[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 21.861782] random: sshd: uninitialized urandom read (32 bytes read, 33 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 28.045785] random: sshd: uninitialized urandom read (32 bytes read, 40 bits of entropy available) [ 28.461833] random: sshd: uninitialized urandom read (32 bytes read, 40 bits of entropy available) [ 29.461050] random: sshd: uninitialized urandom read (32 bytes read, 93 bits of entropy available) Warning: Permanently added '10.128.10.46' (ECDSA) to the list of known hosts. [ 35.026992] random: sshd: uninitialized urandom read (32 bytes read, 99 bits of entropy available) 2018/08/24 22:36:33 fuzzer started [ 36.273287] random: cc1: uninitialized urandom read (8 bytes read, 101 bits of entropy available) 2018/08/24 22:36:36 dialing manager at 10.128.0.26:46093 2018/08/24 22:36:38 syscalls: 1 2018/08/24 22:36:38 code coverage: enabled 2018/08/24 22:36:38 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/24 22:36:38 setuid sandbox: enabled 2018/08/24 22:36:38 namespace sandbox: enabled 2018/08/24 22:36:38 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/08/24 22:36:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/24 22:36:38 net packed injection: enabled 2018/08/24 22:36:38 net device setup: enabled [ 40.385285] random: nonblocking pool is initialized 22:37:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x1}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) sendto$inet6(r0, &(0x7f0000000000)="0c254b1641151aaedefcda17528a1605631410c6086081ca621949d308855c35968dfd0f4142f61ec3f8e1dac67da31691dedd596aa9ff46f656e1ce11cf722841d0b095", 0x44, 0x4000, &(0x7f0000000080)={0xa, 0x4e24, 0x80, @ipv4, 0x8}, 0x1c) 22:37:29 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/4\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) readv(r0, &(0x7f0000f46000)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1) 22:37:29 executing program 3: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000003c0)=""/75, 0x4b}, 0x0) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000180)=""/174) 22:37:29 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"6272696467653000000000fc00", &(0x7f0000000180)=ANY=[@ANYBLOB='\b']}) 22:37:29 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x7fffef6c) 22:37:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f00000001c0)={0xf5, &(0x7f0000000140)}, 0x196) 22:37:29 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(r0, 0x5, 0x4, 0x5) fcntl$getflags(r0, 0x5) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000140)) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 22:37:29 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)) [ 91.016057] IPVS: Creating netns size=2552 id=1 [ 91.134096] IPVS: Creating netns size=2552 id=2 [ 91.201282] IPVS: Creating netns size=2552 id=3 [ 91.276658] IPVS: Creating netns size=2552 id=4 [ 91.401308] IPVS: Creating netns size=2552 id=5 [ 91.541117] IPVS: Creating netns size=2552 id=6 [ 91.736845] IPVS: Creating netns size=2552 id=7 [ 92.135408] IPVS: Creating netns size=2552 id=8 [ 92.250057] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.407699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.432785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 92.576143] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 92.827992] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.936295] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.957507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.013117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 93.026125] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.131086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 93.221434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 93.230269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 93.320869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.329509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 93.492030] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 93.537272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 93.592128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 93.600218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 93.610837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 93.624934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 93.672521] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.751579] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 93.764229] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 93.773512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 93.912134] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 93.948978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.060800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.143412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.160537] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 94.199177] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.224419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.251038] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 94.273441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.284850] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.309626] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.318300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 94.347229] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.400962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 94.408789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.429962] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.441607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 94.453649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.461596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.580196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 94.592314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.609466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.692181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.712272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.768746] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.802316] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 94.873789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 94.905258] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 95.006239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.083697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.092955] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 95.149437] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 95.254386] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 95.364105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 95.440384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.535861] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 95.554745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.618875] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 95.722306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.822735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.862058] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 99.085753] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 99.156994] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 99.220721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.272598] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 99.377118] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 99.474444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.487652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.559747] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 99.615132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.754546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.916641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.164318] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 100.362101] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 100.546077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.663415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 22:37:40 executing program 1: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000200)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x100000) [ 101.460490] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) 22:37:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") clone(0x0, &(0x7f00000010c0), &(0x7f0000000300), &(0x7f0000000240), &(0x7f0000000140)) setpriority(0x1, 0x0, 0x100) 22:37:40 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 22:37:40 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r1, r2, &(0x7f0000000000), 0x100000080000000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 22:37:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 