[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 33.893408] audit: type=1800 audit(1554985279.303:33): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 33.919882] audit: type=1800 audit(1554985279.303:34): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 47.201737] random: sshd: uninitialized urandom read (32 bytes read) [ 47.651910] audit: type=1400 audit(1554985293.063:35): avc: denied { map } for pid=7117 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 47.703612] random: sshd: uninitialized urandom read (32 bytes read) [ 48.344540] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.1.41' (ECDSA) to the list of known hosts. [ 53.880119] random: sshd: uninitialized urandom read (32 bytes read) 2019/04/11 12:21:39 fuzzer started [ 54.077436] audit: type=1400 audit(1554985299.483:36): avc: denied { map } for pid=7126 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 55.580256] random: cc1: uninitialized urandom read (8 bytes read) 2019/04/11 12:21:42 dialing manager at 10.128.0.105:42371 2019/04/11 12:21:43 syscalls: 2412 2019/04/11 12:21:43 code coverage: enabled 2019/04/11 12:21:43 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/04/11 12:21:43 extra coverage: extra coverage is not supported by the kernel 2019/04/11 12:21:43 setuid sandbox: enabled 2019/04/11 12:21:43 namespace sandbox: enabled 2019/04/11 12:21:43 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/11 12:21:43 fault injection: enabled 2019/04/11 12:21:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/11 12:21:43 net packet injection: enabled 2019/04/11 12:21:43 net device setup: enabled [ 59.444159] random: crng init done 12:22:14 executing program 0: 12:22:14 executing program 5: 12:22:14 executing program 1: 12:22:14 executing program 2: 12:22:14 executing program 3: 12:22:14 executing program 4: [ 88.784402] audit: type=1400 audit(1554985334.193:37): avc: denied { map } for pid=7126 comm="syz-fuzzer" path="/root/syzkaller-shm507863618" dev="sda1" ino=16490 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 88.825834] audit: type=1400 audit(1554985334.233:38): avc: denied { map } for pid=7143 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13803 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 89.680170] IPVS: ftp: loaded support on port[0] = 21 [ 89.975660] chnl_net:caif_netlink_parms(): no params data found [ 89.986453] IPVS: ftp: loaded support on port[0] = 21 [ 90.036100] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.042881] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.049758] device bridge_slave_0 entered promiscuous mode [ 90.059202] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.065618] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.072688] device bridge_slave_1 entered promiscuous mode [ 90.094982] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 90.104195] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 90.127107] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 90.134773] team0: Port device team_slave_0 added [ 90.143016] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 90.151568] team0: Port device team_slave_1 added [ 90.157053] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 90.164931] IPVS: ftp: loaded support on port[0] = 21 [ 90.173618] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 90.282309] device hsr_slave_0 entered promiscuous mode [ 90.350297] device hsr_slave_1 entered promiscuous mode [ 90.451279] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 90.471715] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 90.481574] chnl_net:caif_netlink_parms(): no params data found [ 90.521334] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.527811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.534662] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.541013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.580824] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.587247] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.594739] device bridge_slave_0 entered promiscuous mode [ 90.602771] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.609124] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.616753] device bridge_slave_1 entered promiscuous mode [ 90.616805] IPVS: ftp: loaded support on port[0] = 21 [ 90.689781] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 90.702592] chnl_net:caif_netlink_parms(): no params data found [ 90.719801] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 90.753068] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 90.760247] team0: Port device team_slave_0 added [ 90.782909] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 90.789983] team0: Port device team_slave_1 added [ 90.816034] IPVS: ftp: loaded support on port[0] = 21 [ 90.828556] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 90.834825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.844655] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 90.854964] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 90.867938] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.874789] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.881787] device bridge_slave_0 entered promiscuous mode [ 90.909339] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.923588] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.929969] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.936881] device bridge_slave_1 entered promiscuous mode [ 91.002506] device hsr_slave_0 entered promiscuous mode [ 91.041048] device hsr_slave_1 entered promiscuous mode [ 91.110617] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 91.118568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.127123] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.144284] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.151424] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 91.166465] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 91.177705] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 91.184129] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.191525] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 91.214183] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 91.244350] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 91.251663] team0: Port device team_slave_0 added [ 91.261162] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 91.268210] team0: Port device team_slave_1 added [ 91.276411] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 91.284274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 91.312400] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 91.319768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.327622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.335276] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.341624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.382943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 91.450860] IPVS: ftp: loaded support on port[0] = 21 [ 91.458858] device hsr_slave_0 entered promiscuous mode [ 91.500484] device hsr_slave_1 entered promiscuous mode [ 91.541448] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 91.547959] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 91.569269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.577508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.585227] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.591585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.598572] chnl_net:caif_netlink_parms(): no params data found [ 91.622588] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 91.692604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 91.724477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.735625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 91.756319] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 91.767706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.775664] chnl_net:caif_netlink_parms(): no params data found [ 91.818517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 91.831078] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.837468] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.845627] device bridge_slave_0 entered promiscuous mode [ 91.861546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.869312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.877422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.894859] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.901442] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.908595] device bridge_slave_1 entered promiscuous mode [ 91.964775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 92.016019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.024211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.034347] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 92.047282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.056345] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 92.064096] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.071748] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.078601] device bridge_slave_0 entered promiscuous mode [ 92.089461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.097330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.106869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.115167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 92.126041] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.134248] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.141467] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.148301] device bridge_slave_1 entered promiscuous mode [ 92.165837] chnl_net:caif_netlink_parms(): no params data found [ 92.179528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.187509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.197779] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.210523] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.225021] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 92.241031] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.249180] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 92.255448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.265481] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.279432] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.295794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.305102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.312116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.318929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.331055] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 92.337127] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.346485] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 92.355711] team0: Port device team_slave_0 added [ 92.361428] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 92.368582] team0: Port device team_slave_1 added [ 92.398990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.406941] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 92.415298] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 92.425256] team0: Port device team_slave_0 added [ 92.431006] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 92.437421] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 92.444877] team0: Port device team_slave_1 added [ 92.451124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.458769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.466768] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.473161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.482557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 92.496206] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 92.502439] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.508852] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 92.524727] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 92.531915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.538931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.547624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.555397] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.561797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.571406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 92.581699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 92.589049] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.596534] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.605113] device bridge_slave_0 entered promiscuous mode [ 92.613562] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.628601] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 92.636236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.644364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.652513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.660276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.667770] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.674158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.681106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.688966] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.696226] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.703594] device bridge_slave_1 entered promiscuous mode [ 92.772066] device hsr_slave_0 entered promiscuous mode [ 92.810312] device hsr_slave_1 entered promiscuous mode [ 92.857424] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 92.866364] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 92.875929] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 92.885267] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.894357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.909074] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 92.918502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.930868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.939075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.947012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 92.957266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 93.002240] device hsr_slave_0 entered promiscuous mode [ 93.040498] device hsr_slave_1 entered promiscuous mode [ 93.080693] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 93.087942] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 93.099979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 93.107832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.117151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.127279] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.133666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.140793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.148347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.155992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.181608] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 93.188803] team0: Port device team_slave_0 added [ 93.204631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 93.212211] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 93.219419] team0: Port device team_slave_1 added [ 93.225579] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 93.237457] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 93.245856] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 93.252683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.262915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.271073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.281598] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 93.289897] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 93.298962] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 93.305593] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 93.314761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 93.330213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.337870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.346269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.354296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.362411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.370516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.378870] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 12:22:18 executing program 0: 12:22:18 executing program 0: [ 93.433116] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 93.441762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.453031] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 93.460753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.468277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 12:22:18 executing program 0: 12:22:18 executing program 0: 12:22:18 executing program 0: 12:22:18 executing program 0: [ 93.524746] device hsr_slave_0 entered promiscuous mode 12:22:19 executing program 0: [ 93.580761] device hsr_slave_1 entered promiscuous mode [ 93.600736] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 93.626437] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 93.639192] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 93.656083] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 93.675190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.682550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.689997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.698261] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 93.704525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.729964] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.743920] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 93.755775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.766969] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.782797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.789459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.797439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.807813] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 93.823431] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 93.829546] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.851867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.867060] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.876160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 93.886384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.896580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.904550] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.910957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.926289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.936722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.948007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.957563] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.968177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.976347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.984480] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.990885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.999536] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.009916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 94.022490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.033786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.047469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.059435] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.069250] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 94.077594] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.088039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.096302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.105168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 94.116179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 94.126572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.134431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.144993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.153158] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.159503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.167045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.176937] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 94.183521] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.192216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 94.202595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 94.211341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.219475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.229573] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.235977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.243480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.252387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.265798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.286721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 94.297418] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 94.307907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.317731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.326499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.334481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.343312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.351463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.358998] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.365393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.372489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.381291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.388212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.398063] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.405521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.413604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.421643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.430243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 94.437210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.444805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.453652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.465199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 94.475348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 94.482706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.490717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.498123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.505895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.513674] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.519992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.526886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.534717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.544930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 94.554092] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 94.563599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.571327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.578720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.592552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 94.600000] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 94.606328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.619495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.627653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.637128] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 94.643336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.654128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 94.664173] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 94.674724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.684573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.695728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.707977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.717743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.725866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.734176] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.745098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.753878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.768313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 94.775582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.785356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.794080] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 94.804921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 94.813292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.823706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.833755] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 94.839775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.868941] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 94.879888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.898080] 8021q: adding VLAN 0 to HW filter on device batadv0 12:22:21 executing program 5: 12:22:21 executing program 0: 12:22:21 executing program 2: 12:22:21 executing program 1: 12:22:21 executing program 3: 12:22:21 executing program 4: 12:22:21 executing program 0: 12:22:21 executing program 3: 12:22:21 executing program 4: 12:22:21 executing program 2: 12:22:21 executing program 1: 12:22:21 executing program 5: 12:22:21 executing program 2: 12:22:21 executing program 3: 12:22:21 executing program 4: 12:22:21 executing program 1: 12:22:21 executing program 0: 12:22:21 executing program 2: 12:22:21 executing program 5: 12:22:21 executing program 3: 12:22:21 executing program 1: 12:22:21 executing program 4: 12:22:21 executing program 5: 12:22:21 executing program 0: 12:22:21 executing program 2: 12:22:21 executing program 3: 12:22:21 executing program 1: 12:22:21 executing program 4: 12:22:21 executing program 0: 12:22:21 executing program 2: 12:22:21 executing program 5: 12:22:21 executing program 3: 12:22:21 executing program 1: 12:22:21 executing program 4: 12:22:21 executing program 0: 12:22:21 executing program 5: 12:22:21 executing program 1: 12:22:21 executing program 4: 12:22:21 executing program 2: 12:22:21 executing program 3: 12:22:22 executing program 1: 12:22:22 executing program 4: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000001800)={0x8, "f5a68ff5b721a5de4ec10d79fbec0b4901c1211903adc48c79a88a78caa6b1ce317171b16fe550b3a3d21c1910284101fca086b01bbfe0526f8d36a43cfe4d60930c8b93bd1c92b7ce9f7d02c98b19ad4607a1159c7f24da24159bd691ff5bf53775a5059d63b6435190efe0a7c84bf22a27abe385c169c0b4b8618f8f444aa225a2bd3adb3c0b45a2152b0db3c0f563a5963d469844868784990f211817606e63b5e2a183762b7668287bcbe6ba640719e26be55240442564737bc8e0b6a395585acb0532134e879bffa6b7a3efa93fb2e5e82998eaa69223dda2bf27015ab80416b215eb1ca4dfde6d3a38675db4755521b43ea238c3eb321f168e53f7cdba28c6249cb8508d49a775e6c63cd82249f77eb73153d23712c1f421622c25b00873cf6d39dfb714c0a27e23a08d3cb95a3baa481cd5f59b385147119eb27c1c797b654efde3c0b84fc1021217377ab7cab850a8eac61d84a8f96587d0e014d2db6b3feebdddc522d8b6e4944cf855fb5f15c738f899500560aca02e0cf029e3b3e4facf16d2757ae178020bf972784421c6a5f09d377a774ba1d0150921dde8590b2ece70b0ac9376d19fe91cb610090d755b9a0220977ea9df341909a179c0e85f63718f66bc9ca38c0c31740820a8be259a6d7f5c0008ac67026840845fc103f73c29fc4fba6de98273e7c1feaf47dc3d952420370bd127c5a8f1a795a8e5420a071a8973fb82391e9f684c36c9c0a0c645c4ff1233c5fb6b67a442365af09fbb0e8cfc9440f4554e024f9ccb3161ce8f0ea301762bb591c92b8e785b10e8a266fcbcc262a49c57103a56f7b42db76eefc4f17a6b7b19cc158761f939b544ac704845600c6cfbd36906df82bdeb5dd39c8c59f16ba1529b80405d5ef2aa232cd18779a7ddea04a833c9b93f34312bdf536baaead5b3c8ea6fafa747f8bfd9d72d5138adb9ca3246eb1fd3df953a8a2f60ac436af0d587b78b6d767b1c110540831a603766d6dacf39cf14c0d1ec6bea100a47f651cf7d515cee9bc0b952c2cd61e2d448bc6745abc192101b0179c366993482c140d642f282919500d85e1daa921f37a79662823a4f4174d762f9affe2475ed6dc9b820e6ac99684903da5f19fb914bf71260ba60fb111f4732df99a284a33825e73ad21832f1c1769d26e966e542248f1e1a0a93fe0464f6d610853ec41a3b5efa2590ce7726c8aaef82e8e0341360aacaf8c4c142fc4d9dd15cff3c2a287a9832447ebcc78a690ca86df3d1a209c538a97f61f419a3e1ea9aac045ed619a34e9d792255f044676bbb51aba745a2688eaa8e0389ec82c7dfc1af899227d63cfecb3e722cac73efb3f36715f66f4f6a203012ad3d9c20b96fd017711b08bb13fa876c37866f68db04eab49f4fe5df21196ccbb1f65367e70e39fd74897251800cc334b3e67bd79c32f9e9d2ce9468a5336ed34c13926bae4b10e26c93062c21573f140b626e694a155022e10e629605532a665badf3dd0e706aab9885b46811a7f71b0d21636352a3a7f3e291dfad9f88df5524548c1ab2c025e50327fb09625b9af041cf3cf0abf99ebb529046dea4ae5a7c5eae6edf73ff73af23ae25f91373dd90f42f29e63e84f8c1fbba4ab7240ed92799cdbf1627353d0a3b83e0460b3b635f112b1fa81c3dfa834f6a5b93dc06f239d0338f463b1b9973bf9a6b371dd409c45a18114e7b0194065bf9db6d36496bc612db328bf5ac9e513ab282c841d6c282ad2e7ef97eac19f34442a28163f1e58b156a4f29a70f361694f3ba90caf6cd35b521a6fbafdfcd13d4a2dbabff3ad6f67b9f054eb7316d8418337bd8d29508f68bd88108e6ca5d1622efae6663882d19e44431832a1c01bb0df119a98c5623a7b7b79b8f9ec7c32c79f96888b1ce0f3cc6cfb4747f531c6a5a7cc6616fe05e2147a6e6211a8b1f4390954632b0f9bd1d2a9110b0c70ef24dba7706334c6e667b630a48d62977d9d3c91e4071f026d398f0ef41482d71649264805e83dc0b49ac40ccbe808dc45b277020c504d529566ef2102f839ef34e80c2138596f2d62b8208475a58f12a9e8253f4aecce1e7cdcd869c145eec4d5d944285225505698dea82da669c979e1a9223ddbb4701ea552477c6d260e419591e521a5c46cf016a07e005aeb7956360e2bdd996231e7584d0bea1a36dda708e57a6fc7817aaca7948222712f501ab99837a8882e6f903a7b53327f83b78b7e1cf312aabc161ebf464a053ac0c8714d1a10bf3d13ac3f821d49d0b1f839dd8c437b6ec4ae8957402c22341a651a6783dee38efe46b94deb3aa35da12946d2b6d8bd696c2688aef0ec97f98fb5bc61831d45c1c0d0b8776d4c22857e85647932371587d865218e741e0ba545393ebd4644623432dfe0bbc606d01cce67041b2aa5e4e6c2a275f7019983e2e00db7d3daea01008f22a454c538a317727cd5765dac13178edc13fbf78c1fdaf8253e3e40e594e8d3c4664df9127b742f18ed1d5a955150323c68365496750966eee9ede9da889adae384cc23b3b3b704ce9d32fd61f7c2810b3f7273adfe9d0ef1f6e6f77ea518169ae6115908c2455b208a1a0fcd435fc50c4bcbc8655e4b22177e791aa2611d4ab0eb3467609cff07d541bbe2b6595c6839c31902ed7f54307ce636beb99d9919849236b6a7d61298f5d8314fc5522b4c8b7019dd43f83b7e3f95fcb418f7b84fc26f0b709f20eb01b2577c7d43ec576c69961aa1d8c7ac4e6871d0ac09c6ac0063720282407af6ec9d2e6073fbfc3e9a59dde69dda814e7ee01fb60f53af4959fda201d8d442a4edfc8e96f8b6917173c3e98abc7b794794e51453138a4df71eadde7125769b13ef7b0c4477673d9ad101952ad8bd1f375c27e532cfc1a76db07f8f0dad43c777f1a0de1ec5f5fbb0f43a00f7844438395c93d1471b129132af4f29bc4f5c07bfe2edb6ccb03ba7073d66f18efff13668bf149a7bc3220b1f14452ae12e0fd1bb612059040affc406d1a7b0f1e4d570e7da813b87ba0e83f2be9a212b661ec7899b1e13ff2c2929651a942139db48ca4741f90081c9776dea49ac1baa85308667bf25bb0419a73ba26465d11e41ca946babca3394869e03297b08992837ebb979a47845fe2427689b5a99bac23ea484856c06f4a23f678afa7553a7b92141383277c5b2c69ecccd0b7fd29ca2fe60cdd25a9a5e01a44e8862422c3b46d6eef0e7dd095e468a2912266c402c529f312bd04d2e385298e9ab707ab1cd5b31b8c9ddae60330fd8b4b86a10267680a73126b775b984a908c7067ad3988ec620276bbab6320a2ef33e2a201ec34b11386f370fe5211c07b255247acb93b4ea916b6555719c21f50114823d5b7c8b8f87931948aa4b0e42de939aaeea5663d4a5989c85a677b428e9b1d1150dfe1ca4c954bbc68b81f50b7dc1313ff000b57a429d8e2577dc13105f0cc732f69577d40fe37ba87f2daec5b67ab476634f9a388eeeb9ac30fd86265aefea6b533e21ac05a74ff9e68abf04a7c1b0821ffcd0716a04c71d8b443844779182c775e56d750d197ca6621db276ef96750ccddede1d321f4bcf84b216db559095e4cbe836dd2f9e9b4f504ed9fa4040d51289ee52aea30a38086d6b9eac4e951835ca48985b35c30738cdbe264263780e0267b2384f54e9e604a404408d6faa487a3ebd234b31a97f009fca852da9312548cded347097c373267af175936eefeff58c60ce8d97b0a2c18d56cef1c6a88232bcda8a38c35f1b0af97869d438da448ee8fb4de828edd1e91987bedf4b8af4806437ba6bf0d114aeb4425eb54714c87ea6f18fa56b78f64d3a1247d6425a1bdb88118695e3e19edcd8d831b9c58a81961e24417f1e0fc6942d7c753034ded2a905745987badd20eb080a89db3dd126db163126abba345c19069bd5f1bbe58bdc73919ff2a583713bcc1d11dc1e1b38e972aeed2fe7d68af799c8469d6958ca10fd55007ec8e9183fc7a63d0e11b8ec3fbc44a08153279f941f621dde03d98f8d997201c9ac7df57f0e7084b50f20737dd5046536b022bc40af0215f4cbe80c8a967a03fa3a32814c09ee110f46bb579198fa4fc3a1b3a3c044b3441e7d0a605ab749bbf046619e5121c06697b67f129269236b3169ea0680b47e21729b4f55282777b17e1f9498982b23a6a20d75bb0343af48e2cb37d109cfd04a010a6b9f94025bdc2110d0ce77d96c0748fac497675813910e38fd2a4927d71b104d50297bfc81f8f717aa857d0be1956ef205f3e0a7222922ec76a3bc7d0d15f7ac7f1126ebcbbb69494869c3e519ac250e83287261eb65afd6112bf0697ad2d846d291ac390ce76c0e9182cbf51ffea17d53c41d4f1f01161608d30eca76aae4cfd24afc2c8cb61a962a351ae847a6957f9691057306e70ed32914578cc0e7644b843d415cb311a7460be240f2b5dd6b9561ccd862dd473398d571e19ad3d861502bdde17feba8e2dde9cc113be35f92a385403a935fa4f1b34d9a5c1f5802ca1fc4817a54a162c01b4ffeba9504fb911cd3b983e54ab2f3178e952852a0415fe332ce78f0881fe0b64e5e5bfb4563b8f0fa612bf4d0e973d1c3925bcea86dcdf17d074441e24c646d440813b181ab53ea91ef02673a7a21d4f993aef4bab0e0e9f6865818518e2a03f11567fecbc25d1c64edc8187b7116e23f8593d62cefee8f1a6ea083e881598174fdf4c89b24a862d878bfc07a8c056bd535a0387a5023705ffcd991a896bbe346e3eb094451e8b5e6ad513d5338705ef2334bb6be49627afb63149702f99c825454e064ae9d058f847dafe039d2f98dc0f37c19495346c45f72ba2d734c101ca1054987c7e1fa1a4c5b9a26106d0c0a6d8ddb7359b1636c3302e9aca519516fb8bca8cc940d11fa8332667ec9d822e2d790adccaaf9b779296e5ffdf944fd25a8da9f1663bf980b3ac45773404bc1945a1ea30f3f53d0c351451875b0c12fd57014c41c2540144d041f7077bd13b64e73d4cc81e30446933fba067a18b889b67d81bec29b6cce569509da0761445951e4fae53848ccdcb8ac08f013e49c91f7b0a76f0fed75dab32681c6b424f6ba56abbe15dbe3bb61f88c446531c97193bff1423181cdd94239743093fbbacb833296f360f82f4bfe57d70d992ce8bc71b8b8b6186552d347f5936dc4fffca2dfbdbe44ce5b4786e3e81120a6bcd7a5e19b008cf88c07eac09a887cc1d93e996218efbfcfb032bca1cc55488826ec3b03264f88662329ef30fa0d3875e093a3ec7a84004969b40858a637d48f2990612e2ed52883539a068f1945f1d12d452cddc2a78a6572eed51fc3e91c34331c2329bb506b4a866ed20756139be8681aa2847d7fcc242c1eff5fd8de8e7411ea8d3f063d3e69c18d74112a4cc3af413d0bc0184ba5d46f13fb4001151e0a522741faa7a030e63aabf1cdc729d7fdc10d687e559a0c76176dab6757ba6ad3b9008953fe6ecf7f978747a5f3d79ebbafbbeb468d439046ec42aec348cfdc48e589e4df7457fef22cca7c5863459f1604ae0faeb14e4c9c45554162626433f1bd71562454aba31d697fefe9bc50c0f12138dd11b6c0a0b562dc3b5b1097520e6a6fea8ca90cdac914121b729879b675db5f5c89f5599b3f146c9c5a2c6d11cf88ea302630df7474e806c997dd13e7b4c90c99feff125131ccb6e0cade9c002f547955398ed7e1123d54d8ef5c2f734254a0183d97393beea447d24e3a68fd388d716c124d2a1898c83930f9e31b350d3dfa0d601696dafb04cb34fd4a98acc19", 0x1000}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) write$P9_RGETLOCK(r0, &(0x7f0000000100)={0x1e, 0x37, 0x1, {0x2, 0x7ff, 0x5, r3}}, 0x1e) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r5 = dup2(r4, r0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000140)) fcntl$setstatus(r5, 0x4, 0x44000) io_setup(0xad, &(0x7f0000000000)=0x0) io_submit(r6, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x2000}]) 12:22:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0xfffffffffffffffd) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) socket$rds(0x15, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c46ac0603f0001000000000000003003f0040000000fc000000000000004000000000000000b0020000000000003e0800001f003800010002000300030000000000000000007f0000000000000060f7ffffffffffff00000000000000000000000000000000ef010000000000000300000000000000b5ac46ae82cf00ba3cf878316410f8f9d37bfed9898192b3809df86e1854b0136ea096b3c1919e8ec8f333e6221b8fc656e137bcdedf9b804cbfe34eeb451c51398005be2980c3da4ff9843f821eca5fcb987606015734711821581cfc42addf78343714da1fe5851a0ba96945fa5dc0d5e0f8d8afd02b631a98dca3a361c39703c65b2abc1d698a816ba2385973c5ee7a2ae407e4e00c0af4937221dc0d9fef2128b01e9473b95d06938d1e57cdbe81c1a961209ad5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e10000000000004000"/1326], 0x52e) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000, 0x0) 12:22:22 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@ll={0x11, 0x4, r1, 0x1, 0xffffffff}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="26d1c5dcea56163eca6b0922fa11dc66a3af4275f3e5e8984df13bb66142ac56297d12d4455128b156d58a8d0f816a18cea3e82411e49169f1bffc76defd6e6d5673d9b8a2b154cc8a514aafe1d54d170464165dcad3e167e65a076d597482912ef7f4c9bf22f714fc89e711a40cb96637174493aba50c917b6672f14575b790599fa0e1c8e4160bb0d1ff0878afe1df1286b41349c88e66fb2bd7dc5d04cebdecb8dbec3ca1cab039611eeaefaf1c5515647ff4a0a20f01a264e1000204e5adbf7815edcbb3ce48d2132dd6c3a67cca16f4c53248721627879804020bc8e51168342b77930b8b51ea", 0xe9}, {&(0x7f0000000240)="ea0e237c98e6b87ca8e0354ddf528fa433e7e8c7e3c82cf3ac29dc37af80e71c837c9d54a97d78a9f172b0cc481514c84040d1cac31151231c3be904a9b7d73fe9a1e4524275a3a83e7800b2db41970d99d267bf881cd18dcf80742459a2e28a7888fae4a33dfdc45ea924c2e17206b15de02b0d29715e84a0482f90ba067cf08c037d43e8228fba4511fed1b93df581baa2bdcee64c0cf951446579c944ddcdcdd12b8c22f425", 0xa7}], 0x2}, 0x80) fadvise64(r0, 0x0, 0x1, 0x5) r2 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f000000cffc), 0x4877e7) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x408040, 0x0) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000000040)) r4 = gettid() ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f00000003c0)={0x3, [0x6, 0x7fff, 0xfffffffffffffffc]}) fcntl$lock(r2, 0x27, &(0x7f0000000380)={0x0, 0x0, 0x5, 0x600000000000000, r4}) 12:22:22 executing program 2: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10fffc) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x1, 0x0) lstat(0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) io_setup(0x9, &(0x7f0000000180)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) listxattr(0x0, &(0x7f00000013c0)=""/21, 0x15) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d0000100000000000000000000000030005b8fe4fa8835b700000e00000010000000000000000080012000200020000000000006f0000003000000003030000000800000000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e0000001000000000000a6bb"], 0x80}}, 0x0) lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000400)=@v1={0x2, "af6e790a4f3fa883bbeee12afef5fc3b"}, 0x11, 0x3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/create\x00', 0x2, 0x0) dup(r3) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 12:22:22 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x80000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$isdn(0x22, 0x3, 0x3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0x8}, 0x0, 0x0, &(0x7f0000000200)={0x6cfd, 0x5, 0x36, 0x3}, &(0x7f0000000240)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x1f}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r3, r0, 0x0, 0xd, &(0x7f0000000140)='/dev/usbmon#\x00', r4}, 0x30) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000000)) 12:22:22 executing program 5: shmdt(0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x40) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000040)={0xf000, 0xf000, 0x1, 0x8, 0x100000001}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x30, 0x3, 0x0, 0x3, 0x8001, 0x5, 0x0, 0x7f}, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000000c0)) [ 96.766155] audit: type=1804 audit(1554985342.173:39): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir094814911/syzkaller.VrllYk/8/bus" dev="sda1" ino=16553 res=1 12:22:22 executing program 3: 12:22:22 executing program 5: bpf$MAP_LOOKUP_ELEM(0xe, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=""/130}, 0x18) 12:22:22 executing program 0: r0 = gettid() exit(0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioprio_get$pid(0x2, r0) [ 96.855608] audit: type=1804 audit(1554985342.213:40): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir094814911/syzkaller.VrllYk/8/bus" dev="sda1" ino=16553 res=1 12:22:22 executing program 5: keyctl$set_reqkey_keyring(0x2, 0xffffffffffffffff) 12:22:22 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000000c0)) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) [ 96.884120] audit: type=1804 audit(1554985342.223:41): pid=7325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir094814911/syzkaller.VrllYk/8/bus" dev="sda1" ino=16553 res=1 [ 96.923972] hrtimer: interrupt took 46263 ns 12:22:22 executing program 1: write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val, @val={0x0, 0x0, 0x0, 0x100000001}, @x25={0x0, 0x0, 0x27, "1dbb0bb17400e7636b397c44121f4d4c825cbbd428e75ddd13ee19083ba468d6c76db937542caf853a2658d91660fdaf244afde26d013561ae61280be621ee93b001b428a19233a6be526ebf42e07e7734e0006f3a4451b28a498a0983338ab2e9c69f145c29b244acb63df9474ea741a1366dc81ddd667844d1c66261fa751d5bad1e19d1cc2cf1a6060a9e372f489053c042b6b0cadf6d2692d717ee181a30a856"}}, 0xb3) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = getpid() clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)='syz_tun\x00', 0x8, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_dump={0x30}}) 12:22:22 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7f) fgetxattr(r0, &(0x7f0000000340)=@known='security.capability\x00', &(0x7f0000000380)=""/49, 0x31) 12:22:22 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x0, [{}]}, 0x60) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt(r0, 0xff, 0x0, &(0x7f0000000180), 0x0) 12:22:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0xfffffffffffffefe) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x7}, 0x14) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) io_setup(0x10001, &(0x7f0000000000)) writev(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)="f9", 0x1}], 0x1) 12:22:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x200000000003, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) flock(r0, 0x0) 12:22:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() prlimit64(r1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) ioctl$EVIOCSABS3F(r0, 0x40104593, &(0x7f0000000140)={0x0, 0x7}) 12:22:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') mkdirat$cgroup(r0, &(0x7f0000000040)='0-\x00', 0x1ff) 12:22:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0xfffffffffffffefe) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x7}, 0x14) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) io_setup(0x10001, &(0x7f0000000000)) writev(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)="f9", 0x1}], 0x1) 12:22:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffff90) setsockopt$inet6_buf(r0, 0x29, 0x4c, &(0x7f0000000000), 0x0) [ 97.337153] audit: type=1400 audit(1554985342.743:42): avc: denied { getrlimit } for pid=7373 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 12:22:23 executing program 0: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x7ffffffff000, 0x0, &(0x7f0000c87000/0x2000)=nil) 12:22:23 executing program 2: 12:22:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') mkdirat$cgroup(r0, &(0x7f0000000040)='0-\x00', 0x1ff) 12:22:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0xfffffffffffffefe) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x7}, 0x14) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) io_setup(0x10001, &(0x7f0000000000)) writev(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)="f9", 0x1}], 0x1) 12:22:23 executing program 5: 12:22:23 executing program 3: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000080)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x20000, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0x51, r1, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xfffffffffffffffe) 12:22:23 executing program 2: futex(&(0x7f0000000040), 0xb, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x7ffffffff000, 0x0, &(0x7f0000c87000/0x2000)=nil) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14}, 0x14}}, 0x20040084) 12:22:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') mkdirat$cgroup(r0, &(0x7f0000000040)='0-\x00', 0x1ff) 12:22:23 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0xa, 0x200000000080002, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000180)) setsockopt$inet_buf(r0, 0x0, 0x1000000000020, &(0x7f0000000040)="a42ae86bf3833e79f7f2dbed1093b15ad4363fadd44aa014ae251e5d21047c9d7d89ee77a433c8c02ac8e461759cd99da29c789ab289b30b7fffb2a10000000000002dcecee5b2e17255cc0000866645", 0x50) [ 97.821004] audit: type=1400 audit(1554985343.223:43): avc: denied { map } for pid=7406 comm="syz-executor.3" path="/dev/autofs" dev="devtmpfs" ino=13810 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:autofs_device_t:s0 tclass=chr_file permissive=1 12:22:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') mkdirat$cgroup(r0, &(0x7f0000000040)='0-\x00', 0x1ff) 12:22:23 executing program 1: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='0-\x00', 0x1ff) 12:22:23 executing program 0: 12:22:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0xfffffffffffffefe) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x7}, 0x14) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) io_setup(0x10001, &(0x7f0000000000)) writev(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)="f9", 0x1}], 0x1) 12:22:23 executing program 3: 12:22:23 executing program 5: 12:22:23 executing program 0: 12:22:23 executing program 3: 12:22:23 executing program 5: 12:22:24 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) clone(0xa0842100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000c80)) getpriority(0x0, 0xffffffffffffffff) 12:22:24 executing program 1: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='0-\x00', 0x1ff) 12:22:24 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000004000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:24 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x3f, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x8000000939, 0x4) sendto$unix(r0, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0xaf}], 0x1) 12:22:24 executing program 5: munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009) 12:22:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0xfffffffffffffefe) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x7}, 0x14) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) io_setup(0x10001, &(0x7f0000000000)) 12:22:24 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000300)) writev(r1, &(0x7f0000000040), 0x0) 12:22:24 executing program 1: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='0-\x00', 0x1ff) 12:22:24 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000004000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 98.813201] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! 12:22:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) ptrace$pokeuser(0x6, 0x0, 0x7, 0x100) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000340), &(0x7f0000000040)=0x362) 12:22:24 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000004000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:24 executing program 1: r0 = syz_open_procfs(0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='0-\x00', 0x1ff) 12:22:24 executing program 2: 12:22:24 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000004000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:24 executing program 1: r0 = syz_open_procfs(0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='0-\x00', 0x1ff) 12:22:24 executing program 5: 12:22:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0xfffffffffffffefe) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x7}, 0x14) io_setup(0x10001, &(0x7f0000000000)) 12:22:24 executing program 0: 12:22:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0xfffffffffffffefe) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) io_setup(0x10001, &(0x7f0000000000)) 12:22:24 executing program 5: 12:22:24 executing program 2: 12:22:24 executing program 1: r0 = syz_open_procfs(0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='0-\x00', 0x1ff) 12:22:24 executing program 3: mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000004000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:24 executing program 0: 12:22:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0xfffffffffffffefe) io_setup(0x10001, &(0x7f0000000000)) 12:22:24 executing program 2: 12:22:24 executing program 1: syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='0-\x00', 0x1ff) 12:22:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() io_setup(0x10001, &(0x7f0000000000)) 12:22:24 executing program 5: 12:22:24 executing program 0: 12:22:24 executing program 3: mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000004000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:24 executing program 1: syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='0-\x00', 0x1ff) 12:22:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) io_setup(0x10001, &(0x7f0000000000)) 12:22:24 executing program 2: 12:22:24 executing program 0: 12:22:24 executing program 5: 12:22:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') io_setup(0x10001, &(0x7f0000000000)) 12:22:24 executing program 0: 12:22:24 executing program 3: mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000004000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:24 executing program 5: 12:22:24 executing program 2: 12:22:25 executing program 1: syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='0-\x00', 0x1ff) 12:22:25 executing program 3: mkdir(0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000004000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:25 executing program 0: 12:22:25 executing program 4: io_setup(0x10001, &(0x7f0000000000)) 12:22:25 executing program 5: 12:22:25 executing program 2: 12:22:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') mkdirat$cgroup(r0, 0x0, 0x1ff) 12:22:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x4, 0x800200, 0x4, 0x0, 0x0}, 0x2c) 12:22:25 executing program 4: io_setup(0x0, &(0x7f0000000000)) 12:22:25 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, r1, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=""/136, 0x88}) futex(&(0x7f0000000ffc), 0x0, 0x0, &(0x7f0000003ff0), &(0x7f0000000000), 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x12}, @local, @local}, 0xc) 12:22:25 executing program 3: mkdir(0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000004000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:25 executing program 5: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)="5500000018007f8500fe01b2a4a280930a06005e1932217739c314003900090035000c00060000001900150000000000000000dc1338d54400009b84136ef75afb83fb448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000000)}, 0x0) 12:22:25 executing program 4: io_setup(0x0, &(0x7f0000000000)) 12:22:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') mkdirat$cgroup(r0, 0x0, 0x1ff) 12:22:25 executing program 4: io_setup(0x0, &(0x7f0000000000)) 12:22:25 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x7ffffffff000, 0x3, &(0x7f0000c87000/0x2000)=nil) 12:22:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x4, 0x800200, 0x4, 0x0, 0x0}, 0x2c) [ 99.866730] audit: type=1400 audit(1554985345.273:44): avc: denied { create } for pid=7586 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:22:25 executing program 3: mkdir(0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000004000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') mkdirat$cgroup(r0, 0x0, 0x1ff) 12:22:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x4, 0x800200, 0x4, 0x0, 0x0}, 0x2c) 12:22:25 executing program 4: io_setup(0x10001, 0x0) 12:22:25 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:25 executing program 5: mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='.\x00') 12:22:25 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000004000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ioctl$UI_END_FF_ERASE(r0, 0xc06855c8, &(0x7f0000000300)={0xffffffffffffffff}) 12:22:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x4, 0x800200, 0x4, 0x0, 0x0}, 0x2c) 12:22:25 executing program 4: io_setup(0x10001, 0x0) 12:22:25 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000004000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:25 executing program 4: io_setup(0x10001, 0x0) 12:22:25 executing program 5: r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2000000000000000ffff000000000000f87c8a5b671b1b542a538706000000a71100000029000000330000000300dd0035b21ef0c26d08ec"], 0x38}, 0x0) 12:22:25 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 12:22:25 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) [ 100.212292] syz-executor.0 (7651) used greatest stack depth: 24368 bytes left 12:22:25 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000004000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:25 executing program 4: r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2000000000000000ffff000000000000f87c8a5b671b1b542a538706000000a711000000290000003d0000000300dd0035b21ef0c26d08ec"], 0x38}, 0x0) 12:22:25 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 12:22:25 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:25 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:25 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 12:22:25 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000004000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:25 executing program 4: r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2000000000000000ffff000000000000f87c8a5b671b1b542a538706000000a711000000290000003d0000000300dd0035b21ef0c26d08ec"], 0x38}, 0x0) 12:22:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) dup3(r0, r1, 0x0) 12:22:25 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:25 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:25 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) [ 100.513535] audit: type=1400 audit(1554985345.923:45): avc: denied { map } for pid=7692 comm="syz-executor.1" path="/dev/ashmem" dev="devtmpfs" ino=695 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 12:22:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x4, 0x800200, 0x4, 0x0, 0x0}, 0x2c) 12:22:26 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000004000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mremap(&(0x7f00008fe000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00009c3000/0x4000)=nil) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) 12:22:26 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x4, 0x800200, 0x4, 0x0, 0x0}, 0x2c) 12:22:26 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:26 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) [ 100.664751] mmap: syz-executor.5 (7712) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 12:22:26 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:26 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x10000004000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x4, 0x800200, 0x4, 0x0, 0x0}, 0x2c) 12:22:26 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:26 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:26 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:26 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) 12:22:26 executing program 5: r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffa}) 12:22:26 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x0, 0x800200, 0x4, 0x0, 0x0}, 0x2c) 12:22:26 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80), 0x6, 0x0) 12:22:26 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 12:22:26 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) 12:22:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x0, 0x800200, 0x4, 0x0, 0x0}, 0x2c) 12:22:26 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80), 0x6, 0x0) 12:22:26 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) 12:22:26 executing program 5: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@loopback, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, r1}) 12:22:26 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 12:22:26 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:26 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80), 0x6, 0x0) 12:22:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x0, 0x800200, 0x4, 0x0, 0x0}, 0x2c) 12:22:26 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:26 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="3400000000000000290000003e0000000000039aa0215a8c4cc260c509e7bc8cea3eea4bbd84e342f0586faf5e31d5572585869a"], 0x34}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:26 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 12:22:26 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=@acquire={0x128, 0x17, 0x32b, 0x0, 0x0, {{@in=@multicast1}, @in=@remote, {@in6=@initdev, @in=@multicast2}, {{@in6=@remote, @in6=@initdev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x342e1cf8ba5810d}}}, 0x128}}, 0x0) 12:22:26 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x4, 0x0, 0x4, 0x0, 0x0}, 0x2c) 12:22:26 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:26 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:26 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:26 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=@acquire={0x128, 0x17, 0x32b, 0x0, 0x0, {{@in=@multicast1}, @in=@remote, {@in6=@initdev, @in=@multicast2}, {{@in6=@remote, @in6=@initdev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x342e1cf8ba5810d}}}, 0x128}}, 0x0) 12:22:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x4, 0x0, 0x4, 0x0, 0x0}, 0x2c) 12:22:27 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:22:27 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:27 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x4, 0x0, 0x4, 0x0, 0x0}, 0x2c) 12:22:27 executing program 0: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) close(r1) 12:22:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=@acquire={0x128, 0x17, 0x32b, 0x0, 0x0, {{@in=@multicast1}, @in=@remote, {@in6=@initdev, @in=@multicast2}, {{@in6=@remote, @in6=@initdev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x342e1cf8ba5810d}}}, 0x128}}, 0x0) 12:22:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:27 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x4, 0x800200, 0x0, 0x0, 0x0}, 0x2c) 12:22:27 executing program 0: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=@acquire={0x128, 0x17, 0x32b, 0x0, 0x0, {{@in=@multicast1}, @in=@remote, {@in6=@initdev, @in=@multicast2}, {{@in6=@remote, @in6=@initdev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x342e1cf8ba5810d}}}, 0x128}}, 0x0) 12:22:27 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x4, 0x800200, 0x0, 0x0, 0x0}, 0x2c) 12:22:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) close(r1) 12:22:27 executing program 0: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:27 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=@acquire={0x128, 0x17, 0x32b, 0x0, 0x0, {{@in=@multicast1}, @in=@remote, {@in6=@initdev, @in=@multicast2}, {{@in6=@remote, @in6=@initdev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x342e1cf8ba5810d}}}, 0x128}}, 0x0) 12:22:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:27 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x4, 0x800200, 0x0, 0x0, 0x0}, 0x2c) 12:22:27 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:27 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=@acquire={0x128, 0x17, 0x32b, 0x0, 0x0, {{@in=@multicast1}, @in=@remote, {@in6=@initdev, @in=@multicast2}, {{@in6=@remote, @in6=@initdev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x342e1cf8ba5810d}}}, 0x128}}, 0x0) 12:22:27 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:27 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) close(r1) 12:22:27 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=@acquire={0x128, 0x17, 0x32b, 0x0, 0x0, {{@in=@multicast1}, @in=@remote, {@in6=@initdev, @in=@multicast2}, {{@in6=@remote, @in6=@initdev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x342e1cf8ba5810d}}}, 0x128}}, 0x0) 12:22:27 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:27 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:27 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=@acquire={0x128, 0x17, 0x32b, 0x0, 0x0, {{@in=@multicast1}, @in=@remote, {@in6=@initdev, @in=@multicast2}, {{@in6=@remote, @in6=@initdev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x342e1cf8ba5810d}}}, 0x128}}, 0x0) 12:22:27 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:27 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) close(r1) 12:22:27 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=@acquire={0x128, 0x17, 0x32b, 0x0, 0x0, {{@in=@multicast1}, @in=@remote, {@in6=@initdev, @in=@multicast2}, {{@in6=@remote, @in6=@initdev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x342e1cf8ba5810d}}}, 0x128}}, 0x0) 12:22:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:28 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:28 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:28 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=@acquire={0x128, 0x17, 0x32b, 0x0, 0x0, {{@in=@multicast1}, @in=@remote, {@in6=@initdev, @in=@multicast2}, {{@in6=@remote, @in6=@initdev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x342e1cf8ba5810d}}}, 0x128}}, 0x0) 12:22:28 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:28 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:28 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) 12:22:28 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 12:22:28 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:28 executing program 4: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000140)='\x00') 12:22:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:28 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 12:22:28 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:28 executing program 4: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000140)='\x00') 12:22:28 executing program 1: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000140)='\x00') close(0xffffffffffffffff) 12:22:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 12:22:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) readv(0xffffffffffffffff, &(0x7f00000001c0), 0xce) 12:22:29 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:29 executing program 1: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000140)='\x00') close(0xffffffffffffffff) 12:22:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 12:22:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) 12:22:29 executing program 4: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000140)='\x00') 12:22:29 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:29 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:29 executing program 1: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000140)='\x00') close(0xffffffffffffffff) 12:22:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 12:22:29 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 12:22:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) readv(0xffffffffffffffff, &(0x7f00000001c0), 0xce) 12:22:29 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:29 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:29 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) 12:22:29 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:29 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) 12:22:29 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900"], 0xa}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) readv(0xffffffffffffffff, &(0x7f00000001c0), 0xce) 12:22:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) 12:22:29 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:29 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900"], 0xa}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:29 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) 12:22:30 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r1) 12:22:30 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=@acquire={0x128, 0x17, 0x0, 0x0, 0x0, {{@in=@multicast1}, @in=@remote, {@in6=@initdev, @in=@multicast2}, {{@in6=@remote, @in6=@initdev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x342e1cf8ba5810d}}}, 0x128}}, 0x0) 12:22:30 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900"], 0xa}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:30 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=@acquire={0x128, 0x17, 0x0, 0x0, 0x0, {{@in=@multicast1}, @in=@remote, {@in6=@initdev, @in=@multicast2}, {{@in6=@remote, @in6=@initdev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x342e1cf8ba5810d}}}, 0x128}}, 0x0) 12:22:30 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:30 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:30 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000000000000029000000030000"], 0xf}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:30 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=@acquire={0x128, 0x17, 0x0, 0x0, 0x0, {{@in=@multicast1}, @in=@remote, {@in6=@initdev, @in=@multicast2}, {{@in6=@remote, @in6=@initdev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x342e1cf8ba5810d}}}, 0x128}}, 0x0) 12:22:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r1) 12:22:30 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:30 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000000000000029000000030000"], 0xf}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=@acquire={0x128, 0x17, 0x32b, 0x0, 0x0, {{@in=@multicast1}, @in=@remote, {@in6=@initdev, @in=@multicast2}, {{@in6=@remote, @in6=@initdev}}}}, 0x128}}, 0x0) 12:22:31 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:31 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=@acquire={0x128, 0x17, 0x32b, 0x0, 0x0, {{@in=@multicast1}, @in=@remote, {@in6=@initdev, @in=@multicast2}, {{@in6=@remote, @in6=@initdev}}}}, 0x128}}, 0x0) 12:22:31 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000000000000029000000030000"], 0xf}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:31 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r1) 12:22:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)=@acquire={0x128, 0x17, 0x32b, 0x0, 0x0, {{@in=@multicast1}, @in=@remote, {@in6=@initdev, @in=@multicast2}, {{@in6=@remote, @in6=@initdev}}}}, 0x128}}, 0x0) 12:22:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:31 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:31 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c"], 0x12}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:31 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:31 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/0ys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) 12:22:31 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:31 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:31 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c"], 0x12}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) close(r1) 12:22:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5432, &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)) 12:22:31 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c"], 0x12}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:31 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:32 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) close(r1) 12:22:32 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a"], 0x13}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5432, &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)) 12:22:32 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:32 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) close(r1) 12:22:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5432, &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)) 12:22:32 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:32 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a"], 0x13}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:32 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(0xffffffffffffffff) close(r1) 12:22:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5432, &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)) 12:22:32 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a"], 0x13}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:32 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:32 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(0xffffffffffffffff) close(r1) 12:22:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5432, &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0x0) 12:22:33 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x0, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:33 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:33 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(0xffffffffffffffff) close(r1) 12:22:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5432, &(0x7f00000000c0)) 12:22:33 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:33 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) close(r1) 12:22:33 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x0, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:33 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:33 executing program 5: ioctl$TCSETSF(0xffffffffffffffff, 0x5432, &(0x7f00000000c0)) 12:22:33 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) close(r1) 12:22:33 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x0, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:34 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') 12:22:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:34 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:34 executing program 5: ioctl$TCSETSF(0xffffffffffffffff, 0x5432, &(0x7f00000000c0)) 12:22:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) close(r1) 12:22:34 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:34 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000140)='\x00') 12:22:34 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:34 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000140)='\x00') 12:22:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) close(r1) 12:22:34 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:34 executing program 5: ioctl$TCSETSF(0xffffffffffffffff, 0x5432, &(0x7f00000000c0)) 12:22:34 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000140)='\x00') 12:22:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5432, &(0x7f00000000c0)) 12:22:35 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) close(r1) 12:22:35 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:35 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) 12:22:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5432, &(0x7f00000000c0)) 12:22:35 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:35 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) 12:22:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) close(r1) 12:22:35 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:35 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) 12:22:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5432, &(0x7f00000000c0)) 12:22:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r1) close(0xffffffffffffffff) 12:22:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') lseek(r0, 0xfffffffffffffffe, 0x3) 12:22:36 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:36 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5432, &(0x7f00000000c0)) 12:22:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4004556c, &(0x7f0000000080)='syz1\x00') clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ioctl$UI_END_FF_ERASE(r0, 0xc06855c8, &(0x7f0000000300)={0xffffffffffffffff}) 12:22:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r1) close(0xffffffffffffffff) 12:22:36 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:36 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5432, &(0x7f00000000c0)) 12:22:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:36 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:36 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5432, &(0x7f00000000c0)) 12:22:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r1) close(0xffffffffffffffff) 12:22:36 executing program 4: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000080)) 12:22:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:36 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5432, 0x0) 12:22:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) close(r1) 12:22:36 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') clone(0x6102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) sched_setscheduler(r1, 0x80000, &(0x7f0000000080)) r3 = getpid() getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/177, 0xfffffffffffffe9f) sched_setscheduler(r3, 0x5, &(0x7f0000000140)) sendfile(r2, r2, &(0x7f0000000200)=0x202000000000000, 0xefda) 12:22:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000140)='\x00') close(r0) 12:22:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:36 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setrlimit(0x7, &(0x7f0000000000)) inotify_init1(0x0) 12:22:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) close(r1) 12:22:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) close(r0) 12:22:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) close(r0) 12:22:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r2) close(r1) 12:22:37 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:37 executing program 5: setitimer(0x0, &(0x7f0000000100)={{}, {0x0, 0xf423f}}, 0x0) setitimer(0x0, &(0x7f0000000040), &(0x7f0000000080)) 12:22:37 executing program 2: sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000a80)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000001c0), 0xce) 12:22:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x1b4e5c2e) 12:22:37 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) close(r0) 12:22:37 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:37 executing program 5: nanosleep(&(0x7f0000000080)={0x8}, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) execve(0x0, 0x0, 0x0) 12:22:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r1) close(r0) 12:22:37 executing program 2: sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000a80)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000001c0), 0xce) 12:22:37 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0x8003, 0x1700) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCCONS(r1, 0x20004276) ioctl$TIOCSBRK(r1, 0x2000747b) 12:22:37 executing program 2: sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000a80)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000001c0), 0xce) 12:22:37 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 12:22:37 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(0xffffffffffffffff) 12:22:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6gretap0\x00', 0x0}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0xb21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x28}}, 0x0) 12:22:37 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80), 0x6, 0x0) 12:22:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r1) close(r0) 12:22:37 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(0xffffffffffffffff) 12:22:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 12:22:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x88, 0x1, 0x0, &(0x7f0000000080)) 12:22:38 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x00') close(0xffffffffffffffff) 12:22:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:38 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80), 0x6, 0x0) 12:22:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r1) close(r0) 12:22:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4004e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe84, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000100)="01", 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xdd) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffffb5, 0xc0, 0x0, 0xffffffff00000000) 12:22:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000000000a01, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:38 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000007d80), 0x6, 0x0) 12:22:38 executing program 1: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "8de06f55c742ae7c2bb7ed7767c245f6"}, 0x80, 0x0}, 0x0) 12:22:38 executing program 5: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r0, 0x1) poll(&(0x7f0000000040)=[{r0}], 0x20000000000000e6, 0x0) 12:22:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdcb, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfffffe72) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xce) 12:22:38 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='J']}) close(r1) close(r0) [ 112.819468] ================================================================== [ 112.827109] BUG: KASAN: use-after-free in erspan_build_header+0x392/0x3b0 [ 112.834112] Read of size 2 at addr ffff8880a3d88c8b by task syz-executor.1/8612 [ 112.841586] [ 112.843225] CPU: 1 PID: 8612 Comm: syz-executor.1 Not tainted 4.14.111 #1 [ 112.850164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.859519] Call Trace: [ 112.862115] dump_stack+0x138/0x19c 12:22:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4004e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe84, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000100)="01", 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xdd) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffffb5, 0xc0, 0x0, 0xffffffff00000000) [ 112.865754] ? erspan_build_header+0x392/0x3b0 [ 112.870368] print_address_description.cold+0x7c/0x1dc [ 112.870399] ? erspan_build_header+0x392/0x3b0 [ 112.870409] kasan_report.cold+0xaf/0x2b5 [ 112.870421] __asan_report_load_n_noabort+0xf/0x20 [ 112.870430] erspan_build_header+0x392/0x3b0 [ 112.870442] ? iptunnel_handle_offloads+0x2f3/0x500 [ 112.870453] erspan_xmit+0x3ec/0x11c0 [ 112.870465] ? __gre_xmit+0x890/0x890 [ 112.870475] ? lock_acquire+0x16f/0x430 [ 112.870483] ? packet_direct_xmit+0x345/0x640 [ 112.870501] packet_direct_xmit+0x438/0x640 [ 112.870515] packet_sendmsg+0x31e1/0x5990 [ 112.870530] ? __might_fault+0x110/0x1d0 [ 112.870546] ? rw_copy_check_uvector+0x1f1/0x290 [ 112.870568] ? packet_notifier+0x770/0x770 [ 112.870586] ? copy_msghdr_from_user+0x292/0x3f0 [ 112.870604] ? security_socket_sendmsg+0x8f/0xc0 [ 112.870613] ? packet_notifier+0x770/0x770 [ 112.870622] sock_sendmsg+0xd0/0x110 [ 112.870632] ___sys_sendmsg+0x70c/0x850 [ 112.870642] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 112.870651] ? __fget+0x210/0x370 [ 112.966194] ? find_held_lock+0x35/0x130 12:22:38 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 12:22:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4004e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe84, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000100)="01", 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xdd) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffffb5, 0xc0, 0x0, 0xffffffff00000000) [ 112.970261] ? __fget+0x210/0x370 [ 112.973723] ? lock_downgrade+0x6e0/0x6e0 [ 112.977881] ? __fget+0x237/0x370 [ 112.981347] ? __fdget+0x1b/0x20 [ 112.981362] ? sockfd_lookup_light+0xb4/0x160 [ 112.981376] __sys_sendmsg+0xb9/0x140 [ 112.989244] ? SyS_shutdown+0x180/0x180 [ 112.997009] ? put_timespec64+0xb4/0x100 [ 113.001078] ? SyS_clock_gettime+0xfd/0x190 [ 113.005413] SyS_sendmsg+0x2d/0x50 [ 113.008954] ? __sys_sendmsg+0x140/0x140 [ 113.013023] do_syscall_64+0x1eb/0x630 [ 113.016916] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 113.021769] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 113.026961] RIP: 0033:0x4582f9 [ 113.030163] RSP: 002b:00007fb2b4384c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.037885] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004582f9 [ 113.037892] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 113.037898] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 113.037905] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b43856d4 12:22:38 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000003000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x803, 0x20000000007) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) [ 113.037911] R13: 00000000004c58fa R14: 00000000004d9bb8 R15: 00000000ffffffff [ 113.037930] [ 113.037936] Allocated by task 8570: [ 113.037947] save_stack_trace+0x16/0x20 [ 113.037959] save_stack+0x45/0xd0 [ 113.086961] kasan_kmalloc+0xce/0xf0 [ 113.090686] kasan_slab_alloc+0xf/0x20 [ 113.094577] kmem_cache_alloc+0x12e/0x780 [ 113.098728] getname_flags+0xcb/0x580 [ 113.102526] getname+0x1a/0x20 [ 113.105721] do_sys_open+0x1e7/0x430 [ 113.109433] SyS_openat+0x30/0x40 [ 113.112891] do_syscall_64+0x1eb/0x630 [ 113.116782] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 113.121969] [ 113.123591] Freed by task 8570: [ 113.126872] save_stack_trace+0x16/0x20 [ 113.130847] save_stack+0x45/0xd0 [ 113.134303] kasan_slab_free+0x75/0xc0 [ 113.138206] kmem_cache_free+0x83/0x2b0 [ 113.142184] putname+0xdb/0x120 [ 113.145469] do_sys_open+0x21c/0x430 [ 113.149186] SyS_openat+0x30/0x40 [ 113.152666] do_syscall_64+0x1eb/0x630 [ 113.156566] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 113.161751] [ 113.163382] The buggy address belongs to the object at ffff8880a3d88580 [ 113.163382] which belongs to the cache names_cache of size 4096 [ 113.176128] The buggy address is located 1803 bytes inside of [ 113.176128] 4096-byte region [ffff8880a3d88580, ffff8880a3d89580) [ 113.188210] The buggy address belongs to the page: [ 113.193156] page:ffffea00028f6200 count:1 mapcount:0 mapping:ffff8880a3d88580 index:0x0 compound_mapcount: 0 [ 113.203131] flags: 0x1fffc0000008100(slab|head) [ 113.207855] raw: 01fffc0000008100 ffff8880a3d88580 0000000000000000 0000000100000001 [ 113.215743] raw: ffffea0002971720 ffffea0001b82120 ffff8880aa9e0cc0 0000000000000000 [ 113.223636] page dumped because: kasan: bad access detected [ 113.229370] [ 113.230996] Memory state around the buggy address: [ 113.235920] ffff8880a3d88b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.235941] ffff8880a3d88c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.235948] >ffff8880a3d88c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.235952] ^ [ 113.235961] ffff8880a3d88d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.255437] kobject: 'loop0' (ffff8880a491a620): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 113.258030] ffff8880a3d88d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.258034] ================================================================== [ 113.258038] Disabling lock debugging due to kernel taint [ 113.258102] Kernel panic - not syncing: panic_on_warn set ... [ 113.258102] [ 113.306079] CPU: 1 PID: 8612 Comm: syz-executor.1 Tainted: G B 4.14.111 #1 [ 113.308913] kobject: 'loop4' (ffff8880a4aa0a20): kobject_uevent_env [ 113.314215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 113.314219] Call Trace: [ 113.314236] dump_stack+0x138/0x19c [ 113.314248] ? erspan_build_header+0x392/0x3b0 [ 113.314256] panic+0x1f2/0x438 [ 113.314264] ? add_taint.cold+0x16/0x16 [ 113.314281] kasan_end_report+0x47/0x4f [ 113.314289] kasan_report.cold+0x136/0x2b5 [ 113.314298] __asan_report_load_n_noabort+0xf/0x20 [ 113.314305] erspan_build_header+0x392/0x3b0 [ 113.314319] ? iptunnel_handle_offloads+0x2f3/0x500 [ 113.314327] erspan_xmit+0x3ec/0x11c0 [ 113.314337] ? __gre_xmit+0x890/0x890 [ 113.314347] ? lock_acquire+0x16f/0x430 [ 113.314355] ? packet_direct_xmit+0x345/0x640 [ 113.314366] packet_direct_xmit+0x438/0x640 [ 113.314375] packet_sendmsg+0x31e1/0x5990 [ 113.314387] ? __might_fault+0x110/0x1d0 [ 113.314404] ? rw_copy_check_uvector+0x1f1/0x290 [ 113.336964] kobject: 'loop4' (ffff8880a4aa0a20): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 113.340937] ? packet_notifier+0x770/0x770 [ 113.340953] ? copy_msghdr_from_user+0x292/0x3f0 [ 113.340968] ? security_socket_sendmsg+0x8f/0xc0 [ 113.340976] ? packet_notifier+0x770/0x770 [ 113.340986] sock_sendmsg+0xd0/0x110 [ 113.340997] ___sys_sendmsg+0x70c/0x850 [ 113.341009] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 113.351537] kobject: 'loop3' (ffff8880a4a549a0): kobject_uevent_env [ 113.352156] ? __fget+0x210/0x370 [ 113.352168] ? find_held_lock+0x35/0x130 [ 113.352190] ? __fget+0x210/0x370 [ 113.364421] kobject: 'loop3' (ffff8880a4a549a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 113.365733] ? lock_downgrade+0x6e0/0x6e0 [ 113.365746] ? __fget+0x237/0x370 [ 113.365759] ? __fdget+0x1b/0x20 [ 113.417514] kobject: 'loop4' (ffff8880a4aa0a20): kobject_uevent_env [ 113.417697] ? sockfd_lookup_light+0xb4/0x160 [ 113.424475] kobject: 'loop4' (ffff8880a4aa0a20): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 113.427198] __sys_sendmsg+0xb9/0x140 [ 113.427209] ? SyS_shutdown+0x180/0x180 [ 113.427224] ? put_timespec64+0xb4/0x100 [ 113.467052] kobject: 'loop5' (ffff8880a4adb320): kobject_uevent_env [ 113.471178] ? SyS_clock_gettime+0xfd/0x190 [ 113.471193] SyS_sendmsg+0x2d/0x50 [ 113.471203] ? __sys_sendmsg+0x140/0x140 [ 113.471213] do_syscall_64+0x1eb/0x630 [ 113.471225] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 113.475607] kobject: 'loop5' (ffff8880a4adb320): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 113.478819] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 113.478826] RIP: 0033:0x4582f9 [ 113.478835] RSP: 002b:00007fb2b4384c78 EFLAGS: 00000246 [ 113.498353] kobject: 'loop3' (ffff8880a4a549a0): kobject_uevent_env [ 113.502511] ORIG_RAX: 000000000000002e [ 113.502517] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004582f9 [ 113.502523] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 113.502529] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 113.502534] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b43856d4 [ 113.502539] R13: 00000000004c58fa R14: 00000000004d9bb8 R15: 00000000ffffffff [ 113.503249] Kernel Offset: disabled [ 113.615057] Rebooting in 86400 seconds..