Warning: Permanently added '10.128.10.42' (ECDSA) to the list of known hosts. 2019/10/18 02:08:16 fuzzer started syzkaller login: [ 47.212227] kauditd_printk_skb: 2 callbacks suppressed [ 47.212241] audit: type=1400 audit(1571364496.204:36): avc: denied { map } for pid=7566 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/10/18 02:08:18 dialing manager at 10.128.0.105:38533 2019/10/18 02:08:18 syscalls: 2516 2019/10/18 02:08:18 code coverage: enabled 2019/10/18 02:08:18 comparison tracing: enabled 2019/10/18 02:08:18 extra coverage: extra coverage is not supported by the kernel 2019/10/18 02:08:18 setuid sandbox: enabled 2019/10/18 02:08:18 namespace sandbox: enabled 2019/10/18 02:08:18 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/18 02:08:18 fault injection: enabled 2019/10/18 02:08:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/18 02:08:18 net packet injection: enabled 2019/10/18 02:08:18 net device setup: enabled 2019/10/18 02:08:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 02:09:33 executing program 0: clock_getres(0x0, &(0x7f0000000000)) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3b41, 0x8600) accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x80000) r1 = gettid() move_pages(r1, 0x2, &(0x7f0000000100)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000140)=[0x1], &(0x7f0000000180)=[0x0], 0x4) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1e, 0x20}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x20000084) fchmodat(r2, &(0x7f0000000380)='./file0\x00', 0x8) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x4, 0x1}, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0xe, 0x8000, 0xc4}, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x1}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r1, r4, 0x0, 0x2, &(0x7f0000000400)='{\x00', r5}, 0x30) socket$key(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000006c0)={'bridge_slave_0\x00', @remote}) munlockall() r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700)='/dev/hwrng\x00', 0x240001, 0x0) sendto$rxrpc(r6, &(0x7f0000000740)="27a92a1d8f62ad9c96227cc564e36f7f139871760822dafecbf856a3b0147b2ee06a952316bbb820306516d4723ddc7347b9aacf48887cc28fb1d62b966bc0b4955c0708530b", 0x46, 0x0, &(0x7f00000007c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000800)='/dev/null\x00', 0x400000, 0x0) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000900)={0x7, 0x5, 0x9f, &(0x7f0000000840)="dab9bdb50c23953f132ff33c79a5d4c71ece47da82203c65962098c7452db8056d6c789909cc79aacccb95ecec3efe03bed349c224e46e2e09bd741a2546d036dd26de21e3e6d5132610076211db44503504410a859012c9b7561b266804e3e1b5b18f41a25ab4042365791b2e1a6bb52b57d30885b7476cc7702b033d3bb972653cb384a002cc502b471c745a9d5485b3f3747bc472930181624d3b7fec3d"}) r8 = syz_open_dev$swradio(&(0x7f0000000940)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r8, 0x80845663, &(0x7f0000000980)={0x0, @reserved}) syz_open_dev$amidi(&(0x7f0000000a40)='/dev/amidi#\x00', 0x0, 0x2000) msgget(0x0, 0x4) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/null\x00', 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000ac0)=0x20, 0x4) modify_ldt$write2(0x11, &(0x7f0000000b00)={0xf72e, 0x20000800, 0x2000, 0x1, 0x2}, 0x10) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) r10 = syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r10, 0x80045700, &(0x7f0000000bc0)) [ 124.754768] audit: type=1400 audit(1571364573.744:37): avc: denied { map } for pid=7583 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14997 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 124.842046] IPVS: ftp: loaded support on port[0] = 21 02:09:33 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100000, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) accept4$nfc_llcp(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x80800) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000240)={'raw\x00'}, &(0x7f00000002c0)=0x54) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000340)='net/route\x00') vmsplice(r0, &(0x7f0000001640)=[{&(0x7f0000000380)="fa18d2bb2840afbaadbbfa1df5908396174ad3ebf22ee6b578da0b01609528cbde6fee17a99cba85e8d83180dca4f473a1c7fe81132db1e5913c5d15e6500b2860d284cfaba22dab1fd46fe9f077aa06b7731b8bcbe6ac2258df2f7ae627826998e4ac3e7e1f586484f9b39aee22714b812961cbc8d0e6844edac5dbd00d0b95f9f2196e16872c59dca44ea5c3686c201110583279e17de7f159dcad7272abb6d565a29c052d190f3a7ce35f1b3fbf4eab46d10da587d3955194d48e9645b1bbe83b140e93364b052d1709d6626a841991fbac70aeb62488a7803db9c81e268e01007f65d9c055a1343261", 0xeb}, {&(0x7f0000000480)="349fd407f7d2794e41ac4bc6ee256279b2e6805a9076aa5fe05ce270fdf67ab3523d819df53a2e4fdc545f4f751d98be536a357a6ff2c1480e534b5afd0760cc9d6a7b", 0x43}, {&(0x7f0000000500)="a04dc4bf01c410b7df53c4c6be0815079a185f46", 0x14}, {&(0x7f0000000540)="c17fb310aecde04826d589eeb02b4fbb19f8660380c8a43af389b71f0619d39b58e6312b7e77f95b0305fab1fe98bce28b1e63f9d279b4f3cae883186a64d95cea07a03eaa2aae3ebe012074422c4ad778b66d9f3f3111b9bc362d08e8eb58e0f583e6ddbc87fbeae24c61cfb64ddb578888ca20035c0789e9ba45663f59f6764e78788e9f3908ec1fff3c4c19ea20cabbaef67993e208e94d85174cf18de45b25a41a2ee37c419b32d44dc5a501121fc1c89dda2691db1fa986a93cb889a57f32f2e36afd6505b73b83240f43eed056127efd325fd747d7a7be6f95f408810e353af35c5596172791805d85320b377f52dc7dc1169cf18d109567dbd01984a116db9fbd7e4cead7d5a838f6b1e8081ef217399f0bc7a09b716784449c6b266cb1aa7bfc1aca9c8f2d216f6d98e025d5fbed0ffd09ed651005a0bf809ad7c93cbe2f12d69a9a773607f89a69aaa7c2ee433a12c89f7cae7dea602fcc93179c34c7f0607457b24d9c85a2e24f60c71bd3c71c055075a0343a6902a5c553b0017645aafa16a12cbdd352b9a1c9b4191ed1465b840d8791537703a62b9529bd39c68e231a168ba33a3a622e02ff3d4a6992cd974fd104491edda160ee5c0021e5723a0088eb856d63e9c531593f8e4d5e341677a49f53397a134b72ce293d5af8a6b97d0316c45b83b7855ee3f73c75463bd65460825d56167d0152d5feba656d680995111c951e94c4065fd714279707a904908d863dd8dc6081348894d922e6ff99a56a7720a8bcdbcac144d9a3ebe0440470fee53294398e507530c3b9f2de2d35c78b7a78d20679b153647f825ee7811b11f3d995a3b07ed01f58e1d12714836ef64ac09680c5d553734edff8e2d2b52c2df3e03dfbed40263dc2e969346373baf84883c76efc373f63b4a45e0f928d95a8a3cd8f562088bbd5d20b2d8d7609d8e79a2e3835d01179231a6ec27495b17dfbc359479d5df7708f37ebea962b5f15b4740c590034012a022fa5aadb786dfa05218b488df74da40a98989884c3acac8e0544d85b25991387bee8145e25b354aff796f8cc44d13c9daad48520d06bdff08344fe9ef248524e187a00cc842e31a66f37ae713e3e4bb09c909dcd16399ce7fa8aeb439018e4a543cc83a978f97d96d8c94f677f6499395639e225f9167ef8cc547c49bbcb0eadfb62cff071300ab388a2166a5f170f182f34980700fe5cbbcf72267f7a8526091609c9d946079ba8965687361c363dd8b8eb4a1e4f8460a82a0daad98b1a6296ab5aca8f095e60caf551712c7e01d8ffe44e7b274c51bda77f3e68068d2781553f7db2ef7cb943ebaf39abe7b3ba72a8f0ad855fa95ca2dd701a0c9439e29953df98b3066af37b1a04e9ac8d3a9d03d0c88355ac52be18f51cc3b80560490745d34cb2b7560a07319c8dd52cd2283f3f1de8a54d25b3d76fc5823a3307a6ff3f9ce81fefb39e022fc1878e1d7c93a840ab189be63ebf2fb991f5a5125a036fa5ef2addfc012cb041874dc46557db8ab2cf81277b4f317680ac9d24d21f05c37c3193ae2860d06adf7b29aa92c6bd1ee3acb5c73d587bc51ccf1ec0ab2e6676e72c56cb9fb0058ee9410c4a02e0fbb9af9eef2cafd9dfad0520b7fe4411e6f881b15bd62b6253f55e8d5ca1e467db909359644ca8bd3f26ec446e2478a630553c7e67ad63a96762b08115e118855d47d93610a4c773ebb08eab45b970bd062ec188e8905814d58a95beae16fad560205b3c49cc167a25ebc39ecb58a9c57a00b7742692e839e767bcc2ab19d88e1c1fda5000da28c02ef1a15fd4c3a63e4b4c59ade05d3bffa2af9ac80d20972a7736362a877f4a4ec852773b1a87c21ea695d8e656f4145439c55045d9829c5ffe0d083d87afa1a8aebbb6855fa9e9fe6b63499be3df4c2fa4e06d17a56968a35ca26d50b6b47f9440c0ed247ac89cdb190b365dad824c6b892234547e8ffee97a171277ca23e1d94ded88742c50db1bc4a1fd7c2298a4a9567686ce6f1f7ea9ab204fbb9481d041e14cc1b20aa65db076898cf52954bed8c8f2af8e5bd8848fb5488470166ead6105223123a7945c9dac675de300eaeacf0e9346e4337cd5a7fbdee6acd307dfdc757db4a36888a11538f6cbb506d9d675dbefe1150ff7d7ab9d7ae505f04edf39f68fe6fb2ab2a6000f715e5703f056e2041aa1db0bbc7660b0f43c07323f0697a17f20b5d5a25a7ac4cb16cfdd8dea3ec9e35661e8a8c25f21775e5b3b0246d26c2ee114fddfe3e56744e054f03e05acafdf57435b8c7c123daa8031403004000613a5f051d9710fa39b3f566fa5671d976f8275b29744308459b74ef993c00c9b43b329f990ea01591f073d55c6250e898e74d63892a8b6a577717ea39ee8d51fd72323f3423f846c2852e269bde2a1acc1c7eb5d9c6d1ace593642bd66ad3a9de4c2cd4e0707eb059d75db3bb61fb3efef643e6eaa7558565c064c0fb0c3ca7c14b4fee3788ebca07c904283fe6a33d2d30b10454df07da5cb4f2f02ae96169cc7344f3a879d0700daf94cb353f7469ca710fbdd42370447e9a86ffbca64419292c6e6947c7a7d8e727c25978a54db21373dcfccd077ba9b1f085f9bf4080f298d8222ba916e3d60d9ec85ee243c2d3a29f08d2dd66eff044195e12e19ff349d513f2c0601cac85e9757618f7b2fa7b0a0dcb210e903e846dac6c6d6baf330700eab9dfc74b5ebc65c3f0d420ee7fad2ec888dac95f0e90e615d8eecf66fd3c94014d38022901319ee12545ef0cd8cb58defc98d5ce69b27da780996e95122629ae642b3f977862604b7e4c40ad2375cd238405d4cf08102171440ff1d8f6ca07863918f49c539f953d828e5b3591a4103e3231d622139ddef3825c454404c7f938615b7a3fd660732c17984c1875f084b559028be165350854a0fba60b4fd69cecab89039e0e36ca5cca859e69a73d5d977f9636a23755c751f4f2c7767c959d6daa6576de5b0b066d50e38726ae3ff0ba39119913d0cb745dfdcd4cd5d32bc20241b40d4d67e71629998d185fb034f3e2c4ae87d617bbd9b9f8aa09513d127d056b2546a64c7b45ca9a454c0f8bd14c7709346bed4d76224b87b1088e15428b400866d907a572deeb64dcdf2a31fb321836f60fc34cebd9a20538563f0d39f5b7d41a2fe6c89376630e8affd06e891e40f98d9f729fce0dd52b17785176e7b10fb31d1484d4aa109546a07242b19fb144e9c2337ff6ab16bd27bc6cd8878f26426d6655ce78e622fd1a1e2a6f5ed0e477ee3b224bdcbc03e747fe032fc2443ca19a39730a91cf0c66085c6d914a4edce0d38630692374072f1db581db116878ad85b72f227c4f2edb7a34e97ab399d65e620f347eb8b7b0096d8bdcf8806aa335bdd19b7993de6b0929230cc14f9dacd1c015d77d91e6719d1956335c78e951525c1c662faf0ee39c13614f5713508649f2282cc25ffe7bcbc45985ccf224b96e92a25b5fb34b14faaa69f4cb51b7d19412e5cdb8f7f99c2cfe566cd274070f24d8a702ac5936615fbafcfb50aa0747c0e8e2ba5e7b264fe2c07a3a22d77f73d820b0d8fe2ef5920eb95bf5f7fe95a039da8c7c1315bacfe98416176f8f5590fe8cfbfb44a1959c4c0306b93593e05e12db4334bf80e68da38678a34c85787f48932dd2aaae4d077223889b36958f67c0b77f087b2ab3305065fa35546b41c505f9c8228408b8b189bd68fb138f21a6aadf6bd942c04b32a127bf78fe32bcd247a9dc3f1aef2bd3d791a9a442e915200c3839c2f0ae9c230c04cf3e5c97ec7a486ad3b3e5b46c334c12b7bfda89d680d0f892bead856660d89eeae7cbfca0be30bf790677cd566bdcbf4b80240ce2def2703bb63c1b279902b7e74fd7e723ca1348103335a00e1325ba16a62d0767f9d3c3607d2a6822f059f9c44e3863171ca2e62f98f6d9b0e0ea281c79b60413e67d1c8cae1664514119bfb1da1b4a89d5a8a0b3841195e4a624b66340495ab16dd7e48ccf48308b37a1746935b67f9998323cfb29fd5307499c3e765911d593c978d632907268ac223289abea121e468f2aedcbf3dd253b5886f0e83cf6e41c86bed82d48193f1f75d9361a4182a2b5740411352a4228e3384cbf522ed7cf2724c072dc281bd6e3032bc5a4d9669725b6ba45bb3454bfbaf23b686260789b64cd4dde9b3cd759bb8b5101a492d1430274068817b53aeca431eb0d88559b65d30f203ff3f7bf3f8d5fc9688c44009eb0288cd40ba54a1a8630c235c4a88f6583f59a392f9dc51c119b3c7bfd631f0668ba55e039902c394bcf03cb491b5188f9611edb02f1e8f5457ca543bdd97beacd82891f67dc5161894beb83b47d3bc31c2df88e7e7c8c0b3211a47b2335b45059d6467ef729187e91dae29e7fb9dfcdb75a7114e759a513a2ea1a0668a92091496bea39af20cf67fabaeb8e8f93d8a7ce8069b759ef0997e514dcad0847bc4c851b03aac361e9aedb5b78dfef5fd56300d84f5745e4bb38a696cec5629ea4504e6fc7ee4576c658de5536b460db7ee60ef67e394e265f17f00b68259dc6dbba607ac715f12f35900b4538b9fcc81202e9ad4362615a75761f4569aa86769848381ab90c7f0ed6eb0354f1730cdf3d15bebc60c6970c53e63d8245817411407befdc506ded0552214f6dbdf43bd7fcf59749a2f8aed715929a246deeb3151802473a1087d18acf3f51222bf0c3e1e65ec9bff2b4d5a3f788fa8c03d2c38c645f8d3f6618c1a41c8a2e67cbbb11404d2c4a3da9a6fc11914b7eebc4b6eca82cf6ea6a40a0bdde2356049d1226702ebd4477b67876d7c58520b9047a9d689aee628d67311d3b7b74fe4e09cb4fed41927dba5d0f807a0ba274e67cdfd215a5cf7f0b33054a813347b27242c5451e84744829b735fa8eb7df728b10eed29e72f9c57529d43a3d1b5b9a6086fc406284aaf8411f52e45e1a6e5505d47b530b7f6ac776fdce789cb38358be6c04bbc96e45bf7d088d85248ae5b9fe3f2a964c636652dc78f21c0aebcc0ee878faa7f1ecacb5393dbaebaac46f1dbca06f52971d1aff69adc1caadd9c3b9c47521f6344e7aeb11677a148f90ba5c8f2a8ab844d470968756840e5a2fbe7dc9ccc1c88b52f1f855177895b686c03e256ad3c92e3056a5e6a01dd347185add0a72b71dd24e311657f94543a296d378d2b9d0c00ffc198ac700d5e05339271e7ca4982f1a946dfa8085f5af89b786a70fe284fe85a191fc43f0cbf6b9828a344fd90b5f9bf57386d98c57ec942656faac9c493dfe4f15bdb413f0d51b5e2fda2d669f7e76772ab845ded13e1936b330af4d2404982ed1200344ca265647c939a08eb46aa2e0e27bafc655046d57ec39ef7d21775a6dbe841f44e6d2fbfae3c41f24e38b71cb5965594aa230426a03cc0a50ae987ecda70d3ff053ac1ad0546a52f55a5c2ab91004acbd103315134fe30f3e2fb86cdc96b2f5ca73e923567bcdb180ad879771fa2f42e81d2b1abe05fc000f5e35d9cbcee1c4a58565ab18b81f9bd36f1f911b25fdef9998bcba6caae4f178516a22ea507850788116de61c6349b0ebaa4a1e64ad33ac9b5ab944ab221aa70775bbb8ef3fb39f69ec7539641b50edb9da63ec2ddec39fda7b8184addf920148ff7f7b8ec5df11a2d05cac78c5b87beb2c96cab939d743c8ac8aaa07ee8ee9803f81954d9b82f86fc1cb99e34f14a7a9d11463a9c8b8d12c53431f8bcafb68050ca00725fedaea500d647b51a6e7cb4c24ffbcea5e84b453f759adb6d6ed50df7720e6b80de9f3", 0x1000}, {&(0x7f0000001540)="b9df4744306a1012d19b5e82c82e4a1b679256a4ede4865db858087027b35bcf6a87bfe4f03e9e916b28c13bb834f9864091069fcdc16f9fb0dd4d6a844f42806e6bcfe64fab740228681081f8f91202a0a2674bffb35f63cac1a9f9bb15446968e267f6a236e95a89dc561efca8d00a788ce556f25b6ff89227cd229ced81fdb42c88bee6c48f2bebd774912a28c554e13d4671fe294bbd69568b49c47d0eed07327e87bd722523638df4457366dcf9c9e306f05688ec2b576266a9e4a2cee01c1cefb8d76c71e9c775f5a3e252685d4303534d3cf6912c2e836e07c49098ec6bc3d0c78c1dfeccf83f92969f681a50c9ebfb70ac", 0xf5}], 0x5, 0x2) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f00000016c0)={0x4, 0x1, @stop_pts=0x3}) r4 = shmget(0x0, 0x4000, 0x54000108, &(0x7f0000000000/0x4000)=nil) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000001740)=""/213) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001840)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001880)={0x5, {{0xa, 0x4e23, 0xfffffff9, @empty, 0xfff}}, 0x3, 0x1, [{{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x26}, 0x80000000}}]}, 0x110) syncfs(r1) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000019c0)='/dev/bus/usb/00#/00#\x00', 0x395, 0x1) signalfd(r6, &(0x7f0000001a00)={0xf4ef}, 0x8) r7 = getgid() ioctl$TUNSETGROUP(r3, 0x400454ce, r7) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000001ac0)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e22, 0x7ff, @mcast1, 0x1}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x80, @ipv4={[], [], @rand_addr=0x2}, 0xd19c}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0xfd}], 0x94) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/audio\x00', 0x400, 0x0) ioctl$BLKFRASET(r8, 0x1264, &(0x7f0000001bc0)=0xf7bf) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c40)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x68, r9, 0x4, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xe02, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/dlm-monitor\x00', 0x20000, 0x0) setsockopt$inet_mreq(r10, 0x0, 0x47, &(0x7f0000001dc0)={@multicast2, @multicast1}, 0x8) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) [ 124.954267] chnl_net:caif_netlink_parms(): no params data found [ 125.048230] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.070186] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.079368] device bridge_slave_0 entered promiscuous mode [ 125.102509] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.108961] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.118129] device bridge_slave_1 entered promiscuous mode 02:09:34 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x301000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000200)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x4400, 0x0) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) r4 = syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0x1, 0x82000) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x100000001, 0x0, 0x2, 0x3, 0x3, "e212313c8802611e99d36232e19797ad992f3a57d262d023f59307611fa5263be7e3127f7302517702af7144fa9fa6ccd5cf88e5c1ca3c72959c21b764ba51ee", "e24825a465c3522996a55eb41decdb5768857b866967f00882f62b62e3045e40cf00af7ef7a8271e3e09aa518bf4ef57fb814ff1f06b553aeb1c996cf89f3ba0", "ed99629bdd79baa36281e587f53c033b0e26348f48f49ae2cb69742b59226843", [0x9, 0x6]}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r5, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0xc046) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/sequencer2\x00', 0x2080, 0x0) bind$inet6(r6, &(0x7f0000000ec0)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) ioctl$SIOCAX25CTLCON(r6, 0x89e8, &(0x7f0000000f00)={@null, @null, @default, 0x5, 0x2, 0x6, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) r7 = syz_open_dev$evdev(&(0x7f0000000f80)='/dev/input/event#\x00', 0x1000, 0x80000) preadv(r7, &(0x7f0000002040)=[{&(0x7f0000000fc0)=""/67, 0x43}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x2, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) r8 = syz_open_dev$sndpcmp(&(0x7f0000002080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200000) recvfrom$unix(r8, &(0x7f00000020c0)=""/134, 0x86, 0x2021, &(0x7f0000002180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) setsockopt$IP_VS_SO_SET_EDIT(r8, 0x0, 0x483, &(0x7f0000002200)={0xff, @dev={0xac, 0x14, 0x14, 0x19}, 0x4e24, 0x4, 'dh\x00', 0x20, 0x9, 0x10}, 0x2c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000022c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6, @local, 0x81}, {0xa, 0x4e22, 0xb2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, r9, 0xfffffffa}}, 0x48) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002340)='/dev/qat_adf_ctl\x00', 0x19c558123c5e11d5, 0x0) write$P9_RSTATFS(r10, &(0x7f0000002380)={0x43, 0x9, 0x2, {0x8, 0x7ff, 0x7, 0x3, 0x8, 0x81, 0xffffffff, 0x0, 0x252d}}, 0x43) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000002400)) r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002440)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r11, 0x800448d2, &(0x7f0000002700)={0x4, &(0x7f0000002480)=[{}, {}, {}, {}]}) r12 = syz_open_dev$dmmidi(&(0x7f0000002740)='/dev/dmmidi#\x00', 0xffffffffffff086a, 0x448040) r13 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) [ 125.153098] IPVS: ftp: loaded support on port[0] = 21 [ 125.162633] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.179993] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.273655] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 125.301213] team0: Port device team_slave_0 added 02:09:34 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x484200, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r1, 0xac6, 0x4, [0x1, 0x400, 0x3f, 0x7]}, &(0x7f0000000100)=0x10) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f00000001c0)={{r4, r5+10000000}, {0x77359400}}, &(0x7f0000000200)) r6 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x240102) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000280)={r2, 0xa0e9, 0x3}, 0x8) fcntl$getownex(r6, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ptrace$setregset(0x4205, r7, 0x201, &(0x7f0000000380)={&(0x7f0000000300)="67325fba3211ea34e29ac05e12590094401f7eb29c1d17b32178180a539ca8e9635d05e5f9bdd5535c3f18f724734a4d76a1a39d53b33c324606e8407f0406f79d33e88efb4095e653c690d241cd1d52842d99501cc212e7fe2b3f1a1a0a9cc6ce46fd69362a308e1ca54305c2a75d5cebf162774bbcffa66a5e1b", 0x7b}) setsockopt$sock_void(r6, 0x1, 0x1b, 0x0, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000500)={{&(0x7f00000003c0)=""/234, 0xea}, &(0x7f00000004c0)}, 0x20) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_GET_XCRS(r8, 0x8188aea6, &(0x7f0000000580)={0x3, 0x1, [{0x9, 0x0, 0x27}, {0xff, 0x0, 0x20}, {0x5, 0x0, 0x7f}]}) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000006c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000700)={@dev={0xfe, 0x80, [], 0x1b}, @mcast2, @rand_addr="14605d2c19461e255f1bcbb13724d95a", 0xffff, 0x400, 0xbde, 0x0, 0x2, 0xc00000, r10}) r11 = syz_open_dev$usbmon(&(0x7f0000000780)='/dev/usbmon#\x00', 0x1, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f00000007c0)={0x0, r11, 0xe2, 0x4, 0x8, 0x8001}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000800)=0x400, 0x4) ioctl$void(r11, 0x5451) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000840)) r12 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000880)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$TCSBRKP(r12, 0x5425, 0x3ff) ioctl$USBDEVFS_CONNECTINFO(r12, 0x40085511, &(0x7f00000008c0)) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000900)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2}, 0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000940)=0x5, 0x4) rmdir(&(0x7f0000000980)='./file0\x00') syz_open_dev$usbfs(&(0x7f00000009c0)='/dev/bus/usb/00#/00#\x00', 0x83, 0x2000) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) [ 125.317590] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 125.326476] team0: Port device team_slave_1 added [ 125.342695] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.356033] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.399682] IPVS: ftp: loaded support on port[0] = 21 [ 125.463056] device hsr_slave_0 entered promiscuous mode [ 125.490430] device hsr_slave_1 entered promiscuous mode 02:09:34 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='\x00') ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000100)={0x1ff, 0x0, 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x7, 0x3}, 0x0, 0x0, &(0x7f00000001c0)={0x3, 0x1, 0x48, 0x2ac}, &(0x7f0000000200)=0x10000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r2, 0x4) r3 = msgget(0x2, 0x230) msgctl$IPC_RMID(r3, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x4) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x575a) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={0x0, 0x7fff}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000004c0)={r4, 0xd6bd}, &(0x7f0000000500)=0x8) recvfrom$x25(r0, &(0x7f0000000540)=""/215, 0xd7, 0x80, &(0x7f0000000640)={0x9, @null=' \x00'}, 0x12) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000680)={0x1, [0x81]}, &(0x7f00000006c0)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x11, 0x0, "03143045406f703e768ffafbd0063aa9af386daaadfd3506c9ad96f3572d39d3939594f11d06d1924ee5aa842dc2d11a9c25b75df50582f3c7adb11095f690d954636f9a741418c03343228b1746d1fe"}, 0xd8) r5 = syz_open_dev$media(&(0x7f0000000800)='/dev/media#\x00', 0x0, 0x40) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f0000000840)={0xfff, 0x5}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000880)='/dev/cachefiles\x00', 0x2, 0x0) clone(0x10000, &(0x7f00000008c0)="e89f6acbfae4768262eab5f34e867708989ad46edc4d3fcd323cb4c2f77f4886d70db90d5777b49d621c114cc9b70ff231ae6c7c795ac034f6174a4a4093dccee983440b904a350988fd775d30e7e9c1db9e472100eb824917887bee44efc06123ec67f42a8a7c596aed58fbff63316b52bd27255e96d3003c357a737ffe6212fc3877c1f9d994b6073dfe4b6989fc1d8448308962dfbc013f0fc70b18c0a8b8a8db065087c5bba803e43d238c188fb2d245fa46b1ed1b790d90ec957249f4d6abb8b8478fab0d4f74fafe1cd5235c31a4d448", &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)="c3abf8e0758e26007507f24b1c2259af17bda3728d6994de6a31026f1dc2c80373e6f9aac0566c2075e3ff4834cc925a936682380c6bdf590d212b7ab53190d17109a11f59e3997c4b40387f4f59e9845aff16fb8d83856ae6b1d63564bda320732c0d2b02b7a790dd545a53f794c777373c57da75a4817c15283fa461aae5ef96d2a5") lsetxattr$security_smack_transmute(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000b80)='TRUE', 0x4, 0x3) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000bc0)=""/209) chroot(&(0x7f0000000cc0)='./file0\x00') r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xb4, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0x80, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x347eaf94}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x1d}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x77, @loopback}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) shmctl$SHM_UNLOCK(r3, 0xc) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000001200)=@sack_info={r4, 0x4, 0x100}, 0xc) [ 125.547384] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 125.565642] IPVS: ftp: loaded support on port[0] = 21 [ 125.578943] chnl_net:caif_netlink_parms(): no params data found [ 125.594123] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 125.692574] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.700293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.707276] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.713692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.823171] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.829599] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.842533] device bridge_slave_0 entered promiscuous mode 02:09:34 executing program 5: fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_persistent(0x16, r0, r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x420, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000140)) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000300)=0x101, 0x4) r4 = request_key(&(0x7f0000000400)='blacklist\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='@:*\x00', 0xffffffffffffffff) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='security\x00', r4) r5 = getpgrp(0x0) prlimit64(r5, 0xf, 0x0, &(0x7f00000004c0)) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000500)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x404000, 0x0) r7 = accept4$bt_l2cap(r6, &(0x7f0000000580), &(0x7f00000005c0)=0xe, 0x80000) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000600)={0x8, 0x35, 0x2, 0x2}, 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000740)={0x4, 0x1a, &(0x7f0000000680)="9a945ac1560cf83b88e17ce9874900fc38faf1228ba0f2ac835ae07b9220e7c4a369478f2d7f0b1bda5c5c62b41a55d2c1dd1f920ef024d4d56e607ba974d21dcd2293fd41efb5d869ad41f96fc9823a5828202086ea5d67623f7871252e66e74f664add087ef4a740cd1f2d26e649301c9a185c279be01501fbc8de220536d188a9ab96a18c776fa027521bdbe4c04edc2b69b4408123d71b65c4516eda31e836667f6f0323ac79065757e05c", {0x4, 0xd4, 0x43564548, 0x5, 0x2, 0xfffff801, 0xd, 0x9}}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000780)={0x0, 0x80000001}) r8 = syz_open_dev$cec(&(0x7f00000007c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$CAPI_GET_MANUFACTURER(r8, 0xc0044306, &(0x7f0000000800)=0x80000000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000840), &(0x7f0000000880)=0x4) r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/zero\x00', 0x1, 0x0) ioctl$VT_GETSTATE(r10, 0x5603, &(0x7f0000000900)={0x5a10, 0x1, 0x1}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000940)={{0xffffffffffffffff, 0x0, 0x9, 0x3, 0x10001}}) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000000980)=0x3b0, &(0x7f00000009c0)=0x2) r11 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-monitor\x00', 0x40800, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000a40)={0x0, 0x3, "27a0b3"}, &(0x7f0000000a80)=0xb) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000000ac0)={r12, 0x80, 0x316}, 0x8) ioctl$DRM_IOCTL_GET_STATS(r8, 0x80f86406, &(0x7f0000000b00)=""/214) [ 125.869953] IPVS: ftp: loaded support on port[0] = 21 [ 125.876612] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.883238] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.891126] device bridge_slave_1 entered promiscuous mode [ 125.965080] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.977777] chnl_net:caif_netlink_parms(): no params data found [ 126.008709] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.016595] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.028896] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 126.054640] chnl_net:caif_netlink_parms(): no params data found [ 126.079891] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.087320] team0: Port device team_slave_0 added [ 126.096030] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 126.104391] team0: Port device team_slave_1 added [ 126.111519] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 126.133494] IPVS: ftp: loaded support on port[0] = 21 [ 126.138331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.149251] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 126.170499] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.176911] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.185527] device bridge_slave_0 entered promiscuous mode [ 126.199207] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.206867] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.214416] device bridge_slave_1 entered promiscuous mode [ 126.226064] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 126.237616] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 126.281956] device hsr_slave_0 entered promiscuous mode [ 126.330368] device hsr_slave_1 entered promiscuous mode [ 126.389841] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.397169] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.406064] device bridge_slave_0 entered promiscuous mode [ 126.414415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.421956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.434534] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 126.442522] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 126.455141] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.461699] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.468635] device bridge_slave_1 entered promiscuous mode [ 126.483336] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 126.489427] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.496695] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 126.504958] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 126.526307] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.537241] team0: Port device team_slave_0 added [ 126.548186] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 126.558403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 126.593990] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 126.604530] team0: Port device team_slave_1 added [ 126.610189] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 126.618455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.626523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.634191] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.640570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.649491] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 126.684487] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 126.694475] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 126.706025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 126.714030] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.722041] team0: Port device team_slave_0 added [ 126.729401] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 126.739286] team0: Port device team_slave_1 added [ 126.747087] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 126.763353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.772427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.779964] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.786373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.793218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.804480] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 126.813633] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 126.872924] device hsr_slave_0 entered promiscuous mode [ 126.910726] device hsr_slave_1 entered promiscuous mode [ 126.951591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 126.971877] chnl_net:caif_netlink_parms(): no params data found [ 127.023307] device hsr_slave_0 entered promiscuous mode [ 127.062424] device hsr_slave_1 entered promiscuous mode [ 127.100938] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 127.108632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.117066] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 127.125952] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 127.138148] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 127.177589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 127.206084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.214587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.223582] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 127.229895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.237923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 127.254264] chnl_net:caif_netlink_parms(): no params data found [ 127.268730] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 127.277445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.285914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.296265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 127.315418] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 127.328813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.336631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.345711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.353936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.372652] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.379054] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.386836] device bridge_slave_0 entered promiscuous mode [ 127.394608] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 127.401145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.415724] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.422915] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.429823] device bridge_slave_1 entered promiscuous mode [ 127.448064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.477178] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 127.492924] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 127.505737] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 127.515279] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 127.536702] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.543236] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.550406] device bridge_slave_0 entered promiscuous mode [ 127.566241] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 127.574784] team0: Port device team_slave_0 added [ 127.582096] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 127.589604] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 127.597504] team0: Port device team_slave_1 added [ 127.603427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 127.611581] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.617947] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.626839] device bridge_slave_1 entered promiscuous mode [ 127.637032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.645054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.653850] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 127.659935] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.666651] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 127.688629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.705865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.745981] device hsr_slave_0 entered promiscuous mode [ 127.780572] device hsr_slave_1 entered promiscuous mode [ 127.826547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.838369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.849419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.857908] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.864351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.874097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.885325] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 127.892092] audit: type=1400 audit(1571364576.874:38): avc: denied { associate } for pid=7584 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 127.921982] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 127.932739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.943718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.953678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.965801] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.972208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.988148] audit: type=1400 audit(1571364576.974:39): avc: denied { create } for pid=7606 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 127.991765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.027382] audit: type=1400 audit(1571364577.004:40): avc: denied { write } for pid=7606 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 128.032420] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 128.058728] audit: type=1400 audit(1571364577.014:41): avc: denied { read } for pid=7606 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 128.084559] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 128.092397] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 128.099623] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 128.109529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 02:09:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RREAD(r2, &(0x7f0000000200)={0x8e, 0x75, 0x2, {0x83, "5db6edfd9afbb113815ddf470d1b8e1a9049862499609d563978456b074092c9fcf47909a73bf0abacf6bf4b2acbc03d6405fc53411953adacb785c373e4f604cf04d95d4b18ea0b6987c9c860ca2604f4a7b8dd919ae07d4c0a7dab241606fb9f6a1d2a6405052a234bc9b45040a5003ab07799a5e65d8ea9d9708c31c21bb8915118"}}, 0x8e) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x7) ioctl$NBD_CLEAR_SOCK(r5, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r7 = dup(r6) write$uinput_user_dev(r7, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) [ 128.124793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 128.143209] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 128.150859] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 128.159200] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 128.177712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.191403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.198449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.209313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.217020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.227043] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 128.236017] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 128.244884] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 128.251892] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.269117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 128.277016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.285315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.293744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.302255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.310486] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.316839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.319149] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 128.331687] block nbd0: Receive control failed (result -22) [ 128.340520] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 128.346592] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.356627] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 128.364554] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 128.372522] block nbd0: shutting down sockets [ 128.378843] team0: Port device team_slave_0 added [ 128.386069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.393935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.401545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.409173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.417185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.425228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.433374] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.439714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.449012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 128.458699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 128.471415] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 128.478607] team0: Port device team_slave_1 added [ 128.484276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 128.495031] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 128.510945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.518318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 02:09:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RREAD(r2, &(0x7f0000000200)={0x8e, 0x75, 0x2, {0x83, "5db6edfd9afbb113815ddf470d1b8e1a9049862499609d563978456b074092c9fcf47909a73bf0abacf6bf4b2acbc03d6405fc53411953adacb785c373e4f604cf04d95d4b18ea0b6987c9c860ca2604f4a7b8dd919ae07d4c0a7dab241606fb9f6a1d2a6405052a234bc9b45040a5003ab07799a5e65d8ea9d9708c31c21bb8915118"}}, 0x8e) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x7) ioctl$NBD_CLEAR_SOCK(r5, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r7 = dup(r6) write$uinput_user_dev(r7, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) [ 128.526365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.534621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.543630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.551397] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.557749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.572016] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 128.583839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 128.592908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 128.613683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.621629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.629124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.637647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.646110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.654424] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.660094] hrtimer: interrupt took 44760 ns [ 128.660830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.668895] block nbd0: Receive control failed (result -22) [ 128.688497] block nbd0: Attempted send on invalid socket [ 128.691700] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 128.694189] block nbd0: shutting down sockets [ 128.705701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.711222] print_req_error: I/O error, dev nbd0, sector 0 [ 128.716260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 128.717980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 128.731782] print_req_error: I/O error, dev nbd0, sector 2 [ 128.737408] Buffer I/O error on dev nbd0, logical block 1, async page read [ 128.744617] Buffer I/O error on dev nbd0, logical block 2, async page read [ 128.744636] Buffer I/O error on dev nbd0, logical block 3, async page read [ 128.759854] print_req_error: I/O error, dev nbd0, sector 0 [ 128.765533] Buffer I/O error on dev nbd0, logical block 0, async page read [ 128.773717] print_req_error: I/O error, dev nbd0, sector 2 [ 128.779382] Buffer I/O error on dev nbd0, logical block 1, async page read [ 128.787125] print_req_error: I/O error, dev nbd0, sector 4 [ 128.793371] Buffer I/O error on dev nbd0, logical block 2, async page read [ 128.800500] print_req_error: I/O error, dev nbd0, sector 6 [ 128.800939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 128.806121] Buffer I/O error on dev nbd0, logical block 3, async page read [ 128.821254] print_req_error: I/O error, dev nbd0, sector 0 [ 128.826128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.826978] Buffer I/O error on dev nbd0, logical block 0, async page read [ 128.833934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.840872] print_req_error: I/O error, dev nbd0, sector 2 [ 128.848287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.852862] Buffer I/O error on dev nbd0, logical block 1, async page read [ 128.868606] print_req_error: I/O error, dev nbd0, sector 4 [ 128.884801] print_req_error: I/O error, dev nbd0, sector 0 [ 128.889515] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 128.899275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 128.899603] ldm_validate_partition_table(): Disk read failed. [ 128.919413] Dev nbd0: unable to read RDB block 0 [ 128.927437] device hsr_slave_0 entered promiscuous mode [ 128.930150] nbd0: unable to read partition table [ 128.938049] nbd0: partition table beyond EOD, truncated 02:09:37 executing program 0: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') chdir(&(0x7f00000001c0)='./file0\x00') getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4(r2, &(0x7f0000000100)=@l2, &(0x7f0000000040)=0x80, 0x80000) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) sendto$inet(r6, &(0x7f0000fa3fff), 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x8000, 0x204, 0x1f, 0x3f, 0x1, 0xfffffffb, 0x7, r7}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r7, @ANYBLOB="ffff020002000600"], 0xc) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={r9, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, {0x0, @in={{0x2, 0x4e23, @local}}, 0x0, 0x7}}, &(0x7f00000000c0)=0xfffffffffffffed1) fcntl$dupfd(r8, 0x406, r10) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000004c0)) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r11 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(0xffffffffffffffff) r12 = dup3(r1, r11, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x44, 0x7, 0x21, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a9590c30f2a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) r15 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x76}}, r15, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid(0x2, r15, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) sendmsg$key(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r13, @ANYRESDEC=r15]], 0xfffffffffffffe56}}, 0x20004850) sendmsg$key(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) [ 129.456945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.471572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.481968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.495889] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.502313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.529225] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 129.540595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.551361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 129.570721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 129.581904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 129.589529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.598187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.606231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.614956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.627114] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 129.640745] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 129.646781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.659777] bridge0: port 3(gretap0) entered blocking state [ 129.678520] bridge0: port 3(gretap0) entered disabled state [ 129.737164] device gretap0 entered promiscuous mode [ 129.746637] bridge0: port 3(gretap0) entered blocking state [ 129.752957] bridge0: port 3(gretap0) entered forwarding state [ 129.767279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 02:09:38 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r3, &(0x7f0000001580)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x3}}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000140)="48c919e4ef69b37cae4679864f8f0af952a58621f9c1625f887099737a0ab6d530a94e9256eaed95b8ed14882ecdd6c37b27c650323f76939072b429826abf51cd66c506c8204615825b5fdb94056d00f6eab4f96f86ded4ed91818154611d28ca8b9d77b8fdb716c59d46036ab527cd7ed440a2fb82b18de1b36a292a817cfca9015aa28e7a3ba0d5a57bff7033a2221da9d44ee424f021ff9ddac7e3ee8da8e9e6db2602236a980f717c49c0b27b49c4715513c558325bc4a2a1deaa4a15fbc3a331cac8a2964dc3d71924fd21150d9a3a9a0b79910febaa26ce543269a5aa2dcff0b298b75d39939778175a54ea760c66f4b310ef6b9fa9f292ac5a4d1ed9115986d1d219f433c49fb4e5d27119d8ee18cff98fadc73e381cd787151bff3e82dccf394389b856ad8cfb3adb57f986f2d4ee8a87faf35f7077358870ced8627b28aa010773ba2acb01138ee4864c1812fefe25ae12265b1d1a8dea940a135930483505561a3b13310a1d92dad8eb8d85ea6bcf866ac6e985ae27669f9377a64358729efeb0ca4aba4447638ac2bdb4b9334a02ac07deef73c4322d70a26c0da0130eba321093291428830f10dd15a791e0b326d91810c7746a0eb6768b92086f1bee35ea001c8346240efb3e44cd6314f4a3873b6fb342578c89d50bf54a88f3f5214cdcd93b3ccc085b6af8b8e25df5616025c0e2676854b443f669043e3b8e17f1ffd951be8cc877ad5a3a72540c3e4a8208375c865483fafc17ed7541d2b696c4f6dd6c677847d80d0dea9e1740bb62055b4ec42f7c8ebb2e9bea7557f21b66ac6106d122af171452669ac8ee9a4cc25305e14feeca95b15ab976e1be95e22ce2ee8f618ed5a297a1dc799e0365ffb7692fc6b879c383cb7d979d91ae1b36d37dc2b974ff7ed69a3755347557f2cd09a9a5dd75445bbc6e6dcacd4a138a1a7e391322f21d614ad39fc633dda362f8540d7e4011e480bb96aad8702d05e0322f586c23902ed665ba6e786b9e5911ddb0bee9b79b8dfd36b04e387cbb4077656e973201770f88e7d38bf908ae176731c7440571ccfa3ad9a7d03f588560cb44d08863492b7a76dad0fd04a9e54e02ade42ab7580bad832e695657a54f6e18af6f144baacea9492c9d1efa390282db0c51a23d87ec57129e152c3f778f494510ac159e13abfdc21307d289f0d5eb6358101abd507170cba2aac1adb3b9a1fff3d294251fd582b36a4a972c2b90b9adadb125719c56a0c6f2791fb6f879dd8642cef1adb97f0f274f7e0658ef9718a1f0245d05bcacd370f60c22a7230dd8d31b780bb019989f0f5dcffd52501a62258819a4e825494e3b7cd7bd33d14637d3ab2d5a64987c24168ad82985b15bba8aca9efeded7e97ab4858c210d0ce3449c6a504fbc9a82e648417e13d8fa3a6ff9aaaf714339e066834c1a01fc9c75bcb87b4082771504f60f635db6e01c6e2df2acf8f6617b5af3efe0e887748f3cedbd1e9c1914b8748ef3a73c65949c73b2820d53f650ba5d1001d6b6732aef848a76d12d9d7e16c229241bfa7f25f759ed3ea671d1d5807a14527756fd3c8d2f107a7a4a0ff30e0ffd38434f05fb2008c5df4976dbcb81a52906ad676184a16d62704471a802de04cee89eff87095510b998e9472a3f72e8fb9ee27e1af1ce468933089c8564d6df5ceb854972bd6f11a725956e7eec00086235c1b78974340faf45526b083349b31ef0d31db437d2d5ab368a145d211d123fa7e10770c7166076f05e4760b753d668504ebce1558264d512a513f52c32dfdda2b7af48e1220dc48978e3c294355742b156ece134d93fd7b40d89bec388fa85b1a50d35260e224e5f21046419f2aa3058a94f61f212e84dcb6edc86d0b04571c5a4f675e24fdcea17f1a485f8c7cae6f8d461b07cd907ebbc3e16330f4b11fd03cbeb39d8aa5824310e2ed41a01fbf1ee23745aa721db31be5ea40167febb922ca199a7ab4b8e21754f5ec1859a2bef56a4cb619a8724496fc2e6af2fef36166cfdcb3ffe999e55ca44fee53eeb70aa0ea5b5070bc6baa9e243225ad6d546aafe9646f6267611109af729949ec182bbcd7f59e3b405eebd5df777dda489ea7a106af2d3adb0af5bed057cc216a02c398e26e760605e2e016615bc4c1c6427475e5d716404625b37f18ab0c40fc4d2ee3a72b50199fc85334da31ccbe8dd8392bf891420b27a111282e267ed573fac10108acf92e681c8ac18fd20e33b036c5fb6e5cb5c6dd55784b81bbd992152968eb343b7ce701cbfd694c762e7bed92e4e3212d65e4cf195bf67fcc08e49134121606082cb5546d84ad02a05905075f4ead2d7aae9e9e30f99505a77b9b9dc8daf3a68072e431efe112ec845ae7ce3ab2cc60c17f6511e129a1b9d6065c6f2195b31677df0365886dcfc3b16d465b8ffc32165a3f1943ad735232c521568e5d37fee4d9c42172f3cf15a11d3f51544eb896934e1de8522685f01cf9f7abba957d21910f2fb28bd6a4844352fbb34fe9bcb1c0d41d82fa6e86109039a2023fbc012cca8cf2ed4160980cc5f099dc4172707b0f1fc2935a8abcb86b9ab4f159cfc7465dc3d4cf28826489d9740880a6a7e54f218fb96a946f8b90a605ed836126bbdae72c621dfd1ab692acb11e9cc00303945628c99f17de1494f788af61d151be0a41ff40a378bc94accf1bb84164398f3c76e96a8d97794376cd58e1f83fba64d9421389dfcd230da072de0486aff4e525330dee97e20091502d34d3d7647c9a30128bc94cf580aced831d06fb0d7ef1c261da0559b8e7db8eb2b0f31d560aaeee696bf4a13706c9594c82dba142478ff2187f5488da550b140b8d2588f4033412d35967c66aa6bd721e87ece69f2c0c4d0e54ff094c613358d421a6ea6a5a9aa70d2144d9eea4fcaa52b5d71f669a6bea9139ff6a5e527a478f6f3a75f47d2f5870ad5b12f236508c2fd9650d900160cdf57b0ebfca2e3144d1959562937a30d7bd9785bf5d7475fcfc7ad7b3c5d5aca1a1fd7cb833b099df4db9020ae9eef6aacfa64259577b12fec6c4473d4a1a8da69b83fa684499e4b2d34de13c3c354a87d96017c2aa224ad358cb8ca22f05a5c325f7ea6735356e8f6c4c7019b018d01960bff4e063df79edd65ba0c17a595fcb6d7860885651872cb99c01982f2f9507ca9e9f69c73d94ee2f0bb60a6ca4b7cc6917fa92e220abdef0b82e796a1d3b26828b538668bb77f7a86674f3c3a6dfa4e442be79a78458674814d44c1824df22b4dd586491ba30f70a4177f26a668cb1014c3a987751f72f7f840c657c9e8940c4656b625e2d781b54bec09eb4ad03b2a68e95bd3978267d8617852fa31d32f1cd153d8a867eb28497dd48e55c503c01bbcb2a801de39516369e7d077fd702672ea4eabe28dbbd5fcfe785537d6a6a05ba8249acd414237e898bc5a0fd0160db7a605322eaa913be36dbde97d421746c0782daac3235c2f0d9364efdd8eae08cff9805e771fbc81b407ae9301cb3ad26422a4f1cce7864616685cd82233853a1baae2bd934fafe463871dd65d1be5c0be1351c36d31ab452371103f5b4c18df9efe2e7b7c5efd12eacf54ece6e4f426e34611335970a1b952c7c4de9605de6f220ad9fa40a5471db845f0fe1cb09f730fcca37114c6d48e3b80d5ece0d1954e62cf5fd71af40ab33b25b254ebcfc8091c018ee35c7694183a88a47b4a1f8cfe70c0e44f053e6ea34f5630e244baf5a3146bc2e79fbc9d796b63eb7b33ff6f73922f09509250a9de7cc1dbdd3a1dbc1a3a12e1f491093234ccf0a5d79c0acb2daa315953be334a05357fe9955a25ddf565679102d512bfdf553cc4e6212050932039d422810b822bf6bb0ea14c3759c928a6c5049980bcb15c45275d31f036e7cdc9473a687e1673b25adb3079ca0eeef35a516607329bdc19429ae099b1c46356bf8f7c6592dee1d2dc3c322fb6a94a3f1ca4a2cfd347f4d7b2d1f0ed74e68a31e2941771500e7f1f0dd4db832c029547a8135e5f581813b7785e72f015011c1cf8c240e5ee14b77ef7e07cb62c4d5be0e2798dfa24b1fabfbd0c49f6be823032d23af56f13f60e9ea2d8e0b6b819da439ca87fc74ac4e3259c9bf16591ac21f1eaf10b0342cc0d1d82e312219bcb7f8856d891c6b2c3a0d6bd8732a622b2c86090c806d6688be87fb8fa91226d45f596948c2cea419a2266add2e3c62d55f9c7b8403a69c03a085d2aca19ab24e16b4fd2e2d501ba5ce695dd8b869fbd5eccb37751a7925556b9afd49a5f33d790928ff164157cabb5ff0c6fb5ea018fd7c595f88d8011986d7e4ad62c1723b1f885dc846a529fc2c1ec7537cb1ac1ddbf7844c07b1cc18c54fcfb8545d3bc28474badd6d461fff79625e77be6f60e08661d3f2966a7ae0f3d7c9ad44ebb8ed6d5c02f6ebb3071913338298e363cc9ce0ceb590f5ef6ecf7369cca14aaf32eeae565764306936511cd49d662806fe695283be51c96e8250f687c28159ab7a20405bced955c06d2d7d1078df26ec4e3b6ea2d4fe82df385d165ffc5881272016f2ccfcaef74247d6a80c671233445b1ae6cb6b67ae3916b59e5ea78978f169ebcd1696589a0e0f7063aa56c49a5fe191b98739b59237426aa98d9a771bbc5a35bd798de946be2b1c58922aa55ab3769ff053bc3e9452249c6b0eb7ef5040f10de853d2d27fa6292d078c2ba0ebc4e38744418beb0a6eb5e22eeb8a784d817511ba6e71e09c5159d7d3db04223e377c4f20f1414f5113cdf166b497fc3ac5fc11cf75a7891906dd949ec56be34b5e86d523a2c80bfeb21c25072051465c166f372194c08feb12dc934ec0d4e9c049767147517480b5b77e37490ec56aa3e039be82a6fe4f97bf6413d2220f486878bcca42022b5b0d542f5e68e4ffe6e6f25f03111ca0fc975271737cc25bcd1d20931849f5ea105e4e43873791f684904ebfdca89af525efaabdc2f3c0a861389f4a84bdec3545795a323c31457274f5bc699e49b21ca74ebea27e94a6e972fa362e856243829a69b424b3cae09dba4e6cda5aff49bcf4f162f64e4e9179850d9cb3d65d84cf56d626423cdd9d5ec8528677219df94eba185a7a6ba098496330a77d5b0e75a5e70b1586af437ed85dc83174f54849f06780a8de8951577b834adadef99e18c520511a20647c7362ceb4cd89a65d716b0ea128ae4843de83cdf808343b2ea5e0c831a72b91d31e793946fc1c0ae6022ed1c6d5b6f7a9978673ca14c0b02066a994aa029067fb9bcf443421562a2644f9170e047d3281eb7de35ab38f4fc1d6bda6ebf621f4ed3963966c500f317ea16a2a7984af505bd4f82e8b8ea8025066fcbe9471fba45ac651f21cb2cf9ae07cb59b15e677bf4caa24a96143f7d8312eb09f76771bc8de910f7aaa2a5d11425ef279dcb19adcc031f2d0fe9987c1166ab16b3e1818949ce62af286778880fcf3ed5954e596b5d72451e928341830b8d7aee0e15ac523f94b0f551f8aed3ac49c5efca52621ef417e1423014ec16549048894b9b54549880946dbd44bd8b75d60fb44c68a4727e098245e939844cdf7e96c757d670add23ce46c15f7d19eea990868d298b8f0f6ce730b770b33b3d0c37417ff594c71dac3193b149c6269035c7efb29b77a72f2d578f1aa2bb0689dcee40e7c92a297462e321da09b9eaa0e4826698b9b89960b5c22323efe2c15692e3222fe1e7cbe86f213fac0eb54d3ab94ea6846e0885ddc65a0eca7ad97d119d0bd7b2ff3534d0a44c910b9bc05718f4e22b57e1f7fa888b2a5e1", 0x1000}, {&(0x7f0000001140)="297073c7f40b81038d26eb6b6931fbe76306c0b909105ebeb1c5545576381d10c366d224956b38711d7fb49a957a591d261e2c57efd9f93d969cae2be098b3e104f7e4726c8a0c9e9fccfdf28629feb99b0bf060989f7b00383db018e54789822364c1cb7c16b08b714b54f6076d50ac9e2c7369374dff7c2ab657d218768dcc828644f878192b03ac27e4534f8e8e5a88386fc9ed228c41e186527c4ee9c18cfb4b8fae840dcbbdc1392902633d83c6153fb47fcf20077626d42f6b129d24df51946c55aa84fe54a6c7f3f0b6a100bedb758b1c", 0xd4}, {&(0x7f0000001240)="8df657ff5a509b0df756d9152d34096fe70816995ae32ebd103a3569622d5c76c77c6cc222febcf1b0028ffa289074e13ecd7c1eec0ca7caa7eb1386156e8d5677094a766e53211c7b0c69758ca2503019045d2b7477416516", 0x59}, {&(0x7f00000012c0)="2cd5f4d2b465e821ff31a9bad6a1390a354f564ab5ca7faca5d5823d85f62ae60b1038a4ba6aa2eb2a026fc17bca01b706", 0x31}], 0x4, &(0x7f0000001340)=[{0xd0, 0x96, 0x3, "674c2411246079cb4c33c2cb7c49f7c3082683637ba5af1881f9158976e1da611bbf3a92a74d01d15a43fbecb13e3ccbbb6eeb9dc2d0a594d57bd6a591b54963b99b81096fc2c9eb9dd428433cee4b743bfe67c2d5b38f9eeaa31ba9dbca68ba703a6eedfd76fab3581157ec83e2d9dd8f8a040fdf25ad081a78dec0fe0e0eab9edfc39a5b9bbe4bb564b42cfd774a2a9f512b0ad3df101a46a9148c0914fdfb5e702e3f75ef27a154ded283d98df56afe171b25d9362f8e88ad5bc84720"}, {0xd0, 0x113, 0xffff, "b46ed5f33d7c248e6f885667f569f1db17913b31e0560e545cfd5724818bbbc0177138d2ca9e5c15985e5d837764173802993c8d9b9e7f26eee2a8d6f3e483963b728a8fee69ea47e5d8f229585d3eb8becf691c15f5b68e50821d17b19f7819989089af1e8a7a0006c314cab1c29cd75aac78228990c2c3dc3c4a60fc19fe0dc8d521bb6ca036d1110ed6f2490ee316ee5346e8162fc78b8df61d5decff68d7c5a8ebbc51ba37be242f79f9c18a62dd1e22a9441b03dff3c887d5f5656188"}, {0x90, 0x84, 0x0, "e879ac302ba05fe8b280a43f3d1a55f32bc9af559c3696386d1a006cfd55af0b3b36ccc83dcf89e7426ae1a48fc4e246d835136c99f0b60ad18fc48c80ccb0efaa9eb0bb6118ec3495ada36f5c6931353a2f427a7c7f5f686e09447b56c461767879638ef6175e11488a3c30f512d457fd741b4ea990ec2cd44da175bc"}], 0x230}, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000015c0)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010000500d25a80648c63940d0300fc00100002400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 129.786035] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 129.793833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.829690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.838712] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.857446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.868468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 02:09:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='m2\f\x06oo\xeb\x80sents\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2000000000, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r3, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={r9, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, {0x0, @in={{0x2, 0x4e23, @local}}, 0x0, 0x7}}, &(0x7f00000000c0)=0xfffffffffffffed1) fcntl$dupfd(r8, 0x406, r10) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000004c0)) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r11 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(0xffffffffffffffff) r12 = dup3(r1, r11, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x44, 0x7, 0x21, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a9590c30f2a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) r15 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x76}}, r15, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid(0x2, r15, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) sendmsg$key(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r13, @ANYRESDEC=r15]], 0xfffffffffffffe56}}, 0x20004850) sendmsg$key(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) [ 129.883335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.916733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 02:09:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) sendto$inet(r6, &(0x7f0000fa3fff), 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x8000, 0x204, 0x1f, 0x3f, 0x1, 0xfffffffb, 0x7, r7}, &(0x7f0000000200)=0x20) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000640)=[@in6={0xa, 0x4e20, 0x5, @mcast2, 0xffff}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}], 0x48) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000540)={r7, 0xf1, "815c65d67be22f0f0110d3e0425b023c9f506c14f46b65de9a03f0059950e54c23da4b233d9e4017da84733cf723fcc8c858b304283b93ccd16aa7166b217b8267dd8f7328c0c3aa8b7019df6f89b2161fabd8d3ab4639db6ff4a01114749119fd75995b32445f5f0f5f1787155eda2e788860f67532971974e28f61e6a0cf9266dab3b23a19a438b25d440cc6d338b269cd55d45b48beee0de21cbc1ae05992e1423cf3c289fb7bde6ca02a0d16a0b852ad25aaaab02308a9cef7465757429918eb3a21d1c5a317a2a5927a7cf9c37bbe03a2f4ec21603acdb0966ca76359981729201ad3d35aba0d4470beb64f216ac6"}, &(0x7f0000000000)=0xf9) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 129.969186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.002641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 130.013609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.038588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.067091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.091891] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 130.116366] input: syz1 as /devices/virtual/input/input5 [ 130.120566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 02:09:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x51c42, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getpeername$inet(r3, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) [ 130.156725] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 