22:37:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x1}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) sendto$inet6(r0, &(0x7f0000000000)="0c254b1641151aaedefcda17528a1605631410c6086081ca621949d308855c35968dfd0f4142f61ec3f8e1dac67da31691dedd596aa9ff46f656e1ce11cf722841d0b095", 0x44, 0x4000, &(0x7f0000000080)={0xa, 0x4e24, 0x80, @ipv4, 0x8}, 0x1c) 22:37:40 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="6e65742f69665f696e65743600689d001e363b6c264fa887a26fda3eca58373161f13a12a92be6a993b4720d86396a9b1cc039d178e14492de97786eb30b86bb0ae2163b7ed177ff87e312d09bd390ce2ce4d13622dbc9d6b533c3f99225e401466f9ef8a9ea53c0f11c5a10cf9677596ce7721105a3ac3b287b2ca64a5ad4aad7c941387ab5acedea8f64c584562f2a3eb7aac4df59716b44156fd857da4ad2") read(r0, &(0x7f0000000240)=""/126, 0x7e) 22:37:40 executing program 6: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'wlc\x00'}, 0x2c) 22:37:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000014c0)='net/wireless\x00') readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) pread64(r0, &(0x7f0000001200)=""/131, 0x83, 0x0) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/157, 0x9d}], 0x1) 22:37:40 executing program 6: r0 = socket(0x200000010, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000007440)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[]}}, 0x0) write(r0, &(0x7f0000360000)="2400000052001f0014f9f407002c04000a00071008000100ffffffff0800000000000000", 0x24) 22:37:40 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @local}, 0x0, 0x0, 0x2, 0x0, 0x0, &(0x7f0000000300)='dummy0\x00'}) 22:37:41 executing program 7: r0 = memfd_create(&(0x7f0000000000)='ppp1+\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r0, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) finit_module(r0, &(0x7f0000000040)="2f252b9862646576766d6e65743000", 0x0) 22:37:41 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69af40b440e1b9950810bf2c93fd2a26d9e181780aca84f48d19ac75543d591a12c8ea6136d0e14648eedd747c1d27bef0e09f9f54274d9ec66167e0b07656032855958e42d9ba1afadf2edbbafdba24fa53c5591673615b00e2293e6881ff5569e3570dd8136f03433740994d692c54a7524aa79d192afef2467c1f0d02784373ec13ddb490de8d77e553e832098ac9531d451b6447d45838769484bdf") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000007, 0x20011, r1, 0x0) 22:37:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') 22:37:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 22:37:41 executing program 0: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") socket$packet(0x11, 0x2, 0x300) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000180)=""/174) 22:37:41 executing program 2: r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x21c) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x2}, 0x1c2) 22:37:41 executing program 7: 22:37:41 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 22:37:41 executing program 4: 22:37:41 executing program 3: 22:37:41 executing program 6: 22:37:41 executing program 6: 22:37:41 executing program 3: 22:37:41 executing program 7: 22:37:41 executing program 5: 22:37:41 executing program 6: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000200)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x100000) 22:37:41 executing program 3: 22:37:41 executing program 2: 22:37:41 executing program 7: 22:37:41 executing program 1: 22:37:41 executing program 0: 22:37:41 executing program 5: 22:37:41 executing program 2: 22:37:41 executing program 7: 22:37:41 executing program 4: 22:37:41 executing program 1: 22:37:41 executing program 3: 22:37:41 executing program 7: 22:37:41 executing program 0: 22:37:41 executing program 4: 22:37:41 executing program 6: 22:37:41 executing program 7: 22:37:41 executing program 0: 22:37:41 executing program 5: 22:37:42 executing program 2: 22:37:42 executing program 1: 22:37:42 executing program 3: 22:37:42 executing program 6: 22:37:42 executing program 4: 22:37:42 executing program 5: 22:37:42 executing program 7: 22:37:42 executing program 3: 22:37:42 executing program 0: 22:37:42 executing program 2: 22:37:42 executing program 1: 22:37:42 executing program 6: 22:37:42 executing program 4: 22:37:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @link_local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4888, 0x0, @remote, @local, {[@timestamp={0x7, 0x4}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000000)={0x0, 0x2, [0x0, 0x50]}) 22:37:42 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/4\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000480)={0xc9b0}) socket$netlink(0x10, 0x3, 0x5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x306, @local}, 0x0, {0x2, 0x4e23, @loopback}, 'erspan0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[]}}, 0x0) readv(r0, &(0x7f0000f46000)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1) 22:37:42 executing program 0: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001300ff09fffefda9a3e2851519beeb8ea861cd0b54f258956fa283b70007ffff00100000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca6", 0x4c}], 0x1}, 0x0) 22:37:42 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) 22:37:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000240)={@empty, @multicast1}, &(0x7f0000000280)=0xc) poll(&(0x7f0000000080), 0x9a, 0x0) 22:37:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)) 22:37:42 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) 22:37:42 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/4\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0x0, 0x7ff}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x40091}, 0x0) readv(r0, &(0x7f0000f46000)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1) 22:37:42 executing program 1: 22:37:42 executing program 6: 22:37:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x30, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x4}}}]}, 0x30}}, 0x0) 22:37:42 executing program 0: r0 = socket(0x1e, 0x4, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000600)={0xb}, 0xb) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3, 0x73d}, 0x29b) r1 = dup2(r0, r0) write$P9_RXATTRWALK(r1, &(0x7f00000001c0)={0xf}, 0xf) sendto$inet6(r0, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000700), 0x1000) 22:37:42 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x2000006100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) accept4(r2, 0x0, &(0x7f0000000040), 0x80000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x1000000000000000}, 0xfffffffffffffd6a) unshare(0x40000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8923, &(0x7f0000000000)={'tunl0\x00H\x00', @ifru_mtu=0x1}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) r5 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)="843e1300c061942c2673a29eae73951d5939b0b3ff816fad18ffca449eca550412b24eb190751ef8b3787eef6538bf2b11e69e50bd963b08a6c87d5c15fa990f65dea1aa423814d180f8807dd7b37cae89cce10865511a16b07d37118eb9dc3bfd4d74265c07d9c848e290a2f0d7c5e919528762e43e4e7e4a487babb5411c0de45e7f9ef576f61bb58d1c94e89172cce13f79be77829a666d", 0x99, 0xfffffffffffffffd) r6 = request_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)='filter\x00', 0xfffffffffffffffa) keyctl$unlink(0x9, r5, r6) 22:37:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') readv(r0, &(0x7f0000f46000)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1) 22:37:42 executing program 7: r0 = socket(0x1e, 0x4, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000600)={0xb, 0x77, 0x1, 0x1}, 0xb) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3, 0x73d}, 0x29b) r1 = dup2(r0, r0) write$P9_RXATTRWALK(r1, &(0x7f00000001c0)={0xf}, 0xf) sendto$inet6(r0, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000700), 0x1000) 22:37:42 executing program 6: r0 = epoll_create1(0x0) close(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000100)={'gretap0\x00', @ifru_mtu}}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000240)={{0x2, 0x3, 0x0, 0x0, 0xf1f3}, 0x3, 0x81}) lseek(r1, 0x0, 0x2) sendfile(r1, r1, &(0x7f00000000c0), 0x7f8) fcntl$setstatus(r1, 0x4, 0x7fe) 22:37:42 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/4\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000480)={0xc9b0}) socket$netlink(0x10, 0x3, 0x5) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x306, @local}, 0x0, {0x2, 0x4e23, @loopback}, 'erspan0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[]}}, 0x0) readv(r0, &(0x7f0000f46000)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1) 22:37:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') readv(r0, &(0x7f0000f46000)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1) 22:37:42 executing program 1: 22:37:42 executing program 1: 22:37:42 executing program 2: 22:37:42 executing program 3: 22:37:42 executing program 2: [ 103.768145] IPVS: Creating netns size=2552 id=9 22:37:42 executing program 1: 22:37:42 executing program 0: 22:37:42 executing program 7: 22:37:42 executing program 5: 22:37:42 executing program 3: [ 104.040318] pktgen: kernel_thread() failed for cpu 0 [ 104.047932] pktgen: Cannot create thread for cpu 0 (-4) [ 104.053777] pktgen: kernel_thread() failed for cpu 1 [ 104.059039] pktgen: Cannot create thread for cpu 1 (-4) [ 104.065297] pktgen: Initialization failed for all threads 22:37:42 executing program 2: 22:37:42 executing program 7: 22:37:42 executing program 0: 22:37:42 executing program 3: 22:37:42 executing program 5: 22:37:42 executing program 1: 22:37:42 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x2000006100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) accept4(r2, 0x0, &(0x7f0000000040), 0x80000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x1000000000000000}, 0xfffffffffffffd6a) unshare(0x40000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8923, &(0x7f0000000000)={'tunl0\x00H\x00', @ifru_mtu=0x1}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) r5 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)="843e1300c061942c2673a29eae73951d5939b0b3ff816fad18ffca449eca550412b24eb190751ef8b3787eef6538bf2b11e69e50bd963b08a6c87d5c15fa990f65dea1aa423814d180f8807dd7b37cae89cce10865511a16b07d37118eb9dc3bfd4d74265c07d9c848e290a2f0d7c5e919528762e43e4e7e4a487babb5411c0de45e7f9ef576f61bb58d1c94e89172cce13f79be77829a666d", 0x99, 0xfffffffffffffffd) r6 = request_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)='filter\x00', 0xfffffffffffffffa) keyctl$unlink(0x9, r5, r6) 22:37:42 executing program 6: r0 = epoll_create1(0x0) close(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000100)={'gretap0\x00', @ifru_mtu}}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000240)={{0x2, 0x3, 0x0, 0x0, 0xf1f3}, 0x3, 0x81}) lseek(r1, 0x0, 0x2) sendfile(r1, r1, &(0x7f00000000c0), 0x7f8) fcntl$setstatus(r1, 0x4, 0x7fe) 22:37:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x2000006100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) accept4(r2, 0x0, &(0x7f0000000040), 0x80000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x1000000000000000}, 0xfffffffffffffd6a) unshare(0x40000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8923, &(0x7f0000000000)={'tunl0\x00H\x00', @ifru_mtu=0x1}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) r5 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)="843e1300c061942c2673a29eae73951d5939b0b3ff816fad18ffca449eca550412b24eb190751ef8b3787eef6538bf2b11e69e50bd963b08a6c87d5c15fa990f65dea1aa423814d180f8807dd7b37cae89cce10865511a16b07d37118eb9dc3bfd4d74265c07d9c848e290a2f0d7c5e919528762e43e4e7e4a487babb5411c0de45e7f9ef576f61bb58d1c94e89172cce13f79be77829a666d", 0x99, 0xfffffffffffffffd) r6 = request_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)='filter\x00', 0xfffffffffffffffa) keyctl$unlink(0x9, r5, r6) 22:37:42 executing program 0: 22:37:42 executing program 5: 22:37:42 executing program 1: 22:37:43 executing program 7: 22:37:43 executing program 3: 22:37:43 executing program 5: 22:37:43 executing program 1: 22:37:43 executing program 0: 22:37:43 executing program 7: 22:37:43 executing program 3: 22:37:43 executing program 5: 22:37:43 executing program 0: 22:37:43 executing program 1: [ 105.614205] pktgen: kernel_thread() failed for cpu 0 [ 105.619360] pktgen: Cannot create thread for cpu 0 (-4) [ 105.624908] pktgen: kernel_thread() failed for cpu 1 [ 105.630038] pktgen: Cannot create thread for cpu 1 (-4) [ 105.635539] pktgen: Initialization failed for all threads 22:37:44 executing program 4: 22:37:44 executing program 7: [ 105.737281] pktgen: kernel_thread() failed for cpu 0 [ 105.742471] pktgen: Cannot create thread for cpu 0 (-4) [ 105.748537] pktgen: kernel_thread() failed for cpu 1 [ 105.754146] pktgen: Cannot create thread for cpu 1 (-4) [ 105.764164] pktgen: Initialization failed for all threads 22:37:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x2000006100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) accept4(r2, 0x0, &(0x7f0000000040), 0x80000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x1000000000000000}, 0xfffffffffffffd6a) unshare(0x40000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8923, &(0x7f0000000000)={'tunl0\x00H\x00', @ifru_mtu=0x1}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) r5 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)="843e1300c061942c2673a29eae73951d5939b0b3ff816fad18ffca449eca550412b24eb190751ef8b3787eef6538bf2b11e69e50bd963b08a6c87d5c15fa990f65dea1aa423814d180f8807dd7b37cae89cce10865511a16b07d37118eb9dc3bfd4d74265c07d9c848e290a2f0d7c5e919528762e43e4e7e4a487babb5411c0de45e7f9ef576f61bb58d1c94e89172cce13f79be77829a666d", 0x99, 0xfffffffffffffffd) r6 = request_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)='filter\x00', 0xfffffffffffffffa) keyctl$unlink(0x9, r5, r6) 22:37:44 executing program 3: 22:37:44 executing program 1: 22:37:44 executing program 5: 22:37:44 executing program 0: 22:37:44 executing program 6: 22:37:44 executing program 7: 22:37:44 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 22:37:44 executing program 3: r0 = socket(0x200000010, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006d40), 0x0, 0x0, &(0x7f0000006fc0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") write(r0, &(0x7f0000360000)="2400000052001f0014f9f407002c04000a00071008000100ffffffff0800000000000000", 0x24) 22:37:44 executing program 0: fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000500)) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(0x0, &(0x7f0000000540)='fdinfo\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200), &(0x7f0000000240)='0', 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f00000002c0)='`', 0x1) 22:37:44 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000015) 22:37:44 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440)=[{0xa, 0x7fffffff}, {0x0, 0x8}, {}], 0x3) 22:37:44 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/4\x00') clock_gettime(0x0, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000f46000)=[{&(0x7f0000000080)=""/101, 0x65}], 0x2f7) 22:37:44 executing program 1: acct(0x0) r0 = epoll_create1(0x0) r1 = timerfd_create(0x4, 0x802) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x0, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x80000001}, 0xf) r3 = dup3(r1, r0, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000080)={0x22, 0x7, 0x2, {{0x15, '/dev/pktcdvd/control\x00'}, 0x8}}, 0x22) 22:37:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x3c, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000500)='\x00\x00\x00\x00\x00\x00', &(0x7f0000001600)=""/4096}) 22:37:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={"0061a40000ffebf9000000000200", 0x9d01}) pwrite64(r0, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x400, 0x0) [ 106.103019] IPVS: Creating netns size=2552 id=10 22:37:45 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./control\x00', 0xc000, 0x0) faccessat(r0, &(0x7f000003b000)='./control\x00', 0x2, 0x0) 22:37:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x88102, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000140)) prctl$seccomp(0x16, 0x2, &(0x7f0000000000)={0x6, &(0x7f00000001c0)=[{0x3, 0x2, 0xfffffffffffffffa, 0x1}, {0x2, 0x4, 0xffffffffffffffff, 0x9}, {0x9, 0x0, 0x736, 0xd2e8}, {0x7fffffff, 0x5, 0x76a7, 0x9}, {0xffff, 0x6, 0x7, 0x80}, {0x51, 0x5ac, 0x800, 0xfa}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000002c0)=0xc) getpgid(r3) accept$unix(r2, &(0x7f0000000200), &(0x7f0000000040)=0x6e) 22:37:45 executing program 7: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x5452, &(0x7f0000000000)=[0xee]) 22:37:45 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000100)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x97acfbff5ba1468f, 0x0, 0x7fff, 0x100000000, r1}) ioctl$TCSETSF(r0, 0x80045104, &(0x7f0000000000)) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2200000003edffffffffffffff00000004000000000000003d64f0ac000000007b00"], 0x17) 22:37:45 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x1ff, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x5452, &(0x7f0000000140)=[0xff02]) openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x1000, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) 22:37:45 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000180)={0x4ab, 0x1ff}) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000100)) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x7530}, {r1, r2/1000+10000}}) 22:37:45 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)={0xcf, 0x8, 0x9, "015211e31fb47776140d65aa75ff19ba06eb7024e05880951a71f4fe1edcb19fe96336ca5340488616108a58bc93eb54dc7f7ef55a07f98560f5fa615356b3e86a887938c777eddf4492adf49b5f6aa885b874df0060f5bd7d6e73836faebbb5cb42558695ad2ca3b53b136632a258ec19bd5bf7494b83c166e553dd4c25c386fbbdff62c1a5bf38de57e69705d73692cd7f2b872ade8d706ccd80aa8eac7994e7445b61777f8984bc963ed2719db5e47c8d90ebcf9e6183792d21de036975da43eb056ae75fa1d8032525c6b99df4"}) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000380)=""/108) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000100)={@multicast2, @multicast1}, &(0x7f0000000140)=0x8) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) 22:37:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x54702141acaf175f) write$P9_RSTAT(r1, &(0x7f0000000140)={0x54, 0x7d, 0x0, {0x0, 0x4d, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xa, '/dev/uhid\x00', 0x10, "47504c2c262e7070703123b9296c6f2e"}}, 0x54) write$P9_RRENAME(r1, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) 22:37:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0xffff) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xfffffffffffffe61, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESDEC=r1], @ANYPTR=&(0x7f0000000100)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) 22:37:45 executing program 2: truncate(&(0x7f0000000140)='./file0\x00', 0x0) 22:37:45 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x44) getsockname$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) sync_file_range(r0, 0x7d67c129, 0x1f, 0x5) 22:37:45 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000001c0)) openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x2000, 0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'system.', 'posix_acl_accessloppp0selinux@vboxnet0$\x00'}, &(0x7f0000000080)=""/239, 0xef) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 22:37:45 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85714070") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RFLUSH(r2, &(0x7f0000000080)={0x7}, 0x7) write(r2, &(0x7f0000000040), 0x3a78c311) read(r1, &(0x7f00000004c0)=""/250, 0xffffff99) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f00000000c0)) 22:37:45 executing program 7: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl(r0, 0xa5c8, &(0x7f0000000180)="a921962e8e04458f3a4c3ffb0ed56677a0d05f2aa26dfe5dc8e8d98005fcce7e7201a9da85e418223f8a796464bc38f48b50ec0fd5a7d01bd44e5032f109550672e4e759890f87f850425683a0ef2ff348") ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x3, 0x11, r0, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd48) fadvise64(r0, 0x47, 0x3, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) 22:37:45 executing program 1: mlockall(0x2) futex(&(0x7f0000000000), 0x5, 0x0, &(0x7f0000000000), &(0x7f0000000ffc), 0xc7fda99635440eee) 22:37:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) recvmsg(r0, &(0x7f0000001580)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000001480)=""/225, 0xe1, 0x401}, 0x10162) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001680)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r2, 0x604, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x22}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) socket(0x1b, 0x0, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@delneigh={0x28, 0x1d, 0x209, 0x0, 0x0, {}, [@NDA_DST_MAC={0xc}]}, 0x28}}, 0x0) socketpair$inet6(0xa, 0x3, 0xa8, &(0x7f00000015c0)) 22:37:45 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) getgid() r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4003ff) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x78) lseek(r1, 0x0, 0x4) 22:37:45 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x6c01, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000140)={0x14, 0x13, 0x1, {0x0, 0x1, 0x1}}, 0x14) r1 = socket$inet6(0xa, 0x3, 0x1000003) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x49, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast1}, {0x4000000, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x0, 0x4}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, 0xe8) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) 22:37:45 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f00000001c0)='\x00', 0x3) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000200)={0x2cb, 0x1ff, 0x2, 0x9, 0x0, 0xfffffffffffff5ba, 0x5e9, 0x400, 0x8, 0xdcd}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x80000001, 0x4) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x10, @tick=0x8, 0x7, {0x2, 0xfffffffffffffff8}, 0x0, 0x2, 0x2}) nanosleep(&(0x7f0000000140)={0x77359400}, &(0x7f0000000180)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r2, 0xfffffffffffffffe) 22:37:45 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)="2e00fc67726f757000", 0x200002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fadvise64(r1, 0x0, 0x0, 0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x111000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f00000000c0)={0x1, 0x4, 0x8}) fchdir(r0) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x9) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000100)) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz1\x00', {0x7, 0x14, 0x8, 0x6}, 0x34, [0x3, 0x1ff, 0x1, 0x80, 0x1000, 0x5, 0x49b, 0x1f, 0x5, 0x40, 0x81, 0x3, 0x5, 0x7, 0x5, 0x7, 0x0, 0x9, 0x2, 0x1, 0x3b, 0x7fff, 0x1, 0xf1c, 0x8, 0x4, 0xffffffffffff4c41, 0x6, 0x9, 0x20, 0x10001, 0xb85998e, 0x0, 0x0, 0xa33d, 0x7ff, 0x5d, 0x921e, 0x9, 0x1a17, 0x8000, 0x5, 0x80000001, 0x0, 0x2, 0x6168, 0xfffffffffffff000, 0x101, 0xfffffffffffff000, 0x6, 0x3, 0x4, 0xffffffff, 0x0, 0x7ff, 0x10000, 0x7, 0x7, 0x1, 0xbf, 0xfffffffffffffff8, 0x2, 0x7, 0x8], [0x684, 0x6, 0x6, 0x7fff, 0x9, 0x4, 0x7, 0x1, 0x0, 0x100000001, 0x5, 0x4, 0x20, 0x7fffffff, 0x3, 0x9, 0x1, 0x5, 0x8, 0x3, 0x15fc, 0x9, 0x7fff, 0x35f9, 0xac4, 0x1ff, 0x20, 0x6, 0x9, 0x7, 0x6, 0x1, 0x8d, 0xd04b, 0x401, 0x7ff, 0x0, 0x8, 0x6, 0x36, 0x7, 0x9, 0x53, 0x2e, 0x6, 0xfffffffffffffe00, 0x9, 0x0, 0x7fffffff, 0x10000, 0xfff, 0x2fe, 0xc9, 0xffff, 0x6, 0x8, 0x800, 0x4, 0x0, 0x0, 0x9, 0x101, 0x0, 0x5], [0x1, 0x9, 0x11615f61, 0x4, 0x7, 0xfffffffffffffff8, 0x1eb, 0x2, 0xa1, 0xffffffffffff40e7, 0x9aaf, 0x2, 0x4, 0x0, 0x3, 0x9, 0xff, 0x8, 0x209, 0x3, 0x1000200000000, 0x81, 0x252, 0x9, 0x4, 0x2, 0x5, 0x5, 0x0, 0x1f, 0x10001, 0xfffffffffffffffe, 0x6, 0x1, 0x6, 0x6, 0x5, 0x376, 0x0, 0x7, 0x1000, 0x8001, 0x9, 0xff, 0x2, 0x3, 0x3, 0x8000, 0x5, 0x6, 0x401, 0x6, 0x80000000, 0x1a8abed8, 0x407, 0x8, 0x5, 0x0, 0x249c, 0xffffffff, 0x8000, 0x0, 0x6, 0x708b], [0xfffffffffffffff9, 0x2, 0x4, 0x8, 0xc3b, 0x3c, 0x3f, 0xad3a, 0xfffffffffffffffb, 0x1, 0x9d, 0x3, 0x1000, 0x1f, 0xf9, 0x1, 0x3, 0x73, 0xa721, 0x6b, 0x6, 0xff, 0x4, 0x9, 0x6, 0x8, 0x77, 0x9, 0x1f, 0x8, 0x0, 0x421, 0x4, 0x8, 0x3, 0x6, 0x16, 0xfffffffffffffff7, 0x400, 0x569a949e, 0x9, 0x40, 0x20, 0x7ff, 0x9, 0x401, 0x5, 0x20, 0x8, 0x2, 0x1f, 0x7fffffff, 0x80000000, 0x100000000, 0x4, 0x1, 0x0, 0x9, 0xe3c, 0x6, 0x0, 0x8, 0xd3]}, 0x45c) fallocate(r3, 0x3, 0x0, 0xfffe) 22:37:45 executing program 2: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f00000000c0)='./file0\x00') r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) renameat2(r1, &(0x7f0000000140)='./file0\x00', r0, &(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) renameat2(r1, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x7) 22:37:45 executing program 2: getpid() readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) rt_sigpending(&(0x7f0000000040), 0xffffffffffffffec) rt_sigpending(&(0x7f0000000000), 0x8) 22:37:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000001480), 0x0, &(0x7f0000000380)=ANY=[]}, 0x0) socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 106.435858] binder: 6362:6369 ERROR: BC_REGISTER_LOOPER called without request 22:37:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x41, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0xfffff, &(0x7f00000002c0)) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f00000000c0)) 22:37:46 executing program 5: r0 = getpgid(0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x6, 0x57e68e94, 0x80}}, 0x30) setpriority(0x0, r0, 0x3) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) r3 = getpgid(0x0) getpriority(0x0, r3) setpriority(0x3, r3, 0x1f) 22:37:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x100000004e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0xff, @broadcast, 0x4e20, 0x2, 'wrr\x00', 0x2, 0x1, 0x59}, {@multicast2, 0x4e24, 0x4, 0x1189, 0x3, 0x9}}, 0x44) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000002700)=""/4096, &(0x7f0000000040)=0x1000) r2 = dup2(0xffffffffffffff9c, r0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000240)) sendmmsg(r0, &(0x7f0000004040)=[{{&(0x7f0000001580)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000026c0)=[{&(0x7f00000007c0)="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", 0x135}], 0x1}}], 0x1, 0x0) r3 = getpgid(0x0) ioprio_get$pid(0x3, r3) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000)=0x1, 0x4) sched_rr_get_interval(r3, &(0x7f0000000100)) recvmmsg(r0, &(0x7f0000003a00)=[{{&(0x7f00000022c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002540)=""/200, 0xc8}], 0x1, &(0x7f0000003700)=""/135, 0x87}}], 0x1, 0x0, 0x0) read(r0, &(0x7f0000000180)=""/145, 0x91) 22:37:46 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xfffffeb1, &(0x7f00000000c0)={&(0x7f0000000140)=@getneightbl={0x0, 0x42, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x0) 22:37:46 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_create1(0x80000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x1000000000000, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000000000, 0x10001}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000001c0)=0x10000000000062) read(r2, &(0x7f0000000040)=""/11, 0xffffff3a) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000500)) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000000)) ioctl$KDSETLED(r0, 0x4b32, 0x7) r3 = syz_open_pts(r2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) quotactl(0x6, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000340)="343e95dcf44664ee2095cce468cd9967fbd278f8d5bacb5cff1272bf15b2596f760624ec406cf4ac6701a0bbfda5129771dac0b97302d46971728f1e4215f4433d4d4846ed3e6828e8d0849818") ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x5, 0x1, 0x8, 0x1000, 0x9}) ioctl$TCXONC(r3, 0x540a, 0x0) 22:37:46 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)="97f67d8ba11a2313c128292bcb8c38ccb5f6fb280c9da758eccd93c5e8e5ee584327b5a7fed231fa27a608e4b9519e34d97f9b48389399860945bd1bc83921bf06930c9c16feb8840e7836f2b13f07f0d9e7d3c95731a84917f838cc9d428ee06869c0c748ba259f1676ac112adfcaee02ce3682258cd25804f7f3edb171ac1918194a4d258f710ff12eb5a579cab2297e147e182dda170af95365f34ef97ab3e9bc47877e7888ca1e1af95a4301c68034c6b4910ea3ec8629dbeeb18ccf4d25ed3a05d668eeb047f353aa1d8240f7c9", 0xd0, 0xfffffffffffffffe) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000580)={0x8, 0x8001, 0x1f, 0x4, 0x4}, 0x14) add_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000380)="e6d602dddc2d7a1e493888e2c61fc4", 0xf, r0) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r3 = add_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x5932c2, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x1e, &(0x7f0000000400)=""/237, &(0x7f0000000500)=0xed) keyctl$reject(0xc, r3, 0x0, 0xb1, r2) 22:37:46 executing program 0: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x2) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0x3c8, @tick=0x7fffffff, 0x0, {0x0, 0xfffffffffffffffd}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @broadcast}, {0x0, @local}, 0xa, {0x2, 0x4e20, @multicast2}, 'bcsf0\x00'}) [ 107.223999] binder: BINDER_SET_CONTEXT_MGR already set [ 107.229569] binder: 6362:6434 ioctl 40046207 0 returned -16 [ 107.235525] binder: 6362:6378 ERROR: BC_REGISTER_LOOPER called without request 22:37:46 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) getpeername$packet(r0, &(0x7f0000000100), &(0x7f00000002c0)=0x14) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80000, 0x0) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)="fbc9d4e65a48a897a665ccbe768de9540d05b89a0d16fbe8bfb04552eff6f68b82a7202fd591c1ea927b9881fb46a8d1de4ed82c822526a840f554d274f9b3a00cd0c8ff0a5a3457146afa0c800537a97dac1cecc4365e2ed1ad04007ca50e53ee08a190b32f9098a00e7e7d457325386a9482fec307e42212fa966de0f366eb78747cfad6a557d385a480d8dc2b1ce306b6ef910ea9") setsockopt$inet_tcp_buf(r3, 0x6, 0x16, &(0x7f0000000240)="85e7a4756c580422d490736e075db45e4926ae1188f8771b5be46f54ee2f1ec1f1305a4f6bb9407b6893fa983ced98301242321b31b6580662a5ec9b81705f5985d0e985c7b9dd79bba705f28e6881c221f81b4e88ed6b2224024729915126032e", 0x61) 22:37:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xc, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000001200)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000000)={0x7, 0x3, 0x1}) [ 107.300431] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20000 22:37:46 executing program 0: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'eql\x00', &(0x7f0000000180)=@ethtool_ts_info={0x41, 0x4, 0xff, 0x70, [0x9, 0x6, 0x3], 0x4, [0x2, 0xa52b, 0x200]}}) 22:37:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r2, &(0x7f0000000000), 0xffff) ioctl$KDSETLED(r2, 0x4b32, 0x0) fcntl$addseals(r2, 0x409, 0x8) fchmod(r2, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$KDDISABIO(r2, 0x4b37) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$KDDISABIO(r3, 0x4b37) ioctl(r4, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 22:37:46 executing program 5: socketpair(0xb, 0xb, 0x9, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x18, 0x0, 0x1, &(0x7f0000000000)) 22:37:46 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x10000, 0x100) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) creat(&(0x7f0000000380)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="dd3614000000000000000000b5da852b36a7f4f50d82097b33c26bb65a"], 0x1d) sendfile(r2, r2, &(0x7f00000000c0), 0xfff) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) 22:37:46 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x1ff, 0x7, 0x9, 0x1, "57b9c5a933d86750067f651469760f3c89c41932b7d3f4921202464ce996d4de"}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000073, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lr\x00', 0x3) r2 = add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r2, &(0x7f00000002c0)=""/4096, 0x1000) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) 22:37:46 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x7, 0x4) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000000)="130000001000ffdde200f49ff60f050000230a009d0000001100c53022e5f9ec364fe86bc337747a04cb1c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af559bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000000000000000000000", 0xb1) socket$nl_netfilter(0x10, 0x3, 0xc) 22:37:46 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040), &(0x7f00000000c0)='\x00', 0xffffffffffffffff) request_key(&(0x7f00000011c0)='rxrpc_s\x00', &(0x7f0000001200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000001240)='{security\x00', 0xfffffffffffffff9) r1 = memfd_create(&(0x7f0000000140)="c2c70f64feff11ae", 0xfffffffffffffffe) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000180)={{0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1ff}, 0x0, 0xaf57}) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x8c000, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$KDMKTONE(r1, 0x4b30, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x100002, 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_buf(r1, 0x0, 0x3e, &(0x7f0000000240)=""/96, &(0x7f00000002c0)=0x60) 22:37:46 executing program 0: r0 = socket$inet6(0xa, 0x7, 0xfffffffffffffffc) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x80800, 0x0) write$P9_RREADLINK(r2, &(0x7f00000001c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$sock_void(r3, 0x1, 0x3f, 0x0, 0x0) ioctl$VT_ACTIVATE(r3, 0x5606, 0x1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0xffffffaf, 0x5, 0x0, {0x0, 0x3, 0x5, 0x2}}, 0xffffffffffffff8e) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000110007031dfffd946f61830002200a00090000e7fe1c40000c1ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ebea8653b1cc7e63975c02007b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 22:37:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x120, 0x36b) write(r0, &(0x7f0000000180)="cc", 0x1) 22:37:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x48000000008912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/202) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000080)) 22:37:46 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) finit_module(r0, &(0x7f0000000040)=':bdevnodev\x00', 0x3) write$P9_RREMOVE(r0, &(0x7f0000000200)={0x7}, 0x7) poll(&(0x7f0000000180)=[{r0}], 0x1, 0xfffffffffffff643) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 107.591310] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20000 [ 107.627966] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 22:37:46 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000380)=0x944) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x100011, r2, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uinput\x00', 0x0, 0x0) write$selinux_create(r4, &(0x7f0000000b80)=ANY=[], 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getdents(r6, &(0x7f0000000280)=""/201, 0xc9) r8 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r9 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r9, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) fallocate(r8, 0x3, 0x0, 0xfffe) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) dup2(r6, r8) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 22:37:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000040)={&(0x7f0000006240)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0x4}]]}}}]}, 0x3c}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) syz_open_pts(r1, 0x40002) 22:37:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f8571") r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb4, r4, 0x208, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf652c3a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5f99}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffffffff8000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xd6}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040050}, 0x40080) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r3}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000300)=0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r3}) 22:37:46 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000001c0)=""/121) recvfrom$inet6(r0, &(0x7f0000000000)=""/187, 0xbb, 0x10060, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x44000, &(0x7f0000000180)={0xa, 0x4e24, 0x40000, @empty, 0x5}, 0x1c) ioctl$TUNSETLINK(r1, 0x400454cd, 0x102) 22:37:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={"0000bd68000000010000000000000084", 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sw_sync\x00', 0xc0c0, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") dup2(r2, r0) 22:37:46 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000136000)="1f0000000104ff00fd43544007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000257fe1)="1f0000000104ff00fd43544007110000f3050100080005000000ff07ffdf00", 0x1f) [ 107.814364] binder: 6528:6533 ERROR: BC_REGISTER_LOOPER called without request [ 107.874048] binder: 6528:6533 ioctl c018620b 20000200 returned -14 [ 107.907502] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 107.918781] binder_alloc: binder_alloc_mmap_handler: 6528 20010000-20013000 already mapped failed -16 [ 107.942726] binder: BINDER_SET_CONTEXT_MGR already set [ 107.950404] binder: 6528:6533 ioctl 40046207 0 returned -16 [ 107.965926] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 107.966110] binder_alloc: binder_alloc_mmap_handler: 6528 20ffa000-20ffe000 already mapped failed -16 [ 107.990591] binder: 6528:6548 ioctl c0306201 20000180 returned -14 [ 107.994360] binder: 6528:6550 ioctl c0306201 20000140 returned -14 [ 108.006214] binder: 6528:6533 ioctl c0306201 200002c0 returned -14 [ 108.025791] binder: unexpected work type, 4, not freed [ 108.031309] binder: undelivered TRANSACTION_COMPLETE [ 108.031676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.032263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.032952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.033494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.066963] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 108.077003] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 108.169499] binder: undelivered TRANSACTION_COMPLETE [ 108.190151] binder: undelivered transaction 4, process died. 22:37:47 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x10000, 0x100) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) creat(&(0x7f0000000380)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="dd3614000000000000000000b5da852b36a7f4f50d82097b33c26bb65a"], 0x1d) sendfile(r2, r2, &(0x7f00000000c0), 0xfff) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) 22:37:47 executing program 3: prctl$seccomp(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$getown(r1, 0x9) getpgid(r2) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40040, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000140)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) getpgid(r4) 22:37:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f8571") r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb4, r4, 0x208, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf652c3a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5f99}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffffffff8000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xd6}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040050}, 0x40080) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r3}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000300)=0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r3}) 22:37:47 executing program 0: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000000), 0x0, 0xfffffffffffffffe) 22:37:47 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000180)={'erspan0\x00', 0x6}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, "6964300000000000000000000000e8ffffffffffffff0000000000000001000000000000000000000000000000000000000000002200", 'timer1\x00'}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x3, 0x8, 0x6bbcc832, 0x7ff, 0x4, 0x6, 0x5}, 0x1c) [ 108.518098] binder: 6566:6578 ERROR: BC_REGISTER_LOOPER called without request [ 108.580286] binder: 6566:6578 ioctl c018620b 20000200 returned -14 [ 108.740157] binder: unexpected work type, 4, not freed [ 108.751715] binder: undelivered TRANSACTION_COMPLETE [ 108.799216] binder: undelivered TRANSACTION_COMPLETE [ 108.828099] binder: undelivered transaction 9, process died. 22:37:47 executing program 7: r0 = socket(0x11, 0x80002, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x20, 0x6, @local}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r2 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r2, &(0x7f0000000080)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000002740), 0x0, &(0x7f00000012c0)}}], 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10) 22:37:47 executing program 2: r0 = socket$inet6(0xa, 0x4000000002, 0x36d) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) poll(&(0x7f0000000000)=[{r1, 0x80}, {r1, 0x2}, {r1, 0x1}, {r1, 0x1000}, {r0, 0x2000}, {r0, 0x9202}, {r1, 0xa6}, {r0, 0x6000}, {r1, 0x2300}], 0x9, 0x7) 22:37:47 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x86, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4605030000eeffffffffffffff0000000000000000000000000000000040000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7) 22:37:47 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000002c0)=0x3, 0xfffffefd) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000080)={0x7, 0x9, 0x9d, 'queue1\x00', 0x85e}) dup3(r0, r1, 0x0) openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) 22:37:47 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x800, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x5) 22:37:47 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000f40ff8)=[{}]}, 0xffffff46) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)="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", 0x60}, {&(0x7f00000002c0)="51c53569bf4da75221dfbfd738ded93e83c02147d61585d42a27b787d3460e22484b417e368cbcbfaad186db4e7a2c8f7bf27321609ee4666f13c1b3394e89c10c1d16b84faa1271be4284cecfe086708c7e9c79928491abe8cd2957dc391899c61512effa11185bf99be22f7065946e6b46d42ca69ce33cf9ca14b65e4e1ed493a4d085673eedfa7d46d4fde8146f9316260d6d1762957f06a3a890364d51ff9ab079641bca992c2cc929b838859180c56c79dcadc2c9f8ebd1ebf5d7a602a14a38deef705c72ff387b785e835f0b65fa1a6c2d3aa5df2bde7463598c78ab1153325c"}, {&(0x7f0000000240)="d7f2a3b59dda7ca3bdda9b07047748fb93a7c16ff9c1eaac090d56c2e2b6316ca50607153fec93eec1596fe596235fe2394099e0a6f11ef36a86ed3649ed04"}], 0x10000000000001c4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000580)={{0xa, 0x4e22, 0x4, @ipv4, 0x1ff}, {0xa, 0x4e24, 0x0, @remote, 0x81}, 0x0, [0x80000000, 0x3, 0x3, 0x6, 0x100000000, 0x20, 0x1, 0x100]}, 0x5c) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@empty, @multicast2}, &(0x7f0000000540)=0x8) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x6, @thr={&(0x7f00000003c0)="9e9f5fde1197b43fdb613c69e3ded64f05ecd5b8295e42d9871bdd0d2ae943b3546adab328a66e4c6a7417837042228053c5354f3e8b4cba1bbed89065b6eaf9c963ae", &(0x7f0000000040)="953d82b52880f5b9bb1a3afed0347f75b3c925eed26b54aab8adcbca8ba8fc67870143c2d39c00"}}, &(0x7f0000000480)=0x0) timer_delete(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)="db000000000000000000000000") writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="b2", 0x1}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 22:37:47 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) r2 = dup2(r1, r0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x80000001}) fgetxattr(r0, &(0x7f0000000040)=@random={'system.', "5e707070307bb66d255e5b776c616e3000"}, &(0x7f00000000c0)=""/165, 0xa5) 22:37:48 executing program 2: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") socket$inet6(0xa, 0x80802, 0x7) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="61969f651dfeac7e715070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ftruncate(r2, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000880)) setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) sendto$inet6(r2, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @mcast2}, 0x1c) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000200)=""/80, 0x50}, 0x0) 22:37:48 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$void(r0, 0xc0045c77) tee(r0, r0, 0x4, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 22:37:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TIOCGPTPEER(r0, 0x402c542d, 0x0) 22:37:48 executing program 1: timer_create(0xfffdfffffffffffd, &(0x7f0000000400)={0x0, 0x8, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000000240)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000440)={0x9, {{0x2, 0x4e24, @loopback}}, 0x0, 0x2, [{{0x2, 0x4e23, @local}}, {{0x2, 0x4e23, @local}}]}, 0x190) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x81) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, r1+10000000}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) 22:37:48 executing program 4: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote}}, 0x5c) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000000c0), 0xc, &(0x7f0000001640)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="10008e0e00000053315b6402b153"], 0x1}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) 22:37:48 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/116, 0x74, 0x0, &(0x7f0000000140)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000002a40)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/163, 0xa3}, {&(0x7f00000012c0)=""/133, 0x85}, {&(0x7f0000001380)=""/114, 0x72}, {&(0x7f0000001400)=""/231, 0xe7}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000001500)=""/199, 0xc7}, {&(0x7f0000001600)=""/136, 0x88}, {&(0x7f00000016c0)=""/35, 0x23}], 0xa, &(0x7f00000017c0)=""/84, 0x54, 0xfffffffffffffffe}, 0x1}, {{&(0x7f0000001840)=@nl=@proc, 0x80, &(0x7f0000002900)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)}], 0x2, &(0x7f0000002940)=""/251, 0xfb, 0x6f}, 0xd199}], 0x2, 0x100, &(0x7f0000002ac0)={0x0, 0x989680}) 22:37:48 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) munmap(&(0x7f0000008000/0x2000)=nil, 0x2000) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x8, 0xad, 0x90, 0x6, 0x3, 0x6, 0xfffffffffffffffd, 0x35d, 0x40, 0x1f8, 0xffffffff, 0x80000000, 0x38, 0x2, 0x7, 0x7fffffff, 0x7}, [{0x60000001, 0x3, 0x100000001, 0x3, 0x2, 0x3, 0x1acb, 0x4cd7}], "642341435c84c8fa0d37e54c56d85c1f8508d6663a587955cdcd5917984556788102a08daddbf0384cf115f241fd29758698581525fae9d6c242225758ba4e6abd884528034090fa246d5a742118a36fd5c128ed4b2d7da88c0a473a4f02227710f9611fe5c0d8545854c49621dfa8a84bd703da05f658a898f5841138524cb117b24f7a96f11568b5c77958d8550154aec290a058b4da5d7b78881fd9f7697867858ac1af63db0c080647c01fda7b1aa69e7b", [[], [], [], [], [], []]}, 0x72b) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/144, &(0x7f000000effc)=0x90) 22:37:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) 22:37:48 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000680)='/dev/usbmon#\x00', 0x2, 0x84000) write$P9_RATTACH(r0, &(0x7f00000006c0)={0x14, 0x69, 0x1, {0x2, 0x4, 0x5}}, 0x14) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000001500)='./file0/file0\x00', 0x0) mount(&(0x7f0000000f00)='./file0/file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f00000003c0)) mknod$loop(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x80000, &(0x7f0000000900)) lremovexattr(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)=@known='trusted.syz\x00') fchdir(r0) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1002, &(0x7f0000000380)) umount2(&(0x7f0000000100)='./file0/file0\x00', 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) fstat(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)='fuse\x00', 0x41, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0x800}}]}}) fchmodat(r2, &(0x7f0000000700)='./file0\x00', 0x43) 22:37:48 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x8000000000004, 0x362) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x3}, 0x4) sendto$inet(r2, &(0x7f0000865000), 0xebce, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xdeb4e4dfea39535f) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8401220}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="020925bd7000fd4babf0000000000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) 22:37:48 executing program 0: socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r0, &(0x7f0000000080)=@in6, &(0x7f0000000640)=0x80, 0x0) r1 = memfd_create(&(0x7f0000000000)='!*\x00', 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x4a0, 0x0, 0x278, 0x138, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f0000000040), {[{{@uncond, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x7, 0xc067}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @multicast2, 0x0, 0xffffffff}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @multicast2, 0xf}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000002380), 0x0, 0x0) 22:37:48 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) ftruncate(r0, 0x245cd917) 22:37:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10000f) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x6, 0x4) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0xfffffffffffffffc, 0x4, 0xeb, {r2, r3+10000000}, 0x5, 0x7ff}) writev(r0, &(0x7f0000000140), 0x1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) dup2(r1, r0) 22:37:48 executing program 4: timer_create(0x2, &(0x7f0000000000)={0x0, 0x11, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00000002c0)) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x1, 0x2000003, 0x9, 0x0, 0x5}, 0x4, 0x7, 0x4}) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x9, 0x4, @tid=r1}, &(0x7f0000000180)) 22:37:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x3) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) socket$inet6(0xa, 0xffffffffffff, 0xfffffffffffffffc) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000040)=@fragment={0x0, 0x0, 0x800, 0xda0, 0x0, 0x8f8, 0x67}, 0x8) sendmmsg(r3, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000040)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) clone(0x0, &(0x7f0000000340), &(0x7f00000002c0), &(0x7f0000000440), &(0x7f0000002040)) dup3(r0, r1, 0x0) 22:37:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10027597408364feac9973d0e600a9a2"], 0x10}}], 0x2, 0x0) r1 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@broadcast, 0x4e24, 0x4, 0x4e22, 0xee2, 0xa, 0x20, 0x80, 0x21, 0x0, r1}, {0xffffffff, 0x4, 0x9, 0x4, 0x7, 0x1ff, 0x2, 0x8}, {0xaee2, 0xfff, 0x7fffffff, 0xfff}, 0x400, 0x6e6bc0, 0x2, 0x1, 0x1, 0x1}, {{@in=@broadcast, 0x4d4, 0x2b}, 0xa, @in, 0x3504, 0x3, 0x0, 0x10001, 0xa4a, 0x100000001, 0x9}}, 0xe8) [ 109.556403] IPv4: Oversized IP packet from 127.0.0.1 22:37:48 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x80000000004400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r1, 0x8200) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x6, 0x5, 0x1}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) 22:37:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x1f, 0x9, 0x4}) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="02070008020000080000000000000000"], 0x10}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x4000000000001cd, 0x0) 22:37:48 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0x400) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xfffffffe, 0x4c831, 0xffffffffffffffff, 0x10000000000000) 22:37:48 executing program 7: socketpair$unix(0x1, 0x2000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)="6e65742f69665f696e65743600689d001e363b6c264fa887a26fda3eca58373161f13a12a92be6a993b4720d86396a9b1cc039d178e14492de97786eb30b86bb0ae2163b7ed177ff87e312d09bd390ce2ce4d13622dbc9d6b533c3f99225e401466f9ef8a9ea53c0f13a5a10cf9677596ce7761105a3ac3b287b2ca64a5ad4aad7c941387ab5acedea8f64c584562f2a3eb7aac4df59716b44156fd857da4ad2bb42af9246985432c372d8c3f7484fb6dfdf47690d3d8aa7cca48c70d4948da27a4d0ffbcb7c45af39bfb20eb1f07921ecb9437cd67a19010f35d27641fa72d0fc9f032f4d9d899ee1732adef346b6fa980ea31173fc8793dc49e512cac9e4e7e5ad81301b5dcfdbdaa7a89755fb04c520292659576c2fac2022cb13162ebf5fe9b1c7623cc56f837bd67b6953ba10cac9a54f5872af891930ab666d09492c1017e842a364b2d40697e48a955328081d627cb6560a972b55e8106c2b0f0000bf5d23d5a33709d8dac6f3e42cfef662e6") sendfile(r0, r2, &(0x7f0000000000)=0x3, 0x800) 22:37:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() sendmmsg(r0, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000000f40), 0x0, &(0x7f0000000fc0)}}], 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) clone(0x0, &(0x7f0000000340), &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) socket$l2tp(0x18, 0x1, 0x1) tkill(r1, 0x1004000000016) [ 109.676129] IPv4: Oversized IP packet from 127.0.0.1 22:37:48 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x10001) unshare(0x400) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) iopl(0x8) signalfd4(r3, &(0x7f0000000100), 0x8, 0x0) 22:37:48 executing program 6: r0 = socket(0x804000000000018, 0x0, 0x47b) connect(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2}}, 0x32) setsockopt(r0, 0x400000000000111, 0x0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) 22:37:48 executing program 4: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000180)=[{0x10}], 0x10}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001740)="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", 0x5dd}], 0x1, &(0x7f00000012c0)}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 22:37:48 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) syncfs(0xffffffffffffffff) fchdir(r0) r1 = creat(&(0x7f0000000240)='./bus/file0\x00', 0x40000000000131) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000080)='./bus/file0\x00', 0x800) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) sendfile(r3, r3, 0x0, 0x3ff) 22:37:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = memfd_create(&(0x7f0000000000)="078cc9d70d09fa", 0x0) flistxattr(r1, &(0x7f0000000040)=""/215, 0xd7) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="80e18dc0c7b5cec815636f800f011000"], 0x10) sendfile(r1, r1, &(0x7f0000001000), 0xfffd) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000007, 0x11, r1, 0x0) fgetxattr(r1, &(0x7f0000000140)=@known='system.sockprotoname\x00', &(0x7f0000001040)=""/4096, 0xfffffe86) 22:37:48 executing program 6: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x2) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000080)='./file0\x00', 0x2400, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000480)='smaps\x00') sendfile(r0, r3, &(0x7f0000000000), 0x7ffffffe) 22:37:48 executing program 7: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000000)) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000003c0)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000001280), 0x12) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, r3, 0x700, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x52b9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffff800}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40080}, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000180), 0x4) write$P9_RMKNOD(r0, &(0x7f00000004c0)={0x14}, 0x14) 22:37:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) fallocate(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4baa) r1 = memfd_create(&(0x7f0000000040)="74086e7500000000a9640ba33e79c79207", 0x3) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 22:37:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) setgroups(0x5, &(0x7f0000000340)=[r1, r2, r3, r4, r5]) ioctl$SG_GET_LOW_DMA(r0, 0x2276, &(0x7f0000000000)) [ 110.533237] ================================================================== [ 110.540680] BUG: KASAN: use-after-free in l2tp_session_queue_purge+0xf4/0x100 [ 110.547962] Read of size 4 at addr ffff8801d7eacc80 by task syz-executor3/6682 [ 110.555324] [ 110.556966] CPU: 0 PID: 6682 Comm: syz-executor3 Not tainted 4.4.152-ge15716b #88 [ 110.564592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 110.573977] 0000000000000000 594c97da2268caa3 ffff8801ba8d7a78 ffffffff81e15fed [ 110.582111] ffffea00075fab00 ffff8801d7eacc80 0000000000000000 ffff8801d7eacc80 [ 110.590255] 0000000000000000 ffff8801ba8d7ab0 ffffffff8151b489 ffff8801d7eacc80 [ 110.598403] Call Trace: [ 110.601003] [] dump_stack+0xc1/0x124 [ 110.606380] [] print_address_description+0x6c/0x216 [ 110.613130] [] kasan_report.cold.7+0x175/0x2f7 [ 110.619375] [] ? l2tp_session_queue_purge+0xf4/0x100 [ 110.626138] [] __asan_report_load4_noabort+0x14/0x20 [ 110.632898] [] l2tp_session_queue_purge+0xf4/0x100 [ 110.639492] [] pppol2tp_release+0x1ff/0x310 [ 110.645475] [] __sock_release+0xd9/0x260 [ 110.651199] [] ? __sock_release+0x260/0x260 [ 110.657328] [] sock_close+0x19/0x20 [ 110.662616] [] __fput+0x235/0x6f0 [ 110.667759] [] ____fput+0x15/0x20 [ 110.672876] [] task_work_run+0x10f/0x190 [ 110.678601] [] get_signal+0x1190/0x14b0 [ 110.684262] [] ? fput+0x20/0x150 [ 110.689288] [] do_signal+0x8b/0x1d30 [ 110.694690] [] ? selinux_netlbl_socket_setsockopt+0x97/0x340 [ 110.702147] [] ? selinux_netlbl_sock_rcv_skb+0x400/0x400 [ 110.709255] [] ? setup_sigcontext+0x780/0x780 [ 110.715492] [] ? ipv6_setsockopt+0x68/0x130 [ 110.721476] [] ? exit_to_usermode_loop+0xe4/0x160 [ 110.727975] [] exit_to_usermode_loop+0x11a/0x160 [ 110.734388] [] syscall_return_slowpath+0x1b5/0x1f0 [ 110.740981] [] int_ret_from_sys_call+0x25/0xa3 [ 110.747215] [ 110.748853] Allocated by task 6682: [ 110.752484] [] save_stack_trace+0x26/0x50 [ 110.758795] [] save_stack+0x43/0xd0 [ 110.764224] [] kasan_kmalloc+0xc7/0xe0 [ 110.769927] [] __kmalloc+0x124/0x310 [ 110.775444] [] l2tp_session_create+0x39/0x1030 [ 110.781821] [] pppol2tp_connect+0x10f0/0x1910 [ 110.788106] [] SYSC_connect+0x1b8/0x300 [ 110.793897] [] SyS_connect+0x24/0x30 [ 110.799473] [] entry_SYSCALL_64_fastpath+0x22/0x9e [ 110.806193] [ 110.807821] Freed by task 6752: [ 110.811093] [] save_stack_trace+0x26/0x50 [ 110.817097] [] save_stack+0x43/0xd0 [ 110.822539] [] kasan_slab_free+0x72/0xc0 [ 110.828396] [] kfree+0xf4/0x310 [ 110.833462] [] l2tp_session_free+0x170/0x200 [ 110.839667] [] l2tp_tunnel_closeall+0x2b9/0x350 [ 110.846121] [] l2tp_udp_encap_destroy+0x8b/0xf0 [ 110.852594] [] udpv6_destroy_sock+0xb1/0xd0 [ 110.858743] [] sk_common_release+0x6d/0x300 [ 110.864854] [] udp_lib_close+0x15/0x20 [ 110.870525] [] inet_release+0xff/0x1d0 [ 110.876202] [] inet6_release+0x50/0x70 [ 110.881878] [] __sock_release+0xd9/0x260 [ 110.887734] [] sock_close+0x19/0x20 [ 110.893151] [] __fput+0x235/0x6f0 [ 110.898476] [] ____fput+0x15/0x20 [ 110.903719] [] task_work_run+0x10f/0x190 [ 110.909567] [] do_exit+0x9e5/0x26b0 [ 110.914979] [] do_group_exit+0x111/0x330 [ 110.920869] [] get_signal+0x4ec/0x14b0 [ 110.926543] [] do_signal+0x8b/0x1d30 [ 110.932048] [] exit_to_usermode_loop+0x11a/0x160 [ 110.938682] [] prepare_exit_to_usermode+0xe3/0x100 [ 110.945398] [] retint_user+0x8/0x3c [ 110.950815] [ 110.952451] The buggy address belongs to the object at ffff8801d7eacc80 [ 110.952451] which belongs to the cache kmalloc-512 of size 512 [ 110.965160] The buggy address is located 0 bytes inside of [ 110.965160] 512-byte region [ffff8801d7eacc80, ffff8801d7eace80) [ 110.976859] The buggy address belongs to the page: [ 112.779656] PANIC: double fault, error_code: 0x0 [ 112.784450] CPU: 0 PID: 6682 Comm: syz-executor3 Not tainted 4.4.152-ge15716b #88 [ 112.792064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.801414] task: ffff8800a1c2e000 task.stack: ffff8801ba8d0000 [ 112.807467] RIP: 0010:[] [] dump_page_badflags+0xd/0x70 [ 112.816215] RSP: 0018:ffff880100000000 EFLAGS: 00010046 [ 112.821678] RAX: 0000000000040000 RBX: ffffea00075fab00 RCX: ffffc90001c98000 [ 112.828944] RDX: 0000000000000000 RSI: ffffffff83aaae60 RDI: ffffea00075fab00 [ 112.836212] RBP: ffff880100000018 R08: 0000000000000001 R09: 0000000000000000 [ 112.843605] R10: 0000000000000001 R11: ffffffff858f0274 R12: 0000000000000000 [ 112.850959] R13: ffffffff83aaae60 R14: ffff8801d7eacc80 R15: ffff8801d7eace80 [ 112.858229] FS: 00007f81e72f1700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 112.866580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.872460] CR2: ffff8800fffffff8 CR3: 00000001d0d6e000 CR4: 00000000001606f0 [ 112.879726] Stack: [ 112.881866] [ 112.883487] Call Trace: [ 112.886064] [ 112.888121] Code: f0 48 ff 80 a8 5b 9f 84 5b 5d c3 48 89 df e8 1b e5 06 00 eb dd 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 49 89 f5 <41> 54 49 89 d4 53 48 89 fb 48 83 ec 08 e8 11 43 ec ff 48 89 da [ 112.917113] Kernel panic - not syncing: Machine halted. [ 112.922479] CPU: 0 PID: 6682 Comm: syz-executor3 Not tainted 4.4.152-ge15716b #88 [ 112.930092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.939445] 0000000000000000 594c97da2268caa3 ffff8801db20ce40 ffffffff81e15fed [ 112.947534] ffffffff83a38660 0000000000000000 ffffffff83a08060 ffff880100000000 [ 112.955621] ffff8801d7eace80 ffff8801db20cf00 ffffffff8140d424 0000000041b58ab3 [ 112.963749] Call Trace: [ 112.966325] <#DF> [] dump_stack+0xc1/0x124 [ 112.972452] [] panic+0x19e/0x38d [ 112.977465] [] ? add_taint.cold.4+0x16/0x16 [ 112.983438] [] ? vprintk_emit+0x249/0x840 [ 112.989235] [] ? vprintk_emit+0x249/0x840 [ 112.995036] [] df_debug+0x2d/0x2d [ 113.000140] [] do_double_fault+0x113/0x230 [ 113.006027] [] double_fault+0x2d/0x40 [ 113.011476] [] ? dump_page_badflags+0xd/0x70 [ 113.017588] <> [ 113.021051] Dumping ftrace buffer: [ 113.024938] (ftrace buffer empty) [ 113.028664] Kernel Offset: disabled [ 113.032293] Rebooting in 86400 seconds..