50bce98c8ec87a94eae2986232ee5482d8a1715898b7356873d", 0x5a}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="dc0c5c4abce7cebe0cb70b4ce787859fc97fab40183c4260e253f9e0b5c95fa9adb3825d903203f7cfad468ebbd809ef33cee7dbcf3e7027cde28fee69bf5d9ba873f742d95eba3137164dd15ea607f0b21bed3f415cd115c3347724760ebdf474b1186b85824069cf535548b820c6baa4f02434c756caf09338d83bf77acfcec59d9a9b75afb53a93e5935edb25e39d85e85a5d0e5c450ed9590ba37f6b12c9b8497376b04d3222964305b8a01bca11e7ad8781ccd3779275f47e0276cc75551d230a750c9cf3173eb91c4de17d3e14660ad7446c84271adef2d487f2e26654b1f65065f3e6", 0xe6}, {&(0x7f0000001a00)="1cd949b25c79d3f4947e5298e92aabcfb22d070ccc26929c", 0x18}, {&(0x7f0000001a40)="1c4f435b102d86016a04171ed1073b575babc81ba1353540b1af3d22073d0bb05cf38cc71e54e99229bf463e26abd4e6eae9c5a5c25e901ec719725a662d4681951ed348035856f8beffeba97a7d1908e287c02c8e54f19dc7e25be7596ba1e02bcf6e6c4d7304fd32c24960fbd1d9f877f8904169557dcb4bc6473095fe76de63188eafa8a6c206c3efcd7a08824a3969c9c5ca", 0x94}, {&(0x7f0000001b00)='&', 0x1}], 0x6}}, {{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3, {0xa, 0x4e24, 0x105, @local, 0x2}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c40)="39b54c39c87bbb958fc7bea5c3e64cf5a79d881bcd440bba48f14dbc0227f6ac81b324a9ece73d1929d85e58b4270916c4ebcc4f1bf7b0344452c70159f0f63565003615d75c74951a62a0b1f36c26a2588fad4070716f0f03bfdf015a272f9e069ac0ed8801582ca0638053e087ad58fde63cc13653943cc8bd25bc49959fc2972691231a0496e6c8b5d7c8d5f0b046cde49aa1d9244d82246705acb91c6d3050bf4754ba", 0xa5}, {&(0x7f0000001d00)="f7147e2f692a7aef60eeafe439a355b67aff7cd9451dd4405b9137942cc5218b76ee00c5239824fbfce15faa60cd8614e092498a0d314f4d83d667f006f60f42d47925d177dbfbf315e45e198bfc0d101809e3759b179ac1d4a0d19ed81a960635d32c329fc29c2e391f48", 0x6b}, {&(0x7f0000001d80)="5f581a78221bb3202b5bce00a82c9b3957d4739165c36c50591842c4b8dc4907b24f01d660e025889e9b8bb969cfc5e86d0552685d3d0ef5e40d741f1c84f7549a89fb243ae51e779440814a64353252d8c4c1fa0f44f540dd88b622740a9fe47b2c2134e1d2eccab15928af1444ce037a26d96b29bad999d8fbd2c4ad938d1f1cb4b8cff02e2381b8cce80319da5288626f8a6273b608ada9354ea4a8da7e790dd092a2e9651953f020b2be7fcdab5216af1ca845fe6f64f01d43b4e730522cb1ca05f30708a7ab59508a51d3fc7142286d6d4c3329b6dd9fbb9bf7db6522c840703ea6521e496f6c3d5d6b62", 0xed}], 0x3, &(0x7f0000001ec0)=[{0x60, 0x10b, 0x7, "697b63d862c8e8100eb71d659b6987674011216f29381bd6b46545f799ebe1ce4b9990907fe9991ee1d983be7ff795ea22139894239f7bcb0e42aa21b0f6c90694ee990995fd57a398"}, {0x1010, 0x0, 0x6, "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"}, {0x38, 0x11, 0x3, "0c523a9babec0cc970b165a5b14b357fc171e48765cd02000000e3db5dc22ba5cdd5edfde50fae4a"}, {0x18, 0x1, 0x1, "fcae531b"}, {0x100, 0x6, 0x6, "27aaea26c1804c4e036736e655a7dc5cef1ef8c1e05fc294fba2b634501880ebce5e13eceae92708fdaf0c06d37cd7837413fc563a47cd23cc210856abf2ccb17c15d022eac5dfcacf33abbbd5bc2e26e5084f0c0d671930fbbecb4cb442c3a1c1cf74edb4f2417a287197968a050876f4311fd7688cfbfbbe1348d10f8bcbaa536dda8973de76af552323d90418ec9eabc1e62a6a1854052bb3d041eef3dcf4992f592439610560931541e8521c88c0635f607c588116dcf20be99295f973c90a1c008d284efa9d71caa5da47071b741e2b287e00f2429566e45bff91d15ee3e3c6d97f18ebdf5a4f565dd86eee24"}], 0x11c0}}], 0x3, 0x0) r8 = accept(r5, 0x0, &(0x7f0000000080)) ioctl$sock_ifreq(r8, 0x8925, &(0x7f00000000c0)={'caif0\x00', @ifru_flags=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000004680)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000380)={'teql0\x00', {0x2, 0x4e20, @rand_addr=0xfff}}) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000100)={0x8, {{0xa, 0x4e20, 0x5, @loopback, 0x40}}}, 0x88) getgid() 03:25:16 executing program 0: r0 = gettid() clone(0x802103001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40000000000006) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x6, 0x0, 0x48}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 995.082953] SELinux: failed to load policy [ 995.102620] ptrace attach of "/root/syz-executor.4"[31801] was attempted by "/root/syz-executor.4"[31802] 03:25:16 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:16 executing program 2: rt_sigpending(&(0x7f00000002c0), 0x8) [ 995.193199] ptrace attach of "/root/syz-executor.0"[31893] was attempted by "/root/syz-executor.0"[31894] 03:25:16 executing program 3: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = gettid() r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) tkill(r1, 0x9) 03:25:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x0, 0x0, 0x100000000000000}) fcntl$lock(r0, 0x26, &(0x7f0000000040)) fcntl$lock(r0, 0x26, &(0x7f0000000080)) 03:25:16 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet(0x10, 0x3, 0x0) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0x0, 0x4, {{0x379a5467}}}, 0x28) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x0, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=0x81}}, 0x10) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000580)="4c0000001200ff09fffefd956fa283b724a60080000000000000006835400b908cea1d001fc41180b598bc593ab68d1148a730de33a40400c62b2ca654a6613b6aabe88f799a0d4a4c712b5137", 0x4d}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x397, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f00000001c0)={0x77359400}) syz_open_procfs(0x0, 0x0) setxattr$security_ima(0x0, &(0x7f0000000440)='security.ima\x00', &(0x7f0000000600)=ANY=[@ANYBLOB], 0x1, 0x2) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x1) ftruncate(0xffffffffffffffff, 0x108200) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockname(r5, 0x0, &(0x7f0000000100)) 03:25:16 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000100)=@srh, 0x0) 03:25:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x5, 0x0, &(0x7f00000000c0)) 03:25:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x12, @binary="bc"}]}, 0x1c}, 0x1, 0xf000}, 0x0) 03:25:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000008c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05634f840440000055a8fad5a7eefb03724c99d376edad0d6c2e39a4c3d3fb6176141319268fe3d6ca6f44cecbe3ab884bd6b6da7890fac32933e3c3ef2a92ce569df7a5c55c4873cf7102ef4f7c6bbfcceb4eab84d23323b0b807dff93c00d04117924cc262ad3e5971954d2eaa1aec78c966d09df4d13642f2903f626891b8fca577c7"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000001a40), &(0x7f0000000340)=0x40) r4 = socket(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000016c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0x35fc5f25) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r5}) r6 = socket(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000016c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0x35fc5f25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r7}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000540)={&(0x7f0000000300), 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x158, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0xbc, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xc2}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, [{0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0xf812, 0x1, 0x9}, {0x4, 0x81, 0x40, 0x48}, {0x8000, 0x3f, 0x2}, {0x8cb, 0x20, 0x85}, {0x4, 0xa3, 0x2, 0x8}, {0x1f, 0x7f, 0x6, 0x100}, {0xd82d, 0x0, 0x3, 0x28}, {0x8001, 0x6, 0x20, 0x7}]}}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x808}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getsockopt$inet_mreqn(r12, 0x0, 0x24, &(0x7f0000000580)={@rand_addr, @local, 0x0}, &(0x7f0000000700)=0xc) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x48, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x38, 0x2, [@tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @tunl_policy], @IFLA_IPTUN_PROTO={0x8}, @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x68}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000100005070000000000000000000000002ca2b5860e02e9c0a75786212dc3510f0f9ac44d7ee318b2d23cde56e37a449910c59db5a77cab608278bfde5ffb962d2bea669ac8582684317034c4df095a5077a7babef38e103e8fad919f5a10df436c72972565579fb31a3a4b3128960a225f0b813959b5344e0de2270745428075a7", @ANYRES32=r17, @ANYBLOB="00001000000000001800120008000100767469000c00020008000100", @ANYRES32=r17], 0x38}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES32=r17, @ANYBLOB="0000000000000000480012000c000100697036746e6c00003800020014000200fe8000000000000000000180000000000800080000000000080007000100000008000900290000000800090029000000"], 0x3}}, 0x20000000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r18, 