[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.986351] random: sshd: uninitialized urandom read (32 bytes read, 33 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. [ 20.150033] random: sshd: uninitialized urandom read (32 bytes read, 33 bits of entropy available) [ 20.375594] random: sshd: uninitialized urandom read (32 bytes read, 35 bits of entropy available) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.352420] random: sshd: uninitialized urandom read (32 bytes read, 88 bits of entropy available) Warning: Permanently added '10.128.10.44' (ECDSA) to the list of known hosts. [ 26.995192] random: sshd: uninitialized urandom read (32 bytes read, 96 bits of entropy available) 2018/08/28 18:08:10 fuzzer started [ 28.490536] random: cc1: uninitialized urandom read (8 bytes read, 98 bits of entropy available) 2018/08/28 18:08:13 dialing manager at 10.128.0.26:36441 2018/08/28 18:08:15 syscalls: 1 2018/08/28 18:08:15 code coverage: enabled 2018/08/28 18:08:15 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/28 18:08:15 setuid sandbox: enabled 2018/08/28 18:08:15 namespace sandbox: enabled 2018/08/28 18:08:15 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/08/28 18:08:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/28 18:08:15 net packed injection: enabled 2018/08/28 18:08:15 net device setup: enabled [ 32.476286] random: nonblocking pool is initialized 18:09:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 18:09:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) membarrier(0x1, 0x0) 18:09:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x29, &(0x7f0000000140), 0x12f) 18:09:01 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)='fdinfo/4\x00') exit(0x0) sendfile(r1, r1, &(0x7f0000000000), 0xffff) 18:09:01 executing program 7: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@mcast2, @dev, @mcast1}) 18:09:01 executing program 5: r0 = socket(0x40000000000010, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x2000000089f0, &(0x7f0000000100)={"73697430000202000340000040000060", @ifru_data=&(0x7f0000000300)="287df095e3a65b483b39b63e2761201382ba5647140f57b5129126f93118924e"}) 18:09:01 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x110) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x190) 18:09:01 executing program 3: r0 = gettid() unshare(0x8020400) exit(0x0) r1 = syz_open_procfs(r0, &(0x7f0000001240)='pagemap\x00') pread64(r1, &(0x7f0000001280)=""/4096, 0x1000, 0x0) [ 77.955701] IPVS: Creating netns size=2552 id=1 [ 78.039751] IPVS: Creating netns size=2552 id=2 [ 78.139952] IPVS: Creating netns size=2552 id=3 [ 78.214776] IPVS: Creating netns size=2552 id=4 [ 78.375469] IPVS: Creating netns size=2552 id=5 [ 78.536249] IPVS: Creating netns size=2552 id=6 [ 78.725174] IPVS: Creating netns size=2552 id=7 [ 78.735771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.859275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.978888] IPVS: Creating netns size=2552 id=8 [ 79.241352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.315649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.409798] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.516739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.814378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.922329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.939782] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.963385] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.081024] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.090687] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.158813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.244317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.303550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.317530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.370224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.392524] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.425231] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.569561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.615567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.625450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.683584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.727569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.758847] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.845075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.858670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.883659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.935766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.945225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.964289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.047718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.308223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.332894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.402459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.423405] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.455348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.474116] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 81.497818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.512217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.562441] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.582441] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 81.608885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.622618] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.660770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.679068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.721038] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.762478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.829826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.864819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.900763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.982112] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.030301] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 82.111963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.131576] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 82.170622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.187905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.308406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.455202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.511751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.635788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.712650] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.844436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.904101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.589322] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.867311] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.896719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.175086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.199057] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 86.335417] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 86.504692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.524161] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 86.626194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.698463] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 86.803803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.996317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.063292] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.371022] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.398784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.721221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 18:09:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "e79cd02ef5106ddfd64cb4b1aac45d87ac16337bbe718a41f9a9da21a1b29a5a"}) 18:09:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={"00000000000000000000000005000207", 0x4203}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000400)={0x1, 0xbe}, 0x8) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) epoll_wait(r1, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x800000000000000) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x1010000, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000140)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) pwrite64(r0, &(0x7f0000000200), 0x8c, 0x0) 18:09:12 executing program 0: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x20000200) [ 88.917960] capability: warning: `syz-executor0' uses 32-bit capabilities (legacy support in use) 18:09:12 