[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 13.132154] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.671238] random: sshd: uninitialized urandom read (32 bytes read) [ 19.978590] random: sshd: uninitialized urandom read (32 bytes read) [ 20.624389] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.5' (ECDSA) to the list of known hosts. [ 26.169133] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/27 22:31:17 fuzzer started [ 27.422531] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/27 22:31:19 dialing manager at 10.128.0.26:40703 2018/08/27 22:31:24 syscalls: 1 2018/08/27 22:31:24 code coverage: enabled 2018/08/27 22:31:24 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/27 22:31:24 setuid sandbox: enabled 2018/08/27 22:31:24 namespace sandbox: enabled 2018/08/27 22:31:24 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/08/27 22:31:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/27 22:31:24 net packed injection: enabled 2018/08/27 22:31:24 net device setup: enabled [ 34.587603] random: crng init done INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes 22:32:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) 22:32:47 executing program 1: r0 = memfd_create(&(0x7f0000000080)='8securitvtrusted\x00', 0x3) fcntl$addseals(r0, 0x409, 0x4) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000760000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) 22:32:47 executing program 7: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) r0 = gettid() sched_getparam(r0, &(0x7f0000001080)) 22:32:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'team0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@ipv4, 0x0, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0xc201}) 22:32:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x100000000000000, 0x482, &(0x7f0000000000)={0x84, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) 22:32:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)) 22:32:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl(r2, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") sendfile(r0, r1, &(0x7f00000ddff8)=0xb, 0x102000002) 22:32:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x10000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x20000000000004}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) [ 116.676736] IPVS: Creating netns size=2536 id=1 [ 116.780059] IPVS: Creating netns size=2536 id=2 [ 116.834861] IPVS: Creating netns size=2536 id=3 [ 116.863286] IPVS: Creating netns size=2536 id=4 [ 116.909957] IPVS: Creating netns size=2536 id=5 [ 116.968081] IPVS: Creating netns size=2536 id=6 [ 117.015562] IPVS: Creating netns size=2536 id=7 [ 117.081100] IPVS: Creating netns size=2536 id=8 [ 117.652040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 117.733883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 117.758874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 117.811653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 117.876943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 117.927279] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 117.991423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.057824] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.089643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 118.100493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.123179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.150014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.178005] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 118.198297] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 118.226227] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.243686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 118.260655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 118.275450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.290892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 118.362459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.375518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.418480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.465451] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 118.536582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 118.555694] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 118.569412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 118.613540] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 118.632662] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 118.649559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 118.658417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 118.680091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 118.688331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 118.700062] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 118.715129] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 118.734502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.751321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.760073] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 118.767865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.776091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.785100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 118.792981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 118.801179] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 118.808892] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 118.832165] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 118.840181] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 