[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 18.861175] random: sshd: uninitialized urandom read (32 bytes read, 30 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.388953] random: sshd: uninitialized urandom read (32 bytes read, 38 bits of entropy available) [ 25.713173] random: sshd: uninitialized urandom read (32 bytes read, 38 bits of entropy available) [ 26.625573] random: sshd: uninitialized urandom read (32 bytes read, 83 bits of entropy available) Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. [ 32.227272] random: sshd: uninitialized urandom read (32 bytes read, 88 bits of entropy available) 2018/08/25 18:00:17 fuzzer started [ 33.216498] random: cc1: uninitialized urandom read (8 bytes read, 89 bits of entropy available) 2018/08/25 18:00:19 dialing manager at 10.128.0.26:42703 2018/08/25 18:00:21 syscalls: 1 2018/08/25 18:00:21 code coverage: enabled 2018/08/25 18:00:21 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/25 18:00:21 setuid sandbox: enabled 2018/08/25 18:00:21 namespace sandbox: enabled 2018/08/25 18:00:21 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/08/25 18:00:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/25 18:00:21 net packed injection: enabled 2018/08/25 18:00:21 net device setup: enabled [ 36.730821] random: nonblocking pool is initialized 18:01:06 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400040, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) ioctl$void(r0, 0xc0045c79) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f00000000c0)=0x3ff, 0x4) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = socket(0xc, 0x6, 0x9) pwrite64(r0, &(0x7f0000000140)="0e0c8d8611b252ecc6dd0d89559aef9ce38f6725675818063e0aecffae4626200bd9fbb56bc4cecf4f4666ec8ed3e395ce714856451aebe48e799c81b0ea6060bcf15ae9fc034aa43650f30a81bddab51801d4168ad54d4ac34c4fc9b4fad5d8350003d78b91855ce7fdc566501298ac4ecc5716cfeeb3a76b7fb4c15f12fc004617c1fb56b133eee25c44383fe4564ec3d4178cfb6b3ef53b240e94bc737d8791a04c74839cba45b8e470299a121d", 0xaf, 0x0) lseek(r1, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0xc4030, r0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000200)=0x800, 0x4) shutdown(r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r3 = dup2(r1, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@dev, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) write$FUSE_ENTRY(r3, &(0x7f0000000400)={0x90, 0xfffffffffffffff5, 0x7, {0x0, 0x1, 0x0, 0x0, 0x7fff, 0x100000000, {0x5, 0x84d0000000000, 0x0, 0x4, 0xffff, 0x1, 0x4849, 0x9, 0xfffffffffffffffa, 0x0, 0x7f, r4, r6, 0x1, 0x100000000}}}, 0x90) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000004c0)) lgetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@random={'system.', '/dev/ppp\x00'}, &(0x7f0000000580)=""/181, 0xb5) write$P9_RFLUSH(r1, &(0x7f0000000640)={0x7, 0x6d, 0x1}, 0x7) execve(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)=[&(0x7f00000006c0)=')bdev)\x00', &(0x7f0000000700)='system.'], &(0x7f0000000900)=[&(0x7f0000000780)='system.', &(0x7f00000007c0)="d1235c00", &(0x7f0000000800)='\x00', &(0x7f0000000840)='):\x00', &(0x7f0000000880)='em0posix_acl_access\'\x00', &(0x7f00000008c0)='system.']) fchdir(r3) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000940)=r3) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setxattr(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=@known='security.capability\x00', &(0x7f0000000a00)=')bdev)\x00', 0x7, 0x2) ioctl$sock_SIOCDELDLCI(r7, 0x8981, &(0x7f0000000a40)={'syz_tun\x00', 0x9}) ioctl$void(r0, 0xc0045878) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000a80)) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000b40)={'icmp\x00'}, &(0x7f0000000b80)=0x1e) write$FUSE_LK(r1, &(0x7f0000000bc0)={0x28, 0x0, 0x3, {{0x12, 0x8, 0x1, r5}}}, 0x28) 18:01:06 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20) recvfrom$unix(r0, &(0x7f0000000040)=""/169, 0xa9, 0x3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f00000001c0)=r1, 0x12) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000200)={{0x7, 0x7}, 0x1, 0x7, 0xfffffffffffffff8, {0x9, 0xfff}, 0x40, 0x3ff}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000fec000/0x12000)=nil, 0x12000}, 0x2}) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000002c0)="039224a3f67db332c598126326346b550fa18e02baff981ec84b14697e52caf7ec18a661dcede2873e74faa234d954fe91e9de0082c361cb79ab4e4db1558fa69e6e7eec017cdbaa193f07ada37c09fc4a3ffc44ee1893f52454f88371a2c4783a166e25369571a32c62313c63356cb50414d853ea07660e970c3ab41596c457d1da73d3e5560e20754680488840a07202bbc611bc173e7f53a1c674b13efccd616caf201903149d859ecf53e47b03af3e7e9fdcb1c315196bd88d9efa094dfe45693c93dcea85eb01cfa7b6df04495cc6c421edb87a82e20b6daaa5043943a67455c6e875e3cf4819ab7d14bd738abb", 0xf0) r2 = open(&(0x7f00000003c0)='./file0\x00', 0x2000, 0x64) openat$cgroup(r0, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000440)={0xaa, 0x4}) fcntl$setflags(r0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r3, 0xa, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f00000005c0)=0x2) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) open$dir(&(0x7f0000000600)='./file0\x00', 0x800, 0x1) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000700)=0x8001) ptrace$getregset(0x4204, r1, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=""/63, 0x3f}) r5 = add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000800)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r4, r5) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840)='/dev/uinput\x00', 0x0, 0x0) keyctl$reject(0x13, r5, 0x1, 0x9c, r5) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000880)={{0x7, 0xfff}, 0x1, 0x6, 0x4, {0x4, 0x7}, 0x0, 0x5}) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000900)={0x1, 0x8001, 0x4}) getsockopt$inet_buf(r6, 0x0, 0x2e, &(0x7f0000000940)=""/90, &(0x7f00000009c0)=0x5a) accept$inet(r2, 0x0, &(0x7f0000000a00)) rt_sigsuspend(&(0x7f0000000a40)={0x100000000000}, 0x8) openat$autofs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/autofs\x00', 0x121000, 0x0) 18:01:06 executing program 7: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@local, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000001c0)) execveat(r0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000240)='trusted*#\x00', &(0x7f0000000280)='\x00'], &(0x7f00000003c0)=[&(0x7f0000000300)='userbdevself-\x00', &(0x7f0000000340)='eth1proc\'GPL/@*]#\\security\x00', &(0x7f0000000380)="65746831972c99776c616e3100"], 0x1400) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) execveat(r0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000500)=[&(0x7f0000000440)='eth1proc\'GPL/@*]#\\security\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='eth1proc\'GPL/@*]#\\security\x00'], &(0x7f0000000680)=[&(0x7f0000000540)='\x00', &(0x7f0000000580)='posix_acl_access^wlan0\x00', &(0x7f00000005c0)='$\x00', &(0x7f0000000600)=')em1+{.vboxnet0^\x00', &(0x7f0000000640)='\x00'], 0x1000) r1 = memfd_create(&(0x7f00000006c0)='wlan0vmnet1%(self^\x00', 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000700)) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000740)={'veth0_to_bridge\x00', {0x2, 0x4e20, @loopback}}) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) mq_notify(r1, &(0x7f0000000940)={0x0, 0xb, 0x5, @thr={&(0x7f0000000800)="d659ae7ba0840c6472f8e5457dc3658e68c244033089331ccdb61d32da5b71963764b45cdb163f18f8252f654ddd645828b904a42dd2ac3082f97627e03c388e9323eb2cc4e95009b180ac5b1a649c0b5d654b8a4835646a5a68b26c35a0297735e5fe949b687526f43a37a53db3934a84ae2be8230e13115751db490855223e619521380eab31ff7f53c1bedd4146eeec045f229ba4b0", &(0x7f00000008c0)="1b7dd7bcb39e84421618cd58d79e051e249b5da5cdb6e3a79aeb9aef66ac38e789db31073bf84a36d4ee3e4df0e718ca4e930999fca54f03c5dbe02296fb7f498214ad4ac7a335ee12fbfab0c70666c6bc601d0b331e9ed9b71b35a4853259899d791ed669351aa450cacd06340c620043e1f6e31ff728b90e527acce5eaf9"}}) rt_sigreturn() writev(r1, &(0x7f0000001e80)=[{&(0x7f0000000980)="d1cac8d60ebbabf79c587dc244db7976e03ecde6e1a625b082b07f30286a51dd452b718591199471dd04b0e591cffc9136e742c04e098bc67e4fe6e7ac52bb7cde6532141fb2115a1ce5c0c14b9cd2e3f5fb9ace15fab7163c13d12b76d95f809ded109203df4be363742ce9674b494f498fd9e33c158f060907edbd8dc20c9e3c9cd49308b0b53ee4dee9d2ac328a78c0ef118dd325a28b99ac772dd603d193ee52abb611e17996af7d24ef50cf2d4208184a3c3d71f185430361907d46c82cf00810bd1835fa4bcccb0809", 0xcc}, {&(0x7f0000000a80)="f27c53b5be80a2c57a296260b2efffd2e392d630637101ab0f80ef48defe189ed4d9d78a46692c65e7d8235912750480d3f528da5ca55af3ba9fd9f40847f73873ca5a1e80f0f880305334a0269084584feeaf5071d3b1267d82d84aeb4807842468fc40e289d57dea", 0x69}, {&(0x7f0000000b00)="75da0a940d6f819e9b593aa694874e2b0cb8a82caf8244b0fb32e931528d6dcbb31c2575a877e9220df3bffe7a48957b953c8a301b07322ccd7009092bc0871cf20750d4931032a052405a90972ff3a315655209180a4202a7f63d", 0x5b}, {&(0x7f0000000b80)="e555685c13cfd140cdf2eee6e44bc57962551ee4312659bf26e0a6ffaafd925beaceb9eddeba1088ded97307979dfdfb4e33cc32f066ef9fe26cddad872c3beff2aeea500d1e2233c1ca1a59d3e31bff6a48e045084cda9ac14a3f0f18ed4d32b34b793a7eb3ed56ecc5c1f05595fc36ffe47d73", 0x74}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="4997b963fc97360b1ab8d9fe18cc0626d73545de0c93b3394d07b98f40f1855356834a89be4d40ccec534e004c8f2111e8da54cb497c50995e3b8d111b58001931f0859bcf1db489a1cfc9fc9c383735e0ed63861c6b15b5c8db61119117d4b2477514a6fb770dc9f28a636c071b55e10756adbf3b1a87fa5d4f667b0cf55858c68f87a9d3ee8057024f2291a924cb4323bfe604bb2df29e05094c2c3e0f5a94141c12a9127def1ab053a368e9d892e4ce8e047bb1bf4e53ca3d7ed66d26b1a6b0114b5c21f50dd06f32618288692ba69a51519262fd1e4d4759349ea2c25de94815fa33cb74fdb164", 0xe9}, {&(0x7f0000001d00)="256ac47fdcf907032545f641165f1ed2ae31d1133a82854cdf600ce19db7453250a9d5a02eaa71dec0e3216da7b6a4e8f97a75f6473c300f78ada0b74600ae8d7b326977f3528847af87cdc20e674a73fff67351ba7d65fc95210e660796b091c2d6a396381c4db2a78675890dc1356452facf1f5a6e7abaf129b6c59e65161964220cb27bb9c584f58421b77fafd31fc86815df0420ec7456127712f18097dc900b16b4ede3ab61165994a852d366bf33205c67", 0xb4}, {&(0x7f0000001dc0)="d222872c603e8a8c0f4a51b1ca6d3028960145a84c3bb580c809974c394ae7ecc35465421309274fd4f17fea77e960ab0968d0b3c93dd1be990972dc8066dbd4970dbec6cb939a86a268ea8cf3f19c776f718a95dd96d0b8a687b62c3f2f0d492f079be8e57a854dedaa2a1b14e1ac9705a7457c2cfd715328dc5fada313ef71f95479f579d56f76b53916d089b413cdae748ee49604a4e75c5b1333295ba173dbc5f59c5cbbf20b", 0xa8}], 0x8) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000001f00), &(0x7f0000001f40)=0x8) rt_tgsigqueueinfo(r2, r2, 0x20, &(0x7f0000001f80)={0x1f, 0x100, 0x1, 0x9e5d}) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000001fc0)={0xee, ""/238}) openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x0, 0x155) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000002100)={'team_slave_1\x00'}) write$P9_RLOPEN(r0, &(0x7f0000002140)={0x18, 0xd, 0x1, {{0x40, 0x0, 0x3}, 0x61f0b881}}, 0x18) r4 = add_key$keyring(&(0x7f0000002240)='keyring\x00', &(0x7f0000002280)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000002180)='id_legacy\x00', &(0x7f00000021c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002200)=')em1+{.vboxnet0^\x00', r4) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xa) syz_open_dev$evdev(&(0x7f00000022c0)='/dev/input/event#\x00', 0x7fffffff, 0x840) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000002300)={'veth0_to_bond\x00', {0x2, 0x4e22, @broadcast}}) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) fcntl$getflags(r1, 0x401) 18:01:06 executing program 2: r0 = epoll_create1(0x80000) lseek(r0, 0x0, 0x6) socketpair(0x3, 0x2, 0xff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000040)=""/205) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000140)=""/4096) rt_sigsuspend(&(0x7f0000001140)={0x80000000}, 0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000013c0)={&(0x7f0000001180), 0xc, &(0x7f0000001380)={&(0x7f0000001200)={0x160, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffbff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @rand_addr=0x7fffffff}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x24000051}, 0x800) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001400)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000001440)) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000001480)=0x7) ioctl$LOOP_CLR_FD(r1, 0x4c01) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000402}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x24, r3, 0x124, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x40001) connect$inet6(r1, &(0x7f00000015c0)={0xa, 0x4e23, 0x4, @mcast1, 0xfffffffffffffffa}, 0x1c) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000001600)={@multicast2, @multicast1}, &(0x7f0000001640)=0xc) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000001680)) r5 = openat$keychord(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/keychord\x00', 0x2081, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0x84, r3, 0x304, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x3ff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4044810) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000001880)={{0xa, 0x4e23, 0x3, @remote, 0x7fffffff}, {0xa, 0x4e21, 0x9, @local}, 0x100, [0x2ce0, 0x9, 0x1, 0x8000, 0xffffffffffffff7f, 0x8, 0x43, 0x4]}, 0x5c) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x40, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xa00000000000000}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x44000) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) syz_open_dev$mice(&(0x7f0000001a00)='/dev/input/mice\x00', 0x0, 0x80400) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000001a40)={0x2, 0x9, 0x4, 'queue0\x00', 0xffffffffffffc74f}) getpeername(r4, &(0x7f0000001b00)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000001b80)=0x80) write$UHID_CREATE(r1, &(0x7f0000002bc0)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000001bc0)=""/4096, 0x1000, 0x3ff, 0x80000000, 0x4, 0x10000, 0x9}, 0x120) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) write$binfmt_script(r5, &(0x7f0000002d00)={'#! ', './file0', [{0x20, 'syz0\x00'}, {0x20, 'ppp0'}, {0x20, ')'}, {0x20, 'vlan0\x00'}, {0x20, 'veth1_to_team\x00'}, {0x20, '%vboxnet0'}, {0x20, '/dev/keychord\x00'}, {0x20, '*vboxnet1'}, {0x20, 'queue0\x00'}, {0x20, '/selinux/commit_pending_bools\x00'}], 0xa, "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"}, 0x1078) madvise(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0) 18:01:06 executing