0x407, 0x0) write(r18, &(0x7f0000000340), 0x41395527) getsockopt$inet_IP_XFRM_POLICY(r18, 0x0, 0x11, &(0x7f0000000100)={{{@in=@dev, @in6=@ipv4}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r19, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r19, 0x0, 0x10, &(0x7f0000000240)={{{@in=@empty, @in=@remote}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') r22 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r22, 0x0, 0x480, &(0x7f0000001a40), &(0x7f0000000340)=0x40) r23 = socket(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r23, 0x29, 0x22, &(0x7f00000016c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0x35fc5f25) ioctl$sock_SIOCGIFINDEX(r22, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r24}) r25 = socket(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r25, 0x29, 0x22, &(0x7f00000016c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0x35fc5f25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r26}) sendmsg$TEAM_CMD_NOOP(r20, &(0x7f0000000540)={&(0x7f0000000300), 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x158, r21, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0xbc, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r24}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xc2}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r26}, {0x78, 0x2, [{0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0xf812, 0x1, 0x9}, {0x4, 0x81, 0x40, 0x48}, {0x8000, 0x3f}, {0x8cb, 0x20, 0x85}, {0x4, 0xa3, 0x2, 0x8}, {0x1f, 0x7f, 0x6, 0x100}, {0xd82d, 0x0, 0x3, 0x28}, {0x8001, 0x6, 0x20, 0x7}]}}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x808}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', r26}) r27 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r28 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r28, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r28, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r27, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r29}, [@IFLA_LINKINFO={0x48, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x38, 0x2, [@tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x1}, @tunl_policy], @IFLA_IPTUN_PROTO={0x8}, @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x68}}, 0x0) 03:25:16 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:16 executing program 3: mlockall(0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0xb47, &(0x7f0000000000)) 03:25:16 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chroot(&(0x7f0000000000)='./file0/../file0\x00') r2 = memfd_create(&(0x7f0000000380)='\xd3\xde\xbc\"\x10\xe2', 0x0) pwrite64(r2, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f00000001c0)=@filename='./file0/../file0\x00', &(0x7f0000000300)='.', 0x0, 0x1110, 0x0) [ 995.552288] netlink: 'syz-executor.4': attribute type 18 has an invalid length. 03:25:17 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xffffffaa}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0cda366f0001aeac44b8055fadbfac2a7dfe5d4965c1", @ANYBLOB="8a7cfcb0bd543a07372504167b455ddfd0640764ef04ff46cf47e8"], 0x0, 0x31}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 995.601909] binder: 32191:32209 unknown command -2075172091 [ 995.622977] binder: 32191:32209 ioctl c0306201 20000bc0 returned -22 03:25:17 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:17 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0xe4ccd5d8fe91a046) [ 995.672085] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 03:25:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000b67000), &(0x7f0000000140)=0x4) 03:25:17 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) 03:25:17 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) [ 995.816319] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 995.834075] netlink: 'syz-executor.0': attribute type 9 has an invalid length. 03:25:17 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x8, 0x80000, 0xfd) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000600)=0x209, 0xfffffffffffffdae) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r3, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x402) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) mlockall(0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') r5 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000040)) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x7) getsockopt$SO_COOKIE(r7, 0x1, 0x39, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$FUSE_POLL(r4, &(0x7f0000000540)={0xffffffffffffffc0, 0x0, 0x1}, 0x18) r8 = socket(0x10, 0x80002, 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0x0, 0x0, @thr={&(0x7f0000000640)="601d1e17eb296e55f0ec6d9277c5c6654ed7a8ee981313fec5693e3690775664bf63427aca99c38daa1d9dc465d3d4898030a2fe009556a5dd1685a2121e22a84d398c76b6d986168275a78b26ba017393fbb24dcd8a1724c197a528ede6774d33c9a95271aa4c1d35f1436b877397508b1ed8ae099d9d2e59f233fda89e2c45d54607dd66b7858a8796ca6cb47ed35a214fe5658b8920433a1403a74c4b3520883786632d15fe06e841dec5283f8a1a26a0", &(0x7f0000000300)="5dd1fe141a30375709aa184e1f1d"}}, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, 0xffffffffffffffff) bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8001002}, 0xc) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0xc84020}, 0xffffffffffffff8b) write(r8, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) times(0x0) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000b4bffc)=0x7, 0x4) sendto(r8, &(0x7f0000000340), 0xfc, 0x800, 0x0, 0xffffff3b) recvmmsg(r8, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x2, 0x0) sendfile(r4, r7, &(0x7f0000000140), 0x8fff) [ 996.023979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32551 comm=syz-executor.3 03:25:17 executing program 0: unshare(0x400) r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f0000000300)) 03:25:17 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xffffffaa}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYPTR64, @ANYBLOB="0cda366f0001aeac44b8055fadbfac2a7dfe5d4965"], 0x0, 0x1d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x15) 03:25:17 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:17 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) read(r0, &(0x7f0000001300)=""/11, 0x8) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) dup3(r2, r1, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) gettid() ptrace(0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 03:25:17 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x3, 0xffffffffffffffff}) 03:25:17 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:17 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000080)='./bus\x00', 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="0400cd80"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c65b6ae2e133d7d0000e2fd00000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1], 0x2c}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x0, 0x120, 0xffffffffffffffae}, 0x20) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:25:17 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 03:25:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'b\x14\x90\x10_slA\x97\xdc\x8f\x00\x00\x00\x00 ', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xd}]}, 0x30}}, 0x0) 03:25:18 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x200000000000001c, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x11, 0x1a001000000}, [@ldst]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x6ba, &(0x7f000000cf3d)=""/195}, 0x48) 03:25:18 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="02071604020000000e0101000001002025f10f022f5c6b796fdec5eba45d92d5f0b248000b17a103004a076462284d8bf691568bc7fd070165bd1bd624f7030000000060cddccd3758426c871390b0a68fbd3dfc6679b089f6d4abe572ce762d3c9eaf4ded5fef07d8ad4946cf00"/125], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000002b00)=[{{&(0x7f0000000240)=@isdn={0x22, 0x40, 0x7, 0x7, 0x5}, 