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x14, 0x1d, 0x217}, 0x14}}, 0x0) 18:09:12 executing program 0: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x20000200) 18:09:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={"00000000000000000000000005000207", 0x4203}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000400)={0x1, 0xbe}, 0x8) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) epoll_wait(r1, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x800000000000000) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x1010000, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000140)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) pwrite64(r0, &(0x7f0000000200), 0x8c, 0x0) 18:09:12 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc0046209, 0x0) 18:09:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x8000000000000001, 0x0, 0x0) 18:09:12 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='sysfs\x00', 0x0, &(0x7f000000a000)) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) 18:09:12 executing program 0: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x20000200) 18:09:12 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1, &(0x7f00000017c0)=""/116, 0x74}}], 0x1, 0x0, &(0x7f0000004a40)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r0, &(0x7f0000000140), 0x391, 0x0) [ 89.162415] binder: 5888:5891 ioctl c0046209 0 returned -22 18:09:13 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)='fdinfo/4\x00') exit(0x0) sendfile(r1, r1, &(0x7f0000000000), 0xffff) 18:09:13 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @local}, {0x0, @broadcast}, 0x8, {0x2, 0x0, @remote}}) 18:09:13 executing program 0: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x20000200) 18:09:13 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="632b08d754dbd98a3e74617400", 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000004ad, 0x7, 0x4, 0x4bd, 0xfff, 0x0, 0x0, 0x4f49, 0x4c, 0x0, 0x0, 0x0, 0x37, 0x200, 0x0, 0x7fff, 0xa2, 0x0, 0x400, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x3, 0x2, @perf_config_ext={0xfff, 0xa49}, 0x0, 0x0, 0x101, 0x4, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) symlink(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file1\x00') rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 89.865140] blk_update_request: I/O error, dev loop0, sector 0 [ 89.871228] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 89.879207] blk_update_request: I/O error, dev loop0, sector 8 [ 89.885167] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 89.893623] blk_update_request: I/O error, dev loop0, sector 16 [ 89.899925] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 89.907947] blk_update_request: I/O error, dev loop0, sector 24 [ 89.914018] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 89.921992] blk_update_request: I/O error, dev loop0, sector 32 [ 89.928211] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 89.936382] blk_update_request: I/O error, dev loop0, sector 40 [ 89.942533] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 89.950225] blk_update_request: I/O error, dev loop0, sector 48 [ 89.956602] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 89.964236] blk_update_request: I/O error, dev loop0, sector 56 [ 89.970307] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 89.978173] blk_update_request: I/O error, dev loop0, sector 64 [ 89.984218] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 89.991901] blk_update_request: I/O error, dev loop0, sector 72 [ 89.997983] Buffer I/O error on dev loop0, logical block 9, lost async page write 18:09:13 executing program 3: chroot(&(0x7f0000000000)='./file0\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x92000, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000300)='U', 0x1, 0x0) lseek(r1, 0x0, 0x4) sendfile(r1, r1, &(0x7f0000317000), 0xff8) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') lseek(r1, 0x0, 0x3) 18:09:13 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1, &(0x7f00000017c0)=""/116, 0x74}}], 0x1, 0x0, &(0x7f0000004a40)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r0, &(0x7f0000000140), 0x391, 0x0) 18:09:13 executing program 7: add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000000), &(0x7f0000000080)="f1adeb1af858baacf3badb1d79cae63160297c5622f1bd4355db6251ba98a1e2907b45d18f94a48704000000222a0027dec36a9f5f10be85cdfbb42864d37ef802ac13632e6787578d000000d38f350b8b23000000000000000000", 0x5b, 0xfffffffffffffffb) 18:09:13 executing program 6: socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000000080), &(0x7f0000000040)) 18:09:13 executing program 0: dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x6, 0x1000082) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2000, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x10180, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) sync() read(r1, &(0x7f0000000140)=""/49, 0x31) 18:09:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={"00000000000000000000000005000207", 0x4203}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000400)={0x1, 0xbe}, 0x8) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) epoll_wait(r1, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x800000000000000) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x1010000, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000140)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) pwrite64(r0, &(0x7f0000000200), 0x8c, 0x0) 18:09:13 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="632b08d754dbd98a3e74617400", 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000004ad, 0x7, 0x4, 0x4bd, 0xfff, 0x0, 0x0, 0x4f49, 0x4c, 0x0, 0x0, 0x0, 0x37, 0x200, 0x0, 0x7fff, 0xa2, 0x0, 0x400, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x3, 0x2, @perf_config_ext={0xfff, 0xa49}, 0x0, 0x0, 0x101, 0x4, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) symlink(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file1\x00') rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 18:09:13 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffff84, 0x0, &(0x7f00004ee64e)}) [ 90.408255] Option ' ' to dns_resolver key: bad/missing value [ 90.464208] Option ' ' to dns_resolver key: bad/missing value [ 90.477247] binder: BINDER_SET_CONTEXT_MGR already set 18:09:13 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="632b08d754dbd98a3e74617400", 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000004ad, 0x7, 0x4, 0x4bd, 0xfff, 0x0, 0x0, 0x4f49, 0x4c, 0x0, 0x0, 0x0, 0x37, 0x200, 0x0, 0x7fff, 0xa2, 0x0, 0x400, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x3, 0x2, @perf_config_ext={0xfff, 0xa49}, 0x0, 0x0, 0x101, 0x4, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) symlink(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file1\x00') rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 18:09:13 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) listen(r2, 0x0) close(r2) dup3(r0, r1, 0x0) 18:09:13 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1, &(0x7f00000017c0)=""/116, 0x74}}], 0x1, 0x0, &(0x7f0000004a40)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r0, &(0x7f0000000140), 0x391, 0x0) 18:09:13 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)='fdinfo/4\x00') exit(0x0) sendfile(r1, r1, &(0x7f0000000000), 0xffff) [ 90.570689] binder: 5988:5990 ioctl 40046207 0 returned -16 [ 90.570817] binder: release 5988:5989 transaction 2 out, still active 18:09:14 executing program 6: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="02000000010000feff0000000200f30000000400", 0x14, 0x0) [ 90.659026] binder: send failed reply for transaction 2, target dead 18:09:14 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000100)='./bus\x00', 0xfffffffffffffffd) ftruncate(r1, 0x0) 18:09:14 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1, &(0x7f00000017c0)=""/116, 0x74}}], 0x1, 0x0, &(0x7f0000004a40)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r0, &(0x7f0000000140), 0x391, 0x0) 18:09:14 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20}, 0x20}}, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @val={0x0, 0x83, 0x0, 0x1}, @ipv6={0x0, 0x6, "8987f2", 0x44, 0x0, 0x0, @mcast1, @local, {[], @gre}}}, 0x76) 18:09:14 executing program 3: chroot(&(0x7f0000000000)='./file0\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x92000, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000300)='U', 0x1, 0x0) lseek(r1, 0x0, 0x4) sendfile(r1, r1, &(0x7f0000317000), 0xff8) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') lseek(r1, 0x0, 0x3) 18:09:14 