program 3: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400000, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x8, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000080)={0xffffffffffffffff, 0x400, 0x8, 0x3, 0x9, 0x2}) ioctl$int_in(r0, 0x5473, &(0x7f0000000100)=0x7) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000140)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={'vlan0\x00', {0x2, 0x4e24, @loopback}}) ptrace$getenv(0x4201, r1, 0x4, &(0x7f0000000200)) process_vm_readv(r1, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/189, 0xbd}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000380)=""/41, 0x29}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/115, 0x73}, {&(0x7f0000000500)=""/105, 0x69}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/18, 0x12}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x9, &(0x7f0000002bc0)=[{&(0x7f0000001780)=""/216, 0xd8}, {&(0x7f0000001880)=""/142, 0x8e}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/85, 0x55}, {&(0x7f00000029c0)=""/206, 0xce}, {&(0x7f0000002ac0)=""/162, 0xa2}, {&(0x7f0000002b80)=""/11, 0xb}], 0x7, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x8) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000002c40)={0xfffffffffffffffd, 0x20, 0x4d5f, 0x897, 0xaca}) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000002c80)=@dstopts={0x2e, 0x10, [], [@generic={0x1f, 0x7b, "5554798568dc23b6f44123b7605450b2946adc9077a6cf3b55db3e6ef5b7631af797c600b05d14f9cbabb4651cb1de08f51a31ebed3a905fdae623bf97019640140f01a0a72275661717d421b5e599fd660233af1bb268e44db0d4bbbf5f424dd3c8f1a926ef1396ff009a41d84959aca1cd31a0bc87f0c0d05bde"}, @pad1, @pad1]}, 0x90) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000002d40)={0x7, 0xde1b, 0x100, 0x80, 0xff}) r2 = memfd_create(&(0x7f0000002d80)='/selinux/enforce\x00', 0x3) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000002dc0)) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000002e00)={0x2, 0x3f, {0x57, 0x2, 0x5, {0xd6, 0xaa4}, {0x2, 0x5}, @rumble={0x0, 0xc3}}, {0x51, 0x91e, 0x100000000, {0x4, 0x80}, {0x3, 0x1}, @cond=[{0x1f, 0x5, 0x78b, 0x101, 0x7, 0x9}, {0x0, 0xc375, 0x2, 0x7fff, 0x8, 0x100000001}]}}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000002ec0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000042c0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000004300)={@loopback, @remote, 0x0}, &(0x7f0000004340)=0xc) accept$packet(r2, &(0x7f0000004600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004640)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004740)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000004840)=0xe8) accept4$packet(r2, &(0x7f0000004980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000049c0)=0x14, 0x80000) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000004a40)={@local, @multicast2, 0x0}, &(0x7f0000004a80)=0xc) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000004b00)={@dev, @rand_addr, 0x0}, &(0x7f0000004b40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004bc0)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000004cc0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004d00)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000004e00)=0xe8) getpeername$packet(r2, &(0x7f0000004e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004ec0)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004f00)={'bpq0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004f40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004f80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000005540)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x10a000}, 0xc, &(0x7f0000005500)={&(0x7f0000004fc0)={0x53c, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0xd0, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x2, 0x80000001, 0x40, 0x9b}, {0x9, 0x9, 0x100000000, 0x9}, {0x20, 0x3ff, 0x9, 0x64}, {0xfffffffffffffffc, 0x10000, 0x7ff, 0xff}, {0x7, 0x1f, 0x4, 0xfffffffffffffffe}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1ff8000000000000}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5a}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xc0, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x280, 0x2, [{0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0xfffffffffffffffc, 0x6, 0x81, 0x7}, {0x7f, 0x1, 0x318280c1, 0x1}, {0x4, 0xfffffffffffffac1, 0x383, 0x7f}, {0x6, 0x10001, 0x1, 0x5}, {0x100000000, 0x5, 0x9, 0x8000}, {0x2, 0x4df, 0x2, 0xffffffff}, {0x80000000, 0x8, 0xfff, 0x1}, {0xfffffffffffffffc, 0x7ac, 0x7, 0x7}, {0x7835, 0x0, 0x3, 0x8001}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x3, 0x7f, 0x3f, 0x5fdb3430}, {0x5, 0x3, 0xffffffffffffff00, 0x100000000}, {0x7, 0x1f, 0x3, 0x7a}, {0x8, 0x4, 0x0, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8fff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2323474d}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x53c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 18:01:06 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0x0, 0x6, {0x8}}, 0x18) write$P9_RREADLINK(r0, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) sendfile(r0, r0, &(0x7f0000000100), 0x6) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000140)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x0) flistxattr(r0, &(0x7f0000000180)=""/135, 0x87) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000240)={{0x100000000, 0xffffffffffffffe1}, 0x1, 0x5, 0x4cf, {0x4, 0x2}, 0xff, 0x100000000}) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x800) fsetxattr(r1, &(0x7f0000000300)=@known='security.capability\x00', &(0x7f0000000340)='\x00', 0x1, 0x3) renameat2(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00', 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)=0x0) ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000440)="e73da317bcc50f434a0ecdc54c5e66a8e66e4e4e9dd36d22133e448b50d4b7f2966eabd5e110984a37651b459581655dadab89deaaa8a7b775743fb8481b7301e2a93d1ace7b39b72e7cd3aa6997aae2a921ee408039760466a9fcfdf585928337706f6ad6ce33a583eab9b146915602c4af73fa7371b12841a9fddebb81857d7cb84c01208f44b95ab11ec00f7078ac999656e12b98df09ca43f80aaf84e8f6821e150f64ec7c996bcff654c2d9f4fd4b") write$FUSE_STATFS(r0, &(0x7f0000000500)={0x60, 0xffffffffffffffda, 0x4, {{0x1, 0x6, 0x6, 0x4, 0xffffffffffffff71, 0x1, 0x2, 0xac}}}, 0x60) sendfile(r1, r1, &(0x7f0000000580), 0x4) socketpair(0x1a, 0x2, 0x7, &(0x7f00000005c0)={0xffffffffffffffff}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000640)={'ifb0\x00', {0x2, 0x4e21, @remote}}) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/122, 0x7a}, {&(0x7f0000000780)=""/14, 0xe}, {&(0x7f00000007c0)=""/46, 0x2e}], 0x4) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000940)=0xe8) stat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000a40)={r2, r5, r6}, 0xc) fcntl$addseals(r4, 0x409, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000a80)={0x14, 0x49, 0x2, {0x1, 0x0, 0x4}}, 0x14) getuid() syz_open_dev$evdev(&(0x7f0000000ac0)='/dev/input/event#\x00', 0xffffffffffff560a, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000b00)={'bcsh0\x00', 0x10000}) write$P9_RREADLINK(r3, &(0x7f0000000b40)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000b80)=""/5, 0x5, 0x81, &(0x7f0000000c00)={r7, r8+10000000}) 18:01:06 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast1}, &(0x7f0000000140)=0xc) bind$packet(r0, &(0x7f0000000180)={0x11, 0xf7, r1, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @dev}, &(0x7f0000000200)=0xc) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240)=0x4, 0x4) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000280)=""/125) setxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'osx.', '/selinux/avc/cache_threshold\x00'}, &(0x7f0000000380)='/selinux/avc/cache_threshold\x00', 0x1d, 0x1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000003c0)) r2 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000440)) r3 = syz_open_dev$mice(&(0x7f0000000480)='/dev/input/mice\x00', 0x0, 0x4400) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000004c0)={{0xa, 0x4e20, 0x0, @remote, 0x80000001}, {0xa, 0x4e21, 0x1, @remote, 0x9}, 0x3, [0x100000000, 0x1, 0x20, 0x4, 0xfffffffffffffffa, 0x3, 0x3]}, 0x5c) connect$l2tp(r3, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @rand_addr=0x2688}, 0x4, 0x4, 0x4, 0x2}}, 0x26) fstatfs(r0, &(0x7f0000000580)=""/89) listen(r2, 0x7) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000600)) ioctl$sock_ifreq(r2, 0x894a, &(0x7f0000000700)={'vlan0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) fchmod(r2, 0x80) getsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$VT_RELDISP(r3, 0x5605) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/mls\x00', 0x0, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000800)='/dev/pktcdvd/control\x00', 0x2001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000840)='/dev/urandom\x00', 0x10000, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) r6 = request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000940)='vlan0\x00', 0xfffffffffffffffa) r7 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000009c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$reject(0x13, r6, 0x7f, 0x80000000, r7) accept4$inet6(r0, 0x0, &(0x7f0000000a00), 0x80800) listen(r4, 0x5a) 18:01:06 executing program 6: timer_create(0x1, &(0x7f0000000200)={0x0, 0x2f, 0x1, @thr={&(0x7f0000000000)="85642e3eee539cf795be0cd1dfbe3e2962e9d295e4445b9cd6a8338f7858ca661788255b5fba63f198edc9705b6d1d3d4c8411d11854e67b16c563da73d316d019cecb9ef2d901012f6f23f85fb237323c4442d11b0ad2b2607273e26138b88156607f6bcb4152bd95ac701a4a975f5fff9b329615b571a0c8cf0f7d90e2fd5a9516cf8adb81ad2d2a1935041ab5a782a45b1c28ab63c8716b16e6da07aaf6c10e8764c673499ab9d12005aa1ffd30228cf270cad62260233658efae69ad63eb117396431567a89bf4355eac3f10a26f877292d85d57fb1fc011e7", &(0x7f0000000100)="d38a6bd4f7b99c026247e4b66a02b5d2d0386d81606d39364550d3f2ea2ff481707b26c9a1dd6f10d5ac464fa2cb424fa7fb6c828fe7d9e310020532122fb4f3ef7b07b5dd87b26129dc68d2d09650e6a2a71d0e67b5a527146631ac3fb19a144857279de1a93710d57db9c44db010e20a32b65d53a0e8f4420492d6b2b772d2ca859992f9ab584364d10b44c173c45df725cc07904ba67622785feedcacc7335edd055b8a8c673c78246bc6eee3f96538437aca22ea0be66dd067ce0fd8919e750e5e3ff41dbe68b52163b83120b34d79c6b2485f8a248574f22fc323a5a1feda1d763b8484"}}, &(0x7f0000000240)=0x0) timer_gettime(r0, &(0x7f0000000280)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x501400, 0x0) read(r1, &(0x7f0000000300)=""/128, 0x80) write$binfmt_misc(r1, &(0x7f0000000380)={'syz0', "dbb008c0a9ff784362c358a72303c66c630a3b28220aef19c4d0a26c3f1f452d9a81e6a232fcf715ae1d3ac26d1ac3e111028655f0f0937344e3f94c0062264ee5ded2cf62cc1169df74703badff6026699281d84856b809af92d6e939f971c2cb0b25e15e81bebafda0c4446ecc3edaa979e5a3908b4d703d265ca905e5b71b8c928e3b903a9a51e283963110f3e882648f909d9f00a7b37750eb1c285e3d542debaa61da14114db74d0735519c2a8a6d5ba5bc22f33a302ac857cc7b085d4996c1dce5e86effd7"}, 0xcc) fstatfs(r1, &(0x7f0000000480)=""/130) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000540)=0x18, 0x4) write$sndseq(r1, &(0x7f0000000580)=[{0x3, 0x9f, 0x8, 0x3, @tick=0x800, {0x80000001, 0xecf}, {0x1f, 0x9}, @note={0xc3, 0x2, 0x7f, 0x3, 0x7}}], 0x30) readahead(r1, 0x80000001, 0x5ffe4284) fcntl$setsig(r1, 0xa, 0x2d) preadv(r1, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/198, 0xc6}, {&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000007c0)=""/223, 0xdf}, {&(0x7f00000008c0)=""/149, 0x95}, {&(0x7f0000000980)=""/32, 0x20}, {&(0x7f00000009c0)=""/13, 0xd}, {&(0x7f0000000a00)=""/12, 0xc}], 0x7, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000ac0)={0x200, 0x7ff, 0x6, 0x40, 0x5, 0x7}) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000b00)={{0x4d9c, 0xc881}, 'port0\x00', 0x80, 0x40015, 0x3ff, 0x7, 0x3f, 0x401, 0x5, 0x0, 0x1}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000bc0)={@local, 0x0}, &(0x7f0000000c00)=0x14) connect$packet(r1, &(0x7f0000000c40)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @local}, 0x14) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000c80)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000d80)={{0x100000000, 0x9}, {0x7, 0x9}, 0x1, 0x1, 0x6}) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000e00)={0x100000001, 0x6, 0x401, 0x800, 0x8, 0x0, 0x100000000, 0x6, 0x5, 0x24}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000f00)={'nat\x00', 0x0, 0x3, 0x67, [], 0x3, &(0x7f0000000e40)=[{}, {}, {}], &(0x7f0000000e80)=""/103}, &(0x7f0000000f80)=0x78) write$P9_RLERROR(r1, &(0x7f0000000fc0)={0x9, 0x7, 0x2}, 0x9) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000001040)=0x10) r3 = accept$inet6(r1, &(0x7f0000001080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000010c0)=0x1c) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000001100)={0x3, 0x800, 0x5, 0x0, 0x3ff}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001140)=0x0) timer_create(0x7, &(0x7f0000001180)={0x0, 0x38, 0x2, @tid=r4}, &(0x7f00000011c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001200)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000001300)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0, 0x0}, &(0x7f0000001380)=0xc) fchown(r3, r5, r6) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000013c0)={{0x3, 0x3, 0x3, 0x0, 0x9}}) [ 80.878455] IPVS: Creating netns size=2552 id=1 [ 80.935343] IPVS: Creating netns size=2552 id=2 [ 80.994404] IPVS: Creating netns size=2552 id=3 [ 81.103795] IPVS: Creating netns size=2552 id=4 [ 81.204153] IPVS: Creating netns size=2552 id=5 [ 81.320361] IPVS: Creating netns size=2552 id=6 [ 81.487589] IPVS: Creating netns size=2552 id=7 [ 81.603839] IPVS: Creating netns size=2552 id=8 [ 81.904071] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 81.962219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 82.103659] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 82.190392] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 82.279755] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 82.369758] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 82.500433] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 82.590911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 82.606311] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 82.657855] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 82.730417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 82.741961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 82.788857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 82.866572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 82.881582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 83.053466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 83.089577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.168817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 83.209044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.261755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 83.270951] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.309856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.321523] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 83.374497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 83.389558] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.399073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.407786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.452604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 83.463041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.481766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 83.489622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 83.504542] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.519555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 83.563481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 83.574621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.653674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 83.683006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.696821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.710376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 83.794322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 83.865056] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 83.927496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 83.943780] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 84.050778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 84.073258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 84.086335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 84.159941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 84.175795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 84.198965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.238843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.259622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.314830] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 84.325957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.346037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 84.385380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 84.403302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 84.465770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.498496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.540552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.562610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 84.594945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.600796] ip (4461) used greatest stack depth: 23584 bytes left [ 84.634204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 84.729501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.758338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.379189] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.679818] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.709042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.905996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.994750] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.146054] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.168922] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.301080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.409737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.482203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.533126] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.590737] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.761843] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.864580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.891421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.050226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 18:01:15 executing program 6: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./control\x00') r1 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./control\x00', 0x0) r2 = openat(r1, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000400)='./control/file0\x00') renameat(r0, &(0x7f0000000240)='./control\x00', r2, &(0x7f0000000280)='./file0\x00') setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000040)=@hopopts={0x2c, 0x2, [], [@jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0xffff}, @ra={0x5, 0x2, 0x1}, @ra]}, 0x20) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000140)) 18:01:15 executing program 6: socket(0x11, 0x80807, 0x1) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="2400000052001f0014f9f407000904000a00071008000100040000000800000000000000", 0x24) 18:01:15 executing program 6: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0xf6) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f000074fffc)=0x1, 0xffffffffffffff45) r2 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r1) setsockopt$inet6_tcp_int(r3, 0x6, 0x60000008000006, &(0x7f00007b1000)=0x81, 0x4) sendto$inet6(r0, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r2) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)={0x80, 0x8}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000fedbdf250000000000000000"], 0x10}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) pivot_root(&(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='./bus\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[]}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) bind$netlink(r3, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbfb, 0xfffffffffffffffc}, 0xc) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$BLKFRASET(r5, 0x1264, &(0x7f00000001c0)=0x10000) 18:01:15 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000016000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000014000/0x3000)=nil, 0x3000}) 18:01:15 executing program 7: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$UHID_CREATE(r0, &(0x7f0000000140)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000100)=""/45, 0x2d, 0x7fff, 0x20000, 0x6, 0x3, 0x4}, 0x120) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x40000, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000040)='./file0/file0\x00', 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000380)) 18:01:15 executing program 7: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="b8df7c067f5243e8040000002a31c11fa63b3db1f0950792bc8efe52465b142a2fb35c51480cd06687f5a6e1134b0ffed56c5cb3edbd41c7292a43", 0xfffffffffffffe14) fremovexattr(r1, &(0x7f0000000100)=@known='com.apple.FinderInfo\x00') epoll_create(0x80002000000008) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) 18:01:15 executing program 6: unshare(0x1100040000004) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="025c3f0a00145f01764070cdce19abc951fcfa31d5d2832f37dd268f7bd187c901") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000bfcffc), &(0x7f0000000040)=0x4) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000300)={0x0, 0x80000000, 0x100000001}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x3f, &(0x7f0000000080), &(0x7f0000000140)=0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') socket$inet6(0xa, 0x5, 0x3) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000180)={0xadef, 0x2, 0x10000, 0x1, 0x5, 0xfffffffffffffff8, 0x84, 0x8001, 0x7ff, 0x5}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000240)=0xc) 18:01:15 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$inet_opts(r3, 0x0, 0xf, &(0x7f0000000140)='l', 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTATFS(r4, &(0x7f0000000080)={0x43, 0x9, 0x1, {0x5, 0x5, 0x1ff, 0x9, 0x8, 0x1, 0x7, 0x100, 0x6}}, 0x43) close(r3) dup3(r0, r1, 0x0) 18:01:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x6c, 0x0, &(0x7f00000000c0)="fed75d591ef37bcb421f14bdf342aeed4b6595e584e023d82c1a7264288e8631ac6decf46ce62fb8416b144fffafba5d248a844023e3140ab79fac07ffa6c93fb85125fb73d4a5e12c59ac5e72e9ba80266edc7df277723220839d290eb68dd3f67dafee5ba66575a2dff52c"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000200)=[@increfs_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180)}}}], 0x0, 0x0, &(0x7f00000002c0)}) [ 90.625264] binder: 5938:5939 ERROR: BC_REGISTER_LOOPER called without request [ 90.644857] binder: 5938:5939 BC_INCREFS_DONE node 1 has no pending increfs request [ 90.664471] binder: 5938:5939 got reply transaction with no transaction stack [ 90.685979] binder: 5938:5939 transaction failed 29201/-71, size 0-0 line 2922 [ 90.716733] binder: 5938:5939 ERROR: BC_REGISTER_LOOPER called without request [ 90.724950] binder: BINDER_SET_CONTEXT_MGR already set [ 90.740455] binder: 5938:5955 ioctl 40046207 0 returned -16 [ 90.749320] binder: undelivered TRANSACTION_ERROR: 29201 18:01:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fe) r3 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) execveat(r3, &(0x7f0000000100)='\x00', &(0x7f0000000280), &(0x7f0000000280)=[&(0x7f0000000140)="00000600", &(0x7f0000000380)="00000600"], 0x1000) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) 18:01:16 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sysinfo(&(0x7f0000000040)=""/51) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f}, 0xffffffffffffff9b}}, 0x0) 18:01:17 executing program 2: r0 = fanotify_init(0x0, 0x80000) finit_module(r0, &(0x7f0000000340)='\x00', 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) prctl$seccomp(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) clock_getres(0x0, &(0x7f0000000000)) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f0000000340), 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x24004085) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@local, 0x2, 0x3}, 0x20) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="025cc80700145f8f764070") ftruncate(r3, 0x280080) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000), 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0xffff, 0x0, 0x7fff}]}, 0x10) sendfile(r2, r3, &(0x7f0000d83ff8), 0x200800900000002) 18:01:17 executing program 4: r0 = socket(0x1d, 0x5, 0x9) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_delrule={0x58, 0x21, 0x901, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_FLOW={0x8, 0xb, 0x2}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x8, 0x16, 0x7e}, @FRA_SRC={0x8, 0x2, @local}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_DST={0x8, 0x1, @loopback}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_open_pts(r0, 0x200) 18:01:17 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x80000001, 0x4) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = getuid() r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r2, r3) bind$inet6(r1, &(0x7f0000cb8fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x47) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000180)=0x7f, 0x4) listen(r0, 0x0) listen(r1, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f00000000c0)={0x29, 0x6, 0x0, {0x2, 0x2}}, 0x29) 18:01:17 executing program 7: socket(0x10, 0x802, 0x0) 18:01:17 executing program 1: mkdir(&(0x7f0000000100)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x8000000000000000, 0x0, 0x0, @time, {0x20000000000}, {}, @time=@time={0x77359400}}], 0x30) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") unlink(&(0x7f00000000c0)='./control/file0\x00') r3 = open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) lseek(r3, 0x20000, 0x0) rename(&(0x7f00000001c0)='./control/file0\x00', &(0x7f0000000200)='./control\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), 0xc) close(r0) 18:01:17 executing program 6: unshare(0x4000200) r0 = socket$inet6_udp(0xa, 0x2, 0x0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000080), 0x7, 0x0) 18:01:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1c0, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff030}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000000), 0x4ed, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x9) 18:01:17 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x100080004) truncate(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) write$selinux_create(r0, &(0x7f0000000040)=@objname={'system_u:object_r:dbusd_etc_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x1000, 0x20, './file0\x00'}, 0x5c) r1 = getuid() fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', r1, r2, 0x100) 18:01:17 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000240), 0x4) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) 18:01:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000002c0)=0x61) read(r1, &(0x7f0000000040)=""/11, 0xb) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) ioctl$TCSETA(r1, 0x5406, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4) r3 = syz_open_pts(r1, 0x0) write$P9_ROPEN(r2, &(0x7f0000000300)={0x18, 0x71, 0x2, {{0x0, 0x0, 0xd2d}, 0x80000001}}, 0x18) r4 = dup3(r3, r1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x10, &(0x7f00000000c0)=0x1, 0x4) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000140)) 18:01:17 executing program 3: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffe97) mprotect(&(0x7f00004e6000/0x9000)=nil, 0x9000, 0x1) select(0x40, &(0x7f0000000000)={0x6, 0x3, 0x5, 0x4, 0x5e, 0x9, 0x4, 0x4}, &(0x7f0000000040)={0x100000000, 0x2, 0x7fff, 0xba, 0x9, 0x3f, 0x6, 0x6}, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x5, 0x6347264d, 0x1, 0x867, 0x2}, &(0x7f0000000100)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@loopback, @in6=@remote}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) 18:01:17 executing program 0: r0 = timerfd_create(0x0, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x6) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000140)={@multicast1, @local, r2}, 0xffffff5a) r3 = openat$cgroup_ro(r1, &(0x7f0000000280)="696f2e617400d220a54252dadc8c56e6855a5b8322c51a1932331ca45558d17d9cebe7d1eaf1a6425ad5e5c900d13ac79de251b8488a4243375f6a9ea49ecad5be632e9fbf882fb2150df9abe6dbdff60000", 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) fcntl$setstatus(r3, 0x4, 0x42c00) fcntl$setstatus(r0, 0x4, 