130.163360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.174226] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.182416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.196552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.241234] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 130.252437] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 130.267750] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.295216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.311898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.318618] input: syz1 as /devices/virtual/input/input6 [ 130.332139] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 02:09:39 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xe5152bd8c223f732) ftruncate(r2, 0x208200) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x101000, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000580)='./bus\x00', 0xd0174e98cd491b6a) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) name_to_handle_at(r5, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) write$FUSE_IOCTL(r3, &(0x7f00000001c0)={0x20, 0xfffffffffffffff5, 0x8, {0x0, 0x4, 0xff, 0x40}}, 0x20) fcntl$setstatus(r1, 0x4, 0x3fffe) open(&(0x7f0000000180)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x69, 0x2, {0x0, 0x4}}, 0xfffffff4) io_setup(0x4, &(0x7f00000004c0)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x8002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r8, &(0x7f0000000300)="750c9b008c382a9d9c90f8411d9bf4c65a340297a5c1bd3f91c773ef286af0e501e95201b7780248c892534aa537a3b4d10fcc8b0d86dde6c90ec6ed28367e41a8451b7defd067b4358faa581ac44a97816b18dfa141e4758941eb1515e4", &(0x7f0000000380)="58890362ec1120cdc98e7b1056a161dff656afc9480542f2c3a1b015225a0d443999c8e9eb2b6871ece89e3892749ad16b2df4128b70fd4de7674002ecab3fc50d7aed89095c2e627f430cd62ba96c7d93aa96abce3236a951c2e186dd613318f8843de023aeca516e71c9ac5622074b2c84bf1b3cbeae60e56556ca4c17513edbe99f1cb42371792ba52375bef800d1c6c79109709ba0f61697f3da3ebe4009dd9e70877d", 0x1}, 0x20) connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r9 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BLKPG(r9, 0x40140921, &(0x7f0000001200)={0x0, 0x9, 0x0, 0x0}) sendmmsg(r7, &(0x7f000000a280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r10 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) setsockopt$inet6_dccp_int(r10, 0x21, 0x4, &(0x7f0000000080)=0x1, 0x4) [ 130.346593] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 130.381716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.389527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.416670] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.423100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.452264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.460548] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.478202] md: md0 has zero or unknown size, marking faulty! [ 130.480375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.491240] md: md_import_device returned -22 [ 130.497774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.528386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.528753] md: md0 has zero or unknown size, marking faulty! [ 130.542154] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.548537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.549031] md: md_import_device returned -22 [ 130.562884] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 130.581088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.594421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 130.615604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.627735] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 130.636284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.644693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.655170] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 130.665062] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 130.674373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.681609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.689350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.697367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.705492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.716429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 130.724901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.738857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.749489] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 130.758811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 02:09:39 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xe5152bd8c223f732) ftruncate(r2, 0x208200) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x101000, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000580)='./bus\x00', 0xd0174e98cd491b6a) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) name_to_handle_at(r5, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) write$FUSE_IOCTL(r3, &(0x7f00000001c0)={0x20, 0xfffffffffffffff5, 0x8, {0x0, 0x4, 0xff, 0x40}}, 0x20) fcntl$setstatus(r1, 0x4, 0x3fffe) open(&(0x7f0000000180)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x69, 0x2, {0x0, 0x4}}, 0xfffffff4) io_setup(0x4, &(0x7f00000004c0)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x8002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r8, &(0x7f0000000300)="750c9b008c382a9d9c90f8411d9bf4c65a340297a5c1bd3f91c773ef286af0e501e95201b7780248c892534aa537a3b4d10fcc8b0d86dde6c90ec6ed28367e41a8451b7defd067b4358faa581ac44a97816b18dfa141e4758941eb1515e4", &(0x7f0000000380)="58890362ec1120cdc98e7b1056a161dff656afc9480542f2c3a1b015225a0d443999c8e9eb2b6871ece89e3892749ad16b2df4128b70fd4de7674002ecab3fc50d7aed89095c2e627f430cd62ba96c7d93aa96abce3236a951c2e186dd613318f8843de023aeca516e71c9ac5622074b2c84bf1b3cbeae60e56556ca4c17513edbe99f1cb42371792ba52375bef800d1c6c79109709ba0f61697f3da3ebe4009dd9e70877d", 0x1}, 0x20) connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r9 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BLKPG(r9, 0x40140921, &(0x7f0000001200)={0x0, 0x9, 0x0, 0x0}) sendmmsg(r7, &(0x7f000000a280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r10 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) setsockopt$inet6_dccp_int(r10, 0x21, 0x4, &(0x7f0000000080)=0x1, 0x4) [ 130.785713] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 130.804625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.856885] md: md0 has zero or unknown size, marking faulty! [ 130.877161] md: md_import_device returned -22 02:09:39 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_cancel(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8000, r6, &(0x7f0000000440)="4a9eb0f6570b10c7cd04f14456fe53ab6cf82087f6f2915bafe0ee7f1c63decdff4da9bcaef87917eed5cd28105a917fea04191e1396d8a4f54cf275ce6e3247e41a17c143e3d8a01f3bd305b1325cc859569b70a7d4314fa13023dd0ff8b258af85675910be63961d070488aac1b711ef96ccb126", 0x75, 0x8f, 0x0, 0x0, r9}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r10+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$ipvs(0x0) [ 130.910245] audit: type=1400 audit(1571364579.894:42): avc: denied { getrlimit } for pid=7695 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 02:09:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='m2\f\x06oo\xeb\x80sents\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2000000000, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r3, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={r9, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, {0x0, @in={{0x2, 0x4e23, @local}}, 0x0, 0x7}}, &(0x7f00000000c0)=0xfffffffffffffed1) fcntl$dupfd(r8, 0x406, r10) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000004c0)) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r11 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(0xffffffffffffffff) r12 = dup3(r1, r11, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x44, 0x7, 0x21, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a9590c30f2a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) r15 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x76}}, r15, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid(0x2, r15, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) sendmsg$key(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r13, @ANYRESDEC=r15]], 0xfffffffffffffe56}}, 0x20004850) sendmsg$key(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) 02:09:39 executing program 2: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$int_in(r1, 0x800060c0045006, &(0x7f0000000180)) read(r1, &(0x7f0000000100)=""/71, 0x47) r2 = accept4$rose(r1, &(0x7f0000000380)=@full={0xb, @dev, @null, 0x0, [@bcast, @rose, @rose, @rose, @null, @bcast]}, &(0x7f00000003c0)=0x40, 0x800) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0) poll(&(0x7f0000000040)=[{r3}], 0x1, 0x0) ioctl$int_in(r3, 0x800060c0045006, &(0x7f0000000180)) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0) poll(&(0x7f0000000040)=[{r4}], 0x1, 0x0) ioctl$int_in(r4, 0x800060c0045006, &(0x7f0000000180)) r5 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0) poll(&(0x7f0000000040)=[{r5}], 0x1, 0x0) ioctl$int_in(r5, 0x800060c0045006, &(0x7f0000000180)) read(r5, &(0x7f0000000100)=""/71, 0x47) r6 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0) poll(&(0x7f0000000040)=[{r6}], 0x1, 0x0) ioctl$int_in(r6, 0x800060c0045006, &(0x7f0000000180)) read(0xffffffffffffffff, &(0x7f0000000100)=""/71, 0x47) poll(&(0x7f0000000400)=[{r2, 0x36}, {r3}, {r4, 0x1008}, {r5, 0x1}, {0xffffffffffffffff, 0x11000}, {r6, 0x40}], 0x200000000000034d, 0x2) ioctl$int_in(r0, 0x800060c0045006, &(0x7f0000000180)) read(r0, &(0x7f0000000100)=""/71, 0x47) r7 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0) poll(&(0x7f0000000040)=[{r7}], 0x1, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0x5) read(r7, &(0x7f0000000100)=""/71, 0x47) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) ioctl$KDENABIO(r0, 0x4b36) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 02:09:39 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80004, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) sendto$inet(r7, &(0x7f0000fa3fff), 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="3acde707f2a37d356b7419518dae292b78bf84b6ac09bb1fed16d8366d7112e312", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x8000, 0x204, 0x1f, 0x3f, 0x1, 0xfffffffb, 0x7, r8}, &(0x7f0000000200)=0x20) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r8, 0xf8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000100)={r9, 0xad28}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r10) r11 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)='W', 0x1}], 0x1}, 0x0) write$cgroup_type(r10, &(0x7f0000000080)='threaded\x00', 0xfffffc61) 02:09:39 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xe5152bd8c223f732) ftruncate(r2, 0x208200) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x101000, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000580)='./bus\x00', 0xd0174e98cd491b6a) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) name_to_handle_at(r5, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) write$FUSE_IOCTL(r3, &(0x7f00000001c0)={0x20, 0xfffffffffffffff5, 0x8, {0x0, 0x4, 0xff, 0x40}}, 0x20) fcntl$setstatus(r1, 0x4, 0x3fffe) open(&(0x7f0000000180)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x69, 0x2, {0x0, 0x4}}, 0xfffffff4) io_setup(0x4, &(0x7f00000004c0)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x8002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r8, &(0x7f0000000300)="750c9b008c382a9d9c90f8411d9bf4c65a340297a5c1bd3f91c773ef286af0e501e95201b7780248c892534aa537a3b4d10fcc8b0d86dde6c90ec6ed28367e41a8451b7defd067b4358faa581ac44a97816b18dfa141e4758941eb1515e4", &(0x7f0000000380)="58890362ec1120cdc98e7b1056a161dff656afc9480542f2c3a1b015225a0d443999c8e9eb2b6871ece89e3892749ad16b2df4128b70fd4de7674002ecab3fc50d7aed89095c2e627f430cd62ba96c7d93aa96abce3236a951c2e186dd613318f8843de023aeca516e71c9ac5622074b2c84bf1b3cbeae60e56556ca4c17513edbe99f1cb42371792ba52375bef800d1c6c79109709ba0f61697f3da3ebe4009dd9e70877d", 0x1}, 0x20) connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r9 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BLKPG(r9, 0x40140921, &(0x7f0000001200)={0x0, 0x9, 0x0, 0x0}) sendmmsg(r7, &(0x7f000000a280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r10 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) setsockopt$inet6_dccp_int(r10, 0x21, 0x4, &(0x7f0000000080)=0x1, 0x4) 02:09:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x20000, 0x1, 0x10000000002}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18}, 0x18) sendto$inet(r0, &(0x7f0000000480)="8b", 0x1, 0xfffffffffffffffd, 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x1f, 0x400000) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000fff000/0x1000)=nil}) recvmmsg(r0, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/148, 0xff1e}], 0x1, 0x0, 0x326}}, {{0x0, 0xffffffffffffffcd, 0x0}}], 0x40001de, 0x0, 0x0) [ 131.009976] md: md0 has zero or unknown size, marking faulty! [ 131.017978] md: md_import_device returned -22 02:09:40 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x208200) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) fsync(r1) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x32) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCNOTTY(r4, 0x5422) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x40000000000001, 0x0) fchdir(r5) r6 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xa21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r6, &(0x7f0000000600)='4', 0x4100) open(&(0x7f0000000000)='./bus\x00', 0x43, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x3410c0, 0x0) 02:09:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='m2\f\x06oo\xeb\x80sents\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2000000000, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r3, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={r9, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, {0x0, @in={{0x2, 0x4e23, @local}}, 0x0, 0x7}}, &(0x7f00000000c0)=0xfffffffffffffed1) fcntl$dupfd(r8, 0x406, r10) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000004c0)) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r11 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(0xffffffffffffffff) r12 = dup3(r1, r11, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x44, 0x7, 0x21, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a9590c30f2a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) r15 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x76}}, r15, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid(0x2, r15, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) sendmsg$key(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r13, @ANYRESDEC=r15]], 0xfffffffffffffe56}}, 0x20004850) sendmsg$key(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) 02:09:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x40) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4110402}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x0, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f00000001c0)={0xffffffffffffff96, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) [ 131.271208] audit: type=1800 audit(1571364580.264:43): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16526 res=0 [ 131.409917] audit: type=1804 audit(1571364580.384:44): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir271897208/syzkaller.C2K1BR/3/file0/bus" dev="sda1" ino=16536 res=1 [ 131.420899] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:09:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cuse\x00', 0x2, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'}) sendmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6a8faace7ff9ff48044b5827d5d4ab3651696ca3e310af9e69ccd66c018091d122daf78742f6155718"]}}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='\x01\bEv/vcs#\x00', 0x0, 0x400) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x3}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) r5 = getpid() sched_setattr(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) ioctl$int_out(r6, 0x0, &(0x7f0000001900)) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) sendmmsg(r4, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000780)="0f8de6669ba9e6ee2e83bff9d261899bb647ca4787aa105bd2e9b35c0663c7e556e25f7b584c7916398cccb30d721747816fb152b163a79d46502ffe9793c24c5ede953501adc585db87a2cc7964d446aa12b5e4a2dd783f42a6ac6a564e441b0f97b5c46c35f8cc3c3c332b9bf088cb8acfce78400eb3d139ec6d5c1d1d711b505a4287f80b4b44bc47c6ef01a1f9a91c51c5f0afb271e2ddcfe9b427dcd9d5b266", 0xa2}, {&(0x7f0000000840)="0f2cd78559fae92f93589037ac1c4dcfd1518f629dcaf4d5e1b6ca91a07a2c1d1878b4dbd4fb3801dda1e671ff8244ff9d3df4c8e2e9cbe253b406ff7c9e40b3176625df976ac2b52546954d9167357a2ea71dbb91c1435d189170e04ff510a9c52feeb2356983f58a1fed974d3062342d98d3ce0fd6b38fe12315632dee4b9de64e529c42b98f6b8127d9966cbcec", 0x8f}, {&(0x7f0000000280)="4e8290accf6bef9a0bfbfe1563799deddb4ad2b6c3946be8ea555e0c9831b59b4adf4c12eff86bef0d0b81d78ef529271b48963b54dbb2490fd2f2", 0x3b}], 0x4}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000400)='erspan0\x00', 0x700e) sendmmsg(r4, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f0000001900)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 02:09:40 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_setup(0x2, &(0x7f00000004c0)=0x0) io_destroy(r0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000040)=0x80000001) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r8, r7, 0x0) r9 = dup2(r5, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socket$inet6(0xa, 0x6, 0x6) recvmmsg(r2, &(0x7f0000004a40), 0x6ab, 0x0, 0x0) 02:09:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS(r0, 0x5413, &(0x7f0000000040)) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0xa0221) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000000c0)) [ 131.637421] audit: type=1400 audit(1571364580.624:45): avc: denied { name_bind } for pid=7743 comm="syz-executor.1" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 131.732784] audit: type=1400 audit(1571364580.654:46): avc: denied { node_bind } for pid=7743 comm="syz-executor.1" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 131.799775] audit: type=1400 audit(1571364580.724:47): avc: denied { name_connect } for pid=7743 comm="syz-executor.1" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 02:09:41 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_cancel(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8000, r6, &(0x7f0000000440)="4a9eb0f6570b10c7cd04f14456fe53ab6cf82087f6f2915bafe0ee7f1c63decdff4da9bcaef87917eed5cd28105a917fea04191e1396d8a4f54cf275ce6e3247e41a17c143e3d8a01f3bd305b1325cc859569b70a7d4314fa13023dd0ff8b258af85675910be63961d070488aac1b711ef96ccb126", 0x75, 0x8f, 0x0, 0x0, r9}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r10+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 02:09:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="000000003af254e5140239ec0d00000000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x4}}, 0x20}}, 0x0) 02:09:41 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000440)={'caif0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local}) r3 = creat(0x0, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x200000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) dup3(r4, r5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f00000002c0)=0xc) r7 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x8, 0x80a4c0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) kcmp(0x0, r6, 0x2, r7, r8) sched_setattr(r6, &(0x7f00000000c0)={0x30, 0x0, 0x0, 0x8000, 0x2, 0x8000, 0x35ad, 0xa00a}, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000ce005fba000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) 02:09:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cuse\x00', 0x2, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'}) sendmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6a8faace7ff9ff48044b5827d5d4ab3651696ca3e310af9e69ccd66c018091d122daf78742f6155718"]}}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='\x01\bEv/vcs#\x00', 0x0, 0x400) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x3}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) r5 = getpid() sched_setattr(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) ioctl$int_out(r6, 0x0, &(0x7f0000001900)) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) sendmmsg(r4, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000780)="0f8de6669ba9e6ee2e83bff9d261899bb647ca4787aa105bd2e9b35c0663c7e556e25f7b584c7916398cccb30d721747816fb152b163a79d46502ffe9793c24c5ede953501adc585db87a2cc7964d446aa12b5e4a2dd783f42a6ac6a564e441b0f97b5c46c35f8cc3c3c332b9bf088cb8acfce78400eb3d139ec6d5c1d1d711b505a4287f80b4b44bc47c6ef01a1f9a91c51c5f0afb271e2ddcfe9b427dcd9d5b266", 0xa2}, {&(0x7f0000000840)="0f2cd78559fae92f93589037ac1c4dcfd1518f629dcaf4d5e1b6ca91a07a2c1d1878b4dbd4fb3801dda1e671ff8244ff9d3df4c8e2e9cbe253b406ff7c9e40b3176625df976ac2b52546954d9167357a2ea71dbb91c1435d189170e04ff510a9c52feeb2356983f58a1fed974d3062342d98d3ce0fd6b38fe12315632dee4b9de64e529c42b98f6b8127d9966cbcec", 0x8f}, {&(0x7f0000000280)="4e8290accf6bef9a0bfbfe1563799deddb4ad2b6c3946be8ea555e0c9831b59b4adf4c12eff86bef0d0b81d78ef529271b48963b54dbb2490fd2f2", 0x3b}], 0x4}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000400)='erspan0\x00', 0x700e) sendmmsg(r4, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f0000001900)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) [ 132.172622] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:09:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="000000003af254e5140239ec0d00000000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x4}}, 0x20}}, 0x0) [ 132.452366] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:09:41 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_cancel(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8000, r6, &(0x7f0000000440)="4a9eb0f6570b10c7cd04f14456fe53ab6cf82087f6f2915bafe0ee7f1c63decdff4da9bcaef87917eed5cd28105a917fea04191e1396d8a4f54cf275ce6e3247e41a17c143e3d8a01f3bd305b1325cc859569b70a7d4314fa13023dd0ff8b258af85675910be63961d070488aac1b711ef96ccb126", 0x75, 0x8f, 0x0, 0x0, r9}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r10+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 02:09:41 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 02:09:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:41 executing program 3: set_mempolicy(0x2, &(0x7f0000000040)=0x3, 0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000000, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/\x81\xc9z\x9b\xc4$xer\x1c', 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x7a, 0x4, 0x6b, 0x20, 0x1, 0x9, 0x7, 0x1a, 0x0, 0x8}, 0xb) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) 02:09:41 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x45, 0x75}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/v/sync_sock_size\x00\x00', 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa9, &(0x7f00000001c0)=0xaff4, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r3, &(0x7f0000000200)="131f40336f3fb324d3e8519f99a77c42d2b4d282e20d699fc919bf65f983a44ecadc89c4fb691dc0a96c90b55f446303c5efb1e0b67b6da6c17deb486ad14a250e33cfb0e6f26337ecc8ff31b595424e0aa10e95a59326d32205b8c64080529f6e20d7c8e0b6669275eddd890356db5c17dff60937fda8a39a2319f4e48b90f679b940b2529a0480b4e7b5abe377f053c6e8db14b67f9c911fc9f30b775123867420c8f8893f65a3123e65210e0cc10addd0b7c74b759840344bff6c62b301c5a710ec242e8d1bbf1d1a78feacec3143c055609a", 0xd4, 0x20510f7213aca5f, &(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000140)={0x4c, ""/76}) [ 132.766898] audit: type=1400 audit(1571364581.754:48): avc: denied { map } for pid=7799 comm="syz-executor.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28290 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 02:09:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 132.933455] audit: type=1400 audit(1571364581.874:49): avc: denied { prog_load } for pid=7806 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 02:09:42 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0xcb, "c65289d841e480ee1dc6dfc48694192d1438e64b63c38f051814160b479c56310a06859190f3670ffe394ab6f39def60946765108421be67e16c6eafb80756b7e0dd4bc4f804f7a0b1a836dbcbd899524fd9d9fd83a34ac21116460092341ed13b7a05ca870014e2e20a795e47d5f557ac4a9b764685f0ca8a7b40def311afeca8b3e0193de98060d2e29f705367a10bd766f2536adacaea9a3c3369fe1d0a358a57436fcf7ccf057da1c95e897263abaff8ec07b28b3970102cb211e04f0818d7b581d8d19752780e3c1a"}, &(0x7f0000000080)=0xef) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:42 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_cancel(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8000, r6, &(0x7f0000000440)="4a9eb0f6570b10c7cd04f14456fe53ab6cf82087f6f2915bafe0ee7f1c63decdff4da9bcaef87917eed5cd28105a917fea04191e1396d8a4f54cf275ce6e3247e41a17c143e3d8a01f3bd305b1325cc859569b70a7d4314fa13023dd0ff8b258af85675910be63961d070488aac1b711ef96ccb126", 0x75, 0x8f, 0x0, 0x0, r9}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r10+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 02:09:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:42 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0xcb, "c65289d841e480ee1dc6dfc48694192d1438e64b63c38f051814160b479c56310a06859190f3670ffe394ab6f39def60946765108421be67e16c6eafb80756b7e0dd4bc4f804f7a0b1a836dbcbd899524fd9d9fd83a34ac21116460092341ed13b7a05ca870014e2e20a795e47d5f557ac4a9b764685f0ca8a7b40def311afeca8b3e0193de98060d2e29f705367a10bd766f2536adacaea9a3c3369fe1d0a358a57436fcf7ccf057da1c95e897263abaff8ec07b28b3970102cb211e04f0818d7b581d8d19752780e3c1a"}, &(0x7f0000000080)=0xef) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x5, 0x3}) open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, 0x0}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0xff00, 0x0) tkill(r2, 0x16) 02:09:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:42 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0xcb, "c65289d841e480ee1dc6dfc48694192d1438e64b63c38f051814160b479c56310a06859190f3670ffe394ab6f39def60946765108421be67e16c6eafb80756b7e0dd4bc4f804f7a0b1a836dbcbd899524fd9d9fd83a34ac21116460092341ed13b7a05ca870014e2e20a795e47d5f557ac4a9b764685f0ca8a7b40def311afeca8b3e0193de98060d2e29f705367a10bd766f2536adacaea9a3c3369fe1d0a358a57436fcf7ccf057da1c95e897263abaff8ec07b28b3970102cb211e04f0818d7b581d8d19752780e3c1a"}, &(0x7f0000000080)=0xef) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:42 executing program 2: socket$inet(0x2, 0x200000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @empty, 0x4}, @in={0x2, 0x4e20, @rand_addr=0x3ff}, @in={0x2, 0x4e22, @multicast1}], 0x3c) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x2000000) [ 133.911101] audit: type=1400 audit(1571364582.894:50): avc: denied { map } for pid=7848 comm="syz-executor.2" path="/dev/nullb0" dev="devtmpfs" ino=175 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 02:09:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:43 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0xcb, "c65289d841e480ee1dc6dfc48694192d1438e64b63c38f051814160b479c56310a06859190f3670ffe394ab6f39def60946765108421be67e16c6eafb80756b7e0dd4bc4f804f7a0b1a836dbcbd899524fd9d9fd83a34ac21116460092341ed13b7a05ca870014e2e20a795e47d5f557ac4a9b764685f0ca8a7b40def311afeca8b3e0193de98060d2e29f705367a10bd766f2536adacaea9a3c3369fe1d0a358a57436fcf7ccf057da1c95e897263abaff8ec07b28b3970102cb211e04f0818d7b581d8d19752780e3c1a"}, &(0x7f0000000080)=0xef) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_ro(r4, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:43 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_cancel(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8000, r6, &(0x7f0000000440)="4a9eb0f6570b10c7cd04f14456fe53ab6cf82087f6f2915bafe0ee7f1c63decdff4da9bcaef87917eed5cd28105a917fea04191e1396d8a4f54cf275ce6e3247e41a17c143e3d8a01f3bd305b1325cc859569b70a7d4314fa13023dd0ff8b258af85675910be63961d070488aac1b711ef96ccb126", 0x75, 0x8f, 0x0, 0x0, r9}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r10+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 02:09:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r3 = shmget$private(0x0, 0x14000, 0x2, &(0x7f0000000000/0x14000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x109082, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000180)) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x0) dup3(r6, r4, 0x0) read$alg(r4, 0x0, 0x1e4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r10, 0x80404508, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r9, 0xc0385720, &(0x7f00000000c0)={0x0, {}, 0x0, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x200, 0x5786624605e52510}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r8, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "a11fd9bb777ed6d2de013aa84c1780812dde64019c3679140f98742d991c188999137e2c0c273c01ce5ee4a98e9a5f9621977495adc63b5e42cfed5f869c9b9c3762653da39cff6f836d3d8c2f820218e7f36d69edfe4f6100003ba171580d5d229a27995ec89a2ae6ea35537a994f882cb14b30ea1e81f4ffce42d406d795b1667439abc3912178aa17fed740c80915b5df43ad2e40db2e0c07023314ebb582148f97bf4b7f329a3f160dfa8dc19707f955096b143bd08da435072e87ba883dfc7fec35c82353166a54070000004068adc33e99bed553bae5b0410241e3d969c47980bfb66acc42eae3297dadf62b3f5d48f2bbbae626416b7f89ba77f540b4", 0x0, 0x4, 0x0, 0x8, 0x100000000, 0x5, 0x3}, r11}}, 0xffffffffffffffad) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000b80)={0x3, &(0x7f0000000b40)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r9, 0xc0086423, &(0x7f0000000c00)={r12}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r8, 0xc010641d, &(0x7f0000000100)={r12, &(0x7f0000000000)=""/250}) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000000)={r12, 0x1}) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r13, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$TCSETS(r13, 0x40045431, &(0x7f00003b9fdc)) r14 = syz_open_pts(r13, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x1e4) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = fcntl$dupfd(r15, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) r17 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r18 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r18, 0x80404508, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r17, 0xc0385720, &(0x7f00000000c0)={0x1, {r19, r20+30000000}, 0x0, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f00000002c0)={0x0, 0x14d114775de95e04, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x200, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r16, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x4, 0x0, 0x8, 0x100000000, 0x5, 0x3}, r21}}, 0xffffffffffffffad) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000b80)={0x3, &(0x7f0000000b40)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r17, 0xc0086423, &(0x7f0000000c00)={r22}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r16, 0xc010641d, &(0x7f0000000100)={r22, &(0x7f0000000000)=""/250}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={r22, 0x1}) r23 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) r24 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r24, 0x5402, &(0x7f0000000180)) ioctl$TCSETS(r24, 0x40045431, &(0x7f00003b9fdc)) r25 = syz_open_pts(r24, 0x0) dup3(r25, r23, 0x0) read$alg(r23, 0x0, 0x1e4) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = fcntl$dupfd(r26, 0x0, r26) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r29 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r29, 0x80404508, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r28, 0xc0385720, &(0x7f00000000c0)={0x1, {r30, r31+30000000}, 0x0, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(r29, &(0x7f00000002c0)={0x0, 0x14d114775de95e04, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x200, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r27, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "a11fd9bb777ed6d2de013aa84c1780812dde64019c3679140f98742d991c188999137e2c0c273c01ce5ee4a98e9a5f9621977495adc63b5e42cfed5f869c9b9c3762653da39cff6f836d3d8c2f820218e7f36d69edfe4f6100003ba171580d5d229a27995ec89a2ae6ea35537a994f882cb14b30ea1e81f4ffce42d406d795b1667439abc3912178aa17fed740c80915b5df43ad2e40db2e0c07023314ebb582148f97bf4b7f329a3f160dfa8dc19707f955096b143bd08da435072e87ba883dfc7fec35c82353166a54070000004068adc33e99bed553bae5b0410241e3d969c47980bfb66acc42eae3297dadf62b3f5d48f2bbbae626416b7f89ba77f540b4", 0x0, 0x4, 0x0, 0x8, 0x100000000, 0x5, 0x3}, r32}}, 0xffffffffffffffad) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000b80)={0x3, &(0x7f0000000b40)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r28, 0xc0086423, &(0x7f0000000c00)={r33}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r27, 0xc010641d, &(0x7f0000000100)={r33, &(0x7f0000000000)=""/250}) ioctl$DRM_IOCTL_SWITCH_CTX(r23, 0x40086424, &(0x7f0000000000)={r33, 0x1}) ioctl$DRM_IOCTL_RES_CTX(r9, 0xc0106426, &(0x7f0000000380)={0x0, &(0x7f0000000400)}) r34 = syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x1, 0x2) r35 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) r36 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r36, 0x5402, &(0x7f0000000180)) ioctl$TCSETS(r36, 0x40045431, &(0x7f00003b9fdc)) r37 = syz_open_pts(r36, 0x0) dup3(r37, r35, 0x0) read$alg(r35, 0x0, 0x1e4) r38 = socket$inet6_tcp(0xa, 0x1, 0x0) r39 = fcntl$dupfd(r38, 0x0, r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) r40 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r41 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r41, 0x80404508, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r40, 0xc0385720, &(0x7f00000000c0)={0x1, {r42, r43+30000000}, 0x0, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(r41, &(0x7f00000002c0)={0x0, 0x14d114775de95e04, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x200, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r39, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x4, 0x0, 0x8, 0x100000000, 0x5, 0x3}, r44}}, 0xffffffffffffffad) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000b80)={0x3, &(0x7f0000000b40)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r40, 0xc0086423, &(0x7f0000000c00)={r45}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r39, 0xc010641d, &(0x7f0000000100)={r45, &(0x7f0000000000)=""/250}) ioctl$DRM_IOCTL_SWITCH_CTX(r35, 0x40086424, &(0x7f0000000000)={r45, 0x1}) ioctl$DRM_IOCTL_NEW_CTX(r34, 0x40086425, &(0x7f0000000300)={r45, 0x2}) shmctl$SHM_LOCK(r3, 0xb) r46 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r47 = socket$inet6_tcp(0xa, 0x1, 0x0) r48 = dup3(r47, r46, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r48, 0x8912, 0x400200) r49 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r50 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r50, r49, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) r51 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r51, 0x8914, &(0x7f0000000100)={'batadv0\x00\x06\bz\x00\x00\x00\xfd\x00', 0xf7fffffffffffffd}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) setsockopt$IP_VS_SO_SET_DELDEST(r51, 0x0, 0x488, &(0x7f0000000200)={{0x2f, @dev={0xac, 0x14, 0x14, 0x1c}, 0x4e22, 0x1, 'lc\x00', 0x0, 0xa0, 0xb}, {@loopback, 0x4e2a, 0x0, 0x1, 0x0, 0x800}}, 0x44) r52 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r53 = socket$inet6_tcp(0xa, 0x1, 0x0) r54 = dup3(r53, r52, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r54, 0x8912, 0x400200) ioctl$GIO_FONT(r54, 0x4b60, &(0x7f0000000140)=""/174) 02:09:43 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0xcb, "c65289d841e480ee1dc6dfc48694192d1438e64b63c38f051814160b479c56310a06859190f3670ffe394ab6f39def60946765108421be67e16c6eafb80756b7e0dd4bc4f804f7a0b1a836dbcbd899524fd9d9fd83a34ac21116460092341ed13b7a05ca870014e2e20a795e47d5f557ac4a9b764685f0ca8a7b40def311afeca8b3e0193de98060d2e29f705367a10bd766f2536adacaea9a3c3369fe1d0a358a57436fcf7ccf057da1c95e897263abaff8ec07b28b3970102cb211e04f0818d7b581d8d19752780e3c1a"}, &(0x7f0000000080)=0xef) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:43 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0xcb, "c65289d841e480ee1dc6dfc48694192d1438e64b63c38f051814160b479c56310a06859190f3670ffe394ab6f39def60946765108421be67e16c6eafb80756b7e0dd4bc4f804f7a0b1a836dbcbd899524fd9d9fd83a34ac21116460092341ed13b7a05ca870014e2e20a795e47d5f557ac4a9b764685f0ca8a7b40def311afeca8b3e0193de98060d2e29f705367a10bd766f2536adacaea9a3c3369fe1d0a358a57436fcf7ccf057da1c95e897263abaff8ec07b28b3970102cb211e04f0818d7b581d8d19752780e3c1a"}, &(0x7f0000000080)=0xef) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_ro(r4, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_ro(r4, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:44 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0xcb, "c65289d841e480ee1dc6dfc48694192d1438e64b63c38f051814160b479c56310a06859190f3670ffe394ab6f39def60946765108421be67e16c6eafb80756b7e0dd4bc4f804f7a0b1a836dbcbd899524fd9d9fd83a34ac21116460092341ed13b7a05ca870014e2e20a795e47d5f557ac4a9b764685f0ca8a7b40def311afeca8b3e0193de98060d2e29f705367a10bd766f2536adacaea9a3c3369fe1d0a358a57436fcf7ccf057da1c95e897263abaff8ec07b28b3970102cb211e04f0818d7b581d8d19752780e3c1a"}, &(0x7f0000000080)=0xef) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_ro(r4, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/context\x00', 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r10, &(0x7f0000000600)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), 0xffffffffffffffff, 0x1}}, 0x18) bind$bt_rfcomm(r7, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) r11 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r11, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x91020000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r11, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x44010) r12 = dup3(r2, r1, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) accept4$ax25(r12, &(0x7f00000001c0)={{0x3, @bcast}, [@netrom, @netrom, @netrom, @netrom, @null, @null, @netrom, @default]}, &(0x7f0000000240)=0x48, 0x80000) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000210000000000000000005dc2ff334d00cd67d73abe000000000000000000000000000001000000f90723b75b70917d319ddfa581c4cc4bbeb820f882990df759e5e297342b701cd6e083f2abd3f49d3d343ce3828126751e3ba6d5ad51c6543c2ebd6c3f290be869f6e6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000ac14140000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000fc00"/240], 0x4}, 0x1, 0x0, 0x0, 0x40010}, 0x20000020) 02:09:44 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_cancel(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8000, r6, &(0x7f0000000440)="4a9eb0f6570b10c7cd04f14456fe53ab6cf82087f6f2915bafe0ee7f1c63decdff4da9bcaef87917eed5cd28105a917fea04191e1396d8a4f54cf275ce6e3247e41a17c143e3d8a01f3bd305b1325cc859569b70a7d4314fa13023dd0ff8b258af85675910be63961d070488aac1b711ef96ccb126", 0x75, 0x8f, 0x0, 0x0, r9}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r10+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:44 executing program 2: socket$inet(0x2, 0xa, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r2, &(0x7f0000000340)=@ax25={{0x3, @null}, [@default, @bcast, @default, @bcast, @rose, @rose, @default, @bcast]}, &(0x7f0000000240)=0x80) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) sendto$inet(r6, &(0x7f0000fa3fff), 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x8000, 0x204, 0x1f, 0x3f, 0x1, 0xfffffffb, 0x7, r7}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000003c0)={0x6, 0x0, 0x7, 0x1000, r7}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$sock_inet_SIOCRTMSG(r10, 0x890d, &(0x7f00000002c0)={0x0, {0x2, 0x4e20, @rand_addr=0x864d}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='ip6erspan0\x00', 0x3, 0x12, 0x14a}) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r11, 0x0) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r12, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup3(r14, r13, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = socket$inet(0x2, 0x4000000805, 0x0) r17 = socket$inet_sctp(0x2, 0x5, 0x84) r18 = dup3(r16, r17, 0x0) sendto$inet(r18, &(0x7f0000fa3fff), 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r18, 0x84, 0x66, &(0x7f000059aff8)={r19}, &(0x7f000034f000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x8000, 0x204, 0x1f, 0x3f, 0x1, 0xfffffffb, 0x7, r19}, &(0x7f0000000200)=0x20) r20 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r21 = socket$inet6_tcp(0xa, 0x1, 0x0) r22 = dup3(r21, r20, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r24 = socket$inet6_tcp(0xa, 0x1, 0x0) r25 = dup3(r24, r23, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r25, 0x8912, 0x400200) r26 = socket$inet(0x2, 0x4000000805, 0x0) r27 = socket$inet_sctp(0x2, 0x5, 0x84) r28 = dup3(r26, r27, 0x0) sendto$inet(r28, &(0x7f0000fa3fff), 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r28, 0x84, 0x66, &(0x7f000059aff8)={r29}, &(0x7f000034f000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x8000, 0x204, 0x1f, 0x3f, 0x1, 0xfffffffb, 0x7, r29}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001400)={r29, 0x7fff, 0x5}, &(0x7f0000001440)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r25, 0x84, 0x7c, &(0x7f0000000000)={r30, 0x5, 0xbc}, &(0x7f00000000c0)=0x2e7) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r15, 0x84, 0x6, &(0x7f0000000100)={r31, @in={{0x2, 0x4e23, @rand_addr=0x3}}}, 0x84) 02:09:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_ro(r4, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:44 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0x9e, [], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=""/158}, &(0x7f0000000280)=0x78) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r3, 0x3f}, 0x8) pipe2(0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) syz_genetlink_get_family_id$tipc(0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) read(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) [ 135.379348] audit: type=1400 audit(1571364584.364:51): avc: denied { map } for pid=7913 comm="syz-executor.3" path="socket:[28787]" dev="sockfs" ino=28787 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 [ 135.406543] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 02:09:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_ro(r4, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 135.497917] serio: Serial port ptm1 02:09:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_ro(r4, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:44 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 136.184988] serio: Serial port ptm2 02:09:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:45 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:45 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x101000, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000280)="713f3c2e82eb38b5012db5df3c90cd6662e87c6de76797728209e78ce2f55e8b0bdab58b2bec17aa94685f218c31e6db5a0d9c966a2f26aee6a9d60756d9fb81c531e9cf4a7a9802e2c4305ac530c1055b18db89070a8547a84446b39f3c7caea96e23cb8b0fc11558ecb1be80311bea") add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000180)="e557141ab9608f6fa268", 0xa, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x0, 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @multicast2, @local}, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ftruncate(r2, 0x200003) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x9464}, &(0x7f00000001c0)=0x8) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x6c04db61907ce95}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='\xa7\x91pTmx\x00', 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) read(r5, 0x0, 0xffffff7c) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 02:09:45 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_cancel(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8000, r6, &(0x7f0000000440)="4a9eb0f6570b10c7cd04f14456fe53ab6cf82087f6f2915bafe0ee7f1c63decdff4da9bcaef87917eed5cd28105a917fea04191e1396d8a4f54cf275ce6e3247e41a17c143e3d8a01f3bd305b1325cc859569b70a7d4314fa13023dd0ff8b258af85675910be63961d070488aac1b711ef96ccb126", 0x75, 0x8f, 0x0, 0x0, r9}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r10+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:45 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 136.439483] syz-executor.2 (7917) used greatest stack depth: 22224 bytes left 02:09:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 136.556893] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 136.578026] audit: type=1400 audit(1571364585.564:52): avc: denied { map } for pid=7964 comm="syz-executor.3" path="/root/syzkaller-testdir271897208/syzkaller.C2K1BR/8/file0/bus" dev="ramfs" ino=28968 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ramfs_t:s0 tclass=file permissive=1 02:09:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:45 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:45 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:45 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0xbe2187d6cd02827f, 0x0) recvmmsg(r0, &(0x7f00000028c0), 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000003240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0xa) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 02:09:45 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:45 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x101000, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000280)="713f3c2e82eb38b5012db5df3c90cd6662e87c6de76797728209e78ce2f55e8b0bdab58b2bec17aa94685f218c31e6db5a0d9c966a2f26aee6a9d60756d9fb81c531e9cf4a7a9802e2c4305ac530c1055b18db89070a8547a84446b39f3c7caea96e23cb8b0fc11558ecb1be80311bea") add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000180)="e557141ab9608f6fa268", 0xa, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x0, 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @multicast2, @local}, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ftruncate(r2, 0x200003) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x9464}, &(0x7f00000001c0)=0x8) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x6c04db61907ce95}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='\xa7\x91pTmx\x00', 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) read(r5, 0x0, 0xffffff7c) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 02:09:46 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_cancel(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8000, r6, &(0x7f0000000440)="4a9eb0f6570b10c7cd04f14456fe53ab6cf82087f6f2915bafe0ee7f1c63decdff4da9bcaef87917eed5cd28105a917fea04191e1396d8a4f54cf275ce6e3247e41a17c143e3d8a01f3bd305b1325cc859569b70a7d4314fa13023dd0ff8b258af85675910be63961d070488aac1b711ef96ccb126", 0x75, 0x8f, 0x0, 0x0, r9}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r10+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:46 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:46 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:46 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:46 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) r3 = dup2(r2, r0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000180)={0x9, 0x3f}) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030000020000010100000000000000769bf82ab58269a5c80f9f619027560f98c594b7be1cfe898304c81502ce329180d38c35ef19d33a2e3db453905e774358e7aa492cb469fc96566a5afbbc07dd63a4c39d20568f2f3ee5a4342fbae6d33abdf7ffaeffd76bad2520ee526a9495047b647c9f668333c5b1d9e46e8f996e2c8ed1fc98c8ba902d0a4dbf0a01cad4e0a91201d9c7994f288598442a78642e8af9e51d37230783816ab5b6ccce3b45cc78648f55baa7e428db0893f6a7a7659239d6768b3a139dcd6c"], 0x10}}, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) 02:09:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400201) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x80, 0x1000) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000040)={0x7, "4ce2a571f3238e2042adf6b6153f13992e43dcfc6f3aa6e502a72976c5bf22e5", 0x1, 0x1}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc020660b, 0x400002) 02:09:46 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:46 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:46 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000200000000, 0x10002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) truncate(&(0x7f0000000080)='./file0\x00', 0x4) 02:09:46 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:47 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_cancel(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8000, r5, &(0x7f0000000440)="4a9eb0f6570b10c7cd04f14456fe53ab6cf82087f6f2915bafe0ee7f1c63decdff4da9bcaef87917eed5cd28105a917fea04191e1396d8a4f54cf275ce6e3247e41a17c143e3d8a01f3bd305b1325cc859569b70a7d4314fa13023dd0ff8b258af85675910be63961d070488aac1b711ef96ccb126", 0x75, 0x8f, 0x0, 0x0, r8}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) 02:09:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:47 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:47 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$netlink(r0, &(0x7f00000001c0)=@unspec, 0xc) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4e46a020}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f0000000100013070000000000000000fe800000000000000000000000000000e0000001000000000000000000000000000000000000000000000000b7e70a6825a8ead4f600000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/168], 0xf0}}, 0x0) 02:09:47 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:47 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:47 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f0000000080)={0x10}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@utf8no='utf8=0'}]}) 02:09:47 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:47 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:47 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 138.419189] FAT-fs (loop2): bogus number of reserved sectors [ 138.440955] FAT-fs (loop2): Can't find a valid FAT filesystem 02:09:48 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_cancel(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8000, r5, &(0x7f0000000440)="4a9eb0f6570b10c7cd04f14456fe53ab6cf82087f6f2915bafe0ee7f1c63decdff4da9bcaef87917eed5cd28105a917fea04191e1396d8a4f54cf275ce6e3247e41a17c143e3d8a01f3bd305b1325cc859569b70a7d4314fa13023dd0ff8b258af85675910be63961d070488aac1b711ef96ccb126", 0x75, 0x8f, 0x0, 0x0, r8}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) 02:09:48 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:48 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:48 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:48 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:48 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:48 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:48 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x0, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:48 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:48 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x0, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:48 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_cancel(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8000, r5, &(0x7f0000000440)="4a9eb0f6570b10c7cd04f14456fe53ab6cf82087f6f2915bafe0ee7f1c63decdff4da9bcaef87917eed5cd28105a917fea04191e1396d8a4f54cf275ce6e3247e41a17c143e3d8a01f3bd305b1325cc859569b70a7d4314fa13023dd0ff8b258af85675910be63961d070488aac1b711ef96ccb126", 0x75, 0x8f, 0x0, 0x0, r8}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) 02:09:48 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:48 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x77, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaa95e50f17ffffffff663682aaaaaaaab4aaaa00080049000028000000000000907800000000000078da6ca0ae8be80ad044000000000042000000000000000000000000000000007344da8e76754c8cfcf9215c3f9a25a9f33af6e68aa0fb5b057065fd93b2cb2ac7c88b2a807f096e2570f527bda9e7d47374dfe8bcfcd3f3381b83d339830bfe7c3d17eed6082b8b2f763ac17afb3bb2bafcadaa006ae78fdc3fa7a8d21466741efaf557ce69cb6a81d5046662d6ecb81eaa64fcb1efdf2c05a368f14f"], 0x0) 02:09:48 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x0, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:49 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_cancel(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8000, r5, &(0x7f0000000440)="4a9eb0f6570b10c7cd04f14456fe53ab6cf82087f6f2915bafe0ee7f1c63decdff4da9bcaef87917eed5cd28105a917fea04191e1396d8a4f54cf275ce6e3247e41a17c143e3d8a01f3bd305b1325cc859569b70a7d4314fa13023dd0ff8b258af85675910be63961d070488aac1b711ef96ccb126", 0x75, 0x8f, 0x0, 0x0, r8}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) 02:09:49 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:49 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x0, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:49 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_cancel(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8000, r6, &(0x7f0000000440)="4a9eb0f6570b10c7cd04f14456fe53ab6cf82087f6f2915bafe0ee7f1c63decdff4da9bcaef87917eed5cd28105a917fea04191e1396d8a4f54cf275ce6e3247e41a17c143e3d8a01f3bd305b1325cc859569b70a7d4314fa13023dd0ff8b258af85675910be63961d070488aac1b711ef96ccb126", 0x75, 0x8f, 0x0, 0x0, r9}, &(0x7f0000000540)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:49 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000040)=0x80) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) r5 = syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0x0, 0x200000) write$P9_RAUTH(r5, &(0x7f00000003c0)={0x14, 0x67, 0x1, {0x61, 0x1, 0x5}}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="abdd3fa4feff"], 0x31) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="00fb520306d0558a1bbe9f2ad321a35f4db0c791a54f9cfa934a48ef96283a1676ebb43a410b141de2b4d70fa1c71779021f7314d5b06b13d4db45fc970304633175959c97c8e244f3e7e4481a94bd4522650a38635c2ed228770e0d2c2365ad12502e36ecac0bfba27ca12b199899289ab2e99539033e28e740dc4d9811d01cf81b85e386bc3f7dfbcae6961f64d81105e109ef34c32a4e02d41898b2d6155167f7e3aa662db83f00f2a5464fa35c5f88d0f9b5d6db481e155374d1c6a24560d294e7bf246e6be9b203f7b20118b8210a6fcbe0682f8f8bc4b5b1673451c6d7f5b4a32b8fd95e17119c192d1df7fb2902ecebaad971f22ed2100b5af04457f5fb39cce2c70fdefe43968c3ed762635fe8d3e6b5464d18f49a3a08939ba9d9226b84de00178261c3971fa1dfe0e36072f3818106a7b768789162da033ba790592ba5d15d3021b91f4db7f2a33af75d6512369c37488895054f19b9c7f1e74b4e5b98316b701212ed43b8307162ec37c3eb586c64e6daffa44758349348f60e46c5380e43dc690e6d2a1a1fd5bc846b97c03327bf7357238ff0de2fd83df45a56526356b31ae464fa761c17f71b8cc22f3d994ec1e720cb2edfdda4193dc5f09a6cbdc50def0d043a0000000000000000"], 0x52, 0x3) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r7, 0x23f, 0x0, 0x0, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x02'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10210040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x24, r7, 0x800, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x7}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4080000) 02:09:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x0, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:50 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_cancel(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8000, r5, &(0x7f0000000440)="4a9eb0f6570b10c7cd04f14456fe53ab6cf82087f6f2915bafe0ee7f1c63decdff4da9bcaef87917eed5cd28105a917fea04191e1396d8a4f54cf275ce6e3247e41a17c143e3d8a01f3bd305b1325cc859569b70a7d4314fa13023dd0ff8b258af85675910be63961d070488aac1b711ef96ccb126", 0x75, 0x8f, 0x0, 0x0, r8}, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) 02:09:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x0, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:50 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:50 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_cancel(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8000, r6, &(0x7f0000000440)="4a9eb0f6570b10c7cd04f14456fe53ab6cf82087f6f2915bafe0ee7f1c63decdff4da9bcaef87917eed5cd28105a917fea04191e1396d8a4f54cf275ce6e3247e41a17c143e3d8a01f3bd305b1325cc859569b70a7d4314fa13023dd0ff8b258af85675910be63961d070488aac1b711ef96ccb126", 0x75, 0x8f, 0x0, 0x0, r9}, &(0x7f0000000540)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0b") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:50 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:51 executing program 3: openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x223, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7fb, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) 02:09:51 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r2, 0xc) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) 02:09:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0b") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:51 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_cancel(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x8000, r6, &(0x7f0000000440)="4a9eb0f6570b10c7cd04f14456fe53ab6cf82087f6f2915bafe0ee7f1c63decdff4da9bcaef87917eed5cd28105a917fea04191e1396d8a4f54cf275ce6e3247e41a17c143e3d8a01f3bd305b1325cc859569b70a7d4314fa13023dd0ff8b258af85675910be63961d070488aac1b711ef96ccb126", 0x75, 0x8f, 0x0, 0x0, r9}, &(0x7f0000000540)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:51 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r2, 0xc) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) 02:09:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 142.116361] audit: type=1800 audit(1571364591.104:53): pid=8243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 02:09:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0b") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 142.233888] audit: type=1800 audit(1571364591.224:54): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=65538 res=0 02:09:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:51 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:51 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) dup3(r2, r1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2000012a, &(0x7f0000000180)=[{0x2, 0x3f, 0x27}, {0x3, 0x20, 0xe2, 0xc8}]}, 0xffffff85) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 02:09:51 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r2, 0xc) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) 02:09:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 142.460429] protocol 88fb is buggy, dev hsr_slave_0 [ 142.465803] protocol 88fb is buggy, dev hsr_slave_1 02:09:51 executing program 3: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000000)={0x1, 0x14, 0x6, 0x6, "69c81d0029d63ee86ed9b7b07ac51a7107516666b40ee8a0b3f822dec4745741"}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='$'], 0x1) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup3(r4, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x40000}]) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') 02:09:51 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) [ 142.557322] audit: type=1800 audit(1571364591.544:55): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=98307 res=0 [ 142.673013] audit: type=1804 audit(1571364591.604:56): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir271897208/syzkaller.C2K1BR/18/bus" dev="sda1" ino=16632 res=1 [ 142.728038] audit: type=1804 audit(1571364591.714:57): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir271897208/syzkaller.C2K1BR/18/bus" dev="sda1" ino=16632 res=1 02:09:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0b") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:51 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r2, 0xc) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) 02:09:51 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:51 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) userfaultfd(0x800) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000000)='hsr0\x00', 0x9d3, 0x400, 0x8}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) 02:09:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0b") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:52 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 142.959745] audit: type=1800 audit(1571364591.944:58): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=131076 res=0 02:09:52 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b00") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 143.037552] audit: type=1400 audit(1571364592.014:59): avc: denied { map } for pid=8303 comm="syz-executor.3" path="socket:[31373]" dev="sockfs" ino=31373 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tcp_socket permissive=1 02:09:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0b") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:52 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:52 