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000100)='./bus\x00', 0xfffffffffffffffd) ftruncate(r1, 0x0) 18:09:14 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="632b08d754dbd98a3e74617400", 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000004ad, 0x7, 0x4, 0x4bd, 0xfff, 0x0, 0x0, 0x4f49, 0x4c, 0x0, 0x0, 0x0, 0x37, 0x200, 0x0, 0x7fff, 0xa2, 0x0, 0x400, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x3, 0x2, @perf_config_ext={0xfff, 0xa49}, 0x0, 0x0, 0x101, 0x4, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) symlink(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file1\x00') rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 18:09:14 executing program 5: r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="a85883156f794c05e0b02a03983b5addde9e46e1145c5c3fcb185a36d20d52d097399fd156", 0x25) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="eaff45b0ab9656", 0x7) sendfile(r0, r0, &(0x7f00000000c0), 0xff8) mq_unlink(&(0x7f0000000040)="655edf17d9501b302325045cd344e977568a5a2177f057") 18:09:14 executing program 0: dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x6, 0x1000082) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2000, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x10180, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) sync() read(r1, &(0x7f0000000140)=""/49, 0x31) 18:09:14 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000000380), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) clone(0x0, &(0x7f00000003c0), &(0x7f0000000500), &(0x7f0000000300), &(0x7f0000000340)) 18:09:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={"00000000000000000000000005000207", 0x4203}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000400)={0x1, 0xbe}, 0x8) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) epoll_wait(r1, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x800000000000000) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x1010000, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000140)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) pwrite64(r0, &(0x7f0000000200), 0x8c, 0x0) 18:09:14 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000100)='./bus\x00', 0xfffffffffffffffd) ftruncate(r1, 0x0) 18:09:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x5, 0x4, 0xffffffff}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x0, 0x5]) socket$inet(0x2, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 18:09:14 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socket$inet6(0xa, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001d80)={'security\x00'}, &(0x7f0000000040)=0x54) r2 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000800)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sync() 18:09:14 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)='fdinfo/4\x00') exit(0x0) sendfile(r1, r1, &(0x7f0000000000), 0xffff) 18:09:15 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000100)='./bus\x00', 0xfffffffffffffffd) ftruncate(r1, 0x0) 18:09:15 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0xffffffffffffffff) capget(&(0x7f0000000080)={0x20071026, r1}, &(0x7f00000001c0)) 18:09:15 executing program 7: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) [ 91.849912] capability: warning: `syz-executor6' uses deprecated v2 capabilities in a way that may be insecure 18:09:15 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f00000002c0), 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x8) 18:09:15 executing program 6: r0 = gettid() unshare(0x8020400) exit(0x0) r1 = syz_open_procfs(r0, &(0x7f0000001240)='pagemap\x00') close(r1) 18:09:15 executing program 3: chroot(&(0x7f0000000000)='./file0\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x92000, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000300)='U', 0x1, 0x0) lseek(r1, 0x0, 0x4) sendfile(r1, r1, &(0x7f0000317000), 0xff8) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') lseek(r1, 0x0, 0x3) 18:09:15 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socket$inet6(0xa, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001d80)={'security\x00'}, &(0x7f0000000040)=0x54) r2 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000800)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sync() 18:09:15 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f00000002c0), 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x8) 18:09:15 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f00000002c0), 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x8) 18:09:16 executing program 0: dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x6, 0x1000082) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2000, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x10180, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) sync() read(r1, &(0x7f0000000140)=""/49, 0x31) 18:09:16 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f00000002c0), 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x8) 18:09:16 executing program 1: r0 = socket$inet6(0xa, 0x200000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:09:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) geteuid() 18:09:16 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socket$inet6(0xa, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001d80)={'security\x00'}, &(0x7f0000000040)=0x54) r2 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000800)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sync() 18:09:16 executing program 3: chroot(&(0x7f0000000000)='./file0\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x92000, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000300)='U', 0x1, 0x0) lseek(r1, 0x0, 0x4) sendfile(r1, r1, &(0x7f0000317000), 0xff8) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') lseek(r1, 0x0, 0x3) 18:09:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:09:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) 18:09:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x80e85411, &(0x7f0000000080)) 18:09:16 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback}, &(0x7f0000000100)=0x20) 18:09:16 executing program 6: r0 = socket(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4) r1 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) write(r0, &(0x7f0000000080)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24) 18:09:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x2008200) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x8, 0x0, 0x10000) 18:09:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast1}}) close(r3) dup3(r0, r2, 0x0) 18:09:16 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) 18:09:16 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback}, &(0x7f0000000100)=0x20) 18:09:16 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback}, &(0x7f0000000100)=0x20) 18:09:17 executing program 0: dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x6, 0x1000082) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2000, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x10180, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) sync() read(r1, &(0x7f0000000140)=""/49, 0x31) 18:09:17 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socket$inet6(0xa, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001d80)={'security\x00'}, &(0x7f0000000040)=0x54) r2 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000800)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sync() 18:09:17 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) 18:09:17 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback}, &(0x7f0000000100)=0x20) 18:09:17 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback}, &(0x7f0000000100)=0x20) 18:09:17 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback}, &(0x7f0000000100)=0x20) 18:09:17 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 18:09:17 executing program 1: r0 = socket$inet6(0xa, 0x200000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:09:17 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback}, &(0x7f0000000100)=0x20) 18:09:17 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback}, &(0x7f0000000100)=0x20) 18:09:17 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008000a000c00060000001900a30704000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000180)}, 0x0) 18:09:17 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback}, &(0x7f0000000100)=0x20) 18:09:17 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) 18:09:17 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback}, &(0x7f0000000100)=0x20) 18:09:17 