118.847234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.856687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.868363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.875872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.883453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.890932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.901180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 118.915265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 118.930821] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 118.943155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.959454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.040112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 119.087747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 119.103682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 119.143413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 119.171523] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 119.179466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.187006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.197860] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 119.239698] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 119.246819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.259592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.269798] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 119.282206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.292310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.301273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 119.314853] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 119.328566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 119.339911] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 119.350648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.358147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.374866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 119.385177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 119.397538] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 119.440603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.448073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.457857] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 119.472891] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 119.481315] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 119.489719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.497245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.516767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.525628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.533395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.541133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.552330] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 119.566410] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 119.574362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.589809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.597457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.610872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.459097] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 123.596236] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 123.686616] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 123.706653] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 123.718390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.726853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.785966] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 123.814341] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 123.832557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.842126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.901219] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 123.914331] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 123.923838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.930727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.939020] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 123.947053] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 123.991292] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 124.071114] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 124.077258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.088030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.099433] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 124.116354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.130367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.195504] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 124.213985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.221986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.234449] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 124.242609] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 124.249405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.256195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.275188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.283741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 22:32:56 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:32:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x2001007f) ioctl$FS_IOC_FSSETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) pwrite64(r0, &(0x7f0000000100), 0x0, 0x0) 22:32:56 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:32:56 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:32:56 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x80400000001, 0x240) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0xffffffffffffff1f, 0x0, 0x0, 0x56c3) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000001c354eede4baab3b88d6d0a07cd40000000000000000000000000000000000000000000000000400000073b615e1"], &(0x7f0000000080)=0x1) close(r3) dup3(r1, r2, 0x0) 22:32:56 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:32:56 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:32:56 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:32:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000580)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) connect$inet6(r1, &(0x7f0000000000), 0x1c) 22:32:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:32:56 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x5, @mcast1, 0xffff}, {0xa, 0x0, 0x0, @mcast2}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf52400, 0x1f]}, 0x5c) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 22:32:56 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:32:56 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8982, &(0x7f0000000080)={'lo\x00'}) 22:32:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:32:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:32:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) unshare(0x200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r1, 0x0) clone(0x70024001, &(0x7f00000028c0), &(0x7f0000002880), &(0x7f0000002980), &(0x7f0000000700)) 22:32:56 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@broute={'broute\x00', 0x20, 0x1, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', "01616d61000000004ab2cec800", @remote, [], @remote, [], 0x2a8, 0x2a8, 0x320, [@bpf0={'bpf\x00', 0x210, {{0x3}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "339ebc4bb0c0fba43162d5c302d891b307544d821a0dcb492ba4aa23baaca6e53f392b79c58e0581db804208237c3df1c60b6b34da2747cd3200fbb384511226"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x428) 22:32:56 executing program 1: r0 = memfd_create(&(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000080)=""/216) unshare(0x40600) dup3(r0, r1, 0x0) writev(r1, &(0x7f0000000b00), 0x0) 22:32:56 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa810045000014ffffac9bbe3dc0233fa3c8b917303e380000000090787f00"], &(0x7f0000000080)) 22:32:56 executing program 6: clone(0x0, &(0x7f0000000040), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000000140)) 22:32:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:32:56 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:32:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) [ 126.103438] IPVS: Creating netns size=2536 id=9 22:32:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)='z', 0x1}], 0x1) 22:32:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:32:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x2001007f) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086604, &(0x7f0000000040)) pwrite64(r0, &(0x7f0000000100), 0x0, 0x0) 22:32:57 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x5, @mcast1, 0xffff}, {0xa, 0x0, 0x0, @mcast2}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf52400, 0x1f]}, 0x5c) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 22:32:57 executing program 0: r0 = epoll_create1(0x0) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:32:57 executing program 6: unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x2b) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) r3 = getpid() execve(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), &(0x7f0000000140)) fcntl$setown(r1, 0x8, r3) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x15) 22:32:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='\n']}) 22:32:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:32:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:32:57 executing program 1: 22:32:57 executing program 2: 22:32:57 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x5, @mcast1, 0xffff}, {0xa, 0x0, 0x0, @mcast2}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf52400, 0x1f]}, 0x5c) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 22:32:57 executing program 2: 22:32:57 executing program 3: 22:32:57 executing program 2: 22:32:57 executing program 0: r0 = epoll_create1(0x0) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:32:57 executing program 3: 22:32:57 executing program 2: 22:32:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:32:58 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x5, @mcast1, 0xffff}, {0xa, 0x0, 0x0, @mcast2}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf52400, 0x1f]}, 0x5c) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 22:32:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 22:33:00 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}], &(0x7f00000005c0)=[0x0, 0x0]}, 0x2d8}}], 0x0, 0x0, &(0x7f0000000680)}) 22:33:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r0, &(0x7f00007af000)=[{&(0x7f0000000200)="480000001400190020ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) 22:33:00 executing program 0: r0 = epoll_create1(0x0) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:00 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x77622a85}], &(0x7f00000005c0)=[0x0]}, 0x2d8}}], 0x0, 0x0, &(0x7f0000000680)}) 22:33:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000580)=[@flat={0x77622a85}], &(0x7f00000005c0)=[0x0, 0x0, 0x0]}}}], 0x0, 0x0, &(0x7f0000000680)}) 22:33:00 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x5, @mcast1, 0xffff}, {0xa, 0x0, 0x0, @mcast2}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf52400, 0x1f]}, 0x5c) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 22:33:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:00 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) [ 129.909962] binder: 7041:7045 transaction failed 29189/-22, size 24-16 line 3013 [ 129.933666] binder: 7049:7056 transaction failed 29189/-22, size 24-24 line 3013 [ 129.936004] binder: 7048:7055 transaction failed 29189/-22, size 24-8 line 3013 22:33:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0x0, &(0x7f0000000540), 0x1}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, &(0x7f0000000680)}) 22:33:00 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') write$P9_RREAD(r1, &(0x7f0000000100)={0xb}, 0xb) close(r1) 22:33:00 executing program 1: 22:33:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) [ 129.938968] binder: 7049:7059 transaction failed 29189/-22, size 24-24 line 3013 22:33:00 executing program 1: [ 129.940609] binder: undelivered TRANSACTION_ERROR: 29189 [ 129.941012] binder: undelivered TRANSACTION_ERROR: 29189 [ 129.944315] binder: 7048:7055 transaction failed 29189/-22, size 24-8 line 3013 [ 129.944362] binder: undelivered TRANSACTION_ERROR: 29189 [ 129.944497] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.042709] binder: 7065:7078 transaction failed 29189/-22, size 64-16 line 3013 [ 130.062173] binder: 7065:7082 transaction failed 29189/-22, size 64-16 line 3013 22:33:01 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20101009}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x70bd2d, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x84) 22:33:01 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:01 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:01 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0) 22:33:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) 22:33:01 executing program 1: r0 = socket$packet(0x11, 0x10000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) sendmmsg(r0, &(0x7f0000003080)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000500)}}], 0x1, 0x0) [ 130.064998] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.065187] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.146164] binder: 7041:7045 transaction failed 29189/-22, size 24-16 line 3013 [ 130.146206] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.160484] binder: undelivered TRANSACTION_ERROR: 29189 22:33:01 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x5, @mcast1, 0xffff}, {0xa, 0x0, 0x0, @mcast2}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf52400, 0x1f]}, 0x5c) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 22:33:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)="62627200127a7befb1aecd9d343c125105380d534d033390f728a1d423f4e7de0e284f4e76cd331830592dd776c542f5279a821f624aa22dc8d441c18a0f716a6df525e17304091496afcbc5bb1fdeb3a2b1669c2de799359c50b894", 0x5c) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 22:33:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:01 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000100), &(0x7f0000000000)=0x4) 22:33:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:01 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:01 executing program 1: r0 = socket$packet(0x11, 0x10000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) sendmmsg(r0, &(0x7f0000003080)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000500)}}], 0x1, 0x0) 22:33:01 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x803, 0x8) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x10001, 0x0, "521353f37dcd64c12799efb9dbad200b6cf433289feda8725ba79dbc26d16f9663b3df59d7b9d07abd8ae0918551393a71edeeba68925770399de3c38f23825d021cc1362ea21c5d000000005d8c9cfd"}, 0xd8) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 22:33:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:01 executing program 6: r0 = socket$inet(0x2, 0x3, 0x6) recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000680)}, 0x40000142) 22:33:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:01 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:01 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_names\x00') ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000040)) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@dev, @in6=@local}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@ipv4={[], [], @remote}}}, 0xe8) 22:33:01 executing program 6: connect$netlink(0xffffffffffffffff, &(0x7f0000000240)=@unspec, 0xc) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), 0xc) 22:33:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) connect(0xffffffffffffffff, &(0x7f0000000340)=@rc, 0xfffffec7) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xd8207e05f08fb73a, 0x20000000, &(0x7f0000000000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 22:33:01 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:02 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x5, @mcast1, 0xffff}, {0xa, 0x0, 0x0, @mcast2}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf52400, 0x1f]}, 0x5c) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 22:33:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f0000000040)="9c7d05b5", 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000c80)="162adfb904d0b639d2bac5ef054e9cadd8f41b48f1c6bfb33a7afd00d07bf4e49dc4a297dc23e16b9fa549b63078a965efcac70172b36f0bbfc433197f4b5f839addb62f350f578efdd710eb52f5abfcf0a3513042d232420cbd0c5fb350ed27b7ed7db93a36c34af5ac19262b3f3ebcb09d0b6b02eaa48d98ffaa7bc0622d0435eaa2ac0c2e5ae7e7c9960fb743bdd10b583a93b8e9e3c94b5f9b17ffa441ea97da1c8b676b02bf4a7e666089783b8a0495ae29246313f157c299a54a406ebff4630b382b0ed98e95ac0708519a180d8bd6f2964016d6cde6c07a7f35ca56e31fb6c7bbe88f69b1b778d3733e7b5f7853613d82edcc581d2c3a19f169aaf8b86587c502df6648947463bea0c04d2bf0b3e3fbe5916cd3cf13475e96ce0f1931382bc8573375e2a6a5bcc1ce93e03fcafd66003ad15a81208f355a3e59cb278e29d57977ecfbfd8b6f2ec8bfc6b05f88148afca937810fe36ac24d31616b911146e2c8cad0651e64e35eb736dd0e24f2d4c52948909bc9fe244289d27e959441cde88685167c61e6386b85069d3d3ea43cf6ac1142efd9df3148e0b4a6edf3e3d20595f4eee9993cc7f5bfda25b242c8cf7ce284ca06e35220285752c0896ffa0165575ba1cc395dad34166d2e0d88c156aef7f0ba8f834560c47e0e3dfb0ec863b56e55a0e32129c7481f057621a8e0c3f58b9156fe9e9c57e6daad7ae5def7926f4008ac06a06414e78c75e5c6b20b61bf8886be207501fdb13544b6d0a51cfa261ed826895ba63d3b775bb296cbea12d3761d6708872872bdb04eeb560973bb2b185d7099e3e7dcb78305739441396b65f058e6ffd2a1b33786d47433d575b2f4430179eebbe19e30b2537ffe196906612aba918f1958dfe05f88b1d1f2c2b6775c056c720768a46df9ba4a28fa830b95e9f838858820aa6c840451fdc1d981f325e2209a7ed6b6423333aa51eae3872436d8c6202ca6f9d454732b12d9f9b64c361dbb8e51d8fe3a4f8291fe451f980cd15a464559d25c57afd7cf5b11bdacf85a031e15776a0ef6d43551facd19209e48263f83ad6c88635f1faab70b40bbdf80f3fc59bee91abd476325b670e28c4198646bbff8f826ae8dd7b55485a66f6cf7b49497ae0aae04ba87decfdd30f3ecbd5eeefc574166b7baad250979eaa0d98e5eadd0ba3fa14530efc94bce5cd5f9ad0629c9b71021f6a9ecaf6c4ca6c13168cfbe2e94470571d84721a0238858aedad56d4dbdce28fcc6816299305195cfb85d2f7336bf14a0aef268f09cef28b7b22e60ee92979efeab538571b62459850cd6f43610f74f732c4bb5b085d5637e9c5d632f7de9990473949f3c6231c650ee063ee4850f04b10a31814f04aebedf95c6b9848c751b880ccd18263f13081e91e7d6a82b923de15e4d140eff4eb358099df2f8f4a8b2efab7a2345dea01eb6923710d9c07461483e84d1ec80dbbc9e644bf9dfacde11710f07ed94b07248e49d3930a51da62c3d1bbbe43e15dc54665cb24418dc0fce2c12f883ec9741e561415d410f251e8986bd31cfcee93cdf2c6ae55d4b6d11257cf2abd5a74361cc1501590dca2dccf8ae6c8eb36177ad6549b726ef333091f83bb68e17c7bc1daf7786005ec8f3fa0aa05879172e8342240bec2066b79ca87cc5ef9a487264571b411422c744d56f4e22031fe7c7aa228a49ddf2d6c7d7c32fd547a17e8a2638caa77f164b1e111b194c57f293b8a56893f00a8096573d64f0643abc037312bb251be50139c0ed31e3144256f513a94ba8f217ca6c5ec9d6fec2e6af4ad5e78142d93a2a3771cfabeae52356cc0e2966c4548f58583c7fba49b6bb6997abe53627f2bb1fd94bb8aa1960f4a10632b4487f193ee37f8a7779fedc14eb17f6fbc2d5af697bc7bb82eb06a26264f25106b8df2e8780e1ef7cae82e9a567e8db0ea51c5f1f673f1b3587cf6de01861458acfa2647a6d1806c2547a868521e23908e61a5dfd4cbe9e3ede95b3c2945ef5f7b00a6cd574fdb50a59b2c44e7d829118241cb36a99f121f63eeeadb5b8e517cf3950c8473dec", 0x5b5}], 0x1}}], 0x1, 0x0) 22:33:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:02 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x20, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x30}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480), 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[]}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') 22:33:02 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000003580)={0x2, 0x0, @multicast1}, 0x10) getsockopt$sock_int(r0, 0x1, 0x8000000000000029, &(0x7f0000000040), &(0x7f0000000080)=0x4) 22:33:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:02 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:02 executing program 6: socket$inet(0x2, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x4080}, 0xc) 22:33:02 executing program 0: r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x8, 0x9, 0x5, 0x0, 0x0, {0x3}}, 0x14}}, 0x44) 22:33:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:02 executing program 1: 22:33:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:02 executing program 1: 22:33:02 executing program 2: 22:33:02 executing program 3: 22:33:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:02 executing program 0: r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:02 executing program 1: 22:33:02 executing program 6: socket$inet(0x2, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x4080}, 0xc) 22:33:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:02 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x5, @mcast1, 0xffff}, {0xa, 0x0, 0x0, @mcast2}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf52400, 0x1f]}, 0x5c) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 22:33:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) 22:33:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2f}]}, 0xe) 22:33:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @rand_addr=0x1f}}}, 0x84) 22:33:02 executing program 0: r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:02 executing program 2: 22:33:02 executing program 3: 22:33:02 executing program 1: 22:33:02 executing program 6: 22:33:02 executing program 6: 22:33:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:02 executing program 1: 22:33:02 executing program 4: r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:02 executing program 0: r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:02 executing program 6: 22:33:03 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 22:33:03 executing program 1: 22:33:03 executing program 4: r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:03 executing program 2: 22:33:03 executing program 3: 22:33:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:03 executing program 6: 22:33:03 executing program 0: r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:03 executing program 2: 22:33:03 executing program 3: 22:33:03 executing program 6: 22:33:03 executing program 3: 22:33:03 executing program 0: r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:03 executing program 1: 22:33:03 executing program 4: r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:03 executing program 2: 22:33:03 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 22:33:03 executing program 6: 22:33:03 executing program 1: 22:33:03 executing program 2: 22:33:03 executing program 3: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) sendto$inet(r0, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x8004e20}, 0x10) read(r0, &(0x7f0000000180)=""/184, 0xb8) 22:33:03 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x0, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) 22:33:03 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:03 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b, 0x40000000], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}}}}}}, &(0x7f0000000000)) 22:33:03 executing program 6: perf_event_open(&(0x7f0000c86f88)={0x2, 0x126, 0x800000000000012}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getrandom(&(0x7f0000000140), 0x0, 0x0) 22:33:03 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@broute={'broute\x00', 0x20, 0x1, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', "01616d61000000004ab2cec800", @remote, [], @remote, [], 0x2a8, 0x2a8, 0x320, [@bpf0={'bpf\x00', 0x210, {{0x3, [{}, {}, {0x6}]}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "339ebc4bb0c0fba43162d5c302d891b307544d821a0dcb492ba4aa23baaca6e53f392b79c58e0581db804208237c3df1c60b6b34da2747cd3200fbb384511226"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x428) 22:33:03 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:04 executing program 1: r0 = socket$inet6(0xa, 0x200000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 22:33:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x0, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:04 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 22:33:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") flistxattr(r0, &(0x7f0000002000)=""/4096, 0x12b2) 22:33:04 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:04 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 22:33:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:04 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:04 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 22:33:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:04 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x0, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:04 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:04 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 22:33:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:04 executing program 5: r0 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x102000004) 22:33:04 executing program 6: r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:04 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 22:33:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:04 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:04 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x5, @mcast1, 0xffff}, {0xa, 0x0, 0x0, @mcast2}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf52400, 0x1f]}, 0x5c) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 22:33:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:04 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:04 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="66640015b02a5605e1889719ecbc495a0def30aa59dd03ef8593bfd08fa7e8f7384b38e9") syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x4002) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000080)={0x9b, 0x7, 0xc3d}) fchdir(r0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) r1 = memfd_create(&(0x7f0000000580)='md5sumvboxnet0]\'ppp0ppp1,@\x00', 0x0) write(r1, &(0x7f00000000c0)="6963e642c3d8eeeda3a74e3deec6fc7bb9650b5de56946c568f95d22467190ba3b6d59a5958d6fa9259c8a2ac4677b00000000000000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 22:33:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:04 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r0, 0x1) shutdown(r0, 0x0) [ 133.600866] capability: warning: `syz-executor3' uses 32-bit capabilities (legacy support in use) 22:33:04 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 22:33:04 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:04 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) write$cgroup_int(r0, &(0x7f00000002c0), 0x101a7) 22:33:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:04 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 22:33:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000007e40)='/dev/ptmx\x00', 0x100, 0x0) mmap(&(0x7f0000aa6000/0x3000)=nil, 0x3000, 0x2000002, 0x3d, r0, 0x1) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000080)={0x1}) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000007f00)={0x8, 0x0, 0x5}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000007e80)='/dev/ppp\x00', 0x2003, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000007ec0)=0x80000000) dup2(r1, r1) r4 = socket$packet(0x11, 0x8000000000000004, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000007f40)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xc70) dup3(r5, r4, 0x80000) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00000000c0)=0x6) write$P9_RSTATFS(r3, &(0x7f0000007dc0)={0x43, 0x9, 0x2, {0x2, 0x7680, 0x10000, 0x8c, 0x5, 0x1, 0x0, 0x4, 0x8}}, 0x43) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r7, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) recvmmsg(r7, &(0x7f0000007bc0)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/164, 0xa4}], 0x1, &(0x7f0000000200)=""/52, 0x34, 0xfff}, 0x100000001}, {{&(0x7f0000000240)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001740)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/34, 0x22}, {&(0x7f0000001300)=""/236, 0xec}, {&(0x7f0000001400)=""/95, 0x5f}, {&(0x7f0000001480)=""/58, 0x3a}, {&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f00000015c0)=""/133, 0x85}, {&(0x7f0000001680)=""/138, 0x8a}], 0x8, &(0x7f00000017c0)=""/122, 0x7a, 0x3}, 0x7ff}, {{&(0x7f0000001840)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000018c0)=""/220, 0xdc}, {&(0x7f00000019c0)=""/20, 0x14}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x3}}, {{&(0x7f0000002a40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000002ac0)=""/104, 0x68}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/239, 0xef}, {&(0x7f0000003c40)=""/233, 0xe9}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/132, 0x84}], 0x6, &(0x7f0000004e80)=""/45, 0x2d, 0x7ff}, 0xc03}, {{&(0x7f0000004ec0)=@ax25, 0x80, &(0x7f0000007040)=[{&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/111, 0x6f}, {&(0x7f0000005fc0)=""/91, 0x5b}, {&(0x7f0000006040)=""/4096, 0x1000}], 0x4, &(0x7f0000007080)=""/134, 0x86, 0x6}, 0x3}, {{&(0x7f0000007140)=@xdp, 0x80, &(0x7f00000073c0)=[{&(0x7f00000071c0)=""/94, 0x5e}, {&(0x7f0000007240)=""/111, 0x6f}, {&(0x7f00000072c0)=""/198, 0xc6}], 0x3, 0x0, 0x0, 0x7fffffff}, 0x4}, {{&(0x7f0000007400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000007a80)=[{&(0x7f0000007480)=""/180, 0xb4}, {&(0x7f0000007540)=""/100, 0x64}, {&(0x7f00000075c0)=""/98, 0x62}, {&(0x7f0000007640)=""/210, 0xd2}, {&(0x7f0000007740)=""/148, 0x94}, {&(0x7f0000007800)=""/158, 0x9e}, {&(0x7f00000078c0)=""/177, 0xb1}, {&(0x7f0000007980)=""/83, 0x53}, {&(0x7f0000007a00)=""/84, 0x54}], 0x9, &(0x7f0000007b40)=""/128, 0x80, 0x688}, 0x3}], 0x7, 0x10000, &(0x7f0000007d80)) close(r7) close(r6) syz_open_dev$loop(&(0x7f0000007f80)='/dev/loop#\x00', 0x8, 0x10000) 22:33:04 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=0x0) ptrace(0x8, r1) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000000)=""/14, 0xe}, 0x120) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) gettid() writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0x21c}], 0x1) ptrace$setopts(0x4200, r2, 0xffffffff, 0x2c) r3 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000400)=r3) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000300)=""/211, &(0x7f00000000c0)=0xd3) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = add_key(&(0x7f00000004c0)='.dead\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000540)="e166c1d86afe0e2407b14f5979", 0xd, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r4, r5) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f00000005c0)={{0x5, 0x6}, 'port0\x00', 0x20, 0x4, 0x1, 0xfff, 0x3, 0x800, 0x0, 0x0, 0x5, 0x1f}) 22:33:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) [ 133.876706] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 133.889843] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 133.899612] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 133.906426] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 133.913467] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 22:33:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000140)="db10", 0x2) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=@known='security.capability\x00', &(0x7f0000000380)=""/88, 0x58) lstat(&(0x7f00000007c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000840)) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=@ipv6_getmulticast={0x14, 0x3a, 0x500, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x54) close(0xffffffffffffffff) mkdir(&(0x7f00000009c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) mount(&(0x7f0000000a80)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000a40)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000580)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd08, 0x0, 0x0, 0x0, 0x8000000000}}}, 0x90) r4 = socket$inet(0x2, 0x3, 0x5) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000540)={'nat\x00'}, &(0x7f00000006c0)=0x78) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0dc8ba3f8c382d68c5cea73089a0c400"]) 22:33:04 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) [ 133.920680] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 133.927371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 133.961756] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 22:33:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) [ 133.968701] hrtimer: interrupt took 36159 ns [ 133.990222] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 133.997250] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 22:33:04 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) [ 134.040031] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 134.059268] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 134.081844] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 134.102072] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 134.130850] ================================================================== [ 134.131598] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 134.147524] BUG: KASAN: use-after-free in l2tp_session_queue_purge+0xf4/0x100 [ 134.154865] Read of size 4 at addr ffff8801c70b0a00 by task syz-executor1/7519 [ 134.162271] [ 134.163979] CPU: 1 PID: 7519 Comm: syz-executor1 Not tainted 4.9.124-g09eb2ba #31 [ 134.171821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.181262] ffff88019bf8fca8 ffffffff81eb95e9 ffffea00071c2c00 ffff8801c70b0a00 [ 134.189669] 0000000000000000 ffff8801c70b0a00 0000000000000000 ffff88019bf8fce0 [ 134.197860] ffffffff8156c35e ffff8801c70b0a00 0000000000000004 0000000000000000 [ 134.206009] Call Trace: [ 134.208680] [] dump_stack+0xc1/0x128 [ 134.214097] [] print_address_description+0x6c/0x234 [ 134.220927] [] kasan_report.cold.6+0x242/0x2fe [ 134.227157] [] ? l2tp_session_queue_purge+0xf4/0x100 [ 134.233903] [] __asan_report_load4_noabort+0x14/0x20 [ 134.240764] [] l2tp_session_queue_purge+0xf4/0x100 [ 134.247495] [] pppol2tp_release+0x1fb/0x2e0 [ 134.253459] [] __sock_release+0xd7/0x260 [ 134.259168] [] ? __sock_release+0x260/0x260 [ 134.265229] [] sock_close+0x19/0x20 [ 134.270524] [] __fput+0x263/0x700 [ 134.275633] [] ____fput+0x15/0x20 [ 134.280733] [] task_work_run+0x10c/0x180 [ 134.286587] [] exit_to_usermode_loop+0xfc/0x120 [ 134.293030] [] do_syscall_64+0x364/0x490 [ 134.298790] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 134.305705] [ 134.307325] Allocated by task 7519: [ 134.310943] save_stack_trace+0x16/0x20 [ 134.314909] save_stack+0x43/0xd0 [ 134.318353] kasan_kmalloc+0xc7/0xe0 [ 134.322283] __kmalloc+0x11d/0x300 [ 134.325949] l2tp_session_create+0x38/0x16f0 [ 134.330348] pppol2tp_connect+0x10d7/0x18f0 [ 134.334713] SYSC_connect+0x1b8/0x300 [ 134.338507] SyS_connect+0x24/0x30 [ 134.342196] do_syscall_64+0x1a6/0x490 [ 134.346076] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 134.351326] [ 134.352945] Freed by task 7527: [ 134.356219] save_stack_trace+0x16/0x20 [ 134.360183] save_stack+0x43/0xd0 [ 134.363629] kasan_slab_free+0x72/0xc0 [ 134.367621] kfree+0xfb/0x310 [ 134.370721] l2tp_session_free+0x166/0x200 [ 134.374947] l2tp_tunnel_closeall+0x284/0x350 [ 134.379442] l2tp_udp_encap_destroy+0x87/0xe0 [ 134.383983] udpv6_destroy_sock+0xb1/0xd0 [ 134.388122] sk_common_release+0x6d/0x300 [ 134.392276] udp_lib_close+0x15/0x20 [ 134.395983] inet_release+0xff/0x1d0 [ 134.399709] inet6_release+0x50/0x70 [ 134.403436] __sock_release+0xd7/0x260 [ 134.407311] sock_close+0x19/0x20 [ 134.410807] __fput+0x263/0x700 [ 134.414078] ____fput+0x15/0x20 [ 134.417351] task_work_run+0x10c/0x180 [ 134.421292] exit_to_usermode_loop+0xfc/0x120 [ 134.425778] do_syscall_64+0x364/0x490 [ 134.429658] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 134.434755] [ 134.436375] The buggy address belongs to the object at ffff8801c70b0a00 [ 134.436375] which belongs to the cache kmalloc-512 of size 512 [ 134.449047] The buggy address is located 0 bytes inside of [ 134.449047] 512-byte region [ffff8801c70b0a00, ffff8801c70b0c00) [ 134.460861] The buggy address belongs to the page: [ 134.465834] page:ffffea00071c2c00 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 134.476115] flags: 0x8000000000004080(slab|head) [ 134.480909] page dumped because: kasan: bad access detected [ 134.486661] [ 134.488278] Memory state around the buggy address: [ 134.493198] ffff8801c70b0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.500550] ffff8801c70b0980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.507967] >ffff8801c70b0a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.515317] ^ [ 134.518732] ffff8801c70b0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.526083] ffff8801c70b0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.533437] ================================================================== [ 134.541012] Disabling lock debugging due to kernel taint [ 134.549879] Kernel panic - not syncing: panic_on_warn set ... [ 134.549879] [ 134.557273] CPU: 1 PID: 7519 Comm: syz-executor1 Tainted: G B 4.9.124-g09eb2ba #31 [ 134.566116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.575491] ffff88019bf8fc08 ffffffff81eb95e9 ffffffff843c828b 00000000ffffffff [ 134.583662] 0000000000000000 0000000000000001 0000000000000000 ffff88019bf8fcc8 [ 134.591814] ffffffff81423eb5 0000000041b58ab3[ 134.595771] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) 22:33:05 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 22:33:05 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 22:33:05 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 22:33:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000280)="74086e750000000000000000008c00", 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x102000004) 22:33:05 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) [ 134.595797] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 134.596414] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 134.596476] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 134.597037] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 134.597079] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 134.597087] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 134.597093] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock 22:33:05 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) [ 134.654830] ffffffff843bb8e8 ffffffff81423cf6 Call Trace: [ 134.661062] [] dump_stack+0xc1/0x128 [ 134.666444] [] panic+0x1bf/0x3bc [ 134.671464] [] ? add_taint.cold.6+0x16/0x16 [ 134.677446] [] ? ___preempt_schedule+0x16/0x18 [ 134.683677] [] kasan_end_report+0x47/0x4f [ 134.689661] [] kasan_report.cold.6+0x76/0x2fe [ 134.695811] [] ? l2tp_session_queue_purge+0xf4/0x100 [ 134.702591] [] __asan_report_load4_noabort+0x14/0x20 [ 134.709465] [] l2tp_session_queue_purge+0xf4/0x100 [ 134.716042] [] pppol2tp_release+0x1fb/0x2e0 [ 134.722023] [] __sock_release+0xd7/0x260 [ 134.728033] [] ? __sock_release+0x260/0x260 [ 134.734017] [] sock_close+0x19/0x20 [ 134.739300] [] __fput+0x263/0x700 [ 134.744495] [] ____fput+0x15/0x20 [ 134.749618] [] task_work_run+0x10c/0x180 [ 134.755540] [] exit_to_usermode_loop+0xfc/0x120 [ 134.761873] [] do_syscall_64+0x364/0x490 [ 134.767578] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 134.774968] Dumping ftrace buffer: [ 134.778512] (ftrace buffer empty) [ 134.782373] Kernel Offset: disabled [ 134.786019] Rebooting in 86400 seconds..