0xc00) pwrite64(r0, &(0x7f0000000180)="9428dcbb8176b59b08cc52d8de5ab557f47122a8b4b34b611299a4768bd50a8fc98383575c3c300d0c82b431dd6321f9c005651e7a238226e1cb8bbe98ab3e3134c8909ae6b5ffbcd441600e1132d6d62e54bb2afe8c5a884b59689c04abff772eba22f6ba56266d3cb17a2a6ed58a49f9ebd35fc0d0c923843a282aaa1123cd7a4cc010eb42298ed7b3e03b3ca3893d6412a0798d3dd2e0768202790ffd98c5aa3345959c57fb5ba392794a1fe6205a7920ba3bd6d94e1533f94212b94fafb0567779c67bfcdfcc1b0d4351e6017a8c34e2eb6398ba5bd165463f21da732c42f0200f1b5a24bbdf1027cce0cfcd5da6fd6a6373f64b66020a3c2aa0474b01", 0xff, 0x0) timer_create(0x5, &(0x7f0000000000)={0x0, 0x20, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {r5, r6+30000000}}, &(0x7f0000000380)) 18:01:17 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x80000000, 0x4) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7f) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) dup(r2) sendfile(r0, r2, 0x0, 0x7f3) 18:01:17 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = userfaultfd(0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) setns(r3, 0x4020000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r1, 0x0, 0x2000000000000002, &(0x7f0000013ff4)={@remote, @remote, @dev}, 0x36cde93d308319ab) close(r1) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) dup3(r1, r2, 0x0) 18:01:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$getown(r1, 0x9) capset(&(0x7f0000000080)={0x19980330, r2}, &(0x7f00000002c0)={0x400, 0x6, 0x2, 0x80000000, 0x5, 0x2}) recvfrom$unix(r1, &(0x7f00000001c0)=""/254, 0xfe, 0x101, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_getnetconf={0x14}, 0xff76}}, 0x0) getpeername(r1, &(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000380)=0x80) 18:01:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x23, &(0x7f0000000100), 0x10) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x7}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r4) 18:01:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000140), 0x10000) r2 = socket$inet6(0xa, 0x401000000000002, 0xf800000003fffffd) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@dev, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, 0xe8) 18:01:17 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x2}, 0xc) [ 91.931780] capability: warning: `syz-executor4' uses 32-bit capabilities (legacy support in use) 18:01:17 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0xa001, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r2, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x112, r2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0xd8, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x28, 0x28, &(0x7f0000000140)=[@ptr={0x70742a85, 0x1, &(0x7f0000000100), 0x1, 0x3, 0x17}], &(0x7f0000000180)=[0x38, 0x38, 0x40, 0x38, 0x38]}}, @increfs, @free_buffer={0x40086303, r4}, @decrefs={0x40046307, 0x2}, @release={0x40046306, 0x3}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x38, 0x28, &(0x7f00000001c0)=[@fda={0x66646185, 0x5, 0x4, 0xb}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000000200)=[0x0, 0x20, 0x0, 0x48, 0x0]}, 0x2}}, @request_death={0x400c630e, 0x4, 0x1}, @increfs_done={0x40106308, r5, 0x1}], 0xc9, 0x0, &(0x7f0000000340)="2189085c869d4be027f2ab3dc727918651c6924ef1535db57c0f24397d7468b0631fb7c7d1cd78857a79492580c69065e2f9391f5c0b61baea9abce9f47aa5848ecf1f3817ac45c4fbcf11e099e43aa87391ec7ee5e26bbf14168846812a74a858bc1525e3942c3ea7049fbdb155ec718016c56c4b52074b877935b4c4afde7106549c92bc5c558ea1cfc52927306eb5987b9afc7965d8337a22188b6494ad1a5d03d6a49ad39f14d5b7ec223879e004b34d5a67f34a5458c09ac813ccc59f0e81c0d31dd7c69beefa"}) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fallocate(r6, 0x20, 0x0, 0x10000) 18:01:17 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="006400ecff0345") getdents64(r1, &(0x7f00000002c0)=""/66, 0x146) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) getdents64(r0, &(0x7f0000000080)=""/528, 0x276) 18:01:17 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000040)=0xfffe) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000140)={0x5, 0x100, 0x89}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x412, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x6, 0x4) setns(r1, 0x1ffffffb) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'bridge_slave_0\x00', 0x1502}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) creat(&(0x7f0000000040)='./bus\x00', 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'osx.', '!nodevvboxnet0userself\x00'}, &(0x7f0000000200)=""/194, 0xc2) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="dd3614000000000000000000b5da852b36a7f4f50d82097b33c26bb65ad852981549ae7ed69e27f4f055d8bbdcd395b551b80ef51957ebe09ce9032c1cf6bfd6de672e18f4e4db83d7cef2cf68fb884a08b9d53c2e27e2dba1b10318e156bd9d6907964c36785912b9c864fc36b5a7fbb6492f156ff78253a58db331fb6d6c8f37509addcb1013786ac8a918d6cd686d1202c6746c7b01aa4244620b66d88830834940ba5d669834ddbe73c7fd2ad193e9ad42a9a0989759dd1fbf796bf8c85cd9b6f683b69de1c60b355d09402fd7530278b028bd8dac1c5110a2a8a0e0aebb4017a67ac4"], 0x21) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000180)={0x0, 0x1f, 0x3c8}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000380)=0x7) sendfile(r4, r4, &(0x7f00000000c0), 0xfff) stat(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r5, 0x8) ioprio_set$uid(0x0, 0x0, 0x80000002) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 18:01:17 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x800000000000) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x5) [ 92.158658] syz-executor2 (6070) used greatest stack depth: 22176 bytes left 18:01:17 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = add_key(&(0x7f0000943000)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0xa, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") recvfrom$inet6(r2, &(0x7f0000000000)=""/50, 0x32, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) keyctl$get_security(0x6, r1, &(0x7f000027e000)=""/87, 0x152be1cc) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @dev}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @dev}, 'lo\x00'}) 18:01:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCFLSH(r0, 0x540b, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 18:01:17 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xfffffffffffffffe) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_emit_ethernet(0x5a, &(0x7f0000000140)={@dev={[], 0x21}, @broadcast, [{[], {0x8100, 0x1000, 0x4, 0x3}}], {@canfd={0xd, {{0x0, 0x4, 0x8, 0x1000}, 0x3e, 0x2, 0x0, 0x0, "9319e0f31ac77bd888f670da35e1088a4c7f583fa43db442b3038ba68d2904f77ab2a02a09bac6df9a32e822551b23c3129d588cf0d72b527ac3eded7201b489"}}}}, &(0x7f0000000240)={0x0, 0x1, [0x1dd, 0xa84, 0x46a, 0x26]}) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e23}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c7465720000000000d7facef62b3401dc070000000000000000000000000000000000000000005c000000acea888219f0b12a53bf69de00c84d86fa31c39c530f8f2afd498176d7eabdf2211906e61e7925cc762cce5ae91325744e9d7d161ae7ebc8bf5dc64a86f35f4d5d4af9a23297b75be76b2c6d00"], &(0x7f00000004c0)=0x80) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4a02001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002cbd7000fcdbdf250e000000380002000c0006004000000008000bea0900000014000100ac1414aa00000000000000000000000008000400ffffff7f080007000100010008000400c8fcffff3828400e2f2b1a291704da6093056e8f319b8a395941e03d8ac294cc568977d88f112a3a1143fdfe7ff8b9851888228eee7abc2b33d1752e0c8c0061cbbef6b661c777e1dc33f972544c091fba96fa9ec2bd4d9dbc46401748af359b06df0f8b0ff588b7725eab0e05d61413022f36b106c89fc81db973dc90cac0846eca4626c4c0af059a3c47f5c43f752c058f5e64722bd358c7996fcad8ab1c02cc42892f2ab8a0965b2145a25432c95644c6c0075c70a977f38ce8898de5583c780ad5b8722ba84e676c8e951b59adb6f32cd7a2e2e0dfac5b911d098316eb74854da62a2c91adea23fef9100cc3841ded95dbcc041c14eea7b865067df0206bf31732ddda25acbaa93613d4c1d5ee21aa4024b1929d953e29b670666b11389911864ba7a8975e9d0d681191d04ad10e631725c9cdf456cf1e7b"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "b441d632cdbbcb211363807aec73d3883762a61dc02d349bfa3ac974b987aa7fb97eb324d594fbbb77bab759418aa8d451d921e8f5d2cf2b08292111701192e97cac366dd3eb2e0fb039e58314ef4709c5f3556db6a1ab6b4fb2bdd83cdc26e8395ec4984ec3faf71a611d1569545d654cded93be827a85188b803c19c1b56aab522862a718b81e512b49690994d3425e33bd93f0e744c66a083c1f9f1bd7bb8f9e123c08f3f041ed3fdc058136cf0071a47cc0e38720a12e11e842a7b5b26dff07f578fdb9a7b14662a625c1ee76c41ccb2b1fc6376aa718e1067b9e4af511ef5b360dbfad326108bb033db193dab27974eb8c462739eaee51d87f31c516e7e391073770da3202e02c41a7277c847df24bd5b0a7ab6e252f3c8ebf00688cc55311d887e8bfd95a7f4c6a126af3fe26714ddb869c66d18f870631bbd497e8a06881b754ecdcdd0dcffc51cd52a6b560f8d64b63a1674745edc5f53b18a8ffcc5c2fbc4d2bbcc2faf3c189d9b36c0655d1394f5c127ec86b8a764a87b546c2b6ac37d0a8ec3edd7cda6f930570763dbdc0640d219749bd57c7c89eaadfdae41d654a46b17be069a32a7d94d29b612fbe61b8bd11a2d10ba5d4ac7014fc0465c3f144598bd1f913343e7293711040eee0ae8df1e49f04ed1037d4b742aed0e932116060aaf6b985238d2e10fb5b11d19d7801befed4833287d96a85a7cdd9e211a672760335655576fc0fa0336621c2b2b1018ef71bb5077c67ee5fa8d479d6776013363e98b1f1213712be7e47549b6035459008c509f0f983130a451531381ee3c1ab9e1cbb8e558b56ca1a70939389addc5f9632b37ff3f634abb504bb0be0a51649683f6e29588c15cda40255e173328681884ffef6729e9058c5623e1401fdcc7b8cb5623a8fd725fbeea05fc417c44e46500619218dff7c70aa068994c58883cada505a2aa85b6620dfe9c45b707c9aa1222b86972eae564b28a05ddfa3545df231fde2707d4bf67dc6ba41daba91dee8081e5c7e2bcfbebebd42d5ab8a32d6e098fd57233e3b813dc0d772134775def451823b7fef2bc93da01722cd613b9a3db7e2d4c51fb7b56006ee9cea53b62343599a56167388d45247f9289fb1cab67a7cb0c3665ddf1e1411875b4de3428b32fc6603691a023d8e4cb93c667acb7b535fb5f77af9a49640cbe8ffe3a193cf4df1b556a67cb753c60bdf978b871aa513c07074c6602037ebc32199290e3c7ac6f103ad9358951ad4de0c8f1b34951b0e6a48295975cf08b2c3c95064855fc95317e386f1c18608d1d08699003c998b93332cd316f17a5139d350cbfa9dabc3f77c4197a0186e50913978e980a7a028e7ccdeee718af028200e94a6b3a0ec93ba14b0c64dfaf3967e230d8cf876f26287d436ebc9588b52b43f2380836bfe3"}}}}}, 0x0) dup2(r2, r1) 18:01:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x16}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bridge_slave_0\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)) 18:01:17 executing program 7: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x86000130) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) unlinkat(r3, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, &(0x7f0000000300)=""/4096, 0x1000) close(r0) bind$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) 18:01:17 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5420, 0x40000000004) 18:01:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x59, &(0x7f00000000c0)="e9170ecf4b41c8eb71505f") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20000000002, 0x0) munmap(&(0x7f0000fec000/0x14000)=nil, 0x14000) stat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r2) renameat2(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 18:01:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="04646eaf7b74b62d11e7518a8e5dbebe0e881497ac9e13864c4abe41e26720dd64ec794e676b81237446c2b523b68cf37173feba20f0866515173ea3ea6691133f123ebaf20885b5453d87a057dbe17e0a133abecaf8cbe9485c8af720fae248385f12387e3798179201fa1cabf1a0d79e9d678bb69b72a7feb6a747d88f8c") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0x7dae85f) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) 18:01:17 executing program 3: memfd_create(&(0x7f0000000080)='\x00', 0x1) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) fadvise64(r0, 0x0, 0x0, 0x0) 18:01:18 executing program 2: getpgrp(0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, &(0x7f0000002380)=""/4096, 0x308) 18:01:18 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x20805, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x4e23, @multicast2}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'teql0\x00', r3}) getsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000040)=""/108, &(0x7f0000000100)=0x6c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) 18:01:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000140)='/dev/pktcdvd/control\x00', 0x4800, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f0000000180)={@loopback, @rand_addr}, &(0x7f0000000200)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x400, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0xfffffffffffffcfe, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="5772931e4981a125e1b29f8e1b440e6f93dddef25640942744884a70ad5de87946ccd332a9f4b8e96ddb0d6a7282f2560fa2f842b6ee85132f3f69d3ad80e899dd5052735aae077391a6484a6424beac90660f526912fd82db1da1c909bb7ba24a681a9f7237ea94b9bcd7ce6434fcf61868cf91d2bb01988aa770325e7d2bc74e71936a52a8792180b1d07d5dac1ee1ad65d0a1d13d1043ae9f88d1f5f945155593ec229548f75cbc57f561"], 0x0, 0x0, &(0x7f0000000380)="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"}) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000640)) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)=""/100, &(0x7f0000000300)=0x64) r5 = dup2(r4, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000989e000000"], 0x0, 0x0, &(0x7f0000000300)}) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000000)="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") 18:01:18 executing program 0: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socketpair(0x1d, 0x2, 0xff, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4, @in=@remote}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f0000000080)=0x2, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001010000000000000000e0000001000000000000000000000000ff02000000000000000000000000000100000000000000000a00f00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000001e000000000000000000000000001100dfffffff00000000db67453900000000000000000000000000000000000100000026c2f99cf9d063ce872d13d211728173cd379b9323a62775f431005855ef6c10e2904207b42955dd727c920f0e345af2b5e2359cf41770584796ac26510537327d7cdbbd9d69c0d842e280591219fb23a7ef68eecc5108ddcf0d6dae15cfe6cb6db157aab911ee555e910a5a2d358dbe7a4a2e257a7495974f89497966ce5d560c1b2f69e504191990f060705b09d770055c2db40631ee2f9162b89fdb3facb965f618bd82985229b6284fdc47bf57fb13874670c86468db0afbfe625447faded14251ffb1d1b26c52d147cf994e88aea6dbe859a7abb2f70336"], 0xb8}}, 0x0) 18:01:18 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet6_int(r0, 0x29, 0x7b, &(0x7f0000000040)=0x7fff, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={&(0x7f0000000080), 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=@updpolicy={0xc4, 