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() fchown(r0, r1, r2) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f00000004c0)=0x1, 0x4) r5 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000580)='hybla\x00', 0x6) setsockopt$inet6_tcp_int(r6, 0x6, 0x60000008000006, &(0x7f00007b1000)=0x81, 0x4) sendto$inet6(r3, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f00000005c0)={0x4}) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r5) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000001c0)) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) [ 93.926205] IPv6: Can't replace route, no match found 18:09:17 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x2f, 0x4, 0x0, {0x0, 0x0, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x7a04, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x44000, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 18:09:18 executing program 1: r0 = socket$inet6(0xa, 0x200000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:09:18 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) 18:09:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 18:09:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 18:09:18 executing program 7: keyctl$update(0x2, 0x0, 0x0, 0xffffffffffffffbb) 18:09:18 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x101000, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000240)=0x1000, 0x4) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") fstat(0xffffffffffffff9c, &(0x7f00000000c0)) prctl$void(0x1e) fstat(r0, &(0x7f0000000140)) fchown(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x3eb80125379cfe6d, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffff000}, @IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x40}}, 0x0) 18:09:18 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() fchown(r0, r1, r2) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f00000004c0)=0x1, 0x4) r5 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000580)='hybla\x00', 0x6) setsockopt$inet6_tcp_int(r6, 0x6, 0x60000008000006, &(0x7f00007b1000)=0x81, 0x4) sendto$inet6(r3, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f00000005c0)={0x4}) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r5) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000001c0)) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 18:09:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() fchown(r0, r1, r2) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f00000004c0)=0x1, 0x4) r5 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000580)='hybla\x00', 0x6) setsockopt$inet6_tcp_int(r6, 0x6, 0x60000008000006, &(0x7f00007b1000)=0x81, 0x4) sendto$inet6(r3, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f00000005c0)={0x4}) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r5) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000001c0)) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 18:09:18 executing program 7: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x400000000000002}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb4b) 18:09:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') syz_open_procfs(0x0, &(0x7f0000000100)="6377642f2e000000d873115ab98f27504ff88b5a598657b4334b8816acebdff1900645e02940054107cb228974d54c2982dd2a3802b0449d6f051ac1220500477c834d8e3cb8ed3b46af12e4524b8747daf1dff5196a137e398b46090c30d052ea98b80824dff5d66a212ea1c9a31ce9f13627248946b0110ea3dd4e67ac2a53561cc2414a9ddb3108ae") [ 94.754528] vmalloc: allocation failure: 549755289600 bytes 18:09:18 executing program 7: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x400000000000002}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb4b) [ 94.799910] syz-executor2: page allocation failure: order:0, mode:0x24080c2 [ 94.849322] CPU: 0 PID: 6302 Comm: syz-executor2 Not tainted 4.4.153-g5e24b4e #90 [ 94.856971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.866326] 0000000000000000 f6c552382e446ff1 ffff8800a2d37130 ffffffff81e162ed [ 94.874394] 1ffff100145a6e29 ffff8801bcd91800 00000000024080c2 0000000000000000 [ 94.882453] ffffffff83aae420 ffff8800a2d37240 ffffffff8151744b 0208002000000001 [ 94.890528] Call Trace: [ 94.893112] [] dump_stack+0xc1/0x124 [ 94.898480] [] warn_alloc_failed.cold.116+0x83/0x149 [ 94.905235] [] ? zone_watermark_ok_safe+0x290/0x290 [ 94.911921] [] __vmalloc_node_range+0x359/0x630 [ 94.918236] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 94.925070] [] vzalloc+0x5b/0x70 [ 94.930086] [] ? alloc_netdev_mqs+0xae7/0xd20 [ 94.936229] [] alloc_netdev_mqs+0xae7/0xd20 [ 94.942196] [] rtnl_create_link+0x16c/0x830 [ 94.948167] [] rtnl_newlink+0xf5b/0x15d0 [ 94.953876] [] ? rtnetlink_put_metrics+0x550/0x550 [ 94.960461] [] ? avc_has_perm_noaudit+0x2b7/0x450 [ 94.966956] [] ? avc_has_perm_noaudit+0xa3/0x450 [ 94.973357] [] ? avc_has_extended_perms+0xf10/0xf10 [ 94.980252] [] ? is_module_text_address+0x2a/0x50 [ 94.986744] [] ? security_capable+0x94/0xc0 [ 94.992717] [] ? ns_capable_common+0x12a/0x150 [ 94.999037] [] ? __netlink_ns_capable+0xf1/0x120 [ 95.005433] [] ? rtnetlink_put_metrics+0x550/0x550 [ 95.014006] [] rtnetlink_rcv_msg+0x4a3/0x650 [ 95.020175] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 95.027015] [] ? rtnetlink_rcv+0x40/0x40 [ 95.032726] [] ? mutex_lock_nested+0x574/0x850 [ 95.038955] [] ? rtnetlink_rcv+0x1b/0x40 [ 95.044835] [] ? mutex_lock_killable_nested+0x980/0x980 [ 95.051849] [] netlink_rcv_skb+0x145/0x370 [ 95.057726] [] ? rtnetlink_rcv+0x40/0x40 [ 95.063431] [] rtnetlink_rcv+0x2a/0x40 [ 95.068961] [] netlink_unicast+0x4e9/0x700 [ 95.074847] [] ? netlink_attachskb+0x6a0/0x6a0 [ 95.081073] [] netlink_sendmsg+0x795/0xc30 [ 95.086955] [] ? netlink_unicast+0x700/0x700 [ 95.093013] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 95.099503] [] ? security_socket_sendmsg+0x8f/0xc0 [ 95.106083] [] ? netlink_unicast+0x700/0x700 [ 95.112135] [] sock_sendmsg+0xcc/0x110 [ 95.117671] [] ___sys_sendmsg+0x745/0x880 [ 95.123471] [] ? trace_hardirqs_on+0x10/0x10 [ 95.129524] [] ? copy_msghdr_from_user+0x550/0x550 [ 95.136102] [] ? do_futex+0x12d/0x17f0 [ 95.141646] [] ? trace_hardirqs_on+0x10/0x10 [ 95.147703] [] ? selinux_file_alloc_security+0xae/0x190 [ 95.154711] [] ? __fget+0x148/0x3b0 [ 95.159982] [] ? __fget+0x16f/0x3b0 [ 95.165253] [] ? __fget+0x47/0x3b0 [ 95.170438] [] ? __fget_light+0x9f/0x1f0 [ 95.176143] [] ? __fdget+0x18/0x20 [ 95.181355] [] __sys_sendmsg+0xd6/0x190 [ 95.186990] [] ? SyS_shutdown+0x1b0/0x1b0 [ 95.192945] [] ? SyS_futex+0x1f8/0x300 18:09:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() fchown(r0, r1, r2) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f00000004c0)=0x1, 0x4) r5 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000580)='hybla\x00', 0x6) setsockopt$inet6_tcp_int(r6, 0x6, 0x60000008000006, &(0x7f00007b1000)=0x81, 0x4) sendto$inet6(r3, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f00000005c0)={0x4}) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r5) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000001c0)) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 18:09:18 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() fchown(r0, r1, r2) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f00000004c0)=0x1, 0x4) r5 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000580)='hybla\x00', 0x6) setsockopt$inet6_tcp_int(r6, 0x6, 0x60000008000006, &(0x7f00007b1000)=0x81, 0x4) sendto$inet6(r3, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f00000005c0)={0x4}) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r5) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000001c0)) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) [ 95.198467] [] ? fd_install+0x4d/0x60 [ 95.203908] [] ? move_addr_to_kernel+0x50/0x50 [ 95.210136] [] SyS_sendmsg+0x2d/0x50 [ 95.215499] [] entry_SYSCALL_64_fastpath+0x22/0x9e 18:09:18 executing program 7: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x400000000000002}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb4b) [ 95.308359] Mem-Info: [ 95.311199] active_anon:48905 inactive_anon:136 isolated_anon:0 [ 95.311199] active_file:4255 inactive_file:9736 isolated_file:0 [ 95.311199] unevictable:0 dirty:28 writeback:0 unstable:0 [ 95.311199] slab_reclaimable:4923 slab_unreclaimable:61657 [ 95.311199] mapped:71418 shmem:180 pagetables:1036 bounce:0 [ 95.311199] free:1427557 free_pcp:503 free_cma:0 18:09:18 executing program 7: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x400000000000002}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb4b) [ 95.348437] DMA free:15904kB min:160kB low:200kB high:240kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:15992kB