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r2, 0xc) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) userfaultfd(0x800) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000000)='hsr0\x00', 0x9d3, 0x400, 0x8}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) 02:09:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:52 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:52 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b00") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 143.348993] audit: type=1800 audit(1571364592.334:60): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=163845 res=0 02:09:52 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r7, r6, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:52 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r2, 0xc) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:52 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b00") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:52 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:52 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:52 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r2, 0xc) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) [ 143.766274] audit: type=1800 audit(1571364592.754:61): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=196614 res=0 02:09:52 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b00") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:52 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) [ 144.005704] audit: type=1800 audit(1571364592.994:62): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=229383 res=0 02:09:53 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r7, r6, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:53 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r1, 0xc) 02:09:53 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r2, 0xc) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:53 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b00") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:53 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:53 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b00") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:53 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:53 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:53 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r1, 0xc) 02:09:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:54 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r7, r6, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:54 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r1, 0xc) 02:09:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:54 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:54 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:54 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:55 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:55 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r7, r6, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:55 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:55 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) 02:09:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:55 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) 02:09:55 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:55 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) 02:09:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) 02:09:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:56 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:56 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:56 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) 02:09:56 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) 02:09:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 02:09:56 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfdffffff00000000}, 0x0) 02:09:56 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 02:09:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) 02:09:56 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfdffffff00000000}, 0x0) 02:09:56 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:57 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:57 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 02:09:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) 02:09:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfdffffff00000000}, 0x0) 02:09:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:57 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 02:09:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) 02:09:57 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 02:09:57 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r7, r6, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:57 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 02:09:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 02:09:58 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x0, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:58 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 02:09:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 02:09:58 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:58 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x0, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 02:09:58 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r7, r6, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:58 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 02:09:58 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x0, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:58 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:58 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x0, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 02:09:58 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:59 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x0, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:59 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:59 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:59 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x0, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:59 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:09:59 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:09:59 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x0, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:09:59 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:09:59 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x0, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:00 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:10:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:00 executing program 2: getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:00 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x0, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:00 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:10:00 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}}, 0x14}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:00 executing program 2: getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:01 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:10:01 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}}, 0x14}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:01 executing program 2: getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:01 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:10:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:01 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:01 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}}, 0x14}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:01 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x0, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:01 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:02 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:10:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:02 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:02 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x0, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:02 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r2, 0xc) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 02:10:02 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) [ 153.495009] kauditd_printk_skb: 4 callbacks suppressed [ 153.495022] audit: type=1800 audit(1571364602.484:67): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=32769 res=0 02:10:02 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x0, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 02:10:02 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r2, 0xc) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) [ 153.819939] audit: type=1800 audit(1571364602.804:68): pid=8901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=65538 res=0 02:10:03 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:10:03 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 02:10:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 02:10:03 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x4, 0x11, @binary}]}, 0x18}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:03 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r2, 0xc) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 02:10:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 154.437958] audit: type=1800 audit(1571364603.424:69): pid=8919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=98307 res=0 02:10:03 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x4, 0x11, @binary}]}, 0x18}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:03 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x4, 0x11, @binary}]}, 0x18}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:03 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:03 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:10:04 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:10:04 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:04 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:10:04 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x48, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9020ffaa7"}]}, 0x5c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:04 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x28, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae"}]}, 0x3c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:04 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:04 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x28, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae"}]}, 0x3c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:04 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:04 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x28, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae"}]}, 0x3c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:04 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:04 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x28, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae"}]}, 0x3c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:04 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:10:05 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:10:05 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x28, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae"}]}, 0x3c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:05 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:10:05 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:05 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x4c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x38, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623"}]}, 0x4c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:05 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x28, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae"}]}, 0x3c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:05 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:05 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x4c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x38, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623"}]}, 0x4c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:05 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x28, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae"}]}, 0x3c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:05 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:10:05 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:05 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:05 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x4c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x38, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623"}]}, 0x4c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:05 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x28, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae"}]}, 0x3c}, 0x1, 0xfdffffff00000000}, 0x0) [ 156.823035] FAULT_INJECTION: forcing a failure. [ 156.823035] name failslab, interval 1, probability 0, space 0, times 1 [ 156.857993] CPU: 1 PID: 9043 Comm: syz-executor.3 Not tainted 4.19.80 #0 [ 156.864891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.874392] Call Trace: [ 156.877539] dump_stack+0x172/0x1f0 [ 156.881297] should_fail.cold+0xa/0x1b [ 156.885303] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 156.890588] ? lock_downgrade+0x880/0x880 [ 156.894771] __should_failslab+0x121/0x190 [ 156.899028] should_failslab+0x9/0x14 [ 156.902939] kmem_cache_alloc_node+0x26c/0x710 [ 156.907558] __alloc_skb+0xd5/0x5f0 [ 156.911355] ? skb_scrub_packet+0x490/0x490 [ 156.915693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 156.921247] ? netlink_autobind.isra.0+0x228/0x310 [ 156.926364] netlink_sendmsg+0x97b/0xd70 [ 156.930538] ? netlink_unicast+0x720/0x720 [ 156.934910] ? selinux_socket_sendmsg+0x36/0x40 [ 156.939604] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 156.945164] ? security_socket_sendmsg+0x8d/0xc0 [ 156.950208] ? netlink_unicast+0x720/0x720 [ 156.954465] sock_sendmsg+0xd7/0x130 [ 156.958201] ___sys_sendmsg+0x803/0x920 [ 156.962193] ? copy_msghdr_from_user+0x430/0x430 [ 156.966970] ? lock_downgrade+0x880/0x880 [ 156.971258] ? kasan_check_read+0x11/0x20 [ 156.975605] ? __fget+0x367/0x540 [ 156.979092] ? iterate_fd+0x360/0x360 [ 156.982925] ? __fget_light+0x1a9/0x230 [ 156.986925] ? __fdget+0x1b/0x20 [ 156.990311] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 156.995872] __sys_sendmsg+0x105/0x1d0 [ 156.999801] ? __ia32_sys_shutdown+0x80/0x80 [ 157.004393] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 157.009164] ? do_syscall_64+0x26/0x620 [ 157.013258] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 157.018719] ? do_syscall_64+0x26/0x620 [ 157.022805] __x64_sys_sendmsg+0x78/0xb0 [ 157.026879] do_syscall_64+0xfd/0x620 [ 157.030702] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 157.035901] RIP: 0033:0x459a59 [ 157.039119] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 157.058172] RSP: 002b:00007f33d2139c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.065904] RAX: ffffffffffffffda RBX: 00007f33d2139c90 RCX: 0000000000459a59 [ 157.073455] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 157.080742] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 157.088192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f33d213a6d4 [ 157.095478] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 0000000000000005 02:10:06 executing program 0 (fault-call:4 fault-nth:0): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:06 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x28, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae"}]}, 0x3c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:06 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x40, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1"}]}, 0x54}, 0x1, 0xfdffffff00000000}, 0x0) [ 157.289788] FAULT_INJECTION: forcing a failure. [ 157.289788] name failslab, interval 1, probability 0, space 0, times 0 [ 157.312047] CPU: 0 PID: 9056 Comm: syz-executor.0 Not tainted 4.19.80 #0 [ 157.319058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.328582] Call Trace: [ 157.331205] dump_stack+0x172/0x1f0 [ 157.334990] should_fail.cold+0xa/0x1b [ 157.335012] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 157.335030] ? lock_downgrade+0x880/0x880 [ 157.335051] __should_failslab+0x121/0x190 [ 157.335067] should_failslab+0x9/0x14 [ 157.335084] kmem_cache_alloc_node+0x26c/0x710 [ 157.344193] __alloc_skb+0xd5/0x5f0 [ 157.344207] ? skb_scrub_packet+0x490/0x490 [ 157.344222] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 157.357023] ? netlink_autobind.isra.0+0x228/0x310 [ 157.369915] netlink_sendmsg+0x97b/0xd70 [ 157.369940] ? netlink_unicast+0x720/0x720 [ 157.369962] ? selinux_socket_sendmsg+0x36/0x40 [ 157.369979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 157.384846] ? security_socket_sendmsg+0x8d/0xc0 [ 157.384867] ? netlink_unicast+0x720/0x720 [ 157.384886] sock_sendmsg+0xd7/0x130 [ 157.384899] ___sys_sendmsg+0x803/0x920 [ 157.384914] ? copy_msghdr_from_user+0x430/0x430 [ 157.393828] ? lock_downgrade+0x880/0x880 [ 157.393846] ? kasan_check_read+0x11/0x20 [ 157.393865] ? __fget+0x367/0x540 [ 157.404151] ? iterate_fd+0x360/0x360 [ 157.404181] ? __fget_light+0x1a9/0x230 [ 157.404199] ? __fdget+0x1b/0x20 [ 157.404213] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 157.404232] __sys_sendmsg+0x105/0x1d0 [ 157.404248] ? __ia32_sys_shutdown+0x80/0x80 [ 157.416213] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 157.416229] ? do_syscall_64+0x26/0x620 [ 157.416246] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 157.416256] ? do_syscall_64+0x26/0x620 [ 157.416275] __x64_sys_sendmsg+0x78/0xb0 [ 157.433019] do_syscall_64+0xfd/0x620 02:10:06 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x28, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae"}]}, 0x3c}, 0x1, 0xfdffffff00000000}, 0x0) [ 157.433043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 157.433055] RIP: 0033:0x459a59 [ 157.433069] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 157.433079] RSP: 002b:00007fc303d68c78 EFLAGS: 00000246 [ 157.440841] ORIG_RAX: 000000000000002e [ 157.449904] RAX: ffffffffffffffda RBX: 00007fc303d68c90 RCX: 0000000000459a59 [ 157.466844] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 02:10:06 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) 02:10:06 executing program 3 (fault-call:4 fault-nth:1): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 157.466853] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 157.466862] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc303d696d4 [ 157.466870] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 0000000000000005 02:10:06 executing program 0 (fault-call:4 fault-nth:1): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:06 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:10:06 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x40, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1"}]}, 0x54}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:06 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x28, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae"}]}, 0x3c}, 0x1, 0xfdffffff00000000}, 0x0) [ 157.751607] FAULT_INJECTION: forcing a failure. [ 157.751607] name failslab, interval 1, probability 0, space 0, times 0 [ 157.849683] CPU: 1 PID: 9072 Comm: syz-executor.0 Not tainted 4.19.80 #0 [ 157.856575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.856581] Call Trace: [ 157.856607] dump_stack+0x172/0x1f0 [ 157.856634] should_fail.cold+0xa/0x1b [ 157.856653] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 157.868778] ? lock_downgrade+0x880/0x880 [ 157.868804] __should_failslab+0x121/0x190 [ 157.868821] should_failslab+0x9/0x14 [ 157.868835] kmem_cache_alloc_node_trace+0x274/0x720 [ 157.868853] ? __alloc_skb+0xd5/0x5f0 [ 157.876369] __kmalloc_node_track_caller+0x3d/0x80 [ 157.876390] __kmalloc_reserve.isra.0+0x40/0xf0 [ 157.876410] __alloc_skb+0x10b/0x5f0 [ 157.876427] ? skb_scrub_packet+0x490/0x490 [ 157.885879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 157.885898] ? netlink_autobind.isra.0+0x228/0x310 [ 157.885920] netlink_sendmsg+0x97b/0xd70 [ 157.885941] ? netlink_unicast+0x720/0x720 [ 157.885960] ? selinux_socket_sendmsg+0x36/0x40 [ 157.894075] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 157.894094] ? security_socket_sendmsg+0x8d/0xc0 [ 157.894113] ? netlink_unicast+0x720/0x720 [ 157.894131] sock_sendmsg+0xd7/0x130 [ 157.894143] ___sys_sendmsg+0x803/0x920 [ 157.894158] ? copy_msghdr_from_user+0x430/0x430 [ 157.894177] ? lock_downgrade+0x880/0x880 [ 157.894194] ? kasan_check_read+0x11/0x20 [ 157.903086] ? __fget+0x367/0x540 [ 157.903106] ? iterate_fd+0x360/0x360 [ 157.903132] ? __fget_light+0x1a9/0x230 [ 157.903150] ? __fdget+0x1b/0x20 [ 157.903164] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 157.903182] __sys_sendmsg+0x105/0x1d0 [ 157.903199] ? __ia32_sys_shutdown+0x80/0x80 [ 157.913021] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 157.913037] ? do_syscall_64+0x26/0x620 [ 157.913052] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 157.913064] ? do_syscall_64+0x26/0x620 [ 157.913083] __x64_sys_sendmsg+0x78/0xb0 [ 157.913098] do_syscall_64+0xfd/0x620 [ 157.913112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 157.913126] RIP: 0033:0x459a59 [ 157.921331] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 157.921340] RSP: 002b:00007fc303d68c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.921355] RAX: ffffffffffffffda RBX: 00007fc303d68c90 RCX: 0000000000459a59 [ 157.921364] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 157.921373] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 02:10:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 157.921382] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc303d696d4 [ 157.921390] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 0000000000000005 02:10:07 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x40, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1"}]}, 0x54}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:07 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x28, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae"}]}, 0x3c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:07 executing program 0 (fault-call:4 fault-nth:2): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 158.332805] FAULT_INJECTION: forcing a failure. [ 158.332805] name failslab, interval 1, probability 0, space 0, times 0 [ 158.379069] CPU: 0 PID: 9097 Comm: syz-executor.0 Not tainted 4.19.80 #0 [ 158.386002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.386011] Call Trace: [ 158.386037] dump_stack+0x172/0x1f0 [ 158.386061] should_fail.cold+0xa/0x1b [ 158.386082] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 158.386106] ? netlink_deliver_tap+0x146/0xc20 [ 158.416018] __should_failslab+0x121/0x190 [ 158.416033] should_failslab+0x9/0x14 [ 158.416051] kmem_cache_alloc+0x47/0x700 [ 158.428263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 158.428281] ? check_preemption_disabled+0x48/0x290 [ 158.428418] ? lock_acquire+0x16f/0x3f0 [ 158.428438] skb_clone+0x156/0x3e0 [ 158.428460] netlink_deliver_tap+0x97b/0xc20 [ 158.428484] netlink_unicast+0x5a8/0x720 [ 158.446648] ? netlink_attachskb+0x770/0x770 [ 158.446669] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 158.446690] netlink_sendmsg+0x8ae/0xd70 [ 158.446710] ? netlink_unicast+0x720/0x720 [ 158.446729] ? selinux_socket_sendmsg+0x36/0x40 [ 158.459757] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 158.459778] ? security_socket_sendmsg+0x8d/0xc0 [ 158.459797] ? netlink_unicast+0x720/0x720 [ 158.459817] sock_sendmsg+0xd7/0x130 [ 158.459832] ___sys_sendmsg+0x803/0x920 [ 158.459847] ? copy_msghdr_from_user+0x430/0x430 [ 158.473845] ? lock_downgrade+0x880/0x880 [ 158.473864] ? kasan_check_read+0x11/0x20 [ 158.473886] ? __fget+0x367/0x540 [ 158.473907] ? iterate_fd+0x360/0x360 [ 158.473933] ? __fget_light+0x1a9/0x230 02:10:07 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) [ 158.473946] ? __fdget+0x1b/0x20 [ 158.473962] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 158.484647] __sys_sendmsg+0x105/0x1d0 [ 158.484664] ? __ia32_sys_shutdown+0x80/0x80 [ 158.484695] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 158.484709] ? do_syscall_64+0x26/0x620 [ 158.484726] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 158.493715] ? do_syscall_64+0x26/0x620 [ 158.493734] __x64_sys_sendmsg+0x78/0xb0 [ 158.493756] do_syscall_64+0xfd/0x620 [ 158.493777] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 158.493789] RIP: 0033:0x459a59 [ 158.493809] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 158.493815] RSP: 002b:00007fc303d68c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.506340] RAX: ffffffffffffffda RBX: 00007fc303d68c90 RCX: 0000000000459a59 [ 158.506349] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 158.506358] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 158.506367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc303d696d4 [ 158.506376] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 0000000000000005 02:10:07 executing program 0 (fault-call:4 fault-nth:3): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:07 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x28, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae"}]}, 0x3c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:07 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="7e452926f6d0a48994e6434d7ba20c1955643d3fc4571d7bcca93c6408e4b05a57093bb8db7792022e6d916361a1df7f853021359180e10687ae5f5f5739b3220ba155fd956fafcdfaaa3d109819531db6666406f5c8c4d693689f97518f8c3af4c335cc59d3102fca9d2919fee51ff082c794315e98d8a52a636e2a4c1f9ee8169c060c16dc60854f84fb043183d77995e3c0439e24c9d409651570739930b6c2555901c4fda446b43bbefde6c4250cc35c0c517450928e2688cbc70f73f41474330319091293c3944569688470d7532402e0838d577fa4d04933b0bf1a11b95680c99fab942efaf3d3f50a8c112bae1cea2bb83d69de6d64", 0xf9, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:10:07 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x44, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9"}]}, 0x58}, 0x1, 0xfdffffff00000000}, 0x0) [ 158.956721] FAULT_INJECTION: forcing a failure. [ 158.956721] name failslab, interval 1, probability 0, space 0, times 0 [ 158.970048] CPU: 0 PID: 9117 Comm: syz-executor.0 Not tainted 4.19.80 #0 [ 158.976927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.986732] Call Trace: [ 158.989443] dump_stack+0x172/0x1f0 [ 158.993098] should_fail.cold+0xa/0x1b [ 158.997141] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 159.002283] ? lock_downgrade+0x880/0x880 [ 159.006468] __should_failslab+0x121/0x190 [ 159.010870] should_failslab+0x9/0x14 [ 159.014687] kmem_cache_alloc_node_trace+0x274/0x720 [ 159.019814] ? selinux_ipv4_output+0x50/0x50 [ 159.024249] __kmalloc_node+0x3d/0x80 [ 159.028075] qdisc_alloc+0xbb/0xa60 [ 159.031720] ? do_raw_read_unlock+0x3f/0x70 [ 159.036083] ? _raw_read_unlock+0x2d/0x50 [ 159.040549] qdisc_create+0xec/0x1230 [ 159.044361] ? security_capable+0x92/0xc0 [ 159.048735] ? tc_get_qdisc+0xbb0/0xbb0 [ 159.052914] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 159.058819] ? nla_parse+0x1fc/0x2f0 [ 159.062899] tc_modify_qdisc+0x51b/0x1bdc [ 159.067079] ? qdisc_create+0x1230/0x1230 [ 159.071728] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 159.077337] ? qdisc_create+0x1230/0x1230 [ 159.081491] rtnetlink_rcv_msg+0x463/0xb00 [ 159.085749] ? rtnetlink_put_metrics+0x560/0x560 [ 159.090511] ? netdev_pick_tx+0x300/0x300 [ 159.094672] ? netlink_deliver_tap+0x22d/0xc20 [ 159.099258] ? find_held_lock+0x35/0x130 [ 159.103338] netlink_rcv_skb+0x17d/0x460 [ 159.107535] ? rtnetlink_put_metrics+0x560/0x560 [ 159.112456] ? netlink_ack+0xb30/0xb30 [ 159.116347] ? kasan_check_read+0x11/0x20 [ 159.120499] ? netlink_deliver_tap+0x254/0xc20 [ 159.125145] rtnetlink_rcv+0x1d/0x30 [ 159.131220] netlink_unicast+0x537/0x720 [ 159.135394] ? netlink_attachskb+0x770/0x770 [ 159.139809] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 159.145485] netlink_sendmsg+0x8ae/0xd70 [ 159.149819] ? netlink_unicast+0x720/0x720 [ 159.154143] ? selinux_socket_sendmsg+0x36/0x40 [ 159.160030] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 159.165750] ? security_socket_sendmsg+0x8d/0xc0 [ 159.171488] ? netlink_unicast+0x720/0x720 [ 159.176206] sock_sendmsg+0xd7/0x130 [ 159.180187] ___sys_sendmsg+0x803/0x920 [ 159.184167] ? copy_msghdr_from_user+0x430/0x430 [ 159.189342] ? lock_downgrade+0x880/0x880 [ 159.193757] ? kasan_check_read+0x11/0x20 [ 159.198206] ? __fget+0x367/0x540 [ 159.201700] ? iterate_fd+0x360/0x360 [ 159.205607] ? __fget_light+0x1a9/0x230 [ 159.209872] ? __fdget+0x1b/0x20 [ 159.213379] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 159.219290] __sys_sendmsg+0x105/0x1d0 [ 159.223247] ? __ia32_sys_shutdown+0x80/0x80 [ 159.228010] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 159.233064] ? do_syscall_64+0x26/0x620 [ 159.237990] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 159.243532] ? do_syscall_64+0x26/0x620 [ 159.247694] __x64_sys_sendmsg+0x78/0xb0 [ 159.251761] do_syscall_64+0xfd/0x620 [ 159.255697] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 159.261584] RIP: 0033:0x459a59 [ 159.264914] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 159.285493] RSP: 002b:00007fc303d68c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.293691] RAX: ffffffffffffffda RBX: 00007fc303d68c90 RCX: 0000000000459a59 [ 159.301559] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 159.311528] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 159.318976] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc303d696d4 [ 159.326508] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 0000000000000005 02:10:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:08 executing program 0 (fault-call:4 fault-nth:4): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 02:10:08 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x28, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae"}]}, 0x3c}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:08 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x44, 0x11, @binary="c5f05dc27f9e2298a412436117d1ef0a57bfe913188d2e7026bee4909a798153ae50473effd8135d49e5de494c47cfd623c2cf0a27c9b94aa1171ecde9"}]}, 0x58}, 0x1, 0xfdffffff00000000}, 0x0) 02:10:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 159.557166] FAULT_INJECTION: forcing a failure. [ 159.557166] name failslab, interval 1, probability 0, space 0, times 0 [ 159.626333] CPU: 0 PID: 9133 Comm: syz-executor.0 Not tainted 4.19.80 #0 [ 159.633461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.643279] Call Trace: [ 159.645902] dump_stack+0x172/0x1f0 [ 159.649698] should_fail.cold+0xa/0x1b [ 159.653594] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 159.658720] ? lock_downgrade+0x880/0x880 [ 159.663087] __should_failslab+0x121/0x190 [ 159.667377] should_failslab+0x9/0x14 [ 159.671533] kmem_cache_alloc_node_trace+0x274/0x720 [ 159.676938] __kmalloc_node+0x3d/0x80 [ 159.681616] qdisc_alloc+0xbb/0xa60 [ 159.685251] ? __lock_is_held+0xb6/0x140 [ 159.689411] qdisc_create_dflt+0x78/0x1e0 [ 159.693750] cbs_init+0xb5/0x300 [ 159.697124] ? qdisc_reset_queue+0x240/0x240 [ 159.701536] qdisc_create+0x58e/0x1230 [ 159.705427] ? security_capable+0x92/0xc0 [ 159.709935] ? tc_get_qdisc+0xbb0/0xbb0 [ 159.713929] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 159.719470] ? nla_parse+0x1fc/0x2f0 [ 159.723279] tc_modify_qdisc+0x51b/0x1bdc [ 159.727557] ? qdisc_create+0x1230/0x1230 [ 159.731707] ? find_held_lock+0x35/0x130 [ 159.735846] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 159.741513] ? qdisc_create+0x1230/0x1230 [ 159.746201] rtnetlink_rcv_msg+0x463/0xb00 [ 159.750677] ? rtnetlink_put_metrics+0x560/0x560 [ 159.755435] ? netdev_pick_tx+0x300/0x300 [ 159.759592] ? netlink_deliver_tap+0x22d/0xc20 [ 159.764355] ? find_held_lock+0x35/0x130 [ 159.769168] netlink_rcv_skb+0x17d/0x460 [ 159.773354] ? rtnetlink_put_metrics+0x560/0x560 [ 159.778243] ? netlink_ack+0xb30/0xb30 [ 159.782143] ? kasan_check_read+0x11/0x20 [ 159.786451] ? netlink_deliver_tap+0x254/0xc20 [ 159.791132] rtnetlink_rcv+0x1d/0x30 [ 159.794891] netlink_unicast+0x537/0x720 [ 159.799319] ? netlink_attachskb+0x770/0x770 [ 159.803850] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 159.809695] netlink_sendmsg+0x8ae/0xd70 [ 159.813852] ? netlink_unicast+0x720/0x720 [ 159.818092] ? selinux_socket_sendmsg+0x36/0x40 [ 159.822818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 159.828835] ? security_socket_sendmsg+0x8d/0xc0 [ 159.833936] ? netlink_unicast+0x720/0x720 [ 159.838319] sock_sendmsg+0xd7/0x130 [ 159.842039] ___sys_sendmsg+0x803/0x920 [ 159.846020] ? copy_msghdr_from_user+0x430/0x430 [ 159.850901] ? lock_downgrade+0x880/0x880 [ 159.855165] ? kasan_check_read+0x11/0x20 [ 159.859318] ? __fget+0x367/0x540 [ 159.862993] ? iterate_fd+0x360/0x360 [ 159.866806] ? __fget_light+0x1a9/0x230 [ 159.872173] ? __fdget+0x1b/0x20 [ 159.875626] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 159.881257] __sys_sendmsg+0x105/0x1d0 [ 159.885252] ? __ia32_sys_shutdown+0x80/0x80 [ 159.889809] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 159.894569] ? do_syscall_64+0x26/0x620 [ 159.898594] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 159.903957] ? do_syscall_64+0x26/0x620 [ 159.907935] __x64_sys_sendmsg+0x78/0xb0 [ 159.912099] do_syscall_64+0xfd/0x620 [ 159.916164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 159.921473] RIP: 0033:0x459a59 [ 159.924971] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 159.944156] RSP: 002b:00007fc303d68c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.952477] RAX: ffffffffffffffda RBX: 00007fc303d68c90 RCX: 0000000000459a59 [ 159.960183] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 159.968077] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 02:10:09 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) [ 159.975867] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc303d696d4 [ 159.983274] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 0000000000000005 [ 160.038574] kasan: CONFIG_KASAN_INLINE enabled [ 160.047970] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 160.059948] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 160.066335] CPU: 0 PID: 9133 Comm: syz-executor.0 Not tainted 4.19.80 #0 [ 160.073324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.082797] RIP: 0010:hrtimer_active+0x11e/0x230 [ 160.087576] Code: 48 39 c3 0f 84 d3 00 00 00 e8 2e 22 0f 00 48 8b 45 c8 80 38 00 0f 85 06 01 00 00 49 8b 5d 30 4c 8d 63 10 4c 89 e0 48 c1 e8 03 <42> 0f b6 14 38 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 160.106624] RSP: 0018:ffff888099537350 EFLAGS: 00010202 [ 160.111989] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffc90005e6f000 [ 160.119380] RDX: 0000000000040000 RSI: ffffffff815ba512 RDI: ffff8880a08c2780 [ 160.126732] RBP: ffff8880995373a8 R08: ffff888058ace400 R09: ffffed1015d04733 [ 160.134089] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000010 [ 160.141351] R13: ffff8880a08c2780 R14: ffff88808b420480 R15: dffffc0000000000 [ 160.148616] FS: 00007fc303d69700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 160.156836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.162737] CR2: 0000000000738000 CR3: 00000000893a2000 CR4: 00000000001406f0 [ 160.170233] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.177511] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.184780] Call Trace: [ 160.187373] ? kasan_kmalloc+0xa0/0xf0 [ 160.191264] hrtimer_try_to_cancel+0x74/0x5b0 [ 160.195761] ? hrtimer_run_softirq+0x270/0x270 [ 160.200343] ? __lock_is_held+0xb6/0x140 [ 160.204560] hrtimer_cancel+0x20/0x40 [ 160.208364] qdisc_watchdog_cancel+0x16/0x20 [ 160.212776] cbs_destroy+0x5e/0xd0 [ 160.216313] ? cbs_dequeue_soft+0x400/0x400 [ 160.220644] qdisc_create+0xaa6/0x1230 [ 160.224537] ? security_capable+0x92/0xc0 [ 160.228818] ? tc_get_qdisc+0xbb0/0xbb0 [ 160.233148] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 160.238735] ? nla_parse+0x1fc/0x2f0 [ 160.242450] tc_modify_qdisc+0x51b/0x1bdc [ 160.246608] ? qdisc_create+0x1230/0x1230 [ 160.250755] ? find_held_lock+0x35/0x130 [ 160.254818] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 160.260437] ? qdisc_create+0x1230/0x1230 [ 160.264585] rtnetlink_rcv_msg+0x463/0xb00 [ 160.269034] ? rtnetlink_put_metrics+0x560/0x560 [ 160.273789] ? netdev_pick_tx+0x300/0x300 [ 160.277941] ? netlink_deliver_tap+0x22d/0xc20 [ 160.282551] ? find_held_lock+0x35/0x130 [ 160.286654] netlink_rcv_skb+0x17d/0x460 [ 160.290847] ? rtnetlink_put_metrics+0x560/0x560 [ 160.296207] ? netlink_ack+0xb30/0xb30 [ 160.300222] ? kasan_check_read+0x11/0x20 [ 160.304367] ? netlink_deliver_tap+0x254/0xc20 [ 160.308946] rtnetlink_rcv+0x1d/0x30 [ 160.312657] netlink_unicast+0x537/0x720 [ 160.316998] ? netlink_attachskb+0x770/0x770 [ 160.321489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 160.327076] netlink_sendmsg+0x8ae/0xd70 [ 160.331140] ? netlink_unicast+0x720/0x720 [ 160.335371] ? selinux_socket_sendmsg+0x36/0x40 [ 160.340037] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 160.345576] ? security_socket_sendmsg+0x8d/0xc0 [ 160.350503] ? netlink_unicast+0x720/0x720 [ 160.354750] sock_sendmsg+0xd7/0x130 [ 160.358468] ___sys_sendmsg+0x803/0x920 [ 160.362485] ? copy_msghdr_from_user+0x430/0x430 [ 160.368683] ? lock_downgrade+0x880/0x880 [ 160.372841] ? kasan_check_read+0x11/0x20 [ 160.377087] ? __fget+0x367/0x540 [ 160.380542] ? iterate_fd+0x360/0x360 [ 160.384349] ? __fget_light+0x1a9/0x230 [ 160.388324] ? __fdget+0x1b/0x20 [ 160.391684] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 160.397216] __sys_sendmsg+0x105/0x1d0 [ 160.401099] ? __ia32_sys_shutdown+0x80/0x80 [ 160.405621] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 160.410372] ? do_syscall_64+0x26/0x620 [ 160.414430] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 160.419787] ? do_syscall_64+0x26/0x620 [ 160.423847] __x64_sys_sendmsg+0x78/0xb0 [ 160.427960] do_syscall_64+0xfd/0x620 [ 160.431762] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 160.437089] RIP: 0033:0x459a59 [ 160.440275] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 160.459217] RSP: 002b:00007fc303d68c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.467188] RAX: ffffffffffffffda RBX: 00007fc303d68c90 RCX: 0000000000459a59 [ 160.474803] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 160.482069] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 160.489353] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc303d696d4 [ 160.496711] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 0000000000000005 [ 160.503983] Modules linked in: [ 160.516051] ---[ end trace a13f62d40518cfd5 ]--- [ 160.522092] RIP: 0010:hrtimer_active+0x11e/0x230 02:10:09 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) [ 160.526948] Code: 48 39 c3 0f 84 d3 00 00 00 e8 2e 22 0f 00 48 8b 45 c8 80 38 00 0f 85 06 01 00 00 49 8b 5d 30 4c 8d 63 10 4c 89 e0 48 c1 e8 03 <42> 0f b6 14 38 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 160.547863] RSP: 0018:ffff888099537350 EFLAGS: 00010202 [ 160.551232] kobject: 'loop2' (00000000380e39ad): kobject_uevent_env [ 160.553822] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffc90005e6f000 [ 160.561064] kobject: 'loop2' (00000000380e39ad): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 160.567836] RDX: 0000000000040000 RSI: ffffffff815ba512 RDI: ffff8880a08c2780 [ 160.584614] RBP: ffff8880995373a8 R08: ffff888058ace400 R09: ffffed1015d04733 [ 160.593047] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000010 [ 160.600824] R13: ffff8880a08c2780 R14: ffff88808b420480 R15: dffffc0000000000 [ 160.608405] FS: 00007fc303d69700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 160.617006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.623999] CR2: 0000000000625208 CR3: 00000000893a2000 CR4: 00000000001406e0 [ 160.631743] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 02:10:09 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) [ 160.639181] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.647061] Kernel panic - not syncing: Fatal exception [ 160.648885] kobject: 'loop2' (00000000380e39ad): kobject_uevent_env [ 160.654613] Kernel Offset: disabled [ 160.664840] Rebooting in 86400 seconds..