0x0, &(0x7f0000002a00)=[{&(0x7f00000002c0)="2a5f731b2c8c9e518dc430480d40d549da"}, {&(0x7f0000002600)="16e605d7af93c05ec56225a176126933704c1bc553f3bd43a73a158576405874c4b6f87eb05ca1faa50673a3e28efcf686ff9d1618c4"}, {&(0x7f0000002640)="f256900c6eb82cfbab493357452814eb5f9c2d4b9f175ba1911ded252c60b0181e5a19540de81debb8df37bbfa799ae0986b917d5d658e27712b6096820ca04a7a03a82fefd763625e6e18f74e03479d7cc48fddea3aa66682ee00c54a3dfbfb24064606dcb32dc2cce00a645fe930555d93dccf368841ce6c8571abf8743c42db637b69ef5c17a37ac3da6af19c776482f98318ae818f709cb295f1793b4c91f1bf5a5037cfd12cbecba9f5cbb4b75bcc8b7976f6"}, {&(0x7f0000002700)="70b7c0123501ef131dfa83bb04466d9560555bddd4d2584f9b0e4c48add8368f0eadc19dfa116f10e46ed30197f6e7a1617ce41dbe6b20bd34e2e8674e14ac4de8739174bc8088a255cd095811bcb559f9511680dbc1d942481a3f26eb622a1807a4baa3b978115840199857727759872f0b4a401ca4eef65c1b154dbb400352afcaf4fd237ce3f07e16799da55a535623439fc5457c3cd5d3cb603c2bd5"}, {&(0x7f00000027c0)="31c87ee1b90aa3eb2a209d54a498956a1f3476b3c27e2030716e1929d246991a37faceed30bade0df2f07d1c25e721cdaa0890d8315ac890180d528914a3128801c430c21a92052058b29685c97728803cda391298e46cd9fe516259f0e0cb062012e77bb830b285e4729d8730dff66a97e8a3c20bc9a812fa56d9510c97055b9d40f23952a4cd9a951e3458eb29037fbe07f000a1d74ea1ebdd2048ae51e05a473252c420f2f6b30cf5aa032bf576adc9e53b08ae22180267f768cc2ce942f84adfdbb123ce1a1791f58a882279111edf544e63183d747ee18fabc1a6e7a6a2f55f3efe5f4c290be29155a52f04b94b2d7a519e1d21e9"}, {&(0x7f00000028c0)="089a9be053f4395c630e62312e2c63d8cef458d1d81e2a880da6f6a569401875bfb5b0462ab3584461d764db9d7b4ac67b0146bdfe7851f2f548871153499f6f4de3ab4c584d2d418b9d797bd5cc3948fc29ec760180a1f813340ab80ec9b0369cd02b30f916810124760d9409731f052d1587b2adac118572d1ab0e8d4662b3a826c8fe4c7cdc42e117ff4da50b8e63453568af12c93608318fb1b727c71dadcdb6e85cc6b615b0802b4d32c80dfc3b15f01adb10ab033cfe077b7cbf812c82eb41adc9652e6edb1b3df8c140128622fcae39c249975328b3ae09736a2863daa363beb287bedf7c4e60d32921e252e327a1a84849238712"}, {&(0x7f00000029c0)="1c810cf44ae069527ded2cdca137d127bf76b76c7a0ac550f5d9a50bba3725"}], 0x0, &(0x7f0000002a80)=[{0x0, 0x116, 0x80000000, "85b84ee583d86fe8360f387636fd996105c65a38b9909781bb05986cc86d4f15712b778f69c33d14a73602709cecf28707d94f4ea12c7574d256c26e32481fdacd3f"}]}}], 0x4000000000001f7, 0x4) r1 = getuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'sdx', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000340)='keyring\x00', 0x0, 0x0, 0x0, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) setreuid(0xffffffffffffffff, r4) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sysinfo(&(0x7f0000000600)=""/4096) keyctl$chown(0x4, r3, r4, r6) socket$packet(0x11, 0x3, 0x300) r7 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = geteuid() write$P9_RGETATTR(r10, &(0x7f0000002b40)={0xa0, 0x19, 0x2, {0x806, {0x4b, 0x2}, 0x80, r11, r5, 0x1, 0x400, 0x9, 0x7, 0x4, 0x101, 0x5, 0x1f, 0x2, 0x7fff, 0x3f8e, 0x4, 0x80000000, 0x8, 0xffffffffffffff00}}, 0xa0) sendmmsg(r7, &(0x7f0000000180), 0x43e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$TIOCNXCL(r14, 0x540d) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xffffffffffffffe9) setregid(r15, 0xffffffffffffffff) chown(&(0x7f0000000040)='./file0\x00', r4, r15) setreuid(r1, r2) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r17 = dup(r16) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) [ 996.591389] ptrace attach of "/root/syz-executor.4"[32673] was attempted by "/root/syz-executor.4"[32675] [ 996.655186] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 996.697451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 996.704635] protocol 88fb is buggy, dev hsr_slave_0 [ 996.709782] protocol 88fb is buggy, dev hsr_slave_1 [ 996.745157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 996.864638] protocol 88fb is buggy, dev hsr_slave_0 [ 996.870210] protocol 88fb is buggy, dev hsr_slave_1 [ 997.053349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=421 comm=syz-executor.3 [ 997.104633] protocol 88fb is buggy, dev hsr_slave_0 [ 997.109882] protocol 88fb is buggy, dev hsr_slave_1 [ 997.424632] protocol 88fb is buggy, dev hsr_slave_0 [ 997.429860] protocol 88fb is buggy, dev hsr_slave_1 [ 997.984641] protocol 88fb is buggy, dev hsr_slave_0 [ 997.989784] protocol 88fb is buggy, dev hsr_slave_1 03:25:20 executing program 3: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$inet(r3, &(0x7f0000000180), 0x10) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000140)=[@mss, @sack_perm, @mss, @window, @sack_perm], 0x20000000000001f4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x4, 0x7ffffffc}, 0x14) shutdown(r3, 0x2) 03:25:20 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:20 executing program 0: r0 = socket(0x1000000000000010, 0x2, 0x0) write(r0, &(0x7f0000000380)="24000000580001000000f4f9002304000a04f511080001000201009f0800028001000000", 0x24) 03:25:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x5, &(0x7f0000000040)) 03:25:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x40003, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x38}}, 0x0) 03:25:20 executing program 4: rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='.\x00') 03:25:20 executing program 0: r0 = socket(0x10, 0x20000000000003, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, 0x42, 0x201, 0x0, 0x0, {0xa}}, 0x2aa}}, 0x0) 03:25:20 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYBLOB], 0x14}], 0x49249249249281d, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x3df, 0x86, 0x0) 03:25:20 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) 03:25:20 executing program 2: r0 = syz_open_procfs(0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x0, 0xfffffffffffffffd) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[]}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba0009008d2633568e00000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x3) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) ftruncate(r5, 0x2007fff) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000b80)=""/270, 0xb37af43) sendfile(r1, r5, &(0x7f0000d83ff8), 0x8000fffffffe) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 03:25:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000140)) 03:25:20 executing program 5: syz_open_dev$mice(0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="13cd0f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000240)}], 0x3}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x157}, 0x20) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) 03:25:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xfffffe2f) unlink(&(0x7f0000000200)='./bus\x00') clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() link(&(0x7f0000000180)='./bus\x00', &(0x7f0000000280)='./file0\x00') ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x22) ftruncate(r1, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x42, 0x0) 03:25:20 executing program 1: r0 = gettid() accept(0xffffffffffffffff, &(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0xfffffffffffffe73) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) sched_rr_get_interval(r0, &(0x7f0000001500)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000001, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff01, 0x9002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1000}, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x7f) fchdir(r1) sched_rr_get_interval(r0, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000017c0)) r3 = memfd_create(&(0x7f00000012c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) mkdir(&(0x7f0000001540)='./file0\x00', 0xfffffeffffffffbd) r4 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x3c9, 0x800) recvfrom$inet(r4, &(0x7f0000001180)=""/53, 0xffffff57, 0x40011040, &(0x7f0000001300)={0x2, 0x4e62, @remote}, 0xfffffffffffffd93) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x5, 0x406) connect$packet(r3, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) fcntl$lock(r1, 0x26, &(0x7f0000001580)={0x1, 0x0, 0x300000000, 0x3, r0}) clock_adjtime(0x4, &(0x7f0000001680)={0x8, 0x3f, 0x6, 0x4, 0x1, 0x200000000000001, 0x40400000008, 0xfffffffffffffffe, 0x2, 0x40, 0xfffffffffffffff7, 0x7, 0x5, 0xacb, 0x1, 0x5, 0x1, 0x7, 0xfff, 0x0, 0x101, 0x2, 0xfd6, 0x1f, 0x404, 0x7ff}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x800, 0x0, 0x0, 0x401}) ioctl$RTC_VL_CLR(r4, 0x7014) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents64(r5, &(0x7f0000000180)=""/4095, 0x11f8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x0) ftruncate(r3, 0x401) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) [ 998.941457] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 998.955014] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:25:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_ADDRESS={0xc, 0x1, @dev}]}, 0x34}}, 0x0) 03:25:20 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80c00) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x