0x19, 0x209, 0x0, 0x0, {{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x0, 0xffff}}]}, 0xc4}}, 0x0) 18:01:18 executing program 2: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x800, 0x1}, 0x20) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xfff, @empty, 0x3}, 0x1c) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000140)=0xbe2, 0x4) 18:01:18 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x800) fcntl$setsig(r0, 0xa, 0x36) clone(0x0, &(0x7f00000003c0)="3657d0ca8845cd0206c7883b1b81f657f87cef14653173e9ad765e9d37705ffaa0490e", &(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140)) socketpair$inet(0x2, 0x1, 0x4, &(0x7f0000000040)) 18:01:18 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 18:01:18 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000000082002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x1, [0x0, 0x200004c0, 0x200004f0, 0x20000eb8], 0x0, &(0x7f0000000200), &(0x7f0000000440)=ANY=[@ANYBLOB="c0"]}, 0x79) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000000000000000000c737e6e321d22ae6000000000000000000fb4f7222944bbc0e3e6222b27610077ce563735aafbf7b5c81c275281731c0a605a86f15ae22cc946b78f51cdba723965951880fb6ceb81f30cdcffd2b7cdb45c28f0c73045839f8c01677208ceea1c4653ff6daa1fd370f44aed7b70ce18b518db13ba9e89e2d25d85cb86869772292e67fe651468da3ed25941d0e5d630c895ff13619da5ed81f88410408a6cf3c1b4d136426be3f91388c8e910941677937f8b5ee0da40000000000000000000000000000"], 0xff8f) 18:01:18 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) finit_module(r0, &(0x7f0000000040)="766574683100000000ffffffffffef00", 0x1) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 18:01:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10000000000000}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000580)={0x2}) dup3(r2, r3, 0x0) dup3(r2, r1, 0x0) 18:01:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r0, 0x80087601, &(0x7f0000000000)) 18:01:18 executing program 6: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000180), 0x4) r0 = socket$inet(0x2, 0x4000000000000040, 0x100000000000200) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000100)={0xa, 0x2, 0xc2}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) socket$inet6(0xa, 0x805, 0x9b) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000240)) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=""/20, 0x14}, 0x100) 18:01:18 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85714070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000100)={0x1, 0x400, 0x4}, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RFLUSH(r3, &(0x7f0000000080)={0x7}, 0x7) write(r3, &(0x7f0000000040), 0x3a78c311) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) read(r2, &(0x7f00000004c0)=""/250, 0xaf7585ab) 18:01:18 executing program 5: prctl$intptr(0x2a, 0x3) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x2, 0xfffffffffffeffff, 0x6, 0x7f}) 18:01:18 executing program 7: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = add_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)='\x00', r2) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xfff) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) 18:01:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'rose0\x00'}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x178, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0xba, 0x81, @buffer={0x0, 0xf8, &(0x7f0000000400)=""/248}, &(0x7f0000000500)="b2ecf8d6feff2798081c41b6c9912d5e51bd26b41b053efb817e008f5acf7c235a248075119f58939757c3d599ba07b053f8d3a57454681e0711781bdc3959a5dd83abeec8bbabecbf5a815750cf40c9c2e127a4ac8eac115e912e963aac30bf3063a7f3fbc7ebf993927a224654e3c5266fdf2189d5132f523b9e9c41bd88d39767e10716683284da232af3217d422b1896d1d01cb0a46546322df01fb78645a4582902a9fc1e53bc0a3ae754ea843b7001296f4a8d892223ec", &(0x7f0000000240)=""/119, 0x401, 0x10, 0x3, &(0x7f0000000180)}) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000300)=""/214) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000000100)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) fcntl$dupfd(r1, 0x406, r1) shutdown(r1, 0x1) 18:01:18 executing program 2: r0 = memfd_create(&(0x7f00000001c0)="7dbf2a78892d764fd34a556b884fc44e1d3903c25662e82a6cdc43eba6e41224d1a37a7a85f41ecc7110f2d85fcaef1b9d0e50771b4e5b81921550c50e061708af0a75d844397a9e52086a68cea96adaf842848d122eeb959a0ab24dc7d1874ec54f7322fc0cfafe", 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) r4 = syz_open_procfs(r3, &(0x7f0000000480)='smaps\x00') sendfile(r1, r4, &(0x7f0000000000), 0x7fffffff) 18:01:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0xa, 0x1, 0x0) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x48000015, 0x0, 0x0, 0xfffffffffffffffc}, {0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) memfd_create(&(0x7f00000000c0)='/selinux/enforce\x00', 0x1) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40000, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000080), &(0x7f0000000040)=0x14) close(r0) 18:01:18 executing program 7: socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x17, &(0x7f0000000100), 0x0, 0x8, &(0x7f0000000080)) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x7}, 0x4) 18:01:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) r2 = dup3(r0, r1, 0x0) mq_unlink(&(0x7f0000000100)='eth0\x00') getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@multicast2, @multicast1, r3}, 0xc) 18:01:18 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x3}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) flistxattr(r0, &(0x7f0000001400)=""/4096, 0x1000) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffb) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) mlock(&(0x7f0000012000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 18:01:18 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000140)={{0x0, 0x6}, {0x1000, 0xa64}, 0xe07, 0x4, 0x5}) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:01:18 executing program 2: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x8b) sendto$inet(r2, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./control\x00') unlink(&(0x7f0000000080)='./control/file1\x00') pivot_root(&(0x7f0000000340)='./control\x00', &(0x7f0000000380)='./control/file1\x00') close(r0) 18:01:19 executing program 1: r0 = socket(0x10, 0x802, 0x0) getpid() getpid() write(r0, &(0x7f00000000c0)="240000001a0025f0006bb404fe1a1536020b5aff6e10b500000780cc0800010023060000", 0x24) fcntl$setpipe(r0, 0x407, 0x1ff) 18:01:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) r2 = dup3(r0, r1, 0x0) mq_unlink(&(0x7f0000000100)='eth0\x00') getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@multicast2, @multicast1, r3}, 0xc) 18:01:19 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xe6f) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) keyctl$reject(0x13, 0x0, 0x0, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 18:01:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/tcp\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6e3c9c3c352a5bd, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dba7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b7605afb988de9bba6df5fdc54d81bf6ba5629eef628582fba5bf4af44acfe05900", "ee42e3ef1d1772a9432c2203b02ebc218ad791137e2982fcce5d747a3131995a"}) ioctl(r0, 0x5, &(0x7f0000000200)="1581be418d62c2f9dec6bb07417426b1ff540b0bdc283acb4e9caced59053c8cd8d85c15ed1cfb91c96ede6cb625c1d47035238b722604c7a75499a57b5e94ee8eeda28fec7565cc2b6d1d1b048a479e815889a7d13a2ddc34e332eba4a5562795c9667a4da1f318e234f575ecb74ad3ff1c2354fb3e45837ad05b8db0190b430a18402bbe3f7eadabd5961b27ef4b081eba48afe6a6f0d3dd9ab8a2f4bb1d051ff2ba7f0489b9043284e1c6fe772d214eab80f4a17856c7b6da713a152fabcb150e719c51b29c6326a6549c5f4f24cdf73fc041d94a9c7d5eb679b3df82ae124cbbf160883ecc57efc75975f3c1c4415d63") modify_ldt$read(0x0, &(0x7f0000000040), 0x0) 18:01:19 executing program 5: rt_sigaction(0x400008000000007, &(0x7f0000000080)={0x4064f2, {0xfff7ffbfffbff270}}, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x5, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000240)=0x7) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) fchown(r0, r2, r3) [ 93.479489] input: syz1 as /devices/virtual/input/input6 18:01:19 executing program 0: r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) setsockopt(r0, 0x1000, 0x4, &(0x7f0000000100)="87a055ebffa7a0aeaeee29269a129979e47e32f1dfc88f8614dafd2518f513b16a19331d1bd8b6cf10b3b6fe1844e1ac5259e24bd81b5f5e17c27f3c3eb314764cbc434a0c41c164350f15b3c5af529eefa7ce5f94547973a71c59e9d775a33dc47575b798b81880b68bb510dfb2fb3680d0a2c11ea8253efc88356eefdff54cfc7005f72bc1a3af3a99afa9c9415b19715dfbc76bd522187a8ebf3c7491755dd48f772e145e50095b34314fc4786a4c14c3df802d", 0xb5) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f00000001c0)=0xffff) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x80000000000002f, &(0x7f0000b56f40)=""/192, &(0x7f0000000000)=0x1e) fcntl$getown(r3, 0x9) 18:01:19 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x10001) unshare(0x2000003ff) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) signalfd4(r1, &(0x7f0000000100), 0x8, 0x0) 18:01:19 executing program 3: r0 = socket$packet(0x11, 0x200000000002, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x6, @loopback}, 0x1c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400140, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2420080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, r2, {0xfff1, 0xf}, {0x0, 0x5}, {0xfff1, 0x10}}, [@TCA_RATE={0x8, 0x5, {0x2, 0x80}}, @filter_kind_options=@f_fw={{0x8, 0x1, 'fw\x00'}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x800) 18:01:19 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x101080, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/3) 18:01:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x12400, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") personality(0xfffffffffffffffd) timerfd_create(0x1, 0x800) uname(&(0x7f0000000340)=""/176) 18:01:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000080)=ANY=[]}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='tunl0\x00') [ 93.660010] input: syz1 as /devices/virtual/input/input7 18:01:19 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000100)={0x1, 0x6, 0x3, 0x200}) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}}}, &(0x7f0000000400)=0xe8) lstat(&(0x7f0000000440)='./control/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) setresuid(r1, r2, r3) open(&(0x7f0000000240)='./control\x00', 0x8000, 0x100) r4 = userfaultfd(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000480)) unshare(0x40000000) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/access\x00', 0x2, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000004c0)) userfaultfd(0x800) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000200)='./control/file0\x00') write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000040)={0x18}, 0x18) 18:01:19 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0xc0) r1 = socket$inet6(0xa, 0x2, 0x80000001) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000140), 0x3) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a30d6230694cec174446b5fdeb7d1535d247eb9bc35e381762e8bcfbb9bdc34d508813228d54fcff82f49c5ac"], 0x2f) socketpair(0x9, 0x80002, 0xb1, &(0x7f0000000080)) 18:01:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x19, &(0x7f0000000340), &(0x7f00000002c0)=0x1c784da06fb59e6d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20080, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0xc) 18:01:19 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077a6df5ab82b4c4f8d", 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)=""/143, &(0x7f00000000c0)=0x3eb) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000640)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x4000, &(0x7f00000004c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xff}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x8001}}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) sendto$inet6(r0, &(0x7f00000002c0)="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", 0xfead, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x100000002, @mcast2}, 0xffffffffffffff96) 18:01:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x200000) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={&(0x7f0000000000), 0xc, &(0x7f0000000500)={&(0x7f0000000180)=@updsa={0x140, 0x1a, 0x401, 0x0, 0x0, {{@in6, @in6=@mcast2}, {@in=@multicast2, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@tfcpad={0x8}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}}, 0x0) 18:01:19 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="130f9861666a54bdb94ada7d808c0a3fdbd197a668cfc84501826cdf69d176113f5503933742c1abacd089bc85"]}) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000000)=0xbe6, 0x4) 18:01:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000080)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077a6df5ab82b4c4f8d", 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r3 = socket$inet(0x2, 0x200000002, 0x0) r4 = dup2(r3, r3) sendto$inet(r4, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r4, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) ftruncate(r1, 0x40001) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendfile(r0, r1, &(0x7f0000000400), 0xffe4) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getsockopt(r1, 0x9cd, 0x4, &(0x7f00000002c0)=""/242, &(0x7f00000000c0)=0xf2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f00000001c0)=0x1e) getsockopt(r0, 0x1, 0x4, &(0x7f0000000140)=""/44, &(0x7f0000000180)=0x2c) 18:01:19 executing program 0: r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x20}, {0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) readv(r1, &(0x7f0000000000), 0x0) 18:01:19 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mprotect(&(0x7f0000057000/0x3000)=nil, 0x3000, 0x20000000000004) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) [ 93.886223] IPVS: Creating netns size=2552 id=9 18:01:19 executing program 5: r0 = socket(0x8, 0x7fffe, 0x7) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x6, 0xfe09) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffff9, 0x80000100000007}, 0x8) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 18:01:19 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) syncfs(r0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000100)={0x6, 0x7, 0x1000, 0x6, 0x10001, 