# https://syzkaller.appspot.com/bug?id=ffdf2711c935a1b72550b3334420d7a3b168f335
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{Threaded:true Collide:false Repeat:true Procs:1 Sandbox: Fault:false FaultCall:-1 FaultNth:0 EnableTun:false UseTmpDir:false EnableCgroups:false HandleSegv:false WaitRepeat:false Debug:false Repro:false}
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, <r1=>0x0})
ptrace$setopts(0x4206, r1, 0x0, 0x100020)
r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x7ff)
write$fuse(r2, &(0x7f000012f000)={0x50, 0x0, 0x0, @fuse_init_out={0x7, 0x1a}}, 0x50)
keyctl$join(0x1, &(0x7f0000019ffb)={0x73, 0x79, 0x7a, 0x0})
keyctl$join(0x1, &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x0})
syz_open_dev$usbmon(&(0x7f000014a000)='/dev/usbmon#\x00', 0xffffffffffffffff, 0xffffffffffffffff)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={<r4=>0x0, 0xfffffffffffffff9, 0x30}, &(0x7f0000000080)=0xc)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e22, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xf4d9}}}, &(0x7f0000000180)=0x84)
mkdirat(0xffffffffffffffff, &(0x7f000003f154)='./file0\x00', 0x0)
r5 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0)
r6 = openat(r5, &(0x7f00008deff8)='./file0\x00', 0x0, 0x0)
getdents(r5, &(0x7f0000000040)=""/137, 0x89)
mount(&(0x7f0000e20000)='./file0\x00', &(0x7f00000e4000)='./file0\x00', &(0x7f000044fff9)='autofs\x00', 0x1000, &(0x7f00006b8000))
symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r6, &(0x7f000001fff8)='./file0\x00')
renameat2(r6, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0/file0/file0/file0\x00', 0x0)
capset(&(0x7f000000b000)={0x20080522}, &(0x7f000000cfe8))
sendto(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x11, 0x0, 0x0)
setns(0xffffffffffffffff, 0x0)
inotify_init()
fcntl$setsig(0xffffffffffffffff, 0xa, 0x2d)
userfaultfd(0x0)
r7 = syz_open_dev$mice(&(0x7f0000015000)='/dev/input/mice\x00', 0x0, 0x82)
getgroups(0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0])
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000280)={'team0\x00'})
prctl$setfpexc(0xc, 0x2)
eventfd(0x2)
recvmsg(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000100)=@ll, 0x24a, &(0x7f0000000080), 0x0, &(0x7f0000001240)=""/220, 0xdc, 0x5}, 0x4000000000000000)
r8 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000006ffc)=0x6, 0x4)
socket$packet(0x11, 0x2, 0x300)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000440), &(0x7f0000000480)=0x4)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x8}, &(0x7f00000005c0)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, 0x904e, 0x8}, &(0x7f0000000740)=0x90)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r9)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540)={0x27, 0x0, 0x2, 0x2, 0x7, 0x6, "4021bc5c62a8b600554fd217a152db8c5e202690ff5e106c7c3952d6060c481cf11e7913f883ddd296bfa5479216af340d0d68910e8d8adb388f562a8d6718", 0x3d}, 0x60)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff})
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000040)=0x54)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r11, 0x84, 0x21, &(0x7f0000000180), 0xfe57)
socket$inet_sctp(0x2, 0x1, 0x84)
r12 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000cecffc), 0x4)
write(r12, &(0x7f000095c000), 0x0)
r13 = open(&(0x7f0000ac3000)='./control\x00', 0x2, 0x0)
openat(r13, &(0x7f0000563000)='./file0\x00', 0x0, 0x0)
r14 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r14, 0x8904, &(0x7f0000000100))
r15 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$set_timeout(0xf, r15, 0x80000000000701)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200, 0x0)
r16 = socket(0x18, 0x0, 0x4)
connect(r16, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r16, 0x3, 0x1, 0x3, 0x0, {0xa, 0x4e21, 0x200, @loopback={0x0, 0x1}, 0x4}}}, 0x80)
r17 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETQUEUE(r17, 0x400454d9, &(0x7f0000000040)={'bcsf0\x00', 0x400})
ioctl$TUNSETVNETHDRSZ(r17, 0x400454d8, &(0x7f0000000080)=0x20)
r18 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x100, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={<r19=>0x0, 0x5}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r18, 0x84, 0x1, &(0x7f00000000c0)={<r20=>r19, 0x2, 0x0, 0x7, 0xff, 0x9}, &(0x7f0000000100)=0x14)
prctl$setfpexc(0xc, 0x1)
sched_rr_get_interval(0x0, &(0x7f00000001c0))
recvfrom$unix(r18, &(0x7f0000000240)=""/232, 0xe8, 0x2000, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
pread64(0xffffffffffffffff, &(0x7f00000003c0)=""/99, 0x63, 0xf)
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000440)='systemv!\x00')
sendto$inet6(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x4000, &(0x7f0000000500)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x1c}, 0xfffffffffffffffd}, 0x1c)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r18, 0x84, 0x13, &(0x7f0000000540)={<r21=>r20, 0x20}, &(0x7f0000000580)=0x8)
clock_gettime(0x3, &(0x7f00000005c0))
getsockopt$netrom_NETROM_N2(r18, 0x103, 0x3, &(0x7f0000000600)=0x6, &(0x7f0000000640)=0x4)
fremovexattr(0xffffffffffffffff, &(0x7f0000000680)=@known='com.apple.system.Security\x00')
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r18, 0x84, 0xa, &(0x7f00000006c0)={0x9a, 0x80000000, 0x20e, 0x3f, 0x8001, 0x9, 0x1, 0x9, r21}, 0x20)
ioctl$TUNGETVNETHDRSZ(r18, 0x800454d7, &(0x7f0000000700))
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/user\x00', 0x2, 0x0)
getsockopt$sock_int(r18, 0x1, 0x10, &(0x7f0000000780), &(0x7f00000007c0)=0x4)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r18, 0x84, 0x78, &(0x7f0000000800)=r20, 0x4)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r18, 0x84, 0x6d, &(0x7f0000000840)={r21}, &(0x7f00000008c0)=0x8)
getpeername$netlink(r18, &(0x7f0000000900), &(0x7f0000000940)=0xc)
execve(&(0x7f0000000980)='./file0\x00', &(0x7f0000000c00)=[&(0x7f00000009c0)='/dev/pktcdvd/control\x00', &(0x7f0000000a00)='com.apple.system.Security\x00', &(0x7f0000000a40)='/dev/pktcdvd/control\x00', &(0x7f0000000a80)='com.apple.system.Security\x00', &(0x7f0000000ac0)='com.apple.system.Security\x00', &(0x7f0000000b00)='\x00', &(0x7f0000000b40)="5cb874727573746564776c616e30757365725b00", &(0x7f0000000b80)='systemv!\x00', &(0x7f0000000bc0)='cpuseteth12[systemnodev^!vmnet0#*ppp1user,\x00'], &(0x7f0000000cc0)=[&(0x7f0000000c80)=')\x00'])
getsockopt$bt_BT_RCVMTU(r18, 0x112, 0xd, &(0x7f0000000d00)=0xfffffffffffffff8, &(0x7f0000000d40)=0x2)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r18, 0x84, 0x6e, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x45a}], 0x1c)
getsockopt$inet_pktinfo(r18, 0x0, 0x8, &(0x7f0000000dc0)={0x0, @empty, @dev}, &(0x7f0000000e00)=0xc)
execve(&(0x7f0000000f40)='./file0\x00', &(0x7f0000001100)=[&(0x7f0000000f80)='%\x00', &(0x7f0000000fc0)='cgroup\x00', &(0x7f0000001000)="a000", &(0x7f0000001040)='\x00', &(0x7f0000001080)='com.apple.system.Security\x00', &(0x7f00000010c0)='\x00'], &(0x7f0000001300)=[&(0x7f0000001140)='com.apple.system.Security\x00', &(0x7f0000001180)='\x00', &(0x7f00000011c0)=')\x00', &(0x7f0000001200)=',--*vboxnet0[.\x00', &(0x7f0000001240)='systemv!\x00', &(0x7f0000001280)='mime_typel/em0wlan1user{bdevposix_acl_access/\x00', &(0x7f00000012c0)='\x00'])
ioctl$LOOP_SET_STATUS64(r18, 0x4c04, &(0x7f0000001340)={0x0, 0x0, 0x0, 0xffff, 0x1, 0x0, 0xf, 0x2, 0x0, "72746db2a3b9f3a4a5484d9d2fb02eeef29b6410904b95729c8bf852caad2c359ef5966b3e8e4af8de1a9585750b16cbde64895cfeb58a76fb7dad82d44428fd", "921e8bd95c431551e81bcb5fe3c58c850a3d82a092b512e4aa975b3d1c81e4eb80000cfb3fc5d87401028454a9efb3f669904012806315d8f91d7038fc12f3ee", "57242436a355032c7ef5332e6962a63461ab87ae3713f0994378bbb6486ce1a9", [0x9, 0x5]})
setsockopt$inet6_IPV6_ADDRFORM(r18, 0x29, 0x1, &(0x7f0000001440)=0x2, 0x4)
r22 = syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r22, 0xc058534f, &(0x7f0000006fa8)={{}, 0xffffffffffffffff})
r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x84000, 0x0)
ioctl$sock_FIOGETOWN(r23, 0x8903, &(0x7f0000000440))
getsockopt$bt_BT_DEFER_SETUP(r23, 0x112, 0x7, &(0x7f0000000480)=0x1000, &(0x7f00000004c0)=0x4)
r24 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setns(r24, 0xc000000)
getsockopt$sock_int(r24, 0x1, 0x2c, &(0x7f000047a000), &(0x7f0000494000)=0x4)
r25 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r25, 0x891a, &(0x7f0000000100)={'tunl0\x00', {0x2, 0x4e20, @loopback=0x7f000001}})
sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r26 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r26, 0x107, 0x14, &(0x7f0000006ffc)=0x6, 0x4)
sendto$inet6(r26, &(0x7f0000010000), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x4e20, 0x4, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c)
r27 = socket$l2tp(0x18, 0x1, 0x1)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0)
r28 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r28, 0x80605414, &(0x7f0000000500)=""/4)
connect$l2tp(r27, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x2e6)
mkdir(&(0x7f0000efa000)='./file0\x00', 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r29 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x0)
mount(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='qnx6\x00', 0x811, &(0x7f0000000480))
mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='v7\x00', 0x2000, &(0x7f0000000040))
socketpair$inet6(0xa, 0x80001, 0x1, &(0x7f00000028c0))
ioctl$EVIOCGEFFECTS(r29, 0x80044584, &(0x7f0000000180)=""/168)
getpriority(0x2, 0x0)
setregid(0x0, 0x0)
write$cgroup_type(r29, &(0x7f0000000040)='threaded\x00', 0x9)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
r30 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r31 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6120, 0x101000)
fcntl$F_GET_RW_HINT(r30, 0x40b, &(0x7f0000000180))
write$selinux_user(r31, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
fchdir(r30)
r32 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$int_out(r31, 0x5462, &(0x7f0000000080))
ftruncate(0xffffffffffffffff, 0x80003)
sendfile(r32, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe)
ioctl$EVIOCGREP(r31, 0x80084503, &(0x7f0000000200)=""/113)
r33 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r33, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x3}, 0x1}, 0x0)
r34 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xd0240, 0x0)
ioctl$sock_ipx_SIOCGIFADDR(r34, 0x8915, &(0x7f0000000100)={'bcsh0\x00', {0x4, 0x8, 0x8, "a9de1769152f", 0x3}})
sendmmsg(0xffffffffffffffff, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000019c0)}], 0x1, &(0x7f0000001b40)}}, {{&(0x7f0000002540)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000003980), 0x0, &(0x7f0000003a00)}}], 0x2, 0x0)
ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000040)={0x0, 0xd61, 0xffffffffffff6633, 0x1, 0x7, 0x29b})
r35 = creat(&(0x7f0000000000)='./file0\x00', 0x8)
r36 = socket$packet(0x11, 0x3, 0x300)
r37 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10, 0x800)
r38 = creat(&(0x7f00000000c0)='./file0\x00', 0x11)
poll(&(0x7f0000000100)=[{r35, 0x2000}, {r36, 0x8}, {r37, 0x1000}, {r38, 0x6088}], 0x4, 0x1e)
r39 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r39, 0xc0505350, &(0x7f0000000140)={{0x0, 0xc01}, {0xf, 0xfffffffffffffe01}})
rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000ff0)={&(0x7f0000000040), 0x8})
syz_open_dev$urandom(&(0x7f00000002c0)='/dev/urandom\x00', 0x0, 0x400400)
dup2(0xffffffffffffff9c, 0xffffffffffffff9c)
socket$nl_crypto(0x10, 0x3, 0x15)
socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000300))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340))
timerfd_create(0x0, 0x80000)
socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000380)={0xffffffffffffffff, <r40=>0xffffffffffffffff})
close(r40)
r41 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_linger(r41, 0x1, 0xd, &(0x7f0000000940)={0x1, 0xde}, 0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r41, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x6, 0x0, "37b5e9ef253b4a17814c1b38c9b81a56a397da8bcdabdd0e9383bcf622da24ecb5f4ff8b353a40eb8032a5b64a6fe5073a334eeb3b30a354760cc0b9d14f3363180e01222db4b130ca85a373740d1e60"}, 0xd8)
r42 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20100, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r42, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14)
setsockopt$SO_ATTACH_FILTER(r41, 0x1, 0x1a, &(0x7f00004b5ff0)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10)
setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080), 0x8)
bind$inet6(r41, &(0x7f0000000880)={0xa, 0x4e22}, 0xff67)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r43=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000680))
ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f00000006c0))
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200), 0x4)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x5c)
sendto$inet6(r41, &(0x7f00002a0b14), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r43, 0x0, 0x63, &(0x7f0000000240)={'HL\x00'}, &(0x7f0000000280)=0x1e)
sendto(r41, &(0x7f000092d000), 0x0, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80)
close(r41)
r44 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00')
preadv(r44, &(0x7f0000000000)=[{&(0x7f0000000280)=""/179, 0xb3}], 0x1, 0x0)
ioctl$TUNSETTXFILTER(r44, 0x400454d1, &(0x7f0000000040)={0x1, 0x8, [@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @empty, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]]})
ioctl$KDSKBLED(r44, 0x4b65, 0x1000000000002)
r45 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x2)
munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
write(r45, &(0x7f0000000000), 0x0)
mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
readv(r45, &(0x7f000085dff0)=[{&(0x7f0000e94000)=""/62, 0x10024}], 0x146)
r46 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r46, 0x891a, &(0x7f0000000100)={'tunl0\x00', {0x2, 0x4e20, @loopback=0x7f000001}})
sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'})
r47 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r47, 0x107, 0x14, &(0x7f0000006ffc)=0x6, 0x4)
sendto$inet6(r47, &(0x7f0000010000), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x4e20, 0x4, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c)
r48 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r48, &(0x7f0000000040)={0xa, 0x4e20, 0x9688, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c)
sendmmsg(r48, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]}}], 0x2, 0x0)
r49 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x19, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r50=>0x0)
timer_settime(r50, 0x0, &(0x7f0000000340), &(0x7f00000003c0))
accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, <r51=>0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x14, 0x80800)
recvfrom$packet(r49, &(0x7f00000000c0)=""/240, 0xf0, 0x40000120, &(0x7f0000000280)={0x11, 0x2, r51, 0x1, 0x4, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}}, 0x14)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r49, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000002c0)=0x4)
pipe2(&(0x7f0000edeff8)={<r52=>0xffffffffffffffff, <r53=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
r54 = userfaultfd(0x0)
ioctl$UFFDIO_API(r54, 0xc018aa3f, &(0x7f0000bc8000)={0xaa})
write$sndseq(r53, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c)
fcntl$setstatus(r52, 0x408, 0x0)
r55 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x2)
sendto$inet6(0xffffffffffffffff, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa}, 0x1c)
r56 = dup2(0xffffffffffffffff, r55)
ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f)
r57 = gettid()
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x0, 0x5, [0x9, 0x8, 0x0, 0x4, 0x3f]}, 0x12)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000b80)=ANY=[@ANYRES16=r55, @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR, @ANYRES64=r55, @ANYRES64, @ANYPTR64, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32, @ANYRES16, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYBLOB, @ANYPTR=&(0x7f0000000a00)=ANY=[@ANYPTR64=&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYBLOB, @ANYPTR, @ANYRES32, @ANYPTR64, @ANYRES16], @ANYRES16, @ANYRES64, @ANYRES32, @ANYPTR64=&(0x7f0000000780)=ANY=[@ANYBLOB], @ANYRES16, @ANYPTR, @ANYPTR64=&(0x7f0000000840)=ANY=[@ANYRES32=r57, @ANYPTR, @ANYRES16, @ANYRES32, @ANYRES16=r57, @ANYBLOB, @ANYRES16=r56, @ANYPTR, @ANYRES64, @ANYRES64], @ANYPTR=&(0x7f0000000bc0)=ANY=[@ANYPTR, @ANYRES16, @ANYRES64, @ANYBLOB, @ANYRES16, @ANYRES32=r57, @ANYRES64, @ANYBLOB, @ANYRES64]], @ANYPTR64=&(0x7f0000000b00)=ANY=[@ANYRES64, @ANYRES64, @ANYRES64, @ANYPTR64=&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES64, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRES16]]])
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000380)={@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x2, 0x1, 0xffff, 0xffff, 0x9}, 0x20)
r58 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r58, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x0, 0xff}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}, 0xe8)
sendto$inet(r58, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000deaff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r59=>0xffffffffffffffff})
openat$cgroup_type(r59, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000001c0)={@mcast2={0xff, 0x2, [], 0x1}, 0xb})
socket$netlink(0x10, 0x3, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000006ffc)=0x6, 0x4)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x14)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f000003cff4))
r60 = add_key$user(&(0x7f000038b000)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a}, &(0x7f0000d6c000), 0x0, 0x0)
keyctl$unlink(0x11, r60, 0x0)
capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000240))
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="2e2f63677e6574007e8250098ab8619a20b6a569d6db7cf8748b35df56ae501a4db006af4a0d7d0bc9a0d98879b299fb2bca43e4ea72e57d6e47096c3c4a3f0fd0e5b422da31c2231e985f029df22961c9e134710faad30f929246f5392996fe938938f797034978ec8462df91d8beaed2909b3cb944156dd5d6b8064373533b7b62", 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x0, 'io', 0x20}, {0x0, 'memor\x00', 0x20}, {0x0, 'memory', 0x20}, {0x0, 'pids', 0x20}]}, 0xfffffe70)
r61 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000784fef)='/dev/vga_arbiter\x00', 0x0, 0x0)
read(r61, &(0x7f0000000000)=""/134, 0x86)
getpgid(0x0)
gettid()
ioctl$PIO_UNIMAP(r61, 0x4b67, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{0x3, 0x9}, {0x8, 0x80000000}, {0x3, 0x5}, {0x1, 0x100000000}, {0x2, 0xaf}, {0x8, 0x8}]})
r62 = socket$inet6(0xa, 0x2, 0xa633)
setsockopt$sock_int(r62, 0x1, 0xc, &(0x7f0000000080), 0x4)
setsockopt$inet6_IPV6_ADDRFORM(r62, 0x29, 0x1, &(0x7f0000000000)=0x2, 0x4)
socket$packet(0x11, 0x2, 0x300)
sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x40}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000010000), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x4e20, 0x4, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012})
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_extract_tcp_res(&(0x7f0000000080), 0x0, 0x0)
r63 = socket(0x11, 0x100000802, 0x0)
r64 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2)
ioctl$TUNSETIFF(r64, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x2691d0877f1cca9b})
ioctl$sock_inet_SIOCSIFFLAGS(r63, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201})
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000140), 0x0, 0xfffffffffffffffb)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000004c0)=""/4096)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x200000000, 0x42442)
socket(0x0, 0x0, 0x0)
getpid()
pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000040)}], 0x1, 0x81006)
bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000680)=0xfe, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x100000}, 0x1c)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
fchown(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x102000004)