managed:15904kB mlocked:0kB dirty:0kB writeback:0kB mapped:0kB shmem:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB unstable:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? yes [ 95.406488] lowmem_reserve[]: 0 2908 6409 6409 [ 95.413921] DMA32 free:2584396kB min:30596kB low:38244kB high:45892kB active_anon:90440kB inactive_anon:764kB active_file:7756kB inactive_file:23208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:3129292kB managed:2980432kB mlocked:0kB dirty:156kB writeback:0kB mapped:132548kB shmem:780kB slab_reclaimable:9592kB slab_unreclaimable:113656kB kernel_stack:2144kB pagetables:1520kB unstable:0kB bounce:0kB free_pcp:1028kB local_pcp:656kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no 18:09:18 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() fchown(r0, r1, r2) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f00000004c0)=0x1, 0x4) r5 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000580)='hybla\x00', 0x6) setsockopt$inet6_tcp_int(r6, 0x6, 0x60000008000006, &(0x7f00007b1000)=0x81, 0x4) sendto$inet6(r3, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f00000005c0)={0x4}) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r5) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000001c0)) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) [ 95.480424] lowmem_reserve[]: 0 0 3500 3500 [ 95.549464] Normal free:3114796kB min:36820kB low:46024kB high:55228kB active_anon:98720kB inactive_anon:1388kB active_file:9300kB inactive_file:15724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:4718592kB managed:3584660kB mlocked:0kB dirty:164kB writeback:0kB mapped:152996kB shmem:1376kB slab_reclaimable:10024kB slab_unreclaimable:133128kB kernel_stack:4000kB pagetables:2576kB unstable:0kB bounce:0kB free_pcp:1268kB local_pcp:644kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no [ 95.630919] lowmem_reserve[]: 0 0 0 0 [ 95.635937] DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 95.657855] DMA32: 1155*4kB (UM) 1157*8kB (UME) 1053*16kB (UME) 195*32kB (UME) 79*64kB (UM) 24*128kB (UME) 4*256kB (UME) 4*512kB (M) 1*1024kB (U) 3*2048kB (ME) 619*4096kB (M) = 2590756kB [ 95.700435] Normal: 1470*4kB (UME) 1256*8kB (UME) 1069*16kB (UME) 202*32kB (UME) 101*64kB (UM) 23*128kB (UM) 13*256kB (UM) 7*512kB (UME) 3*1024kB (ME) 2*2048kB (UM) 743*4096kB (M) = 3106312kB [ 95.726392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 95.735524] 14905 total pagecache pages [ 95.739660] 0 pages in swap cache [ 95.743214] Swap cache stats: add 0, delete 0, find 0/0 [ 95.753488] Free swap = 0kB [ 95.775679] Total swap = 0kB [ 95.782518] 1965969 pages RAM [ 95.789246] 0 pages HighMem/MovableOnly [ 95.798284] 320720 pages reserved [ 95.834295] syz-executor5 (6301) used greatest stack depth: 23472 bytes left 18:09:19 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000080)=@ethtool_channels={0x3d}}) 18:09:19 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mq_open(&(0x7f0000000000)='selinux\x00', 0x0, 0x0, &(0x7f0000000040)) 18:09:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() fchown(r0, r1, r2) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f00000004c0)=0x1, 0x4) r5 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000580)='hybla\x00', 0x6) setsockopt$inet6_tcp_int(r6, 0x6, 0x60000008000006, &(0x7f00007b1000)=0x81, 0x4) sendto$inet6(r3, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f00000005c0)={0x4}) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r5) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000001c0)) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 18:09:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000080)) 18:09:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000003017f070047bda33d88c408004095be"], 0x14}}, 0x0) 18:09:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x28001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0x1, 0xffffffff}, {}], 0x30) 18:09:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 18:09:19 executing program 1: r0 = socket$inet6(0xa, 0x200000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:09:19 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x4000000000007fa}) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x8004) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 18:09:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000080)) 18:09:19 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x80004517, &(0x7f00000000c0)) 18:09:19 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffc}]}) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 18:09:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000080)) 18:09:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) [ 96.089876] mmap: syz-executor3 (6382) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 18:09:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000080)) 18:09:19 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)=""/181, &(0x7f00000000c0)=0xb5) 18:09:19 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAF(r2, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 18:09:19 executing program 7: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000080)="2400000058001f00ff07f4f9002304000a04f51108000100020100020800038001000000", 0x24) 18:09:19 executing program 0: prctl$seccomp(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) pipe2(&(0x7f00000000c0), 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r0 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="025cc80700145f8f764070") pselect6(0x40, &(0x7f0000000040), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000100), &(0x7f0000000ff0)={&(0x7f00000001c0), 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 18:09:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) read(r1, &(0x7f0000000040)=""/62, 0x3e) 18:09:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 18:09:19 executing program 4: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x995ba2d8201dca09}, 0xc) ioctl$int_out(r0, 0x5462, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000140)={0x6, 0x69fd}) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400202) socket$inet6(0xa, 0xb, 0x6) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000700)=0x0) syz_open_procfs(r4, &(0x7f0000000780)='net/ip_mr_cache\x00') setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90, 0xfffffffffffffffc, 0x4}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 18:09:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') syz_open_procfs(0x0, &(0x7f0000000100)="6377642f2e000000d873115ab98f27504ff88b5a598657b4334b8816acebdff1900645e02940054107cb228974d54c2982dd2a3802b0449d6f051ac1220500477c834d8e3cb8ed3b46af12e4524b8747daf1dff5196a137e398b46090c30d052ea98b80824dff5d66a212ea1c9a31ce9f13627248946b0110ea3dd4e67ac2a53561cc2414a9ddb3108ae") 18:09:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000001a40)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in=@rand_addr, 0x0, 0x0, 0xff}, [@lastused={0xc, 0xf, 0x8001}]}, 0x34}, 0x8}, 0x0) 18:09:19 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote, 0x0, 0xff}, 0x0, @in=@multicast2}}, 0xe8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) 18:09:19 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f00000009c0)=ANY=[], 0x10000014d) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) recvfrom(r1, &(0x7f00000001c0)=""/196, 0x484, 0x2, &(0x7f0000000080)=@un=@abs, 0x707000) 18:09:19 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) 18:09:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) close(r0) 18:09:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000080)=0x5, 0x4) 18:09:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000b18000)={{0xffffff94}}) close(r1) 18:09:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x6, &(0x7f000059dffc), &(0x7f00000000c0)=0x4) 18:09:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf07424adee901d2da75aff64913fe9d0b0cd771fb35331ce39c5a00000000000000000000000000") flistxattr(r0, &(0x7f0000000200)=""/236, 0xfcce) 18:09:20 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 18:09:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) [ 96.673813] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 96.678297] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:09:20 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) 18:09:20 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4f, 0x0) fcntl$setsig(r6, 0xa, 0xe) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000080)={'team_slave_1\x00', @ifru_names='ip_vti0\x00'}) sendfile(r2, r3, &(0x7f0000001280), 0x80000007ffffffe) 