0x1ff}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0x10) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x7fe) fchdir(r0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000140)={0x16, @multicast2, 0x4e21, 0x0, 'lc\x00', 0x10, 0x2, 0x79}, 0x2c) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xda2}) write$cgroup_int(r2, &(0x7f0000000200)=ANY=[], 0xfffffcf6) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x7fffffff, 0x12) fallocate(r2, 0x11, 0x0, 0x10000) fsync(r2) [ 94.132265] IPVS: Creating netns size=2552 id=10 18:01:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f0000000500)=@setlink={0x40, 0x13, 0x101, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x4, @broadcast}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x23, 0x1, @thr={&(0x7f0000000780)="c0747dd6644333e55b62b1737867d86ad70bf47ea364250b73d8008e74252890c590d95a41a9765e3d36c524ce48bfd7747e232e97f6c5cf93babc78354136e813d2972e04f0b07566c4bf264c3e407d8d856a949230ddff0ad7932b0ce7cc5ff8fa80df591bf148b2fd24bf5e3dc4f0295a425445510278ad9007a89cac5288deae5d5c19e52f363e56b5ce6e2fab8f1cdb3589cb321524ecbd28511b77502812a900f61c82fc86a4ea26106bec659da874c2a44b6719b70a9ea4acc57280f45ad9eb2ad6644383565fda85974fbeef01a70649e59244e7966eaa67f2a922680d1296e82138c6acb9d01f605257e88eee6c5818c0eda8c300a4de78159469fe2296f990b949ef7fe3a7d1b20e5f84abf9f06b22d1b3b65679a71ec0b1da898ae1e712706307d780ba32545c10369b50a7f650805fea198c0c5f025a8f463ddcb31ba2b988e87fd4866173dba8031033138faddcf093fc237a088925664219e27bc594af436ae7eae0952921dd4890b5fd251f593b12835ac0d5900b3e448e0b7ecc4867e9625f60dcb91a6799d3c62ce6b6cde69ec4eed6057b7102e1d25569cfad13c2175c3b568c3ee3e4c840798ebfd544bc92e7c275be9d9f141e101746cafba7da729e2c7d09e8f881391cda854d94d2ab404d85d07175ecea33608960533a074df2bb8446d7031fd2a2075114fdb97ffc3ce6f6b20a5bc305c0c9f6a9c891d4b5a3eae29d37434ee0ea8312d33ceb8e27a6bf2003d9b583c76f4eaeec419cd1b45509d5c5805aba9ac569476bdd7acf99f47bfb42e2c0b151d5230bd80a73690a4d3973c05a378d79ef51e87cd7afa918d83062c60b39f21ba538dbd1a891651120247958852b7b018c3eadf0ee6f43381368755bc2e0249d4706d85645d77f6003b270c09186f95e53fd1c0389a1fbdf5eae32f31a983150a8cfbbdafe7ee5d2d64f3a549ac5a1bd412250e3ef3a42a6f2f55b452e206aefcb959f72883fb49dd884307573e35cfd51e20040a10c50ec2b7517d90e1190942e8ba4b834aaf1ec907084c32627445a19dff0a53b88c4d27f07df710300543b49f32f64bdfeb09b7f386d9b9d306c2ef125679e1e8b361f1cbca1ed3cdcf014536a776cac2816648bea437762b43a1b162d3eaf9348e6b74799f06b332ac2ac43e7d2547d7362f0d1ba27b413022103a9bdb1f945638b2af8f6fd746439b0a30e584f0b13d03f6362c8b0456edceb007a2ae3d4c213b336c5d77af2ffa4ec2cdc16c88ed800e0a73febe8308d173d34d3e2577f4d9657df4a1c3e7d1f94e089a590d9cf1e2b5b83c7dd83b8548d74da54b902cf69ac5bd566d272b55d24eb07005b04cba883e98611dadf3cdb584147385c4a9d97a799f0b05bdff04b03ee9a42e0ee7e0de9733a4f8bd5f39328792968f4b78b6f02918fb17f47893e9829262c6f48bf534f4adb2fbb5e6cafe7e41d7bc382ee3902bb428341ad2b383c458a3f096b319ac565a9be483aaad5355d29302df0c5017fd357b211bab4ec4e9f6e7ba08d91e99b95d872cbe0c76e52fc65b495fcd00efc709fd6c76d3210d608e1cd9f677a8b19182f14db9435b7b31a9a26202b8cf7a1f7e62382cb89faf1a45a4f2916257193c808409a9cfb4db93fb2962381a508a79ad5223a2ecbf03e691358deba61f2b6a0a519bedd99b5ad0dcfda8e0cb07fc84434b429a48ef146a919122f8aaa60cfbe7cfadf2bf8e1d8257746ad4cf23becbbfdee8735a21dfff6884e10b2907417089ca2211c7077446241975fe3782008c8d2e8817ef08bc57921f823cfb60954d467deebd3e24fe0556b487d5238fa96f63dd18b018c8c19d6afb21b360b2eeea093c6b3b7200e943a966d3f490c3debb1911ed52248bc65ca8bb5d5e62470f26b64c736d5e0dc31a9b94d6b46c91aad6d14e0523de4c7c38e4659e3f9bacfbe98efd744630b627c05f907343e8505c23834ecb6c8d011a7c76d059e8dd8b50d0683d066f92e3e350dba888dd8aa6d574b0fa23006cf250f66829a6878ff196a976c8f4aef41ce124212d10ad800c57ee1999b173241d365511c272a9a2081bf2ba6fc646e126bdd472443f5034cbe1306845375d12a9ccd05028e0f3c24f31c93fbe9d7b7c3b95b34c96aa6900026ccf752b8e19e3c0457ce07d2712f02a47b8b8fb06b39d37eff9fcddbfbf23863652a3a3a51a031063ae856c64c49fbbbe41c0817b0c8dce5cd610e0bfdb8cdb2c7de50efa6a40224fd2e7d775bbe56f5b125001df4c8b571358f32806d61552601821ce30ec013780657d528962b991864899cd03ebeedcbace0090adbd232bc8a001b3185709b47a70644037365d94a6a6bf77d26609d056ed1f89bf5638e578864b8958a1be67ddda3885b151ec2450230bddb82f8752222741b17963987fc890a6e34fd7cff17d6f30fb139846419ddadf5742f4ce9f4ed00773d53b791c178a54e28c8ee69040f37964d591b75e0861c461ef0701ee4db7f9b2510b444cb8df1b63617a3a801226f8ca8250883b6c7711011967b53ea1226a896df21aecbe8af40b954fa2b192718b1fd65a6530822e12419654981092cb22e04123f84e777e10b8f4d53e5dcdb55b01fbe8d2de5bb6481710c161b47863ec6dc5bd3de5fbe840e829be5537aeb5788554f246aaafb686108b7f110f4ce719f537ace26300fa25a28d1cb4a06a15b932440e600215c1ec7cee8a57f30823e74834c7fa3c4fcfb8acca06e1d03d0f986ce8119d381c3ec2cef6a6bf7182696f0f4a1df3870b217110f1866c039b069cefe115008459478e1b29708df7c1dd0fb44f0be8927521299ab3c005e91bc5b0515ca2b6c9ec7fc76b522f72c9f11cac023260488cc2b96be7625bf962e4b5e19049e0fcdaf63f98100265871ba433441968125cd0197600d2843d74fb93b2f4ed230ffa26df68eaca427676508604c5ca700b265670ea6349aeb8fe64f0f2e403d403632a07b73cae347100d4110a5c056afbeb4fadc0e1c6210481b72158e10370b5e7759eb4d347abc6f63531ab83284488887cfd435a3b2a9e8f74adc2538ec9c768a0a4c17b90bf0aeb01768b06790dd0e99c8ffad0e6e73eaca7c5effb6cf42a37555eafd187f9455e05393027af32fd740d403e0cf3baf7ee4fd6ffcbe87203bf89df94fe74fce05326c19ba74a9d1430c9346afa966233250878361d36ea9c909f393498fbf0cda06cd63b4f6fb795983f403809100d009740a439a25d641e8498bfde971416f9ae2b8a36676b03d250b57b9d12d7e7d267047ae53e67a1ae63faaae8dd53d752dcc3cbab26ca18ac1c01b1245b77493916b7540f799b5c37593ec8354c4240a0a74c2cfab5451f28502c09231a9e186f0112fb09c4ee55e32757c6bed1fb2de64322e99bd25ef59b9295f092b068974e7888b6bcbb6982b9b90a9b1f94f08fc2bf223fc0b2a4a2b215d02eb58a7065fd58a8c6d18cf261e0bf3552c811f1a848e3250bb25db12a3210234d9f87fb465e8d0cbaa1b58c9179a813b3d64e8862cbf72b26e0f4f3955466b073f5478b91b180cd4c8addfb490d26569b10e7e920ca263d2c5f7e51fed4d8e05ef1d162f2e2aded6c6e98277154cda47e12f6ffc6cc7219aa0348ec7b57a59fca30ef889a82fd3932271658700456aa0cf9b84c5875ca28d18a997d638a30d91bc4739113dd3bf8997c0c837cdf660881888fbda6bbf317d40001ac0b94b42bf8242cbeae4a039bf21e9aff260c03465ba1332cf3af7ab5564f133d00a2b330ddc7915638a2d1e6e5ee89055effc2620eeb5d02ef1daf0e9d7c773b64b90029e4fe5933b98e37a01523d496a815ec2d975b63bef166c179a312d6e7fe4d305d06349e43063a00147dfcb5de6701b7bed810d723b23c83ceb84dca0a0519f6a5671e017926f230a4fd8a6fbecb0df50b81ff9606867cc3074842f3ebcc32a9b6517c07cf17dd71ec2d17cc727c363a27803079daa850e7d71d841ddb14f5521de27b06a1f7a50c591965fbbae02ad18524c8b5ec78fda9ced4d961a36cb0dd8b14f7902a7f8d8e326efeb17419f4297a0db4c0745ec44a0223d8ebb419051eb6409aa89cbe4dfc9741765d75ca903d740a8f3833a85c759dc259799ec186c17ed37e891aff6ab3f5aa84b6b4db649d6e29bb1b68b90576ad820ca891b17b0183966a62a63c05d4f30e0717d362cde7c86f3140a9d450ca64aaca68e3cf0841e540b1f98c1df289cc7377f12ccb25a4f71be82fcc29496cf9b0504bbb6a09a7b84188897e723ac54a7b73a75cb3ce2481b4fc1e914bd6147075a02f1270d0de13b10c600bf3ef1589e8d54565cc8b77fc7e636da0180af28dae7ad8e6a48c5977b7182bb029356da278d300af44bd0915f43103797dfec0334a0e59910f46db458a7c44479df9cae649b2c4bab0930768abfce0b0f4a5baaa91dd40b058e2e4886bef17c3570ca1a670bc006d08e6b99cc9378a6f693057a6aa8a62d8cd602ff7a4fa17d2b6a585a7c4d8a1e9932830ce789bbad190b983858034022a4f1c4db932ad4c3f45e4fe00298e9015712783931c161809622f1da8f31fb3137826f9effc8befeef3e7fcbc7335c99effc24e9d9673defd2b98b7e01b96a4f1df8e5682cead4e687f0b2042d83965aabb3c6ba6939e8b788c113952b6f2af1c05b3f809801e2fc81f738639a44a46d7386d0e756f24cb6172b558c8acbfbd43b30ce88e211ca673ea182f607a54494ff85c3b31989e3bedfcbcf415e042dd15c93b526033f5aa3a7bbe93bdcdb9cd249ef4526d451072cac4610113394d9e90ed5a4958e4b3cc088e6691d7c25e5fccf6931a64b8e5c9c0144ed3cf3a8e9715525b049c17dfe982046589710c964542f39ef544c06ad680d050646a81268c1eaa70b345c608b63a5f1efbe28441b81c2e68964b6df311aaf38ff721e90532b91a9fddc42db4b2d6476ec65f1f50857da3a59b046f24bf983b7985bf05ecc49b15c141221c1f9ede57ef8e5274c25b80667cec803dda05f76df5a8b24f70db1715bcb00210f644c77e51144769ded611e9fd8c573ac0b80428d9d820f40d3e05df7a424f2768a0d9540c71dc309dec886957f3f46650d8dfbd4711dfb0c61fb34990148cba220cae28b1f77f9987af90e3edcd175c4296e600902f096deccc3e057d181369b52c66a9d9eae9e87ea36b2c6546b7bc5253d40370e430429b450459401ac17ce4a5e30581e15c924b3ddbd25b70f8cd1b595770d4a8c37f66274499dee47fc104a2748a9b36ae2d55e13ca1a1e96f42a6c9aad009c98dcfc4f2110f02e0f23a85b678a7a53677ede9623b9fd42ca6fbb8241c06af0570e9723952edc3ad4ffe7707763dc1114a87b7d667b3468fb9bdd6e13f97db750e9676ec9a9ca4361f2d8a195bec6c05c230ef964c3e994fcc18390fa6f69bfa17671ce25e48d3dd88e32abfbbfc15964b56cdac2dd82e17e8c2f655dc621bec8d62d59fcc06cfeab291a4b957daed89ea092660caffb546a82b459a98cf6214be7248a3a544dbf74d258c0aa66996c9d353b4c4049b03e287382516af1bf29287a9a5b2566804e377d462c64dfc22e15e949beb3d609471b36fb8d292aff9a7d1af7f60f71734cba4fe7755c5061492668d3c8ab648ec3c299033cf66d59bbe6febbbf6de96eb0ace130eaf480161e18bec1f81f8b41967a9e7f445dac78b6460f6750eb49694603476e53a3881901002072ec52ce1d3186daac507d7c6a23ba27113d680d8769c55c26401304e83cdf9405e830b0332ffa", &(0x7f0000000000)="f250cdbd38deed77398b0ec0c5d6d80db0f4705bceb1967fc8a9603d3d84cad92b2fb257"}}, &(0x7f00000000c0)=0x0) timer_getoverrun(r2) timer_settime(r2, 0x1, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) 18:01:19 executing program 7: r0 = socket(0x18, 0x0, 0x3) setsockopt(r0, 0x100, 0x3, &(0x7f0000000000)="be1663942332c5edaecf5e4ef3605ce08be5adec894cb589e25d78fb52888af2", 0x20) connect(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x12) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000080)=""/167) 18:01:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x7fe, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = socket$netlink(0x10, 0x3, 0x0) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8}]}, 0x30}}, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x1020}) 18:01:19 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$selinux_context(r1, &(0x7f00000001c0)='system_u:object_r:chkpwd_exec_t:s0\x00', 0x23) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x8, 0xfffffffffffffff9}) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000100)) 18:01:19 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x602080, 0x0) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x1}, 0x7) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x2, 0x6, @local}, 0x236) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000000)={{0x3c, @multicast1, 0x4e23, 0x4, 'wrr\x00', 0xc, 0x9, 0x51}, {@remote, 0x4e20, 0x2000, 0x4, 0x20, 0x3}}, 0x44) 18:01:19 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x189040, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="00000001c956000000000000"]) 18:01:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00') setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f00000000c0)=""/192) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x0, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000580)={0x0, 0x7, 0x0, 0x5, 0x1, [{0xebed}]}) recvmsg(r0, &(0x7f0000000940)={&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000840)}], 0x1, &(0x7f00000008c0)=""/81, 0x51}, 0x20) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000a00)={'broute\x00'}, &(0x7f0000000a80)=0x78) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000ac0)=0x2) syz_open_dev$sndseq(&(0x7f0000000d00)='/dev/snd/seq\x00', 0x0, 0x100) ioprio_set$uid(0x3, 0x0, 0x4) 18:01:20 executing program 4: unshare(0x600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000440)='\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000400)=[r0, r1, r2]) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 18:01:20 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x30133, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') preadv(r1, &(0x7f00000017c0)=[{&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f00000014c0)=""/223, 0xffffffffffffff6a}, {&(0x7f0000000480)=""/224, 0xe0}, {&(0x7f00000016c0)=""/254, 0xfe}], 0x7, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000040)={0x2b, @broadcast, 0x4e20, 0x0, 'ovf\x00', 0x1, 0x5, 0x4f}, 0x0) 18:01:20 executing program 1: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000000c0), 0xc, &(0x7f0000001640)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="100f0038eed5309efd90e7aab9dc"], 0x1}], 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) [ 94.510327] mmap: syz-executor0 (6377) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 18:01:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000340)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1', "a88f5c78f59205fbe7b7c8338fcdeb41109f121674f0b9b1e6ce6eb54a32d7923d87ed1fadcb8daca8c4a82ff96f0248d5d411a50f48dccf62983c6d3e27accf502e2d4c2e8c36a8cbff7c584df90ef55d9f35f5c6fa3b7f00263c43a8485296f91b39027e6b22700123939d9a7cff8becd8b36b5dbfb544636e83d3f36702038aec4493ed24bc7b419aafc058076461123cbe666c142065e1e2e16ba787af97d0962cad7cdfbcf1578b2603a22e188114b6223b277d544b24e11a79aa44e63ae4800379ee297e313132d76f5d63943cef6f3b734c1d2a3e4e33a12a5e9c9b6bf240196d13ef99990854151a7fc1201556763c"}, 0xf7) close(r0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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") 18:01:20 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000040)=""/32) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000000c0)={0x1, 0x0, [0x0]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x1}, 0x20) 18:01:20 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x8000004}, 0x2f) readv(r0, &(0x7f0000000000), 0x1f5) write$evdev(r0, &(0x7f0000000000)=[{{}, 0x2, 0x3f, 0x8}], 0x18) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{&(0x7f0000000080)=@pptp, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/69, 0x45}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/18, 0x12}, {&(0x7f00000002c0)=""/242, 0xf2}], 0x4, &(0x7f0000000400)=""/179, 0xb3, 0x1}, 0x8}, {{&(0x7f00000004c0)=@can, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/157, 0x9d}], 0x1, &(0x7f0000000640)=""/37, 0x25, 0xffffffffffffffc0}, 0x10001}, {{&(0x7f0000000680)=@sco, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/145, 0x91}, {&(0x7f00000007c0)}], 0x2, &(0x7f0000000840), 0x0, 0xe9}, 0x20}, {{&(0x7f0000000880)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/130, 0x82}], 0x1, &(0x7f0000000a00)=""/196, 0xc4}, 0x4}, {{&(0x7f0000000b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b80)=""/11, 0xb}, {&(0x7f0000000bc0)=""/36, 0x24}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/26, 0x1a}, {&(0x7f0000000c80)=""/185, 0xb9}], 0x5, &(0x7f0000000dc0)=""/222, 0xde, 0x2}, 0x3f}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000ec0)=""/239, 0xef}, {&(0x7f0000000fc0)=""/138, 0x8a}], 0x2, 0x0, 0x0, 0x7ff}, 0x7fff}, {{&(0x7f00000010c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001140)=""/215, 0xd7}, {&(0x7f0000001240)=""/188, 0xbc}], 0x2, &(0x7f0000001340)=""/196, 0xc4, 0x7ff}, 0x800}, {{&(0x7f0000001440)=@sco, 0x80, &(0x7f0000002a40)=[{&(0x7f00000014c0)=""/143, 0x8f}, {&(0x7f0000001580)=""/93, 0x5d}, {&(0x7f0000001600)=""/55, 0x37}, {&(0x7f0000001640)=""/253, 0xfd}, {&(0x7f0000001740)=""/191, 0xbf}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/177, 0xb1}, {&(0x7f00000028c0)=""/196, 0xc4}, {&(0x7f00000029c0)=""/67, 0x43}], 0x9, &(0x7f0000002b00)=""/4096, 0x1000, 0x9}, 0x5}], 0x8, 0x40012122, &(0x7f0000003d00)={0x77359400}) 18:01:20 executing program 2: r0 = inotify_init1(0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r4 = request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)='system\x00', 0xfffffffffffffff9) keyctl$search(0xa, r3, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, r4) process_vm_readv(r2, &(0x7f0000000200)=[{&(0x7f0000001300)=""/4096, 0x20002300}], 0x10000000000000fc, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0xfffffe08}], 0x1, 0x0) [ 94.569286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 18:01:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/24, 0x18) getdents64(r1, &(0x7f0000001300)=""/4096, 0x817) getdents64(r1, &(0x7f00000001c0)=""/210, 0xd2) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x40000, 0x0) 18:01:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket(0x2, 0x1, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000002c0)={'lo\x00\x00j\x00\x00\x00\x00\b\x00', 0x800}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'lo\x00', 0x10000}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@empty, @empty, @remote, 0x8, 0x7, 0x18a65376, 0x400, 0x28c, 0x80, r2}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000200)) 18:01:20 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) readv(r0, &(0x7f00000007c0), 0x0) 18:01:20 executing program 3: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x400, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/73) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x5) ioctl$TIOCSTI(r1, 0x5412, 0x7) [ 94.673590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 18:01:20 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x800) setsockopt$inet6_buf(r0, 0x29, 0x44, &(0x7f0000000080)="526146b97420a43ea2a4da8a7069693d848d64bc04e5165191d8c2a1a2339fa5a5ff7f04794d812c9dcbe5c45256771b91eab9551c8e5bafd657fe553946db86860027519f1a6ee668afbfc98b63661cd5ba394c99", 0x55) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/context\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f00000001c0)=""/4, &(0x7f0000000200)=0x1a7) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x408000, 0x0) renameat2(r2, &(0x7f0000000180)='\x00', r3, &(0x7f0000000280)='./file0\x00', 0x3) 18:01:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000001c0)=""/172) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) write$selinux_access(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x59) 18:01:20 executing program 4: timer_create(0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="a9bc0da5a5d4a62b76160cc629e08f4f1b66a234b5834ce24c99af69909742466e7b56fe691188d10fb37e8ae51ac68c89a8040e6b85a2088e8132fc9fada504b061719f291cd97d6245600d4f090fcede60e080b630e4c7672e03ddc44b83fe3ec8bde088bf1dfdf87e9ff2f5684a8466970c3036c3ac3a344e73a8aecbca47ea9a433dbb320b433f20b028734a2f82726cb65369db9f83", &(0x7f0000001000)}}, &(0x7f0000001100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setitimer(0x0, &(0x7f0000000080), 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0xffffffff, {{0x2, 0x4e20, @remote}}, 0x0, 0x6, [{{0x2, 0x4e22, @local}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}}, {{0x2, 0x4e23, @local}}]}, 0x390) 18:01:20 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@get={0x1, &(0x7f0000000140)=""/39, 0x7}) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000002e0007031dfffd946fa2830020200a000900000006000000000000000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x18}, 0x40}, {0xa, 0x4e22, 0x3, @loopback, 0x401}, 0xffffffffffffff59, [0x9, 0x8000000000000000, 0xffffffffffffff7f, 0x3, 0x6, 0x1, 0x4616f780, 0x2]}, 0x5c) 18:01:20 executing program 1: r0 = eventfd(0x0) eventfd(0x5) fgetxattr(r0, &(0x7f0000501f7d)=@random={'security.\x00', '\x00'}, &(0x7f0000e90000)=""/169, 0xff93) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x28f, 0x0, 0xaf7a, 0x8}) 18:01:20 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000000)={0x6, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x165) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f00000001c0)=0x114) 18:01:20 executing program 2: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="30042cbd707019ade5409400fcdbdf25010000000800020002000000080002000200000008000300020000000400000000000000000000000800030029000000040005000800"], 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r2 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0xf5}, @val={0x1, 0x80, 0x6, 0x6, 0x5, 0xb2f8}, @x25={0x0, 0xff, 0x37, "730106e3c055012840875fd266b981b9c6ecc6379ec19273472d374e1f13a956c38a571d89c68d0c03d8be156d49abee245e170099a7e2afec8ed1aefdcf2b4a2c3d17061b2827fa25f0234f12272e640c030d61d91434785fe5ca2a349f07a08e564c84a757563bf812b87edcf2c90c2609c5bb66656504502a1f04ee1fd181b390625f92441948cf1b28f0ed70261113508a7c211501bf6668a5468f5fbef0b86c5e4bea3edfb8c6e1e02cda08b962049c"}}, 0xc3) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x4a48b125e13656b}) 18:01:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000001c0)=""/4096, &(0x7f0000000100)=0x1000) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300091000000000000000000000000200130002000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170400000000000000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 18:01:20 executing program 3: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf8) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 18:01:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp6\x00') preadv(r0, &(0x7f0000000100), 0x2000000000000314, 0x0) select(0x40, &(0x7f0000000000)={0x6, 0x8, 0xb0b2, 0x10000, 0x4, 0x9, 0xbeed, 0xf26}, &(0x7f0000000040)={0x0, 0x8, 0x4, 0x80, 0x2, 0x4, 0x0, 0x20}, &(0x7f0000000080)={0x8a, 0x6, 0x4b03fd79, 0x80b7, 0x3, 0x5, 0x6, 0x9}, &(0x7f00000000c0)={0x0, 0x2710}) 18:01:21 executing program 6: r0 = socket(0x0, 0x2, 0x49c) write(r0, &(0x7f00003fe000)="24000000280007003200000800367700fbffffff0100000000000000ffffffff0100ff10", 0x24) 18:01:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) syncfs(r0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="4062000000000000d7380000000000000700000000000000", @ANYRES32=r1, @ANYBLOB="00000000000001000000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000595500000000000000100000000000000000000000e3ff00", @ANYRES32=r0, @ANYBLOB="00000000020000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00.,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00000000020000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="000000002bad00000000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ba0000000000000000000000000000000000000000000000"]) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) accept4$inet(r2, 0x0, &(0x7f0000000080), 0x800) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) sendfile(r1, r2, 0x0, 0xa5cc550) 18:01:21 executing program 7: r0 = epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x1ffffd, 0x20) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000080)={0x0, 0x99, 0x7, 0x0, 0x12}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000000)={'rose0\x00', {0x2, 0x4e21, @rand_addr=0x2f1}}) sysfs$3(0x3) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000280)={@dev={0xfe, 0x80, [], 0x12}, 0x1f, r3}) ioctl$TIOCSBRK(r1, 0x5427) fcntl$dupfd(r0, 0x5, 0xffffffffffffffff) 18:01:21 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rfkill\x00', 0x40000, 0x0) ioctl(r0, 0x6, &(0x7f0000000280)="eba70e74d887016d0d619ae17683684f1393cbcd610a8a5112d605ca08f31397e8bce521c30dc16ec1eb9495faa676ee59fefdebe18829ce5fdacb39ca69702384fe14bb5292e362c4894960882036a9e2b45e6a14d80a1cb390e4932c23cae3943aff3c5e0e877b8962d0a95328e07e3b1772ef5da32d670ce0ca8bd6e4098b44b38d5c98aaac2db2043df32bc94270cea8c445a1cd001aa5cc76") socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getgid() setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000200)=0x215c, 0x6a) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x80004000001, 0x4) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0xfffffffffffffffe, 0x24) pipe2$9p(&(0x7f0000000380), 0x80800) ioctl(r2, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r3 = gettid() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000340)=0x5, 0x4) select(0xb, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000480), &(0x7f0000000180)={0x77359400}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000280)}}, &(0x7f0000044000)=0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) r5 = socket$key(0xf, 0x3, 0x2) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_gettime(r4, &(0x7f00000004c0)) socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f00000000c0)) sendmsg$key(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0xfffffffffffffffd, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 18:01:21 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x40a800, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x2000000b, &(0x7f00008d4fe4)={0xa, 0x4000004e20, 0x0, @loopback, 0xfffffffffffffffd}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{}, {}]}) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @local, 0x4}, 0x1c) ftruncate(r3, 0x2007fff) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200)={0x9, 0x1, 0x9, 0x43fe000000, 0x4}, 0x14) fchmod(r3, 0x4) sendfile(r0, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 18:01:21 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100000000, 0x7, 0x8000}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x800000c007) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000000a0001000a0a0c00410400000000fcff", 0x58}], 0x1) 18:01:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") fcntl$setlease(r0, 0x400, 0x1) seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) ioctl(r0, 0x9, &(0x7f00000002c0)="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") capget(&(0x7f0000000000)={0x20071026}, &(0x7f00000000c0)) 18:01:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000002a80)={'syz_tun\x00', {0x2, 0x0, @remote}}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x60000) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000140)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0xffffffffffffff8d) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/94) 18:01:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x9) r4 = syz_open_pts(0xffffffffffffffff, 0x240140) ioctl$TCSBRK(r4, 0x5409, 0x47) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendfile(r2, r5, &(0x7f00000000c0), 0x4000000000000003) fstatfs(r3, &(0x7f00000001c0)=""/184) 18:01:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc8070031") setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000280)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @local}}]}, 0x190) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400060000000000a80000000000000000000000"], 0x2c}}, 0x0) 18:01:21 executing program 7: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)="92cb0a08311bfb9fd4f705932925da1ab7402eba10ddaa00b1e621f8c928fd245dbd45f9b093deb7f715a77bd5ee28206682bb04b396ed156ce428800531c546460415c5f82103bdf8275e77b3e6513a72b56287e7161f9cd438178cd4c681f1c381f733fcbecb17736f6c1a292666a2bd3710d79b61b4a745afa2068580bf6df6595141954bab726484ccc00c051a8e419248eaee9a", 0x96, 0xfffffffffffffffd) keyctl$describe(0x6, r0, &(0x7f0000000140)=""/198, 0xc6) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7) [ 95.570579] capability: warning: `syz-executor0' uses deprecated v2 capabilities in a way that may be insecure 18:01:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x49, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, r1}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@rand_addr}, 0x0, @in6=@dev={0xfe, 0x80, [], 0xa}}}, 0xe8) 18:01:21 executing program 7: mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.current\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') accept$unix(r2, &(0x7f0000000040), &(0x7f0000000240)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r3, &(0x7f0000000100), 0x80000001) utime(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)={0x7fff, 0x9}) [ 95.654350] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. 18:01:21 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000007e40)='/dev/ptmx\x00', 0x100, 0x0) mmap(&(0x7f0000aa6000/0x3000)=nil, 0x3000, 0x2000002, 0x3d, r0, 0x1) socket$key(0xf, 0x3, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000080)={0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000007e80)='/dev/ppp\x00', 0x2003, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000007ec0)=0x80000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000007dc0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$VT_DISALLOCATE(r1, 0x5608) keyctl$update(0x2, r5, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007bc0)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/164, 0xa4}], 0x1, &(0x7f0000000200)=""/52, 0x34, 0xfff}, 0x100000001}, {{&(0x7f0000000240)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001740)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/34, 0x22}, {&(0x7f0000001300)=""/236, 0xec}, {&(0x7f0000001400)=""/95, 0x5f}, {&(0x7f0000001480)=""/58, 0x3a}, {&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f00000015c0)=""/133, 0x85}, {&(0x7f0000001680)=""/138, 0x8a}], 0x8, &(0x7f00000017c0)=""/122, 0x7a, 0x3}, 0x7ff}, {{&(0x7f0000001840)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000018c0)=""/220, 0xdc}, {&(0x7f00000019c0)=""/20, 0x14}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x3}}, {{&(0x7f0000002a40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000002ac0)=""/104, 0x68}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/239, 0xef}, {&(0x7f0000003c40)=""/233, 0xe9}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/132, 0x84}], 0x6, &(0x7f0000004e80)=""/45, 0x2d, 0x7ff}, 0xc03}, {{&(0x7f0000004ec0)=@ax25, 0x80, &(0x7f0000007040)=[{&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/111, 0x6f}, {&(0x7f0000005fc0)=""/91, 0x5b}, {&(0x7f0000006040)=""/4096, 0x1000}], 0x4, &(0x7f0000007080)=""/134, 0x86, 0x6}, 0x3}, {{&(0x7f0000007140)=@xdp, 0x80, &(0x7f00000073c0)=[{&(0x7f00000071c0)=""/94, 0x5e}, {&(0x7f0000007240)=""/111, 0x6f}, {&(0x7f00000072c0)=""/198, 0xc6}], 0x3, 0x0, 0x0, 0x7fffffff}, 0x4}, {{&(0x7f0000007400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000007a80)=[{&(0x7f0000007480)=""/180, 0xb4}, {&(0x7f0000007540)=""/100, 0x64}, {&(0x7f00000075c0)=""/98, 0x62}, {&(0x7f0000007640)=""/210, 0xd2}, {&(0x7f0000007740)=""/148, 0x94}, {&(0x7f0000007800)=""/158, 0x9e}, {&(0x7f00000078c0)=""/177, 0xb1}, {&(0x7f0000007980)=""/83, 0x53}, {&(0x7f0000007a00)=""/84, 0x54}], 0x9, &(0x7f0000007b40)=""/128, 0x80, 0x688}, 0x3}], 0x7, 0x10000, &(0x7f0000007d80)) close(r4) close(r3) 18:01:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x9, &(0x7f0000000040)="0a5cc80700315f85715070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00@\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00', 0xfffffffffffffffb}) signalfd4(r1, &(0x7f0000000000)={0xf9}, 0x8, 0x80000) [ 95.714351] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. [ 95.726855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket 18:01:21 executing program 3: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000000c0)=""/4096) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e22, @local}}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)) 18:01:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x8, 0x4, 0x5}, 0x3}}, 0x18) close(r0) [ 95.781098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket [ 95.918688] ================================================================== [ 95.926138] BUG: KASAN: use-after-free in l2tp_session_queue_purge+0xf4/0x100 [ 95.933434] Read of size 4 at addr ffff8800bb0cf900 by task syz-executor6/6530 [ 95.940780] [ 95.942402] CPU: 0 PID: 6530 Comm: syz-executor6 Not tainted 4.4.152-ge5c5f1f #89 [ 95.950001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.959344] 0000000000000000 7639565146df1e2f ffff8800a24f7a78 ffffffff81e15fed [ 95.967374] ffffea0002ec3380 ffff8800bb0cf900 0000000000000000 ffff8800bb0cf900 [ 95.975382] 0000000000000000 ffff8800a24f7ab0 ffffffff8151b489 ffff8800bb0cf900 [ 95.983413] Call Trace: [ 95.985985] [] dump_stack+0xc1/0x124 [ 95.991329] [] print_address_description+0x6c/0x216 [ 95.997974] [] kasan_report.cold.7+0x175/0x2f7 [ 96.004185] [] ? l2tp_session_queue_purge+0xf4/0x100 [ 96.010918] [] __asan_report_load4_noabort+0x14/0x20 [ 96.017650] [] l2tp_session_queue_purge+0xf4/0x100 [ 96.024210] [] pppol2tp_release+0x1ff/0x310 [ 96.030173] [] __sock_release+0xd9/0x260 [ 96.035862] [] ? __sock_release+0x260/0x260 [ 96.041826] [] sock_close+0x19/0x20 [ 96.047084] [] __fput+0x235/0x6f0 [ 96.052179] [] ____fput+0x15/0x20 [ 96.057276] [] task_work_run+0x10f/0x190 [ 96.062989] [] get_signal+0x1190/0x14b0 [ 96.068634] [] do_signal+0x8b/0x1d30 [ 96.073980] [] ? snapshot_open+0x460/0x460 [ 96.079859] [] ? setup_sigcontext+0x780/0x780 [ 96.085992] [] ? exit_to_usermode_loop+0xe4/0x160 [ 96.092492] [] exit_to_usermode_loop+0x11a/0x160 [ 96.098882] [] syscall_return_slowpath+0x1b5/0x1f0 [ 96.105453] [] int_ret_from_sys_call+0x25/0xa3 [ 96.111670] [ 96.113280] Allocated by task 6530: [ 96.116885] [] save_stack_trace+0x26/0x50 [ 96.122796] [] save_stack+0x43/0xd0 [ 96.128196] [] kasan_kmalloc+0xc7/0xe0 [ 96.133908] [] __kmalloc+0x124/0x310 [ 96.139384] [] l2tp_session_create+0x39/0x1030 [ 96.145757] [] pppol2tp_connect+0x10f0/0x1910 [ 96.152007] [] SYSC_connect+0x1b8/0x300 [ 96.157754] [] SyS_connect+0x24/0x30 [ 96.163330] [] entry_SYSCALL_64_fastpath+0x22/0x9e [ 96.170025] [ 96.171634] Freed by task 6542: [ 96.174886] [] save_stack_trace+0x26/0x50 [ 96.180825] [] save_stack+0x43/0xd0 [ 96.186217] [] kasan_slab_free+0x72/0xc0 [ 96.192053] [] kfree+0xf4/0x310 [ 96.197094] [] l2tp_session_free+0x170/0x200 [ 96.203279] [] l2tp_tunnel_closeall+0x2b9/0x350 [ 96.209725] [] l2tp_udp_encap_destroy+0x8b/0xf0 [ 96.216172] [] udpv6_destroy_sock+0xb1/0xd0 [ 96.222250] [] sk_common_release+0x6d/0x300 [ 96.228338] [] udp_lib_close+0x15/0x20 [ 96.234005] [] inet_release+0xff/0x1d0 [ 96.239662] [] inet6_release+0x50/0x70 [ 96.245316] [] __sock_release+0xd9/0x260 [ 96.251131] [] sock_close+0x19/0x20 [ 96.256506] [] __fput+0x235/0x6f0 [ 96.261751] [] ____fput+0x15/0x20 [ 96.266953] [] task_work_run+0x10f/0x190 [ 96.272766] [] exit_to_usermode_loop+0x13d/0x160 [ 96.279297] [] syscall_return_slowpath+0x1b5/0x1f0 [ 96.285990] [] int_ret_from_sys_call+0x25/0xa3 [ 96.292324] [ 96.293949] The buggy address belongs to the object at ffff8800bb0cf900 [ 96.293949] which belongs to the cache kmalloc-512 of size 512 [ 96.306610] The buggy address is located 0 bytes inside of [ 96.306610] 512-byte region [ffff8800bb0cf900, ffff8800bb0cfb00) [ 96.318297] The buggy address belongs to the page: SeaBIOS (version 1.8.2-20180718_090847-google) Total RAM Size = 0x00000001e0000000 = 7680 MiB CPUs found: 2 Max CPUs supported: 256 found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=4194304 = 2048 MiB drive 0x000f2280: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304 Booting from Hard Disk 0... early console in decompress_kernel input_data: 0x0000000003b4f26e input_len: 0x00000000014d0c3d output: 0x0000000001000000 output_len: 0x000000000400ba90 run_size: 0x0000000005755000 Decompressing Linux... Parsing ELF... done. Booting the kernel. [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Initializing cgroup subsys schedtune [ 0.000000] Linux version 4.4.152-ge5c5f1f (syzkaller@ci) (gcc version 8.0.1 20180413 (experimental) (GCC) ) #89 SMP PREEMPT Sat Aug 25 06:48:55 UTC 2018 [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n ftrace_dump_on_oops=orig_cpu oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 nopti [ 0.000000] KERNEL supported cpus: [ 0.000000] Intel GenuineIntel [ 0.000000] AMD AuthenticAMD [ 0.000000] Centaur CentaurHauls [ 0.000000] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x04: 'AVX registers' [ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000bfff2fff] usable [ 0.000000] BIOS-e820: [mem 0x00000000bfff3000-0x00000000bfffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffbc000-0x00000000ffffffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000021fffffff] usable [ 0.000000] bootconsole [earlyser0] enabled [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] SMBIOS 2.4 present. [ 0.000000] Hypervisor detected: KVM [ 0.000000] Kernel/User page tables isolation: disabled [ 0.000000] e820: last_pfn = 0x220000 max_arch_pfn = 0x400000000 [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WC UC- WT [ 0.000000] e820: last_pfn = 0xbfff3 max_arch_pfn = 0x400000000 [ 0.000000] found SMP MP-table at [mem 0x000f2300-0x000f230f] mapped at [ffff8800000f2300] [ 0.000000] Scanning 1 areas for low memory corruption [ 0.000000] Using GB pages for direct mapping [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000F22C0 000014 (v00 Google) [ 0.000000] ACPI: RSDT 0x00000000BFFF3430 000038 (v01 Google GOOGRSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACP 0x00000000BFFFCF60 0000F4 (v02 Google GOOGFACP 00000001 GOOG 00000001) [ 0.000000] ACPI: DSDT 0x00000000BFFF3470 0017B2 (v01 Google GOOGDSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACS 0x00000000BFFFCF00 000040 [ 0.000000] ACPI: FACS 0x00000000BFFFCF00 000040 [ 0.000000] ACPI: SSDT 0x00000000BFFF65F0 00690D (v01 Google GOOGSSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: APIC 0x00000000BFFF5D10 000076 (v01 Google GOOGAPIC 00000001 GOOG 00000001) [ 0.000000] ACPI: WAET 0x00000000BFFF5CE0 000028 (v01 Google GOOGWAET 00000001 GOOG 00000001) [ 0.000000] ACPI: SRAT 0x00000000BFFF4C30 0000C8 (v01 Google GOOGSRAT 00000001 GOOG 00000001) [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 2:1fffd001, primary cpu clock [ 0.000000] kvm-clock: using sched offset of 2043495974 cycles [ 0.000000] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.000000] DMA32 [mem 0x0000000001000000-0x00000000ffffffff] [ 0.000000] Normal [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.000000] node 0: [mem 0x0000000000100000-0x00000000bfff2fff] [ 0.000000] node 0: [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000021fffffff] [ 0.000000] kasan: KernelAddressSanitizer initialized [ 0.000000] ACPI: PM-Timer IO Port: 0xb008 [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] smpboot: Allowing 2 CPUs, 0 hotplug CPUs [ 0.000000] PM: Registered nosave memory: [mem 0x00000000-0x00000fff] [ 0.000000] PM: Registered nosave memory: [mem 0x0009f000-0x0009ffff] [ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 0.000000] PM: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 0.000000] PM: Registered nosave memory: [mem 0xbfff3000-0xbfffffff] [ 0.000000] PM: Registered nosave memory: [mem 0xc0000000-0xfffbbfff] [ 0.000000] PM: Registered nosave memory: [mem 0xfffbc000-0xffffffff] [ 0.000000] e820: [mem 0xc0000000-0xfffbbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.000000] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:2 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 42 pages/cpu @ffff8801db200000 s134152 r8192 d29688 u1048576 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 1935227 [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n ftrace_dump_on_oops=orig_cpu oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 nopti [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes) [ 0.000000] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes) [ 0.000000] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.000000] Memory: 6579080K/7863876K available (41801K kernel code, 6308K rwdata, 9068K rodata, 1868K init, 23696K bss, 1284796K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.000000] Running RCU self tests [ 0.000000] Preemptible hierarchical RCU implementation. [ 0.000000] RCU lockdep checking is enabled. [ 0.000000] Build-time adjustment of leaf fanout to 64. [ 0.000000] RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=2. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=2 [ 0.000000] NR_IRQS:4352 nr_irqs:440 16 [ 0.000000] console [ttyS0] enabled [ 0.000000] console [ttyS0] enabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar [ 0.000000] ... MAX_LOCKDEP_SUBCLASSES: 8 [ 0.000000] ... MAX_LOCK_DEPTH: 48 [ 0.000000] ... MAX_LOCKDEP_KEYS: 8191 [ 0.000000] ... CLASSHASH_SIZE: 4096 [ 0.000000] ... MAX_LOCKDEP_ENTRIES: 32768 [ 0.000000] ... MAX_LOCKDEP_CHAINS: 65536 [ 0.000000] ... CHAINHASH_SIZE: 32768 [ 0.000000] memory used by lock dependency info: 8159 kB [ 0.000000] per task-struct memory footprint: 1920 bytes [ 0.000000] tsc: Detected 2300.000 MHz processor [ 1.111642] Calibrating delay loop (skipped) preset value.. 4600.00 BogoMIPS (lpj=23000000) [ 1.113132] pid_max: default: 32768 minimum: 301 [ 1.113943] ACPI: Core revision 20150930 [ 1.529297] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 1.530832] Security Framework initialized [ 1.531469] SELinux: Initializing. [ 1.532236] AppArmor: AppArmor disabled by boot time parameter [ 1.533290] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.534332] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.538071] Initializing cgroup subsys io [ 1.538844] Initializing cgroup subsys freezer [ 1.539649] Initializing cgroup subsys hugetlb [ 1.540397] Initializing cgroup subsys debug [ 1.541367] CPU: Physical Processor ID: 0 [ 1.542916] mce: CPU supports 32 MCE banks [ 1.543808] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 [ 1.544751] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 [ 1.545856] Spectre V2 : Mitigation: Full generic retpoline [ 1.546767] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch [ 1.547951] Speculative Store Bypass: Vulnerable [ 1.551685] Freeing SMP alternatives memory: 48K [ 1.562544] ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1 [ 1.680858] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.30GHz (family: 0x6, model: 0x3f, stepping: 0x0) [ 1.682545] Performance Events: unsupported p6 CPU model 63 no PMU driver, software events only. [ 1.771151] x86: Booting SMP configuration: [ 1.772087] .... node #0, CPUs: #1 [ 1.773065] kvm-clock: cpu 1, msr 2:1fffd041, secondary cpu clock [ 1.778725] x86: Booted up 1 node, 2 CPUs [ 1.779346] smpboot: Total of 2 processors activated (9200.00 BogoMIPS) [ 1.783645] devtmpfs: initialized [ 1.794359] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 1.795882] futex hash table entries: 512 (order: 4, 65536 bytes) [ 1.797910] xor: automatically using best checksumming function: [ 1.810150] kworker/u4:0 (21) used greatest stack depth: 27920 bytes left [ 1.890859] avx : 25486.000 MB/sec [ 1.892187] RTC time: 18:01:27, date: 08/25/18 [ 1.895505] NET: Registered protocol family 16 [ 1.896822] schedtune: init normalization constants... [ 1.897626] schedtune: no energy model data [ 1.898254] schedtune: disabled! [ 1.903649] kworker/u4:0 (27) used greatest stack depth: 27616 bytes left [ 1.931189] cpuidle: using governor ladder [ 1.960903] cpuidle: using governor menu [ 1.962255] ACPI: bus type PCI registered [ 1.962932] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 [ 1.966012] PCI: Using configuration type 1 for base access [ 1.977780] kworker/u4:1 (68) used greatest stack depth: 27424 bytes left [ 2.238071] kworker/u4:0 (479) used greatest stack depth: 27024 bytes left [ 2.470761] raid6: sse2x1 gen() 4589 MB/s [ 2.640731] raid6: sse2x1 xor() 2471 MB/s [ 2.810716] raid6: sse2x2 gen() 7363 MB/s [ 2.980696] raid6: sse2x2 xor() 4103 MB/s [ 3.150662] raid6: sse2x4 gen() 9665 MB/s [ 3.320633] raid6: sse2x4 xor() 5365 MB/s [ 3.490616] raid6: avx2x1 gen() 9369 MB/s [ 3.660601] raid6: avx2x2 gen() 13498 MB/s [ 3.830562] raid6: avx2x4 gen() 18209 MB/s [ 3.831301] raid6: using algorithm avx2x4 gen() 18209 MB/s [ 3.832146] raid6: using avx2x2 recovery algorithm [ 3.833756] ACPI: Added _OSI(Module Device) [ 3.834583] ACPI: Added _OSI(Processor Device) [ 3.835324] ACPI: Added _OSI(3.0 _SCP Extensions) [ 3.836161] ACPI: Added _OSI(Processor Aggregator Device) [ 3.863174] ACPI: Executed 2 blocks of module-level executable AML code [ 4.807312] ACPI: Interpreter enabled [ 4.808424] ACPI: (supports S0 S3 S4 S5) [ 4.809234] ACPI: Using IOAPIC for interrupt routing [ 4.810720] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug