[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 12.591961] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.221228] random: sshd: uninitialized urandom read (32 bytes read) [ 25.593805] random: sshd: uninitialized urandom read (32 bytes read) [ 26.138039] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.3' (ECDSA) to the list of known hosts. [ 31.612912] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/26 06:47:53 fuzzer started [ 32.645504] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/26 06:47:54 dialing manager at 10.128.0.26:33901 2018/08/26 06:47:59 syscalls: 1 2018/08/26 06:47:59 code coverage: enabled 2018/08/26 06:47:59 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/26 06:47:59 setuid sandbox: enabled 2018/08/26 06:47:59 namespace sandbox: enabled 2018/08/26 06:47:59 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/08/26 06:47:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/26 06:47:59 net packed injection: enabled 2018/08/26 06:47:59 net device setup: enabled [ 39.588310] random: crng init done 06:48:29 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/29, 0x1d, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000000c0)={0x5, 0xff, 0xb02e, 0x3d16, 0x3}) fcntl$setsig(r0, 0xa, 0x3f) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000100)=0xfab) ppoll(&(0x7f0000000140)=[{r1, 0x404}, {r0}, {r1}, {r0, 0xa201}, {r1, 0x80}, {r1, 0x4402}, {r0, 0x8}, {r1, 0x642}], 0x8, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={0x1}, 0x8) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000280)=0x54) ppoll(&(0x7f00000002c0)=[{r1, 0x620b}, {r1, 0x10}, {r1, 0x2}, {r1, 0x20}, {r0, 0x84}, {r1, 0x1000}, {r1, 0x82}, {r1, 0x1100}, {r1}], 0x9, &(0x7f0000000340), &(0x7f0000000380)={0x6}, 0x8) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000003c0)={0x5, 0x6, 0x3f, 0x3, 0x7}) write$P9_RFSYNC(r0, &(0x7f0000000400)={0x7, 0x33, 0x2}, 0x7) r2 = dup3(r1, r0, 0x80000) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000440)={0x10000, 0x8001, 0x40, 0x401, 0x3}) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000480)) r3 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/pktcdvd/control\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000500)={0x6, 0x0, 'client0\x00', 0x1, "d185a30b73296f8e", "bb6c4472e44bee9466a75bf568aa3c78b2b7d2e97a104267b9586fb402a9a42a", 0x71f1, 0x10001}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000680)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000780)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000007c0)={'team0\x00', r4}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000800), &(0x7f0000000840)=0x40) setfsuid(r5) ioctl$RTC_PIE_ON(r1, 0x7005) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'ifb0\x00', r4}) getsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000008c0), &(0x7f0000000900)=0x4) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000940)) write$P9_RREADLINK(r0, &(0x7f0000000980)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) unlink(&(0x7f00000009c0)='./file0\x00') getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000a00), &(0x7f0000000a40)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000a80)={{{@in6=@dev={0xfe, 0x80, [], 0x20}, @in6=@local, 0x4e23, 0x551, 0x1000, 0x8, 0x2, 0x80, 0x20, 0x7f, r4, r5}, {0x8, 0x2, 0x0, 0x0, 0x7, 0x3, 0x3, 0xfffffffffffffffd}, {0x6, 0x7f, 0x6, 0x7}, 0x6, 0x6e6bba, 0x2, 0x1, 0x1, 0x2}, {{@in=@remote, 0x4d3, 0x7f}, 0xa, @in=@multicast1, 0x0, 0x1, 0x0, 0x80, 0x6, 0x8, 0x9}}, 0xe8) ioctl$int_in(r2, 0x0, &(0x7f0000000b80)=0x401) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x2f) 06:48:29 executing program 3: socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x4a09, 0x0, 0xfff}, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000000c0)={0xffffffffffff7b09, 0x1, 0x0, [{0x1ff, 0x8, 0x1, 0xffff, 0x100000001, 0x9, 0x4}]}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) keyctl$session_to_parent(0x12) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000180)=0x4, 0x4) mkdirat(r3, &(0x7f00000001c0)='./file0\x00', 0x8) socket$inet(0x2, 0x1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x2, 0x10200) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000640)=0xe8) bind(r2, &(0x7f0000000680)=@ll={0x11, 0xfd, r5, 0x1, 0x418, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x80) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40047705, &(0x7f0000000700)={0x2, 0x1000}) write$P9_RWALK(r2, &(0x7f0000000740)={0x3d, 0x6f, 0x2, {0x4, [{0x80, 0x0, 0x6}, {0x50, 0x1, 0x8}, {0x42, 0x3, 0x7}, {0x0, 0x1, 0x3}]}}, 0x3d) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) fcntl$setlease(r4, 0x400, 0x2) sched_yield() sendfile64(r4, r1, &(0x7f0000000780), 0x9) ioctl$KDDELIO(r3, 0x4b35, 0xffffffff) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x5d) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x3) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f00000007c0)={0x7dad, 0x1, 'client1\x00', 0xffffffff80000002, "f014f18fda29af8f", "43cf97074d025d073a2c8cc5666ce1fa3a408d41d84d32aedc05b052cdb51778", 0x800, 0x1f}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000880)={@mcast2, r5}, 0x14) openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$TUNDETACHFILTER(r3, 0x400854d6, 0x0) write$binfmt_misc(r0, &(0x7f0000000900)={'syz1', "4495f92f812a1f01754679435b7cf4edaba1d968351f65214dcec4039a4695277348200f569b4f06404398d3b8251c12ce74a34f29a61e23603c1f5c4456444c0f7cf0a84f254de227397240c657a54385dc61dc4a6a34dd0d3382a175e62b8373cf2c6a34f63f6d7bde9076fc2a274ccae32bc1e68d2d709e83d8933775c33169bc59279789184dda0a959bb1b66d69723dcf048667bad3de33ca46ab6bb032561c2401935a2dee104d0cb8f51b9e6baa"}, 0xb5) syncfs(r1) r6 = request_key(&(0x7f0000000b40)='cifs.spnego\x00', &(0x7f0000000b80)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000bc0)='client1\x00', 0x0) add_key$user(&(0x7f00000009c0)='user\x00', &(0x7f0000000a00)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000a40)="4ef31a6905e0c444300734829a0c5500c95a010cc1efb3cab96abc11801adf60db5314378c048bc359564efcea6407a4bb8081a4935549fc1bc519d1abb07918e1a865a20a6de53b91db75c684b57a56a6c700cd01bbee88091fbc38753c9e83a81c70e593085e0f656cdada07cf0ffa7571030b57ccc5fabb19e801e39a734b31c6f7efe2a92ca1a53c93769ab106d93fd5785bee692803651cfb23484226e45e60cdea8701ed5c1626e664ccc55f4a36dff92ac138cd2ddabbc809662d0d7be1b5cf6ddf43fd6ccf9baf0bf6ccb6ae45f8621fe5", 0xd5, r6) 06:48:29 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x8000, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() ioctl$VT_RELDISP(r0, 0x5605) prctl$setendian(0x14, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000440)=0x0) r4 = getuid() r5 = gettid() fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000000c0)="ab7e0f0d91216f9d9228d2835de3ceeb5f5e129bb7dc21009567d3d56b3b3cab02d67606181fa57ef2199a20c22165acab081cc8da27d69fe32930f9fbfaf26d29de10953fe3744038a1b8877774ae0d2ada3b7c61fad3b9b0f6072ff99360fe6715a94d9605787d745577ff8f5e74c98c193e1859e7e32a328510fed8556d68281a0d23f0b5c27f50a7af693a2cf35004af41cfd286592c98c443d1d5025c6cd92b2c93ef1cf4b0ec3103700b91d759fe277d500e13e5322d6917df0826a6e5", 0xc0}, {&(0x7f0000000180)="027f3cfcabb78f07104406435e843aec1067c35114336debb3887f864de59f877558ed04a8371d7d7a2add093a0c740fc6e8", 0x32}, {&(0x7f00000001c0)="ae8682059ad26121457cdabacc084ff45cd660211e907222bef5a7112b6fc324c1069b9229a657e4d4e7e9554536de355325ab6c1995cd59f18846966984c86a2046b35a95af42a6ed82b629e53d2d92c36616987872e9b6a5f2e8848bd052d7006db5339b45cd3a29dbdb23013d74e73d870dad33be6dabb6294728edb2", 0x7e}, {&(0x7f0000000240)="bffbd4649b38db28b708a993f3e97c28d095d91b63770833277f1ab7477584a2a6fbcf71ccd9b8d280ebdbefb8de965f740a5ed49a883f473afc37728eb883466c22383346ffba3998b5224141eca7c7a0adbe304673ee5cc3cee16061b9d991311429b69645fe67ac035d8ff0269329904d190b61213f432e2ff6632d3e266327ddb286afd3f112071622ea3457bbf112784e0d579fb58a3ed4bcf63f324ea7cd01dde17d543fcf972d69f540", 0xad}, {&(0x7f0000000300)="5cb368b2b7fc2fdb0eccbee86834fa20bb0adf09a16dde3ab4f4acefefa0ffad3af70aaafae201275cc91b5566a01a81d2c8cdb2671b6e3b7e765070f7911cf2c174929688b7f9299c25883aedbeb81996e8d3eee1829ff9a956b800be2e06d1182cb1146e845e5941d56310c65ccd1053c8b4bf09145f72faa0515d2a4c8659f9e2df9d88f8434d67dfaac6176b1ad9691924006604941ba046a211e0bf25bdfbc3e077b033d65d2e0224cf615a9ad48bf2d232cf2f1ec95cc5ebe9ee84516e9c1082bbd9", 0xc5}], 0x5, &(0x7f0000000500)=[@rights={0x14, 0x1, 0x1, [r0, r0]}, @rights={0x14, 0x1, 0x1, [r0, r0]}, @rights={0x1c, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r3, r4, r2}, @rights={0x10, 0x1, 0x1, [r0]}, @rights={0x10, 0x1, 0x1, [r0]}, @cred={0x18, 0x1, 0x2, r5, r6, r2}], 0x94, 0x4804}], 0x1, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000600), &(0x7f0000000640)=0x8) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tkill(r3, 0x3c) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@multicast1, @in=@remote}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f00000007c0)=0xe8) r9 = memfd_create(&(0x7f0000000800)='/dev/keychord\x00', 0x2) r10 = socket$inet(0x2, 0xf, 0x1) prctl$setmm(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$TIOCLINUX7(r8, 0x541c, &(0x7f0000000840)={0x7, 0x3}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x100000000, 0x1000, 0x0, 0x2, 0xf, 0x1, "4ad6c3a520cbee96463851f1dbe0a2306309f41598e0f387b2d9a3f2de94a06b7df42221f7b5fdade51b7e5f98e77aeadb7a62c73d4b4855b4b1f4fe7e8e467f", "0b4de37128dadcbb892b50b268784f0d600d88149f3425eb44a1b16109a0f02d2726aa2cb5877fc0e458e9cf739ce68526a6a4ae0c57bc5def8be353f00d92fb", "8867e581cf6041949b1454bd97dcde860b6d26375d2927dd13a2e22bb2f41c79", [0x3ff]}) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000980)='/dev/autofs\x00', 0x20000, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f00000009c0)=0xbb) r12 = add_key$keyring(&(0x7f0000000b40)='keyring\x00', &(0x7f0000000b80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000000a00)='user\x00', &(0x7f0000000a40)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000a80)="5b28a26c4667a6b77d8c685d816606ed60d2ecfd20ca32f662a4ff7da88c806e76eaeadf0854d31e1b958bca4cf906634afe2e0b06ca714250d478477114905b298b59dfd403f5b832f242390aefb6bd02d7f43568eccb0040839da5ab0b86575e3b46f81b014101bcc401aac8390f987626a8b4fc7b2c12e0f6224defa01a626efcde80", 0x84, r12) syz_open_dev$rtc(&(0x7f0000000bc0)='/dev/rtc#\x00', 0xffffffffffff5ee2, 0xa0000) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r11, 0x111, 0x3, 0x0, 0x4) dup3(r9, r7, 0x80000) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000000c00)) openat$tun(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/net/tun\x00', 0x2000, 0x0) 06:48:29 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xa01, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xecc2, 0x4) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xddd, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x8}) socketpair(0x15, 0x1, 0xcc7, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) ftruncate(r3, 0x7f) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000180)) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e22, @broadcast}, {0x6, @local}, 0x2a, {0x2, 0x4e23, @local}, 'syzkaller1\x00'}) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000240)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, {0x1, @local}, 0x4, {0x2, 0x4e22}, 'tunl0\x00'}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x200040, 0x0) close(r0) syncfs(r4) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000300)=0x2) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x40, 0x0) getitimer(0x3, &(0x7f0000000380)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x3f, 0x4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, r6, 0x30f, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x401}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0xc800) write$P9_RLCREATE(r2, &(0x7f0000000580)={0x18, 0xf, 0x1, {{0x84, 0x2, 0x7}, 0x5}}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) write$FUSE_POLL(r0, &(0x7f00000005c0)={0x18, 0xffffffffffffffda, 0x4, {0xffffffffffffffff}}, 0x18) connect$l2tp(r4, &(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @multicast2}, 0x3, 0x1, 0x3, 0x4}}, 0x26) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000640)={'bcsf0\x00', {0x2, 0x4e21, @remote}}) r8 = syz_open_dev$usbmon(&(0x7f0000000680)='/dev/usbmon#\x00', 0x100, 0x40) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000700)={@empty, @mcast2, @remote, 0x1, 0x100000000, 0x4, 0x400, 0x7fffffff, 0x21, r9}) fsync(r4) 06:48:29 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x6, 0x3b96c00000, 0x3, 0x80000000, 0x7}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x171000, 0x20) ioctl$TIOCNXCL(r2, 0x540d) write$P9_RSTATFS(r2, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0x5, 0x1, 0x321, 0x2, 0x1, 0x3, 0x9, 0x4, 0x10001}}, 0x43) ftruncate(r1, 0x9) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x50, r0, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) getdents(r3, &(0x7f00000001c0)=""/102, 0x66) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000240)={0x5, 0x100, 0x2, 0x7, 0xb0, 0x25, 0x9, 0x7, 0x5, 0x401, 0x6}) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000280)={0x9, 0x2, 0x0, [{0x9, 0x2, 0x9, 0x100, 0x1, 0x40, 0x4f20}, {0x5, 0x800, 0x4, 0x2, 0x3, 0x10001, 0x6bbf48c3}]}) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000340)={'veth1_to_bond\x00', 0xffffffff}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f00000003c0)=0xfff, 0x4) write$P9_RREADLINK(r3, &(0x7f0000000400)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) clone(0xc000000, &(0x7f0000000440)="2afaae55a771d18ae734f57490080054ab462bc6e0b5dadbee29", &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="69affe04069f926af6a9ee3b46350f7fca4a7e2747") setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000540), 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000580)=0xb13, 0x4) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000005c0)={@multicast1, @loopback, 0x0, 0x4, [@remote, @multicast2, @multicast2, @multicast2]}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000600)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000740)={@empty, @remote, r6}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000780)={0x5, 0x2, 'client0\x00', 0x2, "c7980bcca780fff4", "3e3f5405bb1126197e6dcee3cc78ae12757776d10c5a9eb98943a312928aaab1", 0x7, 0x1}) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000b00)=[r7, r8, r9, r10, r11]) 06:48:29 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) readv(r0, &(0x7f00000011c0)=[{&(0x7f0000000040)=""/221, 0xdd}, {&(0x7f0000000140)=""/94, 0x5e}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x3) socket$key(0xf, 0x3, 0x2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001200)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000001240)='attr/sockcreate\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001280)={@ipv4={[], [], @broadcast}, 0x0, 0x3, 0x0, 0x8, 0x3, 0x459, 0x10000000000}, &(0x7f00000012c0)=0x20) sync_file_range(r0, 0x8, 0x5, 0x3) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000001300)) sendmsg$key(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x2, 0xa, 0x5, 0x7, 0x10, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}, @sadb_x_sa2={0x2, 0x13, 0x200, 0x0, 0x0, 0x70bd25}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d3}, @sadb_x_sa2={0x2, 0x13, 0x20, 0x0, 0x0, 0x70bd2c, 0x3506}, @sadb_ident={0x2, 0xb, 0x5, 0x0, 0x22c716dc}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000001440)={'bcsf0\x00', @random="fbd51a9f65b5"}) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000001480)) timer_create(0x7, &(0x7f00000014c0)={0x0, 0x1d, 0x0, @tid=r1}, &(0x7f0000001500)=0x0) timer_delete(r3) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001540)='/dev/vga_arbiter\x00', 0x800, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000001580)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000015c0)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001600)=0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001640)='/dev/hwrng\x00', 0x3db172f8d98f68bb, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000001680)={{0x1, 0x1}, 0x1, 0x8, 0xaec, {0x1403093, 0x5}, 0x7fff, 0x8}) r7 = signalfd(r0, &(0x7f0000001700)={0x8}, 0x8) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000001740)={0x80000000, 0x2}) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000001780)) timer_create(0x7, &(0x7f00000017c0)={0x0, 0x17, 0x7, @tid=r5}, &(0x7f0000001800)) ioctl$RTC_VL_CLR(r6, 0x7014) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000001840)=""/191) write$binfmt_misc(r7, &(0x7f0000001900)={'syz0', "f29f558def25c8360800db70e2eb25f64aeca929919410ee8731aa5897ac2952e1c45cada237ea22e6dd67a2175a02a34a6d67af703e2350a246d4bea246de2550f32eae9bf145bdd2f04919fd0fbb477a87fb29ff64dd006b4c8bd011caacfab953aea05e766937f50f3a5e03dc4de46f89ea0b6508ebb48ad6e23e4ca85ef831fa42b16932624f57fd7c54d7b5429c138131809c55aced64261c6371a6f1d10248721683ea5f370f172ac41a58eb7b41049246daa64314234f3a105dc245621b8055fa5d94b2fdce78f0527111d843be0b24e7f2502b196e6930f01b88db07bb6e62c19d"}, 0xe9) accept4(r6, &(0x7f0000001a00)=@can, &(0x7f0000001a80)=0x80, 0x80800) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06055c8, &(0x7f0000001ac0)={0xa, 0x7, {0x0, 0x10000, 0xfffffffffffffff8, {0xffffffffffffff0d, 0xe33}, {0x8000, 0x71}, @ramp={0xf5, 0x6, {0x6e6f, 0x4, 0x100, 0x9}}}, {0x0, 0x9, 0x0, {0x7, 0x2}, {0x7, 0x7}, @cond=[{0x8, 0x0, 0x20, 0x80, 0x8977, 0x1b}, {0x1, 0x10000, 0x7, 0x9, 0x1, 0x2}]}}) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000001b40)) 06:48:29 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x460000) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x40, 0x2, 0x7}}, 0x14) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1c) r1 = request_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)='-vboxnet1\x00', 0xfffffffffffffffd) keyctl$assume_authority(0x10, r1) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @rand_addr}, &(0x7f0000000240)=0xc) sendto$packet(r0, &(0x7f0000000180)="c92113c5c99890f8c523badfc3394bf25d2b45caee5c7c994728d3d468e19cbc79e2feb7f825ea7a1a7f9fd2e9d56117f398f9b652e2a864f2ad13d94b6c047ed260b658f8ec67e6ad4948b7", 0x4c, 0x4000, &(0x7f0000000280)={0x11, 0xfd, r3, 0x1, 0x9, 0x6, @broadcast}, 0x14) timer_create(0x5, &(0x7f0000000400)={0x0, 0x34, 0x1, @thr={&(0x7f00000002c0)="ea20570370c44dfab3f048d6a1a4bb537fcf437be93ade14af4121197e9404b3df805593730052ec9ce196cdfd7ba20d51f5614ec23091cdf69b05b6bbf121b9153ad51e32f10352ee39ef402f2e39771fc3b9748a760b69ee95b0573fc626d70eab0535cf770abedb15192597fc3cfcf2561ce7d42fa91f9c7044119fcb61bcc40edce571c3858eac4961cb87c6da9d92aeb2b3c945e934cdf8f3e49096ce0548f339f0924f5604ac4b94f334e0e65ba93543597e5e2942de7588cd0ac32c6737ba942df94febd7bd88e0926afbe310", &(0x7f00000003c0)="fe6f4ac9e39f5f62d760e80d905c0e1c63adec9f2c546f318e07fd"}}, &(0x7f0000000440)=0x0) timer_gettime(r4, &(0x7f0000000480)) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f00000004c0)) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000500)="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", 0x1000) getrandom(&(0x7f0000001500)=""/47, 0x2f, 0x2) r5 = accept4(r2, &(0x7f0000001540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000015c0)=0x80, 0x80800) ioctl$sock_inet_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001600)) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000001640)={0x1, 0x7, 0x3000}, 0x4) keyctl$instantiate_iov(0x14, r1, &(0x7f0000001700)=[{&(0x7f0000001680)="4d289963c1c4474837add6b54188e520de915109851e38587340adc50df06ec00a66c9f5a275e3cedd136aa61246bdb29f4c4aa537924a12a358e7874f499d288c1a42e7e489866c1111feb41feef4", 0x4f}], 0x1, r1) getsockopt$packet_buf(r6, 0x107, 0xd, &(0x7f0000001740), &(0x7f0000001780)) timer_settime(r4, 0x1, &(0x7f00000017c0)={{0x77359400}}, &(0x7f0000001800)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000001840)=[0x1ff, 0x4]) r7 = getpgrp(0xffffffffffffffff) timer_create(0x7, &(0x7f0000001880)={0x0, 0x7, 0x7, @tid=r7}, &(0x7f00000018c0)) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000001900)={@local, 0x2a, r3}) r8 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/user\x00', 0x2, 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f00000019c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001dc0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001a00)={0x378, r9, 0x0, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x220, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r3}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0xfff, 0x9, 0x7, 0x7}, {0x1, 0x2, 0x3ff, 0xffffffff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r3}, {0x78, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0xb4, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xa}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r3}}}]}}]}, 0x378}}, 0x4000000) ioctl$SG_GET_ACCESS_COUNT(r8, 0x2289, &(0x7f0000001e00)) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e40)='/dev/zero\x00', 0x280100, 0x0) ioctl$PERF_EVENT_IOC_RESET(r10, 0x2403, 0x100000000) 06:48:29 executing program 6: [ 68.385577] IPVS: Creating netns size=2536 id=1 [ 68.438889] IPVS: Creating netns size=2536 id=2 [ 68.478622] IPVS: Creating netns size=2536 id=3 [ 68.515324] IPVS: Creating netns size=2536 id=4 [ 68.572108] IPVS: Creating netns size=2536 id=5 [ 68.630135] IPVS: Creating netns size=2536 id=6 [ 68.699768] IPVS: Creating netns size=2536 id=7 [ 68.787348] IPVS: Creating netns size=2536 id=8 [ 69.167314] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.230612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.259460] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.330147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.350089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.444334] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.490913] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.508201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 69.551754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.577537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 69.611943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 69.637077] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.679650] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 69.726935] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.739208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 69.797290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 69.819853] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 69.880511] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 69.898336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 69.915144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.930430] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 69.951510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.967239] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 69.984167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.998974] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.014540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 70.030950] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 70.049952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.058836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.067443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.083107] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 70.091149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 70.107310] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.129386] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 70.146746] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 70.155156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 70.172551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.183294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.208785] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 70.218911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.227712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.249444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 70.261385] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 70.278891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.289825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.303366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.311024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.321101] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 70.339274] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 70.354075] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 70.389117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.397132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.413857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 70.422815] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 70.434804] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 70.444569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 70.474171] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 70.481829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.489769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.520483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 70.535745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 70.545365] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 70.554492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 70.565071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.572601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.613912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 70.690106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 70.713003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.724114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.755307] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 70.762214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.773832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.793016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 70.822891] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 70.854552] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 70.865742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 70.904500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 70.924010] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 70.931605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.948603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.964994] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 70.974123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 70.983142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.994580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.003006] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 71.021491] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 71.037422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.049508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.068833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.076637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.087323] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 71.102604] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 71.112679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.124144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.131790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.139642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.467430] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.541575] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.557450] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.596983] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 73.731556] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 73.758264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.766975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.780242] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 73.796935] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 73.808285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.823839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.830592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.848510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.856814] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 73.863827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.872408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.045517] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.264236] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.270395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.282736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.335516] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.365072] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.428069] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.562043] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.575952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.582697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.594921] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.621245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.631664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.642020] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.655005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.661779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 06:48:36 executing program 0: 06:48:36 executing program 0: 06:48:36 executing program 0: 06:48:36 executing program 0: 06:48:36 executing program 5: 06:48:36 executing program 0: 06:48:36 executing program 0: 06:48:36 executing program 5: 06:48:36 executing program 3: 06:48:36 executing program 1: 06:48:36 executing program 5: 06:48:37 executing program 7: 06:48:37 executing program 4: 06:48:37 executing program 0: 06:48:37 executing program 3: 06:48:37 executing program 5: 06:48:37 executing program 1: 06:48:37 executing program 2: 06:48:37 executing program 6: 06:48:37 executing program 7: 06:48:37 executing program 7: 06:48:37 executing program 6: 06:48:37 executing program 1: 06:48:37 executing program 2: 06:48:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000000)) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x0) 06:48:37 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'gre0\x00'}) 06:48:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x3, 0x380, [0x0, 0x20000740, 0x200008d8, 0x200009d8], 0x0, &(0x7f0000000000), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'bpq0\x00', 'veth0_to_team\x00', 'bcsf0\x00', 'vlan0\x00', @broadcast, [], @local, [], 0xd8, 0x138, 0x168, [@pkttype={'pkttype\x00', 0x8}, @cluster={'cluster\x00', 0x10, {{0x7769}}}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'syz_tun\x00', 'rose0\x00', 'erspan0\x00', 'eql\x00', @local, [], @dev, [], 0xa0, 0xa0, 0xd0, [@m802_3={'802_3\x00', 0x8}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_team\x00', 'veth0_to_bond\x00', 'team_slave_0\x00', @dev, [], @broadcast, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0x394) 06:48:37 executing program 0: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 06:48:37 executing program 6: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) clone(0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200)) 06:48:37 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 06:48:37 executing program 1: 06:48:37 executing program 3: 06:48:37 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setgroups(0x0, &(0x7f0000000140)) 06:48:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80707315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000001fc0)={0x0, @multicast1, 0x0, 0x0, 'lblcr\x00'}, 0x2c) 06:48:37 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f0000000080)=""/118, 0x76}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000400)=""/210, 0xd2}], 0x4, &(0x7f0000001a00)=[{&(0x7f0000001700)=""/61, 0x3d}], 0x1, 0x0) 06:48:37 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000004700)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r0) 06:48:37 executing program 3: clone(0x0, &(0x7f0000001900), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) inotify_init() 06:48:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 06:48:37 executing program 6: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) clone(0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200)) 06:48:37 executing program 0: seccomp(0x1, 0x4, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6}]}) 06:48:37 executing program 2: prctl$seccomp(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) 06:48:37 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="2e2f6367726f75702e6e65742f73797a3010", 0x1ff) 06:48:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f00000007c0), 0xffffffffffffff8b}, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)='ip6tnl0\x00') [ 76.162548] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 06:48:37 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x14, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000)) 06:48:37 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x12, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000)) 06:48:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x12) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)) 06:48:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'securpty\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000000)=0x54) 06:48:37 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x420001, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43}, 0x43) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 06:48:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f000063a000)=0x2be, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x1000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 06:48:37 executing program 4: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)='\n') r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r0) 06:48:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fstatfs(r0, &(0x7f0000000080)=""/193) 06:48:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'securpty\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, &(0x7f0000000000)=0x54) 06:48:37 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") fdatasync(r0) 06:48:37 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000780)='./file0\x00') [ 76.302535] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 06:48:37 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r1, 0x0) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb}, 0xb) ioctl(r0, 0xc0184908, &(0x7f0000001000)) 06:48:37 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") fdatasync(r0) 06:48:37 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) 06:48:37 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffffffffffd) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x949a) r2 = getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x8, 0x0, 0x4, 0x8, 0x0, 0x1, 0x4000, 0x8, 0x70c, 0xd, 0x2, 0x7000000000, 0x7, 0x100000001, 0x6, 0x100000000, 0xffffffffffffff2a, 0x0, 0xffffffffffffe86c, 0x8, 0x7ff, 0x9, 0x800, 0x1f, 0x7c6, 0x0, 0x9, 0x1, 0x4, 0x3, 0x1f, 0x2, 0x3c, 0x1f, 0xda8b, 0x400040000, 0x0, 0x2, 0x1, @perf_config_ext={0x1000, 0x7f}, 0x10, 0xff, 0x0, 0x7, 0x5, 0x3, 0x80}, r2, 0x7, r1, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7f) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="2e2f6367726f75702e6e65742f73797a3010", 0x1ff) ioctl$SIOCSIFHWADDR(r0, 0x8995, &(0x7f00000003c0)={'ip6gre0\x00', @remote}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) 06:48:37 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40286608, 0x20000000) 06:48:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x54001088}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) 06:48:37 executing program 7: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r1, r0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 06:48:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6gretap0\x00', 0x3102}) 06:48:37 executing program 6: readlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0) 06:48:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') sendfile(r0, r0, &(0x7f0000000080)=0x202, 0xd9) 06:48:38 executing program 0: ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)="e18079c21471f29f93311dec") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000000082002, 0x0) write$binfmt_aout(r0, &(0x7f0000000000), 0xff8f) 06:48:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x403c) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r1, r0, &(0x7f0000000040), 0x4) 06:48:38 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 06:48:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)="e18079c21471f29f93311dec9d935a88b6cc4d8d8fa1c15d95971fd9f56f2bacdb5a02083142d1c0bc03178a1aa91cdc61ac03ac514b5c08f96068a10dffbc2fe6e1b0a902fa20f149da97e9e61c2c8900f759867e3273b67af44b871ef4ff624cefa3b4bcd5819f9a1eb9db33e117490cfb6668d7531d7f03691addcb26a0a7a125be7cc68980f1b0cfb487d1da05bcce1501adbcc96c4f50aaf3ae44044a57f758322bd404c6f97cd8185c8e62ee42b835f5ce499983e3019e62c6d7f3611a5a9d5b9ca060f8d1e3514733946878da") ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000000082002, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000000c0)=0x5) write$binfmt_aout(r1, &(0x7f0000000000), 0xff8f) 06:48:38 executing program 6: r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x3}, 0x20) 06:48:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x27) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c46000004000000000000000000000000000000000000000000000000004000000000000000fff4000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x6f) 06:48:38 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) sync_file_range(r0, 0x0, 0x0, 0x3) 06:48:38 executing program 4: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)='\n') r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r0) 06:48:38 executing program 7: renameat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00') 06:48:38 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480)}}}], 0x94, 0x0, &(0x7f0000000340)="457e46c4fede7bb55dc9e89d4f60fbec71336eb9fdee9955e872cb70f2874e557bd7f280a65d3be1a0d66b90a1f121a343b778e2d174950a684303fdecbde6727e7d92430ed87fed0f0f0dabbc6b65cc69015b49012711cd9767f3de1aceaba186c4475fed96b9a2b1c4b8b20d14b0211911b0dc0b8be16f277612ff7fae9e912f8d205f769e8588dcdb4110ee5c438b3181d7e8"}) 06:48:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000080)=0x80000003, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00007a8fff), 0x3a7, 0x20000000, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 06:48:38 executing program 7: r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x2}, 0x20) 06:48:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x403c) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r1, r0, &(0x7f0000000040), 0x4) 06:48:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)="e18079c21471f29f93311dec9d935a88b6cc4d8d8fa1c15d95971fd9f56f2bacdb5a02083142d1c0bc03178a1aa91cdc61ac03ac514b5c08f96068a10dffbc2fe6e1b0a902fa20f149da97e9e61c2c8900f759867e3273b67af44b871ef4ff624cefa3b4bcd5819f9a1eb9db33e117490cfb6668d7531d7f03691addcb26a0a7a125be7cc68980f1b0cfb487d1da05bcce1501adbcc96c4f50aaf3ae44044a57f758322bd404c6f97cd8185c8e62ee42b835f5ce499983e3019e62c6d7f3611a5a9d5b9ca060f8d1e3514733946878da") ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000000082002, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000000c0)=0x5) write$binfmt_aout(r1, &(0x7f0000000000), 0xff8f) 06:48:38 executing program 0: ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)="e18079c21471f29f93311dec") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000000082002, 0x0) write$binfmt_aout(r0, &(0x7f0000000000), 0xff8f) 06:48:38 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480)}}}], 0x94, 0x0, &(0x7f0000000340)="457e46c4fede7bb55dc9e89d4f60fbec71336eb9fdee9955e872cb70f2874e557bd7f280a65d3be1a0d66b90a1f121a343b778e2d174950a684303fdecbde6727e7d92430ed87fed0f0f0dabbc6b65cc69015b49012711cd9767f3de1aceaba186c4475fed96b9a2b1c4b8b20d14b0211911b0dc0b8be16f277612ff7fae9e912f8d205f769e8588dcdb4110ee5c438b3181d7e8"}) [ 76.964442] binder: 6202:6204 got reply transaction with no transaction stack [ 76.972849] binder: 6202:6204 transaction failed 29201/-71, size 0-0 line 2921 06:48:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) dup(r0) 06:48:38 executing program 7: prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) 06:48:38 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffc}]}) accept4$packet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x14, 0x0) [ 77.083227] binder: 6226:6231 got reply transaction with no transaction stack 06:48:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:38 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x90) 06:48:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x403c) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r1, r0, &(0x7f0000000040), 0x4) [ 77.127041] binder: 6226:6231 transaction failed 29201/-71, size 0-0 line 2921 06:48:38 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 06:48:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0x0]) 06:48:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) fadvise64(r0, 0x0, 0x0, 0x4) 06:48:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:38 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) 06:48:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000a80), 0x0, 0x81806) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) fadvise64(r0, 0x0, 0x0, 0x4) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) 06:48:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x403c) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r1, r0, &(0x7f0000000040), 0x4) 06:48:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x8000000000007) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@nat={'nat\x00', 0x19, 0x2, 0x2a8, [0x20000a00, 0x0, 0x0, 0x20000b30, 0x20000b60], 0x0, &(0x7f0000000180), &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, 0x2f8) 06:48:38 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffe97) unlink(&(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140), &(0x7f0000000280)='I', 0x1, 0xfffffffffffffffc) 06:48:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:38 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) utimensat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}}, 0x0) 06:48:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_getoverrun(0x0) 06:48:38 executing program 1: prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) 06:48:38 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 06:48:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) fadvise64(r0, 0x0, 0x0, 0x4) 06:48:38 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@mcast1, @mcast1, @empty, 0x0, 0x0, 0x0, 0x1a0ffffffff}) 06:48:38 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x420001, 0x0) write$P9_RSYMLINK(r0, &(0x7f00000001c0)={0x14}, 0x14) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 06:48:38 executing program 1: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 06:48:38 executing program 7: clone(0x200, &(0x7f0000001900), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f00000000c0)='./file0\x00', 0x100000000001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') pread64(r0, &(0x7f00009f3000), 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280), &(0x7f0000000340)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x827e, 0x0) 06:48:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 06:48:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x2, &(0x7f0000000080)=[0x0, 0xee01]) setresgid(0x0, 0x0, r1) 06:48:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) fadvise64(r0, 0x0, 0x0, 0x4) 06:48:38 executing program 0: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) sync() 06:48:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:38 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000080)) 06:48:38 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 06:48:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) fadvise64(r0, 0x0, 0x0, 0x4) 06:48:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x801c581f, 0x0) 06:48:38 executing program 0: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) sync() 06:48:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000400)='cpuacct.usage_user\x00', 0x2761, 0x0) 06:48:38 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 06:48:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400020) 06:48:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 06:48:39 executing program 7: clone(0x200, &(0x7f0000001900), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f00000000c0)='./file0\x00', 0x100000000001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') pread64(r0, &(0x7f00009f3000), 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280), &(0x7f0000000340)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x827e, 0x0) 06:48:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000280)=0x9, 0x4) 06:48:39 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote, r2}, 0x14) 06:48:39 executing program 1: clone(0x200, &(0x7f0000001900), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f00000000c0)='./file0\x00', 0x100000000001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') pread64(r0, &(0x7f00009f3000), 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280), &(0x7f0000000340)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x827e, 0x0) 06:48:39 executing program 5: clone(0x200, &(0x7f0000001900), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f00000000c0)='./file0\x00', 0x100000000001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') pread64(r0, &(0x7f00009f3000), 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280), &(0x7f0000000340)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x827e, 0x0) 06:48:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a040007000000000013002d5403e205000e0003ae29e14eac50c30d4a00000000000000eaaae411dd7000000000d707fffffff00a02cf"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) 06:48:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:39 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 06:48:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r2 = socket$inet6(0xa, 0x80803, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, 0x1c) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x4, @local}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x1c) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'team0\x00', 0x100}) getsockname(r2, &(0x7f0000000300)=@generic, &(0x7f00000002c0)=0xfffffffffffffe4c) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@ipv4, 0x0, r1}) 06:48:39 executing program 6: 06:48:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:39 executing program 7: clone(0x200, &(0x7f0000001900), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f00000000c0)='./file0\x00', 0x100000000001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') pread64(r0, &(0x7f00009f3000), 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280), &(0x7f0000000340)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x827e, 0x0) 06:48:39 executing program 1: clone(0x200, &(0x7f0000001900), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f00000000c0)='./file0\x00', 0x100000000001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') pread64(r0, &(0x7f00009f3000), 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280), &(0x7f0000000340)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x827e, 0x0) 06:48:39 executing program 0: 06:48:39 executing program 5: 06:48:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:39 executing program 6: 06:48:39 executing program 0: 06:48:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:39 executing program 4: 06:48:39 executing program 5: 06:48:39 executing program 1: clone(0x200, &(0x7f0000001900), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f00000000c0)='./file0\x00', 0x100000000001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') pread64(r0, &(0x7f00009f3000), 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280), &(0x7f0000000340)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x827e, 0x0) 06:48:39 executing program 7: clone(0x200, &(0x7f0000001900), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f00000000c0)='./file0\x00', 0x100000000001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') pread64(r0, &(0x7f00009f3000), 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280), &(0x7f0000000340)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x827e, 0x0) 06:48:39 executing program 6: 06:48:39 executing program 0: 06:48:39 executing program 4: 06:48:39 executing program 5: 06:48:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:39 executing program 0: 06:48:39 executing program 6: 06:48:39 executing program 5: 06:48:39 executing program 4: 06:48:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) pwritev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x4000000000000007) 06:48:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:40 executing program 0: 06:48:40 executing program 5: 06:48:40 executing program 6: 06:48:40 executing program 4: 06:48:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) pwritev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x4000000000000007) 06:48:40 executing program 1: 06:48:40 executing program 7: 06:48:40 executing program 6: 06:48:40 executing program 1: 06:48:40 executing program 7: 06:48:40 executing program 4: 06:48:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) pwritev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x4000000000000007) 06:48:40 executing program 4: 06:48:40 executing program 6: 06:48:40 executing program 5: 06:48:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:40 executing program 1: 06:48:40 executing program 0: 06:48:40 executing program 3: r0 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0x4000000000000007) 06:48:40 executing program 4: 06:48:40 executing program 7: 06:48:40 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) fallocate(r0, 0x0, 0x0, 0x8000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) 06:48:40 executing program 6: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000240)) 06:48:40 executing program 1: 06:48:40 executing program 7: 06:48:40 executing program 4: 06:48:40 executing program 0: 06:48:40 executing program 6: 06:48:40 executing program 3: r0 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0x4000000000000007) 06:48:40 executing program 1: 06:48:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') 06:48:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") sysfs$1(0x1, &(0x7f0000000040)='/dev/binder#\x00') 06:48:41 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) recvfrom$unix(r2, &(0x7f0000000180)=""/237, 0xed, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 06:48:41 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r0, 0x0) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f00000002c0), 0x40002cd, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000380)=0x5, 0x8) 06:48:41 executing program 3: r0 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0x4000000000000007) 06:48:41 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x8000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:41 executing program 1: mknod(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') 06:48:41 executing program 0: prctl$seccomp(0x16, 0x1, &(0x7f0000000200)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000100)) 06:48:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000415fc8)={&(0x7f000034c000), 0xc, &(0x7f00000daff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) 06:48:41 executing program 5: pipe(&(0x7f0000000940)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080), &(0x7f00000001c0)="a9b76521a601a98f79cb652810b6cf0ad9977a615046a7c39895051dbc31958a1e76ef66b19ff10c14da797d803e1609c0e613f139c0a0ed0791218b3afe84e4f0cf67ba36114eb1c2ce2c730cf039275f95b7e0cea390", 0x57, 0xfffffffffffffffb) 06:48:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000300)=0x1000000, 0x12) 06:48:41 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:41 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x11, 0xa, 0x9, &(0x7f0000000140)) 06:48:41 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 06:48:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:41 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) recvfrom$unix(r2, &(0x7f0000000180)=""/237, 0xed, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 06:48:41 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) recvfrom$unix(r2, &(0x7f0000000180)=""/237, 0xed, 0x0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 06:48:41 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") futimesat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={{}, {0x0, 0x7530}}) 06:48:42 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x2, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) 06:48:42 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x3c7}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020e00001000000000000000000000000800120000000100000000000000000006000000000000000000000000000000e000000100000000000000000000000000000000000000000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632b91c5200000000000ff"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 06:48:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') sendfile(r0, r1, &(0x7f0000000000), 0x100000001) 06:48:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpriority(0x0, 0x0) 06:48:42 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:42 executing program 6: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080), &(0x7f00000001c0)="a9", 0x1, 0xfffffffffffffffb) keyctl$invalidate(0x15, r0) 06:48:42 executing program 7: clone(0x0, &(0x7f0000f88000), &(0x7f00002b0ffc), &(0x7f0000714ffc), &(0x7f0000e1bf43)) 06:48:42 executing program 1: socketpair(0x11, 0x0, 0x0, &(0x7f0000000040)) 06:48:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000005c0)=[{0xffffffffffffffff, 0x1000}, {r1, 0x1}, {r1, 0x1000}, {}], 0x4, &(0x7f0000000640)={0x77359400}, &(0x7f0000000680)={0x250}, 0x8) 06:48:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000044a661f6ec2e000017000400000015080700000003db98200000000013abdd6d03009a946e99ec00000000000092c682730e590851d92abfdc873dd3531e60c02e2e5feb992c457e9791fd96101963c66c4bf360"], 0x58) 06:48:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4), 0x1c) listen(r0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:42 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:42 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000080)="e4", 0x1, 0xfffffffffffffffb) 06:48:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000044a661f6ec2e000017000400000015080700000003db98200000000013abdd6d03009a946e99ec00000000000092c682730e590851d92abfdc873dd3531e60c02e2e5feb992c457e9791fd96101963c66c4bf360"], 0x58) 06:48:42 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x7, 0x12) write$cgroup_int(r1, &(0x7f0000000040)=0x1000, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) 06:48:42 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000300)=0x1000000, 0x12) 06:48:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000980)=0x76, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000007c0)="3233638f3ab20ddde33b28cf34ca59a1d52929070b189fbe40f2d26b49663dab2c99ff09ed17ce23a9e3f27fb79bb8ae8cef336d6055069a8be96641171daa43427ccb190633ab489c2f583c6dbc554505f8b1e48072f9d1b50abefe8b502c183bf5e11b754d878c935ade48d22058188e33c6cc1c96df821ffe0b5ca37771db5a3bff80690b412f6bca5a0ace4b314a9ccae309f945d03a3a29a7228c5959113bcad179c09f189f51912d09903638501fa20e3e900054ec2d094aeb72ff8db4c11df90dea5f6fa2b6", 0xc9, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) write$binfmt_elf64(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000026316f756ecbbbd31ff04e5006bb0000000000000000000000000000000000000000000000840000000000000000000000000000000000000000000000000000119717ef35ed1ce068f9e45c14bfd1b073babb0be7563a95b7729af1393bfab47c5e394ae346109297182744d4c67689495ce3eb4572ee12729f13d2acb407662f5bd21ab8e00623f03a1d80d7ffb2284c31030dd29b59b9e4b94f9c80dc0e7b75dddd4221e310f2eba2aa411c838b8cac7df49f537bf8687b92a79b604181dfbc09e1735f015fb4b977437c28149ac74410cd6752b3"], 0x1c6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x0) sendto$inet(r0, &(0x7f0000000600)="8680e6cdd4e36140392feff6ed6e5c6f733bb7eabd3645dbd411b8896be97d42d4e3cc4e52f6e994a55c7b1ad2b0ad497edde8308919435ae59307344090b667a039a0b9d9a913cc0af6d6ceb905d385a9ffebc9af539576c6399324bc71bb8f5c", 0x61, 0x0, 0x0, 0x0) 06:48:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x8, &(0x7f0000000140)=[@fd, @fd], &(0x7f00000001c0)=[0x20]}}], 0x0, 0x0, &(0x7f0000000300)}) 06:48:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x108) 06:48:42 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0xffffff7f}}, 0x1c}}, 0x0) 06:48:42 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:42 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x7, 0x12) write$cgroup_int(r1, &(0x7f0000000040)=0x1000, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) 06:48:42 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0xff8e}}, 0x0) [ 81.381512] binder: 6699:6702 got transaction with invalid offset (32, min 0 max 48) or object. 06:48:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x0, @rand_addr=0x4, 0x0, 0x0, 'none\x00'}, 0x2c) 06:48:42 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80), 0x0, 0x81806) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) [ 81.397884] PF_BRIDGE: RTM_NEWNEIGH with invalid address 06:48:42 executing program 7: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080), &(0x7f00000000c0)='3', 0x1, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0), 0x0) [ 81.405274] PF_BRIDGE: RTM_NEWNEIGH with invalid address [ 81.493082] binder: 6699:6702 transaction failed 29201/-22, size 48-8 line 3199 [ 81.529113] binder_alloc: binder_alloc_mmap_handler: 6699 20001000-20004000 already mapped failed -16 [ 81.547469] binder: BINDER_SET_CONTEXT_MGR already set [ 81.552850] binder: 6699:6702 ioctl 40046207 0 returned -16 [ 81.559217] binder_alloc: 6699: binder_alloc_buf, no vma [ 81.559239] binder: 6699:6731 transaction failed 29189/-3, size 48-8 line 3136 [ 81.559594] binder: undelivered TRANSACTION_ERROR: 29189 [ 81.559682] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.579344] IPVS: set_ctl: invalid protocol: 0 0.0.0.4:0 06:48:43 executing program 6: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@loopback}}, 0xe8) sendto$inet6(r0, &(0x7f0000000480), 0xfffffffffffffd94, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 06:48:43 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x7, 0x12) write$cgroup_int(r1, &(0x7f0000000040)=0x1000, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) 06:48:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000980)=0x76, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000007c0)="3233638f3ab20ddde33b28cf34ca59a1d52929070b189fbe40f2d26b49663dab2c99ff09ed17ce23a9e3f27fb79bb8ae8cef336d6055069a8be96641171daa43427ccb190633ab489c2f583c6dbc554505f8b1e48072f9d1b50abefe8b502c183bf5e11b754d878c935ade48d22058188e33c6cc1c96df821ffe0b5ca37771db5a3bff80690b412f6bca5a0ace4b314a9ccae309f945d03a3a29a7228c5959113bcad179c09f189f51912d09903638501fa20e3e900054ec2d094aeb72ff8db4c11df90dea5f6fa2b6", 0xc9, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) write$binfmt_elf64(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000026316f756ecbbbd31ff04e5006bb0000000000000000000000000000000000000000000000840000000000000000000000000000000000000000000000000000119717ef35ed1ce068f9e45c14bfd1b073babb0be7563a95b7729af1393bfab47c5e394ae346109297182744d4c67689495ce3eb4572ee12729f13d2acb407662f5bd21ab8e00623f03a1d80d7ffb2284c31030dd29b59b9e4b94f9c80dc0e7b75dddd4221e310f2eba2aa411c838b8cac7df49f537bf8687b92a79b604181dfbc09e1735f015fb4b977437c28149ac74410cd6752b3"], 0x1c6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x0) sendto$inet(r0, &(0x7f0000000600)="8680e6cdd4e36140392feff6ed6e5c6f733bb7eabd3645dbd411b8896be97d42d4e3cc4e52f6e994a55c7b1ad2b0ad497edde8308919435ae59307344090b667a039a0b9d9a913cc0af6d6ceb905d385a9ffebc9af539576c6399324bc71bb8f5c", 0x61, 0x0, 0x0, 0x0) 06:48:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:43 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80), 0x0, 0x81806) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:43 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x1, [{{0x2, 0x0, @broadcast}}]}, 0x110) 06:48:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x3]}, 0x5c) 06:48:43 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fallocate(r1, 0x20, 0x0, 0x10000) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x1, 0x80000001, 0x0, 0x628, 0x0, 0x3, 0x0, 0x9, 0x0, 0xfffffffffffffbd6}) epoll_create1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)='./cgroup.cpu\x00') ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000200)={0x2b, 0x9, 0x0, 0x0, 0x2bc, 0x0, 0x5, 0x4, 0x0, 0x100}) 06:48:43 executing program 7: clone(0x100000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 06:48:43 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80), 0x0, 0x81806) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:43 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x7, 0x12) write$cgroup_int(r1, &(0x7f0000000040)=0x1000, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) 06:48:43 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000040)=""/115, 0x73) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$netlink(r1, &(0x7f0000006180)={&(0x7f0000000100)=@proc, 0xc, &(0x7f0000005c40)=[{&(0x7f0000000480)={0x10}, 0x10}], 0x1, &(0x7f00000060c0)=[@rights={0x10}, @rights={0x10}], 0x20}, 0x0) 06:48:43 executing program 6: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x91, @tick=0xfff, 0x5, {0x4, 0x3}, 0x7, 0x1, 0x1a}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r2, 0x308, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x738000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000801) bind$netlink(r0, &(0x7f0000000000), 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc) 06:48:43 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)}], 0x1, 0x81806) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:43 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1) vmsplice(r1, &(0x7f0000001c40)=[{&(0x7f0000001c00)="b1", 0x1}], 0x1, 0x0) 06:48:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:43 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78}, 0x78) 06:48:43 executing program 7: 06:48:43 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)}], 0x1, 0x81806) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:43 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000)) 06:48:43 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x5, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000)) [ 82.270861] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 06:48:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote, 0xd}, 0x20) 06:48:43 executing program 6: syz_emit_ethernet(0xe9, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000340)) 06:48:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fallocate(r1, 0x20, 0x0, 0x10000) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x1, 0x80000001, 0x0, 0x628, 0x0, 0x3, 0x0, 0x9, 0x0, 0xfffffffffffffbd6}) epoll_create1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)='./cgroup.cpu\x00') ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000200)={0x2b, 0x9, 0x0, 0x0, 0x2bc, 0x0, 0x5, 0x4, 0x0, 0x100}) 06:48:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000000180)={0x10, 0x8100000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:48:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)}], 0x1, 0x81806) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:44 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x5, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000)) 06:48:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") connect$inet6(r0, &(0x7f0000000200)={0x2, 0x0, 0x0, @remote}, 0x1c) 06:48:44 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@newneigh={0x30, 0x1c, 0x31, 0x0, 0x0, {0xa, 0x0, 0x0, r2, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @dev}]}, 0x30}}, 0x0) 06:48:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:44 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000300)="2f6465762f6e6574c874756e00", 0xc0, 0x0) 06:48:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000080), 0x4000000000000007) 06:48:44 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000180)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3ec4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e0fd8a6f868925be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a441a2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0cf816930de3675d34117a44eb0e4f832936da44e") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"6e72300100", 0x2101}) close(r1) [ 82.685112] device lo entered promiscuous mode [ 82.699666] device tunl0 entered promiscuous mode [ 82.723780] device sit0 entered promiscuous mode 06:48:44 executing program 7: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6e6574c874756e00", 0x40, 0x0) 06:48:44 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x5, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000)) [ 82.735217] device syz_tun entered promiscuous mode [ 82.756190] device veth0 entered promiscuous mode 06:48:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x1000000, 0x20000004, &(0x7f0000b63fe4), 0x1c) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0}, {r0}], 0x2, &(0x7f0000000100)={0x0, r1+10000000}, &(0x7f0000000240)={0x6}, 0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") 06:48:44 executing program 3: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r0 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0x4000000000000007) 06:48:44 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000300), 0xffffff3e) 06:48:44 executing program 3: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r0 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0x4000000000000007) [ 82.776859] device veth1 entered promiscuous mode [ 82.783215] device veth0_to_bridge entered promiscuous mode [ 82.800181] device bridge_slave_0 entered promiscuous mode [ 82.816985] device veth1_to_bridge entered promiscuous mode [ 82.854949] device bridge_slave_1 entered promiscuous mode [ 82.890850] device veth0_to_bond entered promiscuous mode [ 82.936109] device bond_slave_0 entered promiscuous mode [ 82.946962] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 82.954327] device veth1_to_bond entered promiscuous mode [ 82.960562] device bond_slave_1 entered promiscuous mode [ 82.967911] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 82.974927] device veth0_to_team entered promiscuous mode [ 82.980781] device team_slave_0 entered promiscuous mode [ 82.986490] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.993353] device veth1_to_team entered promiscuous mode [ 82.999328] device team_slave_1 entered promiscuous mode [ 83.005084] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 83.015159] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 83.022592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.031078] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 83.049129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.057088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.066679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.074712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.082337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 06:48:44 executing program 1: 06:48:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x400}, 0x1c) 06:48:44 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000300), 0xffffff3e) 06:48:44 executing program 3: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r0 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0x4000000000000007) 06:48:44 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@newneigh={0x30, 0x1c, 0x31, 0x0, 0x0, {0xa, 0x0, 0x0, r2, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @dev}]}, 0x30}}, 0x0) 06:48:44 executing program 4: 06:48:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:44 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000180)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3ec4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e0fd8a6f868925be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a441a2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0cf816930de3675d34117a44eb0e4f832936da44e") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"6e72300100", 0x2101}) close(r1) 06:48:44 executing program 1: 06:48:44 executing program 6: 06:48:44 executing program 4: 06:48:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x4000000000000007) 06:48:44 executing program 7: 06:48:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x400}, 0x1c) 06:48:44 executing program 1: 06:48:44 executing program 6: 06:48:44 executing program 7: 06:48:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x4000000000000007) 06:48:44 executing program 1: 06:48:44 executing program 6: 06:48:44 executing program 4: 06:48:44 executing program 5: 06:48:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:45 executing program 7: 06:48:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x4000000000000007) 06:48:45 executing program 6: 06:48:45 executing program 4: 06:48:45 executing program 5: 06:48:45 executing program 1: 06:48:45 executing program 0: 06:48:45 executing program 6: 06:48:45 executing program 4: 06:48:45 executing program 5: 06:48:45 executing program 0: 06:48:45 executing program 1: 06:48:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:45 executing program 4: 06:48:45 executing program 7: 06:48:45 executing program 1: 06:48:45 executing program 0: 06:48:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000080), 0x0) 06:48:45 executing program 7: 06:48:45 executing program 5: 06:48:45 executing program 1: 06:48:45 executing program 4: 06:48:45 executing program 6: 06:48:45 executing program 0: 06:48:45 executing program 5: 06:48:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:45 executing program 7: 06:48:45 executing program 6: 06:48:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000080), 0x0) 06:48:45 executing program 1: 06:48:45 executing program 5: 06:48:45 executing program 4: 06:48:45 executing program 0: 06:48:45 executing program 6: 06:48:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000), 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:45 executing program 7: 06:48:45 executing program 1: 06:48:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000080), 0x0) 06:48:45 executing program 5: 06:48:45 executing program 6: 06:48:45 executing program 1: 06:48:45 executing program 0: 06:48:45 executing program 4: 06:48:45 executing program 7: 06:48:45 executing program 6: 06:48:45 executing program 5: 06:48:45 executing program 0: 06:48:45 executing program 4: 06:48:45 executing program 1: 06:48:45 executing program 3: 06:48:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:46 executing program 7: 06:48:46 executing program 5: 06:48:46 executing program 3: 06:48:46 executing program 0: 06:48:46 executing program 6: 06:48:46 executing program 4: 06:48:46 executing program 1: 06:48:46 executing program 5: 06:48:46 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 06:48:46 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fallocate(r1, 0x20, 0x0, 0x10000) epoll_create1(0x80000) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)='./cgroup.cpu\x00') 06:48:46 executing program 3: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) setns(r0, 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) 06:48:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) 06:48:46 executing program 0: socket$inet(0x2, 0x0, 0x100) 06:48:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 06:48:46 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000005c0)='\n') mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) 06:48:46 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 06:48:46 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./file0\x00', 0x0) 06:48:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)="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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10012, 0xffffffffffffffff, 0x0) fstatfs(r1, &(0x7f0000000580)=""/4096) 06:48:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="bd", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f0000000000)=@dstopts, 0x8) 06:48:46 executing program 1: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) 06:48:46 executing program 7: openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x304df6f0a25d5f33, 0x0) 06:48:46 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x14}, 0x14}}, 0x20040080) 06:48:46 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001300)=[{&(0x7f0000000280)="b1", 0x1}], 0x1, 0x0) 06:48:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$sock_buf(r0, 0x1, 0x200400000000008, &(0x7f0000b56f40)=""/192, &(0x7f0000000000)=0xc0) 06:48:46 executing program 3: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) setns(r0, 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) 06:48:46 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x5, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000)) 06:48:46 executing program 2: request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100)='\x00', 0x0) 06:48:46 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fallocate(r1, 0x20, 0x0, 0x10000) epoll_create1(0x80000) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)='./cgroup.cpu\x00') 06:48:46 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000980)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000007c0)="3233638f3ab20ddde33b28cf34ca59a1d52929070b189fbe40f2d26b49663dab2c99ff09ed17ce23a9e3f27fb79bb8ae8cef336d6055069a8be96641171daa43427ccb190633ab489c2f583c6dbc554505f8b1e48072f9d1b50abefe8b502c183bf5e11b754d878c935ade48d22058188e33c6cc1c96df821ffe0b5ca37771db5a3bff80690b412f6bca5a0ace4b314a9ccae309f945d03a3a29a7228c5959113bcad179c09f189f51912d09903638501fa20e3e900054ec2d094aeb72ff8db4c11df90dea5f6fa2b6", 0xc9, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000c80)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000026316f756ecbbbd31ff04e5006bb0000000000000000000000000000000000000000000000840000000000000000000000000000000000000000000000000000"], 0x130) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x0) sendto$inet(r0, &(0x7f0000000600)="8680e6cdd4e36140392feff6ed6e5c6f733bb7eabd3645dbd411b8896be97d42d4e3cc4e52f6e994a55c7b1ad2b0ad497edde8308919435ae59307344090b667a039a0b9d9a913cc0af6d6ceb905d385a9ffebc9af539576c63993", 0x5b, 0x0, 0x0, 0x0) 06:48:46 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000100)="6c6f00966fd651b159a9c84a2c60d29800000020") 06:48:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00', 0x2000000c0ffffff}) 06:48:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086610, 0x400005) 06:48:46 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 06:48:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fallocate(r1, 0x20, 0x0, 0x10000) epoll_create1(0x80000) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)='./cgroup.cpu\x00') 06:48:46 executing program 7: r0 = socket$inet6(0xa, 0x80803, 0x2) recvfrom$inet6(r0, &(0x7f00000002c0)=""/227, 0xe3, 0x0, 0x0, 0xfffffffffffffe9f) 06:48:46 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000000180)={0x10, 0x8100000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:48:46 executing program 0: r0 = socket$inet6(0xa, 0x80803, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x32}, 0x0, @in=@remote}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, 0x1c) [ 85.549585] device bridge_slave_0 entered promiscuous mode [ 85.570223] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready 06:48:46 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x10000000004e21}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000003c0)=""/36, 0x24}, 0x2000) 06:48:46 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000380)}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000340)) tkill(r0, 0x1000000000016) 06:48:46 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x209) sendfile(r0, r0, &(0x7f00000000c0), 0xfdef) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") [ 85.601662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.639346] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready 06:48:47 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000003600)}, 0x0) sendmsg(r1, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000600)}, 0x0) close(r0) 06:48:47 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000380)}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000340)) tkill(r0, 0x1000000000016) [ 85.649683] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 85.689845] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready 06:48:47 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x8, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, &(0x7f0000000000)) [ 85.724768] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 85.751504] device bridge_slave_0 left promiscuous mode [ 85.760043] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 85.775847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.828063] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 85.844641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.852087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.883717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.891141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.913926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 06:48:47 executing program 4: 06:48:47 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r0, 0x8, 0x0) vmsplice(r2, &(0x7f0000001c40)=[{&(0x7f0000001c00)="b1", 0x1}], 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000001c80)={{0x0, 0x0, 0x0, 0x125}}, 0x20) 06:48:47 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000000180)={0x10, 0x8100000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:48:47 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000003600)}, 0x0) sendmsg(r1, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000600)}, 0x0) close(r0) 06:48:47 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup/syz0\x00', 0x1ff) 06:48:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00', 0x2000000c0ffffff}) 06:48:47 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x2) 06:48:47 executing program 2: setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6}}, 0xfffffffffffffe0c) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000004c0)={@loopback}, 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0x0) r1 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x2}, 0x1c2) 06:48:47 executing program 6: 06:48:47 executing program 4: 06:48:47 executing program 5: 06:48:47 executing program 6: 06:48:47 executing program 1: 06:48:47 executing program 0: 06:48:47 executing program 4: 06:48:47 executing program 6: [ 86.391064] device bridge_slave_0 entered promiscuous mode 06:48:47 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000003600)}, 0x0) sendmsg(r1, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000600)}, 0x0) close(r0) 06:48:47 executing program 2: 06:48:47 executing program 5: 06:48:47 executing program 4: 06:48:47 executing program 3: 06:48:47 executing program 1: 06:48:47 executing program 0: 06:48:47 executing program 2: 06:48:47 executing program 5: 06:48:47 executing program 3: 06:48:47 executing program 6: 06:48:47 executing program 0: 06:48:47 executing program 1: 06:48:47 executing program 4: 06:48:47 executing program 2: 06:48:47 executing program 3: 06:48:47 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000003600)}, 0x0) sendmsg(r1, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000600)}, 0x0) close(r0) 06:48:47 executing program 5: 06:48:47 executing program 1: 06:48:47 executing program 6: 06:48:47 executing program 2: 06:48:47 executing program 4: 06:48:47 executing program 1: 06:48:47 executing program 3: 06:48:47 executing program 0: 06:48:47 executing program 5: 06:48:48 executing program 1: 06:48:48 executing program 4: 06:48:48 executing program 2: 06:48:48 executing program 6: 06:48:48 executing program 0: 06:48:48 executing program 3: 06:48:48 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000003600)}, 0x0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000600)}, 0x0) 06:48:48 executing program 4: 06:48:48 executing program 2: 06:48:48 executing program 5: 06:48:48 executing program 1: 06:48:48 executing program 0: 06:48:48 executing program 6: 06:48:48 executing program 3: 06:48:48 executing program 4: 06:48:48 executing program 2: 06:48:48 executing program 5: 06:48:48 executing program 1: 06:48:48 executing program 6: 06:48:48 executing program 0: 06:48:48 executing program 3: 06:48:48 executing program 1: 06:48:48 executing program 3: 06:48:48 executing program 4: 06:48:48 executing program 2: 06:48:48 executing program 6: 06:48:48 executing program 5: 06:48:48 executing program 1: 06:48:48 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000003600)}, 0x0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000600)}, 0x0) 06:48:48 executing program 0: 06:48:48 executing program 4: 06:48:48 executing program 0: 06:48:48 executing program 5: 06:48:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @remote, @remote}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 06:48:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x200) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f000063a000)=0x2be, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4004084}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x1000000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 06:48:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/200, 0xc8) 06:48:48 executing program 6: 06:48:49 executing program 5: 06:48:49 executing program 0: [ 87.655588] device lo entered promiscuous mode 06:48:49 executing program 4: 06:48:49 executing program 6: 06:48:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f00000047c0)=[{{&(0x7f0000004500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004740)}}], 0x209, 0x0) [ 87.687341] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 87.764717] ================================================================== [ 87.772134] BUG: KASAN: slab-out-of-bounds in ip6_xmit+0x1838/0x1b80 [ 87.778621] Read of size 8 at addr ffff8801b9101b58 by task syz-executor4/7356 [ 87.785955] [ 87.787580] CPU: 0 PID: 7356 Comm: syz-executor4 Not tainted 4.9.124-g09eb2ba #35 [ 87.795173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.804533] ffff8801d7c5f530 ffffffff81eb95e9 ffffea0006e44040 ffff8801b9101b58 [ 87.812555] 0000000000000000 ffff8801b9101b58 0000000000000040 ffff8801d7c5f568 [ 87.820586] ffffffff8156c35e ffff8801b9101b58 0000000000000008 0000000000000000 [ 87.828651] Call Trace: [ 87.831218] [] dump_stack+0xc1/0x128 [ 87.836568] [] print_address_description+0x6c/0x234 [ 87.843213] [] kasan_report.cold.6+0x242/0x2fe [ 87.849429] [] ? ip6_xmit+0x1838/0x1b80 [ 87.855032] [] __asan_report_load8_noabort+0x14/0x20 [ 87.861762] [] ip6_xmit+0x1838/0x1b80 [ 87.867190] [] ? kasan_slab_free+0x72/0xc0 [ 87.873055] [] ? kfree+0xfb/0x310 [ 87.878139] [] ? skb_free_head+0x8b/0xb0 [ 87.884002] [] ? pskb_expand_head+0x45f/0x930 [ 87.890131] [] ? ip6_finish_output2+0x1d00/0x1d00 [ 87.896616] [] ? trace_hardirqs_on+0x10/0x10 [ 87.902657] [] ? __lock_is_held+0xa2/0xf0 [ 87.908433] [] ? ipv4_dst_check+0x111/0x160 [ 87.914380] [] ? __sk_dst_check+0x114/0x240 [ 87.920333] [] inet6_csk_xmit+0x27c/0x4d0 [ 87.926110] [] ? inet6_csk_xmit+0xff/0x4d0 [ 87.931978] [] ? inet6_csk_update_pmtu+0x160/0x160 [ 87.938545] [] ? check_preemption_disabled+0x3b/0x170 [ 87.945380] [] l2tp_xmit_skb+0xc45/0xf30 [ 87.951071] [] pppol2tp_sendmsg+0x4e0/0x790 [ 87.957022] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 87.963496] [] ? pppol2tp_release+0x2e0/0x2e0 [ 87.969642] [] sock_sendmsg+0xcc/0x110 [ 87.975182] [] ___sys_sendmsg+0x47a/0x840 [ 87.980962] [] ? copy_msghdr_from_user+0x560/0x560 [ 87.987522] [] ? check_preemption_disabled+0x3b/0x170 [ 87.994338] [] ? __fget+0x20a/0x3b0 [ 87.999593] [] ? __fget_light+0x169/0x1f0 [ 88.005367] [] ? __fdget+0x18/0x20 [ 88.010536] [] __sys_sendmmsg+0x23c/0x3d0 [ 88.016312] [] ? SyS_sendmsg+0x50/0x50 [ 88.021828] [] ? security_socket_connect+0x8f/0xc0 [ 88.028393] [] ? fput+0xd2/0x140 [ 88.033404] [] ? SYSC_connect+0x22a/0x300 [ 88.039191] [] ? SYSC_bind+0x280/0x280 [ 88.044708] [] ? compat_SyS_futex+0x1e1/0x2f0 [ 88.050841] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 88.057839] [] ? SyS_socket+0x121/0x1b0 [ 88.063447] [] ? move_addr_to_kernel+0x50/0x50 [ 88.069660] [] compat_SyS_sendmmsg+0x32/0x40 [ 88.075696] [] ? compat_SyS_sendmsg+0x40/0x40 [ 88.081840] [] do_fast_syscall_32+0x2f7/0x870 [ 88.087965] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 88.094618] [] entry_SYSENTER_compat+0x90/0xa2 [ 88.100833] [ 88.102446] Allocated by task 0: [ 88.105799] (stack is not available) [ 88.109497] [ 88.111099] Freed by task 0: [ 88.114089] (stack is not available) [ 88.117772] [ 88.119377] The buggy address belongs to the object at ffff8801b9101b40 [ 88.119377] which belongs to the cache ip_dst_cache of size 216 [ 88.132098] The buggy address is located 24 bytes inside of [ 88.132098] 216-byte region [ffff8801b9101b40, ffff8801b9101c18) [ 88.143887] The buggy address belongs to the page: [ 88.148816] page:ffffea0006e44040 count:1 mapcount:0 mapping: (null) index:0x0 [ 88.157055] flags: 0x8000000000000080(slab) [ 88.161351] page dumped because: kasan: bad access detected [ 88.167032] [ 88.168638] Memory state around the buggy address: [ 88.173542] ffff8801b9101a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 88.180887] ffff8801b9101a80: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 88.188247] >ffff8801b9101b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.195582] ^ [ 88.201790] ffff8801b9101b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.209125] ffff8801b9101c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.216457] ================================================================== [ 88.223790] Disabling lock debugging due to kernel taint [ 88.229292] Kernel panic - not syncing: panic_on_warn set ... [ 88.229292] [ 88.236661] CPU: 0 PID: 7356 Comm: syz-executor4 Tainted: G B 4.9.124-g09eb2ba #35 [ 88.245506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.254841] ffff8801d7c5f490 ffffffff81eb95e9 ffffffff843c828b 00000000ffffffff [ 88.262853] 0000000000000000 0000000000000000 0000000000000040 ffff8801d7c5f550 [ 88.270893] ffffffff81423eb5 0000000041b58ab3 ffffffff843bb8e8 ffffffff81423cf6 [ 88.278938] Call Trace: [ 88.281505] [] dump_stack+0xc1/0x128 [ 88.286848] [] panic+0x1bf/0x3bc [ 88.291845] [] ? add_taint.cold.6+0x16/0x16 [ 88.297793] [] kasan_end_report+0x47/0x4f [ 88.303571] [] kasan_report.cold.6+0x76/0x2fe [ 88.309695] [] ? ip6_xmit+0x1838/0x1b80 [ 88.315299] [] __asan_report_load8_noabort+0x14/0x20 [ 88.322033] [] ip6_xmit+0x1838/0x1b80 [ 88.327463] [] ? kasan_slab_free+0x72/0xc0 [ 88.333328] [] ? kfree+0xfb/0x310 [ 88.338409] [] ? skb_free_head+0x8b/0xb0 [ 88.344097] [] ? pskb_expand_head+0x45f/0x930 [ 88.350239] [] ? ip6_finish_output2+0x1d00/0x1d00 [ 88.356731] [] ? trace_hardirqs_on+0x10/0x10 [ 88.362777] [] ? __lock_is_held+0xa2/0xf0 [ 88.368553] [] ? ipv4_dst_check+0x111/0x160 [ 88.374509] [] ? __sk_dst_check+0x114/0x240 [ 88.380471] [] inet6_csk_xmit+0x27c/0x4d0 [ 88.386248] [] ? inet6_csk_xmit+0xff/0x4d0 [ 88.392111] [] ? inet6_csk_update_pmtu+0x160/0x160 [ 88.398668] [] ? check_preemption_disabled+0x3b/0x170 [ 88.405494] [] l2tp_xmit_skb+0xc45/0xf30 [ 88.411195] [] pppol2tp_sendmsg+0x4e0/0x790 06:48:49 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000003600)}, 0x0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000600)}, 0x0) 06:48:49 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$fiemap(r0, 0xc0045878, &(0x7f00000001c0)) 06:48:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socketpair$inet(0x1e, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) 06:48:49 executing program 2: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") poll(&(0x7f0000000440)=[{r1}], 0x1, 0x81) vmsplice(r1, &(0x7f0000001c40)=[{&(0x7f0000001c00)="b1", 0x1}], 0x1, 0x0) 06:48:49 executing program 0: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1) poll(&(0x7f0000000440)=[{r1}], 0x1, 0x81) vmsplice(r1, &(0x7f0000001c40)=[{&(0x7f0000001c00)="b1", 0x1}], 0x1, 0x0) 06:48:49 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$fiemap(r0, 0xc0045878, &(0x7f00000001c0)) [ 88.417148] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 88.423618] [] ? pppol2tp_release+0x2e0/0x2e0 [ 88.429753] [] sock_sendmsg+0xcc/0x110 [ 88.435287] [] ___sys_sendmsg+0x47a/0x840 [ 88.441087] [] ? copy_msghdr_from_user+0x560/0x560 [ 88.447666] [] ? check_preemption_disabled+0x3b/0x170 [ 88.454504] [] ? __fget+0x20a/0x3b0 [ 88.459778] [] ? __fget_light+0x169/0x1f0 06:48:49 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$fiemap(r0, 0xc0045878, &(0x7f00000001c0)) [ 88.465576] [] ? __fdget+0x18/0x20 [ 88.470762] [] __sys_sendmmsg+0x23c/0x3d0 [ 88.476555] [] ? SyS_sendmsg+0x50/0x50 [ 88.482090] [] ? security_socket_connect+0x8f/0xc0 [ 88.488675] [] ? fput+0xd2/0x140 [ 88.493681] [] ? SYSC_connect+0x22a/0x300 [ 88.499470] [] ? SYSC_bind+0x280/0x280 [ 88.505011] [] ? compat_SyS_futex+0x1e1/0x2f0 [ 88.511152] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 88.518177] [] ? SyS_socket+0x121/0x1b0 [ 88.523800] [] ? move_addr_to_kernel+0x50/0x50 [ 88.530035] [] compat_SyS_sendmmsg+0x32/0x40 [ 88.536105] [] ? compat_SyS_sendmsg+0x40/0x40 [ 88.542261] [] do_fast_syscall_32+0x2f7/0x870 [ 88.548397] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 88.555082] [] entry_SYSENTER_compat+0x90/0xa2 [ 88.561625] Dumping ftrace buffer: [ 88.565147] (ftrace buffer empty) [ 88.568833] Kernel Offset: disabled [ 88.572432] Rebooting in 86400 seconds..