18:09:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e000000100000000000000000800120002000200000000000000000030000000020300000000000f00000000020000000000000092ab0000000000010a0014bb000000000000000000000000030005000000000002000000e00000010000000002000000"], 0x80}}, 0x0) 18:09:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffff80000000) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7) r3 = syz_open_pts(r0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x9) 18:09:20 executing program 2: readlinkat(0xffffffffffffffff, &(0x7f000046cff8)='./file0\x00', &(0x7f0000851605), 0x0) [ 96.796201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 18:09:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x48, &(0x7f0000000080)="1e1c686b", 0x4) 18:09:20 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f00000020c0), 0x400000000000112, 0x0, &(0x7f0000003700)={0x77359400}) [ 96.884272] ip_vti0: renamed from team_slave_1 [ 97.128608] syz-executor5 (6471) used greatest stack depth: 23392 bytes left 18:09:20 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) 18:09:20 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 18:09:20 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4f, 0x0) fcntl$setsig(r6, 0xa, 0xe) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000080)={'team_slave_1\x00', @ifru_names='ip_vti0\x00'}) sendfile(r2, r3, &(0x7f0000001280), 0x80000007ffffffe) 18:09:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x1, 0x67, 0x4000000000000002}, {}], 0x30) 18:09:20 executing program 1: r0 = socket(0x10, 0x3, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000180)="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") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 18:09:20 executing program 0: creat(&(0x7f0000000700)='./bus\x00', 0x0) clone(0x0, &(0x7f00000008c0), &(0x7f00000006c0), &(0x7f0000000940), &(0x7f0000001a00)) stat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)) 18:09:20 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 18:09:20 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4f, 0x0) fcntl$setsig(r6, 0xa, 0xe) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000080)={'team_slave_1\x00', @ifru_names='ip_vti0\x00'}) sendfile(r2, r3, &(0x7f0000001280), 0x80000007ffffffe) 18:09:20 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) 18:09:20 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) 18:09:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), 0x2aa) [ 97.579907] ip_vti0: renamed from team_slave_1 18:09:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) 18:09:21 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 18:09:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) 18:09:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) 18:09:21 executing program 3: syslog(0xf, &(0x7f0000000000)=""/62, 0x1cd) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./file0\x00', 0xbf) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x4) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x0, 0xa3a9}, 0xb) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x80) 18:09:21 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 18:09:21 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4f, 0x0) fcntl$setsig(r6, 0xa, 0xe) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000080)={'team_slave_1\x00', @ifru_names='ip_vti0\x00'}) sendfile(r2, r3, &(0x7f0000001280), 0x80000007ffffffe) [ 97.951007] syz-executor6 (6516) used greatest stack depth: 23088 bytes left 18:09:21 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 18:09:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) 18:09:21 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4f, 0x0) fcntl$setsig(r6, 0xa, 0xe) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000080)={'team_slave_1\x00', @ifru_names='ip_vti0\x00'}) sendfile(r2, r3, &(0x7f0000001280), 0x80000007ffffffe) 18:09:21 executing program 1: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 18:09:21 executing program 7: mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400, 0x1}, &(0x7f000001d000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) 18:09:21 executing program 0: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000004, "010f010000000100", "88e7ed00000080000000001ef6c699f539e07ca19ab52389861ec9db7fd918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0x60) 18:09:21 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) tee(r1, r1, 0x3, 0x4) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff8, 'queue0\x00'}) write$P9_RSTATFS(r2, &(0x7f0000000080)={0x43, 0x9, 0x1, {0xffffffff, 0x6, 0x0, 0x7fffffff, 0x5, 0x6db8, 0x2, 0x5, 0x5}}, 0x43) fallocate(r2, 0x3, 0x10001, 0x0) userfaultfd(0x0) mmap(&(0x7f000033e000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000200)={0x3, 0x7f, 0x200}) 18:09:21 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x50, &(0x7f0000000000)=""/8, &(0x7f0000000040)=0xfea2) 18:09:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), 0x2aa) 18:09:21 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) keyctl$set_reqkey_keyring(0x5, 0xfffffffffffffffe) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140), &(0x7f0000000180)='user\x00', 0x0) 18:09:21 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4f, 0x0) fcntl$setsig(r6, 0xa, 0xe) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000080)={'team_slave_1\x00', @ifru_names='ip_vti0\x00'}) sendfile(r2, r3, &(0x7f0000001280), 0x80000007ffffffe) 18:09:21 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4f, 0x0) fcntl$setsig(r6, 0xa, 0xe) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000080)={'team_slave_1\x00', @ifru_names='ip_vti0\x00'}) sendfile(r2, r3, &(0x7f0000001280), 0x80000007ffffffe) 18:09:21 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 18:09:22 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000200)='./control/file0\x00') r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000240)=""/187, 0xbb) close(r0) 18:09:22 executing program 0: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x18000)=nil, 0x18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000013ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5407, &(0x7f0000026ffa)) 18:09:22 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 18:09:22 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) tee(r1, r1, 0x3, 0x4) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff8, 'queue0\x00'}) write$P9_RSTATFS(r2, &(0x7f0000000080)={0x43, 0x9, 0x1, {0xffffffff, 0x6, 0x0, 0x7fffffff, 0x5, 0x6db8, 0x2, 0x5, 0x5}}, 0x43) fallocate(r2, 0x3, 0x10001, 0x0) userfaultfd(0x0) mmap(&(0x7f000033e000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000200)={0x3, 0x7f, 0x200}) 18:09:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") clock_gettime(0x7, &(0x7f0000000240)) 18:09:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000480)='yeah\x00', 0x6bffe28037bb628) sendto$inet6(r2, &(0x7f0000000280), 0xfe76, 0x20000004, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 18:09:22 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000380)='./bus\x00', 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=@known='system.advise\x00', &(0x7f00000003c0)=""/186, 0xba) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) socket$inet6(0xa, 0x1000000000001, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="dd3614000000000000000000b5da852b36a7f4f50d82097b33c26bb65a6f0ca452"], 0x21) sendfile(r1, r1, &(0x7f00000000c0), 0xfff) [ 98.872218] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:09:22 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 18:09:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r3, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote}, 0x0, 0x2, 0x0, 0x2}}, 0x2e) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000003c0)={0x4f, 0x9, 0x0, 0xfff, 0x80000001, 0x10001}) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000080)=""/5, &(0x7f00000000c0)=0x5) socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, r1, 0x0) userfaultfd(0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000240)={r6, 0x1, 0x6, @remote}, 0x10) ioctl(r5, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socket$inet6(0xa, 0x1000000000002, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$l2tp(0x18, 0x1, 0x1) close(r7) connect$l2tp(r8, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) 18:09:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000480)='yeah\x00', 0x6bffe28037bb628) sendto$inet6(r2, &(0x7f0000000280), 0xfe76, 0x20000004, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 98.989585] l2tp_core: tunl 4: sockfd_lookup(fd=12) returned -9 [ 99.003055] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:09:22 executing program 3: r0 = userfaultfd(0x800) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003000)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) [ 99.077161] ================================================================== [ 99.085080] BUG: KASAN: use-after-free in l2tp_session_queue_purge+0xf4/0x100 [ 99.092345] Read of size 4 at addr ffff8800b3491400 by task syz-executor0/6648 [ 99.099705] [ 99.101326] CPU: 1 PID: 6648 Comm: syz-executor0 Not tainted 4.4.153-g5e24b4e #90 [ 99.108945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.118292] 0000000000000000 6c16bbd34e1e65c4 ffff8801d3ad7cb8 ffffffff81e162ed [ 99.126355] ffffea0002cd2400 ffff8800b3491400 0000000000000000 ffff8800b3491400 [ 99.134434] 0000000000000000 ffff8801d3ad7cf0 ffffffff8151b4d9 ffff8800b3491400 [ 99.142552] Call Trace: [ 99.145144] [] dump_stack+0xc1/0x124 [ 99.150507] [] print_address_description+0x6c/0x216 [ 99.157176] [] kasan_report.cold.7+0x175/0x2f7 [ 99.163411] [] ? l2tp_session_queue_purge+0xf4/0x100 [ 99.170182] [] __asan_report_load4_noabort+0x14/0x20 [ 99.177491] [] l2tp_session_queue_purge+0xf4/0x100 [ 99.190164] [] pppol2tp_release+0x1ff/0x310 [ 99.201389] [] __sock_release+0xd9/0x260 [ 99.207547] [] ? __sock_release+0x260/0x260 [ 99.213513] [] sock_close+0x19/0x20 [ 99.218787] [] __fput+0x235/0x6f0 [ 99.223885] [] ____fput+0x15/0x20 [ 99.228988] [] task_work_run+0x10f/0x190 [ 99.235200] [] exit_to_usermode_loop+0x13d/0x160 [ 99.241603] [] syscall_return_slowpath+0x1b5/0x1f0 [ 99.248182] [] int_ret_from_sys_call+0x25/0xa3 [ 99.254402] [ 99.256021] Allocated by task 6658: [ 99.259639] [] save_stack_trace+0x26/0x50 [ 99.265569] [] save_stack+0x43/0xd0 [ 99.270973] [] kasan_kmalloc+0xc7/0xe0 [ 99.276662] [] __kmalloc+0x124/0x310 [ 99.282186] [] l2tp_session_create+0x39/0x1030 [ 99.288544] [] pppol2tp_connect+0x10f0/0x1910 [ 99.295332] [] SYSC_connect+0x1b8/0x300 [ 99.301100] [] SyS_connect+0x24/0x30 [ 99.306621] [] entry_SYSCALL_64_fastpath+0x22/0x9e [ 99.313347] [ 99.314990] Freed by task 6653: [ 99.318265] [] save_stack_trace+0x26/0x50 [ 99.324722] [] save_stack+0x43/0xd0 [ 99.330125] [] kasan_slab_free+0x72/0xc0 [ 99.335975] [] kfree+0xf4/0x310 [ 99.341032] [] l2tp_session_free+0x170/0x200 [ 99.347219] [] l2tp_tunnel_closeall+0x2b9/0x350 [ 99.353675] [] l2tp_udp_encap_destroy+0x8b/0xf0 [ 99.360119] [] udpv6_destroy_sock+0xb1/0xd0 [ 99.366730] [] sk_common_release+0x6d/0x300 [ 99.372835] [] udp_lib_close+0x15/0x20 [ 99.378518] [] inet_release+0xff/0x1d0 [ 99.384201] [] inet6_release+0x50/0x70 [ 99.389862] [] __sock_release+0xd9/0x260 [ 99.395731] [] sock_close+0x19/0x20 [ 99.401162] [] __fput+0x235/0x6f0 [ 99.406402] [] ____fput+0x15/0x20 [ 99.411631] [] task_work_run+0x10f/0x190 [ 99.417478] [] exit_to_usermode_loop+0x13d/0x160 [ 99.424008] [] syscall_return_slowpath+0x1b5/0x1f0 [ 99.430712] [] int_ret_from_sys_call+0x25/0xa3 [ 99.437077] [ 99.439156] The buggy address belongs to the object at ffff8800b3491400 [ 99.439156] which belongs to the cache kmalloc-512 of size 512 [ 99.451811] The buggy address is located 0 bytes inside of [ 99.451811] 512-byte region [ffff8800b3491400, ffff8800b3491600) [ 99.463501] The buggy address belongs to the page: [ 99.470289] ------------[ cut here ]------------ [ 99.475088] WARNING: CPU: 0 PID: 66SeaBIOS (version 1.8.2-20180718_090847-google) Total RAM Size = 0x00000001e0000000 = 7680 MiB CPUs found: 2 Max CPUs supported: 256 found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=4194304 = 2048 MiB drive 0x000f2280: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304 Booting from Hard Disk 0... early console in decompress_kernel input_data: 0x0000000003b4f26e input_len: 0x00000000014d10d1 output: 0x0000000001000000 output_len: 0x000000000400ba90 run_size: 0x0000000005755000 Decompressing Linux... Parsing ELF... done. Booting the kernel. [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Initializing cgroup subsys schedtune [ 0.000000] Linux version 4.4.153-g5e24b4e (syzkaller@ci) (gcc version 8.0.1 20180413 (experimental) (GCC) ) #90 SMP PREEMPT Tue Aug 28 06:32:46 UTC 2018 [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n ftrace_dump_on_oops=orig_cpu oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 nopti [ 0.000000] KERNEL supported cpus: [ 0.000000] Intel GenuineIntel [ 0.000000] AMD AuthenticAMD [ 0.000000] Centaur CentaurHauls [ 0.000000] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x04: 'AVX registers' [ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000bfff2fff] usable [ 0.000000] BIOS-e820: [mem 0x00000000bfff3000-0x00000000bfffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffbc000-0x00000000ffffffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000021fffffff] usable [ 0.000000] bootconsole [earlyser0] enabled [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] SMBIOS 2.4 present. [ 0.000000] Hypervisor detected: KVM [ 0.000000] Kernel/User page tables isolation: disabled [ 0.000000] e820: last_pfn = 0x220000 max_arch_pfn = 0x400000000 [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WC UC- WT [ 0.000000] e820: last_pfn = 0xbfff3 max_arch_pfn = 0x400000000 [ 0.000000] found SMP MP-table at [mem 0x000f2300-0x000f230f] mapped at [ffff8800000f2300] [ 0.000000] Scanning 1 areas for low memory corruption [ 0.000000] Using GB pages for direct mapping [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000F22C0 000014 (v00 Google) [ 0.000000] ACPI: RSDT 0x00000000BFFF3430 000038 (v01 Google GOOGRSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACP 0x00000000BFFFCF60 0000F4 (v02 Google GOOGFACP 00000001 GOOG 00000001) [ 0.000000] ACPI: DSDT 0x00000000BFFF3470 0017B2 (v01 Google GOOGDSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACS 0x00000000BFFFCF00 000040 [ 0.000000] ACPI: FACS 0x00000000BFFFCF00 000040 [ 0.000000] ACPI: SSDT 0x00000000BFFF65F0 00690D (v01 Google GOOGSSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: APIC 0x00000000BFFF5D10 000076 (v01 Google GOOGAPIC 00000001 GOOG 00000001) [ 0.000000] ACPI: WAET 0x00000000BFFF5CE0 000028 (v01 Google GOOGWAET 00000001 GOOG 00000001) [ 0.000000] ACPI: SRAT 0x00000000BFFF4C30 0000C8 (v01 Google GOOGSRAT 00000001 GOOG 00000001) [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 2:1fffd001, primary cpu clock [ 0.000000] kvm-clock: using sched offset of 1767804533 cycles [ 0.000000] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.000000] DMA32 [mem 0x0000000001000000-0x00000000ffffffff] [ 0.000000] Normal [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.000000] node 0: [mem 0x0000000000100000-0x00000000bfff2fff] [ 0.000000] node 0: [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000021fffffff] [ 0.000000] kasan: KernelAddressSanitizer initialized [ 0.000000] ACPI: PM-Timer IO Port: 0xb008 [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] smpboot: Allowing 2 CPUs, 0 hotplug CPUs [ 0.000000] PM: Registered nosave memory: [mem 0x00000000-0x00000fff] [ 0.000000] PM: Registered nosave memory: [mem 0x0009f000-0x0009ffff] [ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 0.000000] PM: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 0.000000] PM: Registered nosave memory: [mem 0xbfff3000-0xbfffffff] [ 0.000000] PM: Registered nosave memory: [mem 0xc0000000-0xfffbbfff] [ 0.000000] PM: Registered nosave memory: [mem 0xfffbc000-0xffffffff] [ 0.000000] e820: [mem 0xc0000000-0xfffbbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.000000] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:2 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 42 pages/cpu @ffff8801db200000 s134152 r8192 d29688 u1048576 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 1935227 [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n ftrace_dump_on_oops=orig_cpu oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 nopti [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes) [ 0.000000] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes) [ 0.000000] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.000000] Memory: 6579080K/7863876K available (41801K kernel code, 6308K rwdata, 9068K rodata, 1868K init, 23696K bss, 1284796K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.000000] Running RCU self tests [ 0.000000] Preemptible hierarchical RCU implementation. [ 0.000000] RCU lockdep checking is enabled. [ 0.000000] Build-time adjustment of leaf fanout to 64. [ 0.000000] RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=2. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=2 [ 0.000000] NR_IRQS:4352 nr_irqs:440 16 [ 0.000000] console [ttyS0] enabled [ 0.000000] console [ttyS0] enabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar [ 0.000000] ... MAX_LOCKDEP_SUBCLASSES: 8 [ 0.000000] ... MAX_LOCK_DEPTH: 48 [ 0.000000] ... MAX_LOCKDEP_KEYS: 8191 [ 0.000000] ... CLASSHASH_SIZE: 4096 [ 0.000000] ... MAX_LOCKDEP_ENTRIES: 32768 [ 0.000000] ... MAX_LOCKDEP_CHAINS: 65536 [ 0.000000] ... CHAINHASH_SIZE: 32768 [ 0.000000] memory used by lock dependency info: 8159 kB [ 0.000000] per task-struct memory footprint: 1920 bytes [ 0.000000] tsc: Detected 2299.998 MHz processor [ 1.155226] Calibrating delay loop (skipped) preset value.. 4599.99 BogoMIPS (lpj=22999980) [ 1.156467] pid_max: default: 32768 minimum: 301 [ 1.157184] ACPI: Core revision 20150930 [ 1.576013] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 1.577367] Security Framework initialized [ 1.577943] SELinux: Initializing. [ 1.578610] AppArmor: AppArmor disabled by boot time parameter [ 1.579638] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.580697] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.584400] Initializing cgroup subsys io [ 1.585131] Initializing cgroup subsys freezer [ 1.585835] Initializing cgroup subsys hugetlb [ 1.586628] Initializing cgroup subsys debug [ 1.587386] CPU: Physical Processor ID: 0 [ 1.588816] mce: CPU supports 32 MCE banks [ 1.589608] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 [ 1.590555] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 [ 1.591536] Spectre V2 : Mitigation: Full generic retpoline [ 1.592367] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch [ 1.593562] Speculative Store Bypass: Vulnerable [ 1.597425] Freeing SMP alternatives memory: 48K [ 1.608472] ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1 [ 1.724573] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.30GHz (family: 0x6, model: 0x3f, stepping: 0x0) [ 1.726231] Performance Events: unsupported p6 CPU model 63 no PMU driver, software events only. [ 1.814869] x86: Booting SMP configuration: [ 1.815557] .... node #0, CPUs: #1 [ 1.816444] kvm-clock: cpu 1, msr 2:1fffd041, secondary cpu clock [ 1.821497] x86: Booted up 1 node, 2 CPUs [ 1.822103] smpboot: Total of 2 processors activated (9199.99 BogoMIPS) [ 1.826277] devtmpfs: initialized [ 1.837077] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 1.838665] futex hash table entries: 512 (order: 4, 65536 bytes) [ 1.840512] xor: automatically using best checksumming function: [ 1.852738] kworker/u4:0 (21) used greatest stack depth: 27424 bytes left [ 1.934676] avx : 23797.600 MB/sec [ 1.935950] RTC time: 18:09:27, date: 08/28/18 [ 1.938980] NET: Registered protocol family 16 [ 1.940204] schedtune: init normalization constants... [ 1.940947] schedtune: no energy model data [ 1.941588] schedtune: disabled! [ 1.947114] kworker/u4:1 (33) used greatest stack depth: 27024 bytes left [ 1.974951] cpuidle: using governor ladder [ 2.004722] cpuidle: using governor menu [ 2.006015] ACPI: bus type PCI registered [ 2.006730] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 [ 2.009687] PCI: Using configuration type 1 for base access [ 2.494862] raid6: sse2x1 gen() 4391 MB/s [ 2.664914] raid6: sse2x1 xor() 2413 MB/s [ 2.834970] raid6: sse2x2 gen() 6984 MB/s [ 3.005015] raid6: sse2x2 xor() 3941 MB/s [ 3.175071] raid6: sse2x4 gen() 9362 MB/s [ 3.345128] raid6: sse2x4 xor() 5420 MB/s [ 3.515185] raid6: avx2x1 gen() 9349 MB/s [ 3.685241] raid6: avx2x2 gen() 13312 MB/s [ 3.855298] raid6: avx2x4 gen() 18234 MB/s [ 3.856114] raid6: using algorithm avx2x4 gen() 18234 MB/s [ 3.856919] raid6: using avx2x2 recovery algorithm [ 3.858311] ACPI: Added _OSI(Module Device) [ 3.858983] ACPI: Added _OSI(Processor Device) [ 3.859619] ACPI: Added _OSI(3.0 _SCP Extensions) [ 3.860307] ACPI: Added _OSI(Processor Aggregator Device) [ 3.887793] ACPI: Executed 2 blocks of module-level executable AML code [ 4.823241] ACPI: Interpreter enabled [ 4.824219] ACPI: (supports S0 S3 S4 S5) [ 4.824837] ACPI: Using IOAPIC for interrupt routing [ 4.826102] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 6.078232] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 6.079351] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI] [ 6.080737] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM [ 6.081763] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. [ 6.115278] PCI host bridge to bus 0000:00 [ 6.116021] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 6.117046] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 6.118022] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 6.119063] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] [ 6.120205] pci_bus 0000:00: root bus resource [bus 00-ff] [ 6.158147] pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI [ 6.238471] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 6.244337] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 6.250127] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 6.256031] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 6.259519] ACPI: PCI Interrupt Link [LNKS] (IRQs *9) [ 6.857053] ACPI: Enabled 16 GPEs in block 00 to 0F [ 6.860983] vgaarb: loaded [ 6.864579] SCSI subsystem initialized [ 6.867872] ACPI: bus type USB registered [ 6.869963] usbcore: registered new interface driver usbfs [ 6.871861] usbcore: registered new interface driver hub [ 6.873408] usbcore: registered new device driver usb [ 6.877231] pps_core: LinuxPPS API ver. 1 registered [ 6.878219] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti [ 6.880857] PTP clock support registered [ 6.883617] ioremap error for 0xbfffd000-0xc0000000, requested 0x2, got 0x0 [ 6.884975] dmi: Firmware registration failed. [ 6.887549] Advanced Linux Sound Architecture Driver Initialized. [ 6.889629] PCI: Using ACPI for IRQ routing [ 6.906454] NetLabel: Initializing [ 6.907001] NetLabel: domain hash size = 128 [ 6.907618] NetLabel: protocols = UNLABELED CIPSOv4 [ 6.908612] NetLabel: unlabeled traffic allowed by default [ 6.911342] amd_nb: Cannot enumerate AMD northbridges [ 6.912195] clocksource: Switched to clocksource kvm-clock [ 7.108015] pnp: PnP ACPI init [ 7.132940] pnp: PnP ACPI: found 7 devices [ 7.147552] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns [ 7.149397] NET: Registered protocol family 2 [ 7.153458] TCP established hash table entries: 65536 (order: 7, 524288 bytes) [ 7.156174] TCP bind hash table entries: 65536 (order: 10, 4194304 bytes) [ 7.161375] TCP: Hash tables configured (established 65536 bind 65536) [ 7.163174] UDP hash table entries: 4096 (order: 7, 655360 bytes) [ 7.164534] UDP-Lite hash table entries: 4096 (order: 7, 655360 bytes) [ 7.167637] NET: Registered protocol family 1 [ 7.168403] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 7.170219] PCI-DMA: Using software bounce buffering for IO (SWIOTLB) [ 7.171134] software IO TLB [mem 0xbbff3000-0xbfff3000] (64MB) mapped at [ffff8800bbff3000-ffff8800bfff2fff] [ 7.173870] RAPL PMU detected, API unit is 2^-32 Joules, 3 fixed counters 10737418240 ms ovfl timer [ 7.175179] hw unit of domain pp0-core 2^-0 Joules [ 7.175860] hw unit of domain package 2^-0 Joules [ 7.176546] hw unit of domain dram 2^-16 Joules [ 7.182667] Scanning for low memory corruption every 60 seconds [ 7.191627] audit: initializing netlink subsys (disabled) [ 7.192898] audit: type=2000 audit(1535479772.132:1): initialized [ 7.200295] Initialise system trusted keyring [ 7.202599] HugeTLB registered 2 MB page size, pre-allocated 0 pages [ 7.351070] VFS: Disk quotas dquot_6.6.0 [ 7.353421] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 7.378886] fuse init (API version 7.23) [ 7.382601] 9p: Installing v9fs 9p2000 file system support [ 7.421577] async_tx: api initialized (async) [ 7.423511] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) [ 7.424719] io scheduler noop registered [ 7.425320] io scheduler deadline registered [ 7.427910] io scheduler cfq registered (default) [ 7.438840] pci_hotplug: PCI Hot Plug PCI Core version: 0.5 [ 7.443173] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 7.444411] ACPI: Power Button [PWRF] [ 7.446978] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input1 [ 7.448139] ACPI: Sleep Button [SLPF] [ 7.486950] ACPI: PCI Interrupt Link [LNKC] enabled at IRQ 11 [ 7.487862] virtio-pci 0000:00:03.0: virtio_pci: leaving for legacy driver [ 7.509870] ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 10 [ 7.510816] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver [ 7.517888] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled