[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 14.349396] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.794046] random: sshd: uninitialized urandom read (32 bytes read) [ 19.359825] random: sshd: uninitialized urandom read (32 bytes read) [ 20.020630] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.51' (ECDSA) to the list of known hosts. [ 25.650772] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/21 17:40:02 fuzzer started [ 26.929514] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/21 17:40:04 dialing manager at 10.128.0.26:40065 2018/08/21 17:40:06 syscalls: 1 2018/08/21 17:40:06 code coverage: enabled 2018/08/21 17:40:06 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/21 17:40:06 setuid sandbox: enabled 2018/08/21 17:40:06 namespace sandbox: enabled 2018/08/21 17:40:06 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/08/21 17:40:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/21 17:40:06 net packed injection: enabled 2018/08/21 17:40:06 net device setup: enabled [ 31.505609] random: crng init done 17:40:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x10, 0x829, 0x0, 0x0, {0x3}, [@typed={0x8, 0x1, @pid}]}, 0x1c}}, 0x0) 17:40:35 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000a00), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x1, @loopback}, 0x10) 17:40:35 executing program 7: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x5d, 0x279ffffffffffff) 17:40:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x10, 0x829, 0x0, 0x0, {0x3}, [@typed={0x8, 0x1, @pid}]}, 0x1c}}, 0x0) 17:40:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) r2 = socket$inet6(0xa, 0x1080000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") sendto$inet6(r1, &(0x7f0000000140), 0x100000, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 17:40:35 executing program 4: unshare(0x20400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000100)=""/2, &(0x7f00000000c0)=0x2) 17:40:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='stack\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000340), 0x800009) 17:40:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="220000002000070700be0000090007010a00001e00003c0000ff040405000f008000", 0x22) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002480), &(0x7f00000024c0)=0xc) getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003100), &(0x7f0000003140)=0xc) [ 59.117405] IPVS: Creating netns size=2536 id=1 [ 59.195855] IPVS: Creating netns size=2536 id=2 [ 59.229152] IPVS: Creating netns size=2536 id=3 [ 59.263384] IPVS: Creating netns size=2536 id=4 [ 59.298294] IPVS: Creating netns size=2536 id=5 [ 59.342145] IPVS: Creating netns size=2536 id=6 [ 59.399941] IPVS: Creating netns size=2536 id=7 [ 59.447693] IPVS: Creating netns size=2536 id=8 [ 60.155123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.162766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.181921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.214239] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.230920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.273709] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.307049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.327267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.358962] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.417455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.518937] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.543858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.574451] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.593508] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.609604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.628306] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.640653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.650060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.663553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.681390] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.699885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.711734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.741762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.753769] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.814186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.829969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.924655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.949498] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.968465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.991410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.009738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.033863] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.042455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.053589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.063536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.072286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.086777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.111616] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.127548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.136559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.145650] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.167893] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.178138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.185079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.192573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.201508] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.215773] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.225101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.232442] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.244243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.255248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.262822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.270850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.278474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.285935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.294619] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.302666] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.312095] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.329282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.340359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.355920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.363313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.371252] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.379424] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.388977] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.401789] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.413035] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.427973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.436583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.444166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.454529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.465287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.472895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.483959] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.506340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.526819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.534351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.542779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.550445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.560795] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.583567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.594506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.621857] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.630803] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.647740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.661031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.673955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.681579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.752643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.811364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.896777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.908694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.924343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.934165] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.948338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.958988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.558617] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.611403] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.641656] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.665295] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.741990] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.796091] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.805133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.811941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.832590] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.873179] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.884587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.892238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.900296] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.907146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.914127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.972341] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.981133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.988366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.005034] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.013904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.035155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.045916] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 65.108994] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.128801] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 65.137541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.144272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.245509] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.251649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.258705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.325366] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 65.331508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.339925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 17:40:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fcntl$setlease(r2, 0x400, 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='./file0\x00') 17:40:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003000), 0x0, 0x0, &(0x7f00000031c0)) 17:40:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x24) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9}, 0x14) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40)}}], 0x1, 0x0) 17:40:43 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 17:40:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f00000001c0)="7bac60291226e7391e31b0d45bc9164d97b3012726d6003d622b0f8b195a34557a9fc3a3ff2ca4ef31066e78a76d5e1d296b22477c63c8eb7d8a2514ad925ef50fe5636d2d7c562f1a6af30936e6f5cb5d09e67f4dc0c7220c") bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) 17:40:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003000)=[{{&(0x7f0000000300)=@rc, 0x80, &(0x7f00000006c0)}}], 0x1, 0x0, &(0x7f00000031c0)) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x200007fa, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) [ 66.539706] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 66.558839] syz-executor7 (5947): /proc/5942/oom_adj is deprecated, please use /proc/5942/oom_score_adj instead. 17:40:43 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="220000002000070700be0000090007010a00001e00003c0000ff040405000f008000", 0x22) 17:40:43 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, "706f72743100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0x80}, 'port0\x00'}) 17:40:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @dev}, 0x10) 17:40:43 executing program 0: 17:40:43 executing program 1: 17:40:43 executing program 2: 17:40:43 executing program 7: 17:40:43 executing program 0: 17:40:43 executing program 5: 17:40:43 executing program 1: 17:40:43 executing program 3: 17:40:43 executing program 4: 17:40:43 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{}, "706f72743100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{}, 'port0\x00'}) 17:40:43 executing program 7: 17:40:43 executing program 0: 17:40:43 executing program 2: 17:40:43 executing program 3: 17:40:43 executing program 7: 17:40:43 executing program 4: 17:40:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f00000001c0)="7bac60291226e7391e31b0d45bc9164d97b3012726d6003d622b0f8b195a34557a9fc3a3ff2ca4ef31066e78a76d5e1d296b22477c") ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003000), 0x0, 0x0, &(0x7f00000031c0)) 17:40:43 executing program 5: r0 = epoll_create1(0x80000) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000c1d000)={0x20000003}) epoll_wait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0) timerfd_settime(r1, 0x0, &(0x7f0000000540)={{}, {0x0, 0x989680}}, &(0x7f0000037000)) clone(0x0, &(0x7f0000000480), &(0x7f0000000400), &(0x7f0000000580), &(0x7f0000000080)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) 17:40:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in=@broadcast}}, 0xe8) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @local}, 0x1c) 17:40:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000010002908000000000000000003000000080001000a675d07a06279c4a202d26de18b13bfad42ab1d5e4f777c288fc14e2fdbd7b71636ec49d32b1c92cdf265372c5cf48c3d59bbccd659ca670733bd2c3eb8b13b9c1fd6cb63871807243e82f3ca4e9a30cda67446d65c0e08acbb95fefba9127e1990ec2389038122f21f290a78bc5e8da0c07801cd3ca0c4d7c8584cb619ad3338a5a327fe84b04d0ea389a074ae4caf97a27befaecf488516282772eb360000000000000000000000000000", @ANYRES32=0x0], 0x2}}, 0x0) 17:40:43 executing program 6: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0xffffff42}, 0xfffffff4) 17:40:43 executing program 7: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0a5cc80700315f85715070") rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f0000000000)={0x0, 0x0, 0x1}) read(r2, &(0x7f0000481000)=""/128, 0x80) 17:40:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x14, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) 17:40:43 executing program 4: exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r2 = accept4(r1, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x80, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) 17:40:43 executing program 0: 17:40:43 executing program 3: 17:40:44 executing program 0: 17:40:44 executing program 7: 17:40:44 executing program 5: 17:40:44 executing program 3: 17:40:44 executing program 1: 17:40:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f0000001980), 0x0, &(0x7f0000001a00)=""/118, 0x76}}], 0x1, 0x0, &(0x7f0000003fc0)={0x77359400}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="290000002000190000003fffffffda060200000000e80001060000040d000300ea1100000005000000", 0x29}], 0x1) 17:40:44 executing program 3: 17:40:44 executing program 7: 17:40:44 executing program 1: 17:40:44 executing program 0: 17:40:44 executing program 6: 17:40:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f0000001980), 0x0, &(0x7f0000001a00)=""/118, 0x76}}], 0x1, 0x0, &(0x7f0000003fc0)={0x77359400}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="290000002000190000003fffffffda060200000000e80001060000040d000300ea1100000005000000", 0x29}], 0x1) 17:40:44 executing program 5: 17:40:44 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sched_setaffinity(0x0, 0x2, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/240, 0xf0) 17:40:44 executing program 7: 17:40:44 executing program 1: 17:40:44 executing program 0: 17:40:44 executing program 3: 17:40:44 executing program 6: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 17:40:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 17:40:44 executing program 7: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 17:40:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 17:40:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x6) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 17:40:44 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket(0x10, 0x100000003, 0x0) write(r2, &(0x7f0000000340)="240000002100255107000165ff00fc020200000900100f000ee1000c0800060000000000", 0x24) 17:40:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) dup3(r1, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8400, 0x0) 17:40:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8004700b, &(0x7f00000004c0)) socketpair$unix(0x1, 0x2008, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1}, 0x8) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f00000012c0)=@can, 0x80, &(0x7f0000001280)}}], 0x1, 0x0) fcntl$getown(r2, 0x9) recvmsg(r2, &(0x7f0000000440)={&(0x7f0000000100)=@can, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/158, 0x9e}, {&(0x7f0000000240)=""/145, 0x91}, {&(0x7f0000000300)=""/116, 0x74}], 0x3, &(0x7f0000000380)=""/187, 0xbb}, 0x40010123) 17:40:44 executing program 4: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44831, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x4000, 0x0) getpid() geteuid() lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) openat$ashmem(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ashmem\x00', 0x101800, 0x0) r1 = mq_open(&(0x7f0000000700)='}\x00', 0x0, 0x10, &(0x7f0000000740)={0xbc8, 0x0, 0x8000000000000000, 0x800, 0x4, 0x4, 0x80000001, 0xfffffffffffffffd}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fanotify_init(0x2, 0x101000) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/access\x00', 0x2, 0x0) r5 = memfd_create(&(0x7f0000000800)='self\x00', 0x3) r6 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x9, 0x80000000c200) r7 = syz_open_pts(0xffffffffffffffff, 0x200800) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/mls\x00', 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000008c0)='/selinux/context\x00', 0x2, 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0xc000, 0x4) r12 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000940), 0x80800) r13 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000980)='/dev/keychord\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r15 = geteuid() getgroups(0x7, &(0x7f0000000a00)=[0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) r17 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000a40)='/selinux/status\x00', 0x0, 0x0) r18 = perf_event_open(&(0x7f0000000a80)={0x1, 0x70, 0x2, 0x3, 0x6, 0x2, 0x0, 0x8b, 0x40, 0x3, 0x5, 0x4, 0x8, 0x8fb2, 0x4, 0x1ed, 0x0, 0x1, 0x1ff, 0x3, 0x400, 0x0, 0x4, 0x4, 0x2, 0x2438, 0xf7, 0x5, 0xc8, 0x8, 0x7, 0x7, 0x2, 0xffff, 0x8, 0x9, 0x2, 0x5, 0x0, 0xfe35, 0x2, @perf_config_ext={0x0, 0x81}, 0x20000, 0xff, 0x2, 0x7, 0xffff, 0x2, 0x3ff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xdcec771ef3d0f6ad) socketpair$inet6(0xa, 0x3, 0x9, &(0x7f0000000b00)={0xffffffffffffffff}) socketpair$inet(0x2, 0x6, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) r21 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/mnt\x00') r22 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000bc0)='/selinux/access\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000c00)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c40)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000d40)=0xe8) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)=0x0) r26 = open$dir(&(0x7f0000000e40)='./file0\x00', 0x101000, 0x171) r27 = syz_open_dev$binder(&(0x7f0000000e80)='/dev/binder#\x00', 0x0, 0x800) r28 = memfd_create(&(0x7f0000000ec0)='\x00', 0x1) r29 = socket$inet6_udp(0xa, 0x2, 0x0) r30 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/sequencer\x00', 0x1c000, 0x0) r31 = syz_open_dev$ndb(&(0x7f0000000f40)='/dev/nbd#\x00', 0x0, 0x2) r32 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r33 = accept4(0xffffffffffffffff, &(0x7f0000000f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000001000)=0x80, 0x800) r34 = socket$inet6_tcp(0xa, 0x1, 0x0) r35 = getpid() getresuid(&(0x7f0000001040), &(0x7f0000001080)=0x0, &(0x7f00000010c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001100)={0x0, 0x0, 0x0}, &(0x7f0000001140)=0xc) sendmmsg$unix(r0, &(0x7f00000012c0)=[{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000200)="2eba075d7d6ba2b23792f8e78d37935e7f9c91a1b25c1ec10a39be91560fe412c41e128792a3a1671e0bee9f9a6b0cf6d48c7b0e5f385c9121e5a53a3f9c118e7c3c48f060c628cb976e9f02b1d671b8aeb34194dee856d6942cb84c437a94a2d8427211ab8f136ab794c1735623e48dd5977f75b9dc19d32f296065253e50d9e26ad49cb1ec9afc36f5c0f32ea0b9f7300ebfa42d266f48f4da0baffc339ebdab24b027e3dc0446641aad74e2ef", 0xae}, {&(0x7f0000000340)="7ec4b821fe7ae7e141213595562c642f7f0796f08163723cdbfc179289f04cc708a161ad0648f4c29e7ba13033be12f2f7230438a99b90819b0c237cbf07ee0ff99dbbfabff6442923d710da10a64c7cb196f8e0eacc17d36a8c129581b490f7e3fe7527dfafa4a826", 0x69}], 0x2, &(0x7f00000004c0), 0x0, 0x4000000}, {&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000001180)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff, r1, r2]}, @rights={0x20, 0x1, 0x1, [r3, r4, r5, r6, r7]}, @rights={0x24, 0x1, 0x1, [r8, r9, r10, r11, r12, r13]}, @cred={0x18, 0x1, 0x2, r14, r15, r16}, @rights={0x24, 0x1, 0x1, [r17, r18, r19, r20, r21, r22]}, @cred={0x18, 0x1, 0x2, r23, r24, r25}, @rights={0x20, 0x1, 0x1, [r26, r27, r28, r29, r30]}, @rights={0x14, 0x1, 0x1, [r31, r32]}, @rights={0x14, 0x1, 0x1, [r33, r34]}, @cred={0x18, 0x1, 0x2, r35, r36, r37}], 0x110, 0x4040}], 0x2, 0x20000000) memfd_create(&(0x7f0000000000)=']vboxnet1mime_type@\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000100)="050200000000008f00") getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) setgid(r37) socket$inet(0x2, 0x8000e, 0x6) 17:40:44 executing program 6: r0 = socket(0x10, 0x2, 0xc) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000240)={0x60, 0x0, 0x7, {{0x1, 0x101, 0x0, 0x8, 0x5, 0x7, 0x5, 0x9}}}, 0x60) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c00711000189051200080001000404776274e9e4", 0x1f) 17:40:44 executing program 7: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) rt_sigprocmask(0x0, &(0x7f0000055000)={0xffb}, &(0x7f0000c5bff8), 0x8) rt_sigtimedwait(&(0x7f0000000080)={0x6f97}, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, 0x8) pipe2(&(0x7f00000003c0), 0x0) r1 = getpid() r2 = gettid() readv(r0, &(0x7f0000000040)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x100000000000029e) r3 = dup2(r0, r0) signalfd4(r3, &(0x7f00000000c0)={0xffff}, 0x8, 0x0) tgkill(r1, r2, 0x1000000000001) 17:40:44 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = getpgrp(0x0) getpriority(0x0, r1) ioctl$TIOCCBRK(r0, 0x5428) lseek(r0, 0x0, 0x4) open(&(0x7f0000000080)='./file0\x00', 0x2400, 0x0) r2 = gettid() openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioprio_get$pid(0x2, r2) 17:40:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet(0x2, 0x0, 0x10001, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x25, 0x0, 0x0, 0xfffffffffffffffc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80)}}], 0x1, 0x0) 17:40:44 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1e, 0x6, @buffer={0x0, 0xca, &(0x7f00000001c0)=""/202}, &(0x7f0000000000)="beabe7f428dcbde11d47793228ad66ea972287f77dcb009dd3cb29839446", &(0x7f00000002c0)=""/238, 0x6, 0x10003, 0x1, &(0x7f00000000c0)}) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) 17:40:44 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0x130, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[]}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @buffer={0xee, 0xee, &(0x7f00000002c0)=""/238}, &(0x7f0000000000)="da88aa5af197", &(0x7f0000000440)=""/95, 0x0, 0x10000, 0x0, &(0x7f00000004c0)}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f00000001c0)=0x14) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$BLKBSZGET(r1, 0x80041270, &(0x7f0000000080)) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000200)) 17:40:44 executing program 4: r0 = socket(0x2, 0xffffffffffff7ffe, 0x7ff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00004da000), 0x4) sendto$inet6(r0, &(0x7f0000000000)="957a88ca74f9a2c2f1c0faaf226a5916dba79705", 0x14, 0x0, &(0x7f0000000580)={0xa, 0x20008100, 0x5, @ipv4={[], [], @remote}}, 0x1c) 17:40:45 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f59000), 0x4) sendto$inet(r0, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00005c8000)="c340", 0x2, 0x81, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/218, 0xda, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='^', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) read(r0, &(0x7f0000000340)=""/206, 0xce) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2200, 0x0) ioctl$RTC_PLL_GET(r1, 0x801c7011, &(0x7f00000001c0)) 17:40:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001040)="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") ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000300)={0x0, 0xfffffffffffffff9, 0x3, 0x0, 0x1, [{0x0, 0x0, 0xbdcc}]}) 17:40:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$void(r2, 0xc0045c77) r3 = socket$inet(0x2, 0x5, 0x5) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x78, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x20041, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f00000002c0)={0x1, 0xfffffffffffff317, 0xb9dd, 'queue0\x00', 0xffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='highspeed\x00', 0x3b7) sendto$inet(r3, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 17:40:45 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000014c0)="2f70726f632f76657273696f6e000d6de871155d5469176cb885015aa2ac0000b8b5a28a29aecb0700385a51250398ce12d984f52a149eaf9866f3c33828fe73d4f319528bbd89fcefb625adac46df7522ebb23c98ad69bdc82509df6f43791702000000ca02988905b60300000010f890b9f57724340b384eca6136eae4fd4a015e073076b8f1cde45eea0f0f0c3ca64ebdd0cefc0d9e8ea91d0bb3a500000000000000000000000000000000", 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000001580)=""/4096, 0x13dc}], 0x1, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x2, &(0x7f0000000080)={0x8}, 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x19, 0x4) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06055c8, &(0x7f0000000240)={0xf, 0xffffffffffffffe3, {0x56, 0x1, 0x9d9d, {0x5, 0xffffffffffffff72}, {0x0, 0xe080}, @const={0xe9, {0x1f00, 0x7, 0x8001, 0x6}}}, {0x57, 0x8, 0x10001, {0x2, 0x6}, {0x40, 0xffffffffffffe0f3}, @ramp={0x10001, 0xec31, {0x3d15, 0x214, 0x0, 0x1}}}}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) memfd_create(&(0x7f0000000180)="2f70726f632f76657273696f6e000d6de871155d5469176cb885015aa2ac0000b8b5a28a29aecb0700385a51250398ce12d984f52a149eaf9866f3c33828fe73d4f319528bbd89fcefb625adac46df7522ebb23c98ad69bdc82509df6f43791702000000ca02988905b60300000010f890b9f57724340b384eca6136eae4fd4a015e073076b8f1cde45eea0f0f0c3ca64ebdd0cefc0d9e8ea91d0bb3a500", 0x2) 17:40:45 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fgetxattr(r0, &(0x7f0000000100)=@known='security.evm\x00', &(0x7f00000000c0)=""/64, 0x29b) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x20000, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xcf, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x28) [ 68.073173] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 17:40:45 executing program 4: r0 = memfd_create(&(0x7f0000000100), 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) write$sndseq(r2, &(0x7f00000001c0)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @connect}], 0x30) r3 = memfd_create(&(0x7f0000000000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x20002) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd, @time}], 0x30) 17:40:45 executing program 6: timer_create(0x0, &(0x7f0000000040)={0x0, 0x17, 0x0, @thr={&(0x7f0000000000), &(0x7f0000000280)}}, &(0x7f0000000080)) r0 = socket$inet(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000001880)={0x0, 0xfffffffffffffeeb, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000000900)=""/177, 0xb1}, {&(0x7f0000000400)=""/168, 0xa8}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000840)=""/166, 0x18b}], 0x7}, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001300)={{}, {0x77359400}}, &(0x7f0000001340)) timer_settime(0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)) 17:40:45 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) tee(r0, 0xffffffffffffffff, 0x3e, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0xebf, @remote, 0x3}, 0x1c) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) timerfd_create(0x3, 0x800) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000000c0)="6c6b676f6eac", 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x448000, 0x0) 17:40:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x7ffffffc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) 17:40:45 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x57, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f00000000c0)) delete_module(&(0x7f0000000000)='\x00', 0x200) socketpair(0x9, 0xf, 0x7fffffff, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x400, 0x4, 0xff, 0x8, 0x8000, 0x5, 0xff, 0x7f, 0x401}) times(&(0x7f0000000140)) [ 68.180661] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:40:45 executing program 7: timer_create(0x3, &(0x7f00000000c0)={0x0, 0xb, 0x6, @thr={&(0x7f0000000000)="1e12b4eae6d6745e1a791100c3c32d3e997fe3c4e778fc7ccb1281138aff219cd49f6eb254f1b98229483f254a0a2285273858b3d0aa1b3d7125a0aa850376ec5e0f3efbd620797f6644357a99d97024d2ffd262e8e498df764330e79bae", &(0x7f0000000080)="614b3e54203f1b0c38c4c3192a3bf3a93215c405f90fabb687de2c00c484c495a23fbebc1125f5cbfada92e45091ae8e848a7f9e0db869610f"}}, &(0x7f0000000100)) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) 17:40:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0xfffffffffffffffe) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x4b) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46c980040000000000000000000000000000000000000000000000000040000000000000000000000006000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000001c0)) 17:40:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1f000000023b0509000100010100ff3ffe582952ded9063c3c740e913e1d7c5a59d1ca6a2562df8a2d6f5a21c9aa4fc270e14898afbd78bc3cb9912df46a7b9c15d2a5b29ae7a718fe70a7ee8df9be6f1b40650b439857e97e9565c39d89e1ff2b27d5897ddb2b7fc68f4163043dd8e793ff606bffa77456a3bc551a04c7784011c0b85d68375c7b24548121c3eabe652ee9745abc46466a597ea80b", 0x9c}], 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101000, 0x4) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x4) 17:40:45 executing program 6: r0 = creat(&(0x7f0000000000)='./bus/file0\x00', 0x20) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000100)={0x81, 0xffffffffffffffc1, 0xffffffff, 'queue0\x00', 0xade}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus/file0\x00', 0x140, 0x400000001000) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x516, 0x9, 0x8, 0x5, 0x9, 0xffffffffffffff00, 0x19}, 0x1c) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x6, 0x11, r2, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 17:40:45 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xffff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@broadcast, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=@deltfilter={0x600, 0x2d, 0x100, 0x1, 0x25dfdbfe, {0x0, r2, {0xf}, {0x1b, 0xffef}, {0x1f, 0x2}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x59c, 0x2, [@TCA_CGROUP_EMATCHES={0xe4, 0x3, [@TCA_EMATCH_TREE_LIST={0xb4, 0x2, @TCF_EM_META={0xb0, 0x200, {0x8001, 0x4, 0x40, 0x7, [@TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="bedfd224ecec54d8bd", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="9d698b1d"]}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_VAR="7c6f4daf2ccd13", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="8f3ce3bf49889c406c", @TCF_META_TYPE_VAR="0557c0fa4a3ee4875f32"]}, @TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_VAR="d95ede5a4652215a28eb", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="15", @TCF_META_TYPE_VAR="06b83abf", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="468ba0ac636b5f33"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffffffffffffffa, 0x3, 0x2}, {0x7, 0x6, 0x1}}}, @TCA_EM_META_RVALUE={0x28, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="6237fa3789514e71", @TCF_META_TYPE_VAR="1e75df9d", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5]}]}}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_U32={0x20, 0x3, {0x1ff, 0x3, 0x6, 0x40, {0x20, 0x10001, 0x3, 0x100}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe8c1}}]}, @TCA_CGROUP_POLICE={0x408, 0x2, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xbccf, 0xff57, 0x3, 0x2, 0x9, 0x100000001, 0x606, 0x86, 0x3, 0x5, 0x9, 0x5, 0x100000000, 0x3f, 0x54, 0x4, 0x3ff, 0x0, 0x80, 0xa6d, 0xfffffffffffffffc, 0x1, 0x8, 0x97, 0x100000001, 0xd8, 0xfffffffffffff000, 0x7, 0x7fffffff, 0x9, 0x100000001, 0x5, 0x71de, 0x4, 0x18000000000000, 0x6, 0x8000, 0xfff, 0x3, 0xff, 0x100000000, 0x8001, 0x5, 0x4, 0x3, 0x4, 0x7, 0x3, 0xfffffffffffffffa, 0x4, 0x2, 0x2, 0x4, 0x7fff, 0xfffffffffffffffb, 0x945, 0x9, 0x80, 0xffffffff, 0xffff, 0x4, 0x3a1e31aa, 0x7fffffff, 0x0, 0x5, 0x1000, 0xf71, 0x9, 0x80000001, 0x9, 0x3, 0x1, 0xff, 0xf957, 0x9, 0x6da3, 0x10000, 0xfff, 0x100000001, 0x9, 0x8, 0x7, 0xff, 0xff, 0x400, 0x8, 0x1280, 0xffffffff00000001, 0xd3, 0x6, 0x4, 0x800, 0xfff, 0x7f, 0x0, 0x4, 0x0, 0x1, 0x8, 0x6, 0x9, 0x8, 0xffff, 0x1, 0x3, 0xffffffff87bfdd40, 0x8, 0x7fffffff, 0x0, 0x2191, 0x1, 0x6, 0x4, 0x7, 0x3f, 0x3985, 0x3e4, 0xc7b, 0x1, 0xfff, 0x8001, 0x9, 0x4, 0x8000, 0x4, 0x7ff, 0x8001, 0x6, 0x8f7, 0x2, 0x4, 0x7, 0x1, 0x4, 0x1000, 0xfffffffff15354bd, 0x7, 0x400, 0x915, 0x9, 0x1, 0x7f, 0xff9c, 0xdd9, 0x4969, 0x8001, 0x7, 0x200, 0x800, 0x0, 0xfffffffffffffffc, 0x2, 0x6, 0x2, 0x6, 0x5, 0xff, 0x5, 0x0, 0x7f, 0x2, 0x2, 0x1, 0x8, 0x89, 0x6, 0x4, 0xa2, 0xe0000000000, 0x7ff, 0x2, 0xffffffff, 0x4a4, 0x420e, 0x8a4d, 0xb59d, 0x1, 0x4, 0x6ac2357, 0x6, 0x9, 0xfffffffffffffffd, 0xff, 0x101, 0x9, 0x2026772e, 0x5, 0xe3a, 0x3, 0xb, 0x7, 0x9, 0x7, 0x0, 0x0, 0x2ad3552c, 0x6, 0x4, 0x1, 0x3ff, 0x7, 0x0, 0x7f, 0xa16, 0x1, 0x1, 0x3, 0x6, 0xf62, 0x8c99, 0x1, 0x6ea, 0x3, 0x3ff, 0x7f, 0x2, 0x8, 0x0, 0x6, 0xfffffffffffffffb, 0xfff, 0x9, 0xc9, 0x4, 0x9, 0x10000, 0x10001, 0x7fff, 0x0, 0x5, 0x3, 0x800, 0x4, 0x20, 0xa2, 0x4, 0x4, 0xce57, 0x9, 0x100, 0x9, 0x2, 0x82a, 0x4, 0x3, 0x8b, 0x800000000000000, 0x5, 0x9, 0x20, 0x5, 0x5363bfdf, 0x0, 0x7]}}, @TCA_CGROUP_EMATCHES={0xac, 0x3, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, @TCF_EM_IPT={0x1c, 0x5, {0xa43, 0x9, 0x53, 0x7, [@TCA_EM_IPT_MATCH_NAME={0xc, 0x2, 'policy\x00'}]}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd862}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, @TCF_EM_CONTAINER={0x5c, 0x80000000, {0x40, 0x0, 0x6cb, 0x6c040c80, "8de2eec57146e10c5a3e067886497554a86b1ccc728c1b5a71273673e37776df6c4cec53371a3b71a0754ebb04902ca05e7a6e809d6bd42f81e3022c029402da37eddc9fdd817f25c05d42"}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}, @TCA_RATE={0x8, 0x5, {0xa93c}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xab}]}}, @TCA_RATE={0x8, 0x5, {0x7, 0x401}}]}, 0x600}, 0x1, 0x0, 0x0, 0x4000010}, 0x11) vmsplice(r1, &(0x7f00004e8000)=[{&(0x7f0000004980)=';', 0x1}], 0x1, 0x0) 17:40:45 executing program 5: unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f00001a3000)='./file1\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f000000a000)='./file1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000500)) poll(&(0x7f0000000400), 0x0, 0x400007f) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') 17:40:45 executing program 3: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x0, {0x2, 0x0, @rand_addr}, 'veth0\x00'}) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) ptrace$setregset(0x4205, r1, 0x6, &(0x7f0000000400)={&(0x7f0000000380)="c22eff857b9b9cddf63ce088fbdc4e4c2be82e2a3120701a0fedbbcdf9935065ae307de4c77670a8f6a06d592e641dadae206097c1020a1bdc87c46aec36d24ae679a9a52b6e6a737f027a2d1d259a56a080", 0x52}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x6, 0xfffffffffffff597}) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000200)={0x1, {{0x2, 0x4e21, @remote}}}, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) mkdirat$cgroup(r0, &(0x7f00000002c0)='syz1\x00', 0x1ff) 17:40:45 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x8) write$FUSE_STATFS(r0, &(0x7f0000000500)={0x60, 0xffffffffffffffda, 0x7, {{0x2, 0x1000, 0x0, 0x0, 0x4, 0x3f, 0x3, 0x7}}}, 0x60) write$P9_RFSYNC(r0, &(0x7f0000000340)={0x7, 0x33, 0x1}, 0x7) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket(0x10, 0x3, 0xa) getsockopt$packet_buf(r2, 0x107, 0x0, &(0x7f0000000600)=""/67, &(0x7f0000000680)=0x43) acct(&(0x7f0000000380)='./file1\x00') r3 = syz_open_procfs(0x0, &(0x7f00000003c0)="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") sendfile(r2, r3, &(0x7f0000000040), 0xfffffffd) socket$inet6(0xa, 0x6, 0x1000) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000100), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0xd, 0x2, {{0x0, 0x4, 0x6}, 0xf5}}, 0x18) openat(0xffffffffffffffff, &(0x7f0000001980)='./file1\x00', 0x101000, 0x0) ioprio_get$pid(0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x19}, 0x5}, 0x1c) write$P9_RUNLINKAT(r3, &(0x7f0000000240)={0x7, 0x4d, 0x1}, 0x7) getresgid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f00000001c0)) shutdown(r1, 0x4) readv(r4, &(0x7f0000001880)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/59, 0x3b}], 0x2) 17:40:45 executing program 0: r0 = socket$packet(0x11, 0x800000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xe, &(0x7f0000000100)=@req3, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffd) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@can, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/50, 0x32}, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f00000000c0)) 17:40:45 executing program 3: syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) fcntl$setown(r0, 0x8, r1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000000)={0x1, 0x329, 0xd5d, 'queue0\x00', 0x7ff}) 17:40:45 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x200000)=nil, 0x200000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(r0, 0x8, r1) 17:40:45 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='jfs\x00', 0x80000, &(0x7f00000003c0)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000000)='./file0/file0\x00', 0xfffffffffffffffd) 17:40:45 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x7) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x410182, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x6, 0x8000) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) capset(&(0x7f0000000100)={0x19980330, r3}, &(0x7f0000000140)={0x1, 0x1, 0x81, 0x9, 0x80000001, 0x2}) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@local, @empty, @mcast2, 0x20, 0xfffffffffffffffe}) setsockopt$inet_group_source_req(r2, 0x0, 0x0, &(0x7f00000001c0)={0x1, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @remote}}}, 0x104) 17:40:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r0, &(0x7f00000006c0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000080)={0x30c, 0x19, 0x0, 0x70bd28, 0x25dfdbfe, "", [@nested={0x10, 0x31, [@typed={0xc, 0x5f, @u64=0x9}]}, @typed={0x14, 0x21, @ipv6=@mcast2}, @generic="08df6abe94a3e11b52f975043252a2e735affc8c5423c78460a11f18b12008fd96fe7cc0d20b7f7346c73a0eaae7e6f80c3e63bf7a07cd60701b3add7b74c22b9b84d66ceae50f46283f1a326c81d1efec819ad993856ea270260f1a3823adaf3ebb52f0da985c99d9f609d5b84e2fa6", @nested={0x268, 0x74, [@typed={0x14, 0x34, @ipv6=@ipv4={[], [], @broadcast}}, @generic="5fc9c56abe4f5eb7e18a68d391dbfcb3eb41249c554ea7ec32619fd7a0b68e415f1836761d5f0b5d26e1f0f6176248b0bb885ee68e2e3a2b246b97e9f1590855d99b52ffa90f0feb61913ec4b1b4ee86ca5e9c240fc6ed6d81df47a8b2f01a7cf0377589d6d98df83bb41e9af7b9ce38480dd0cc1874136750c45cd46f321bad0532e55d9e00cc12f1e8825f4aa91cde355477efb1a9c05500386f1e1c3cfe0697d63fea7792a5cbd4f845d33644105767a21e9f5b7fc3c3ec8bb80fec1edfb80a9ed76889bd2feeb0d8503bf95c95b856e248380853041f3498ed29b87b9383ab054c5b50f4630a0e9e0ed48c858875d841dd6b3fb1ae", @generic="fe77761b69c4bf76d1f66c", @generic="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", @generic="25aabb4966cb797f437cdae0f9534c6b2f896e7f970184f87c58a9f89bbf4fe9fc06b75be7adabe314879ef375d54de4c41f94afa4d9e9c66f1efe172ba5af5694ca74d05131937040c7f0f8f151465bbb8c89"]}]}, 0x30c}, {&(0x7f0000000440)={0x1b0, 0x36, 0x101, 0x70bd2b, 0x25dfdbff, "", [@nested={0x1a0, 0x52, [@generic="b72f8fabfd0c489f459608ec678062faa9eb20b418c948fec79b308a8df4b9b43147359f5d6b44a179d183fc1968d3a7b1601179d80585396b16232147ad8e235e657b7d2104e5c1c169da7cab16cc663b4073f71721f236e60edf2361c5352d275be41f205179e18efbb9ac3c28bb98234b013b723e4e417e4a8696ca64b595902224c6f24d5f9525f0645f715bb3ab0616e997460176b7985efc8779b861dc099b1e3947d0d3fa", @generic="ae8c40d4c7a2ed1b3a5049106627769832a340d1264148cf2d33bd79666e4fe4f740f497e560049ece7fcec9a8afd9048666c9e8be", @generic="4d1e8837ebd6699fb22a40b4e4b918c2aa1459bba6f1422cf3b2018cd0a112593d6f3172efb83fa726e950eef2cda318b59e82691b83eecf04a78ba7d343691d8cfe395de839052fb7da70f1435a90fd29cbd8a3a77b857c2a18f6d792a60421b67e6c697cfb2556d339d305b255e38296d0aae63319f248fcf817917d5acbeda55524908510970082dd6ce76d766527119f10165ddebfb6855bd4142e3c1c44bf19f9b84ae7af5abe9b16e98d18d38f0a11bc56fa", @typed={0x8, 0x3f, @pid=r1}]}]}, 0x1b0}, {&(0x7f0000000600)={0x14, 0x12, 0x210, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x4, 0x77}]}, 0x14}], 0x3, &(0x7f0000000680)=[@rights={0x1c, 0x1, 0x1, [r0, r0, r0, r0]}], 0x1c, 0x4000084}, 0xc0) write(r0, &(0x7f0000000000)="240000001a002503006bb40408000900010000000000000000e0ffffff00000000000000", 0x24) 17:40:45 executing program 3: fchdir(0xffffffffffffffff) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000200)={0x0, 0x1, {0x8, 0x0, 0x7, 0x6, 0x0, 0x4, 0x0, 0xd6}}) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r3, 0x20000010000, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) fdatasync(r1) [ 68.409273] capability: warning: `syz-executor7' uses 32-bit capabilities (legacy support in use) 17:40:45 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x1f) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000001000010009040800410300000000fcff", 0x58}], 0x1) 17:40:45 executing program 4: r0 = eventfd(0xffffffffffffffff) write$eventfd(r0, &(0x7f0000000080)=0xffffffffffffff93, 0x8) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="68ae687ba78b227cb04fb138f1030737de298296acb41651ba91fee63402db29fc3ca1110163729093a161308d6ebe09f977c3e7df545a288a52f7d6d25f3c16d1af0a92274681af4acb03b65fe390d6bd0654305353e853b19732677ba77f11daad4cde248928a81c3e63fc5ab23fbe9014779c370a6eb7", 0x78}, {&(0x7f0000000040)="b6ff9e0719", 0x5}], 0x2, 0xf) write$eventfd(r0, &(0x7f0000000000), 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 17:40:45 executing program 1: ptrace(0xfff0000000000000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000100)={0x6, {{0xa, 0x4e20, 0xfffffffffffffffb, @local, 0x3}}, 0x1, 0x1, [{{0xa, 0x4e23, 0x1040000, @local, 0x7}}]}, 0x10c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000240)=0xc) ioprio_get$uid(0x3, r3) read(r1, &(0x7f0000000000)=""/1, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x80000000012}, &(0x7f00009b1ffc)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r5, 0x20000000, &(0x7f000006b000)={{r6, r7+30000000}, {0x0, 0x9}}, &(0x7f0000000340)) tkill(r4, 0x1000000000016) 17:40:45 executing program 7: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000040)="103a7ac5cee9d567d053750a4ccde37c225e4b5b5ac39efcd40610ca767c6fa8a6b9dc43856de3b61d83353247c6d26dccece337e1374a782c8c63f184cb34a1e3d7e2a33a59ead3710af5d7f535bba5225560f4dd4c62eec3af2e8eedea3b9265a8298dca0ef22ce5e842a3a88090e6743eedbe332439268c76243ce2f5", 0x7e) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000200)) getpeername(r0, &(0x7f0000000100)=@hci={0x1f, 0x0}, &(0x7f0000000180)=0x80) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000001c0)={r2, 0x1, 0x6, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x8, &(0x7f00000000c0), &(0x7f0000fb1ffc)=0x262794070bd4f381) 17:40:45 executing program 6: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000440)={0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000480)=0x0) r2 = getpgid(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000004c0)=0x0) r4 = getpgrp(r3) r5 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r4, r5, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x128000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_newrule={0x50, 0x20, 0x0, 0x70bd2d, 0x25dfdbfc, {0xa, 0x10, 0x90, 0x1, 0x0, 0x0, 0x0, 0x6, 0x3}, [@FRA_SRC={0x14, 0x2, @mcast1}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, [], 0x1f}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e21}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x40005) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000500)={0x1f, 0xa2, &(0x7f0000002480)="591d6387c753df1acd39b1f5bb0266110ba52fbfdaf79ae452e56aa76e8db81d61787f412ea1debc365decf715a02036077d39aea780b8c068295032975aec991fb3bff21b4f31597d361e826da2ee6f19c63516df56eda985a8cfdc8108644dc2b22451b59b30da746de9eb6cacf541630f4d361d8c2c5178538f54cf58555aaf1acd2522486a1dd25d5aef7500a4717d2e53de77b193bbeca068b5b1b6e1449a50"}) fstat(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r6, &(0x7f00000023c0)=[{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x40}, {&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000680)="69a258159d15ec9735c511347dd34557c2fabcc3bb6cef463483571393822310b3e56496f3000e527f10a8469d8a2e", 0x2f}], 0x1, &(0x7f0000000700)=[@rights={0x1c, 0x1, 0x1, [r6, r6, r6, r6]}, @cred={0x18, 0x1, 0x2, r5, r8, r9}, @cred={0x18, 0x1, 0x2, r2, r8, r9}, @cred={0x18, 0x1, 0x2, r0, r8, r9}, @rights={0x10, 0x1, 0x1, [r6]}, @cred={0x18, 0x1, 0x2, r4, r8, r9}, @cred={0x18, 0x1, 0x2, r1, r8, r9}, @rights={0x24, 0x1, 0x1, [r6, r6, r6, r6, r6, r6]}], 0xc8, 0x4000040}, {&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000880)="01e8f3968f0df8d1c60466aa89a5988184533403f2b1bc026f947772f111415473fcbf1cd3e8720059388eb5722467a5688420d9aeb6398b84fe1a7e4be7928d1f712d972a4e0d1d4efca87b0fb3315b9e6cfad2bf3063c19527fefab737e0964ab2d4720e10f445e5e1bf4da394e33396c822b30db47fbc4b91d76ce262df8c688fe35586477496d0c8f57ff85fb2", 0x8f}, {&(0x7f0000000940)="4aab9b7b27200df31930ecfc7f1c602b603565460f9b7075dd99f0e93ef4fc38835b0143a828a06214c0c4e3d0abb30adefdf4985f889e0d17d1c632c3800549baff0a814f696cba8276c854af69418b3b8eb90ee6f8d96e723a8de07196b155b8319b022653", 0x66}, {&(0x7f00000009c0)="2417a08d53042a2bfb4a692d41574365e2fb068e94fbc75023b2a49ba497", 0x1e}, {&(0x7f0000000a00)="f54d1e89931b0a5d147eaa2c140db12c069f2481be6292fff225cdebcc8dd42ead6c07ff2a81f0a613f0957fa4ba8fb623027e91ab6db6f2686b1dca5de1ee21edb5aba767fe3c9c0e0efa81cb22dfd5f543d67bde857f353ce13d146625925bd178f413b5c86006db1fe5aeca773a293bd70bef3a76720e8c9f973aeadd6896df1a758fa1a54f2c940fa7d7239484c1160ad84fd48e4c33a9cc3e72e1f29b89dace00363a3d9c2fdf282a7b46dacbb9321883cb4d88070a646b23018c07257e3a65ac19987b39f87f464d633392fa1364b17731cb66682ecb1c059dafe310c0ff8a33effdf1a3da12ddc92ebb", 0xed}, {&(0x7f0000000b00)="1b74eb197e88e416d13130c45a89dd991af8178f1b123beb2009d507999a14c1d90c24d58722640e381b8838a0fa4eb2d21fc089800de6c51f13edcde02964558d7d43c20dc17a00915d6b618fa27e70741125c2b2933b6f9ee6fffb2bc32fa8f387973f5140e8838fd11101ac3ecd92744d6735e8bd32f97bf458b42687677ecbe986eb197a5b31e427b5cd9be855fb39", 0x91}, {&(0x7f0000000bc0)="23f282c895e33c24cae548072c643f5a2a28c1fc44bc2767ced83be529acc011c10f2f6bd8ff071cda4f6727d77c48277295196ed365529236defa03255c909efbe6abdaf196edb9f16b7623d7ed74ba5e0bcb3be284a41bc274844086134350adf74e2b91c863316314382058ed59f07371e3f9292735132072565b84a5db39cfe9293ceff5ce26c823e328ebb1ecbf4a529b1785a61f1357570306cf444fd47884f064f049c6d5971e98d4bd250cada0fa17be3c7d51aef0", 0xb9}], 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="100000000100000001000000", @ANYRES32=r6, @ANYBLOB="180000000100000002000000", @ANYRES32=r3, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="180002000000", @ANYRES32=r1, @ANYRES32=r8, @ANYRES32=r9], 0x58, 0x11}, {&(0x7f0000000d40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)="4bcf6038bafd4f5aef28c73729191aeb029126fe9953cb21e999fb1aba1ef0968d9f94afa014e045304174f982a9f53d3b275d7a75af8437410056352c61349c8e355c1de87e3685f4db49debab608e94affb11b6877944cf2e50908029c1d1c9f82869a5f3a95a2a34407d4a932bc5a26aeaf80290950608e674c2214b6be5f051d7231475360f227552b08a7251698d8e2ced51004ed6c778aeafd1a33f5c70544ea5992bb66cc734701a894bcaf3f9c9debba984e5a1addab15c54ef665be9d", 0xc1}], 0x1, &(0x7f0000000f00)=[@cred={0x18, 0x1, 0x2, r4, r8, r9}, @rights={0x24, 0x1, 0x1, [r6, r6, r6, r6, r6, r6]}, @cred={0x18, 0x1, 0x2, r4, r8, r9}, @rights={0x28, 0x1, 0x1, [r6, r6, r6, r6, r6, r6, r6]}, @cred={0x18, 0x1, 0x2, r5, r8, r9}], 0x94, 0x40000}, {&(0x7f0000000fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000001040)="43f91132120bfbf6d88fde62242ecb32b5c2addf2bcfed5e9a67566ff10b6bde51f25a2eef401c83e57b9b873f896b717ea454b945b0f763c8340d525d9d7803f61cdf75a4a41eb059b520afe1fbcb70115e83a3bf53707b22f6edc9e1ac675996eeac23b1809715e2ce627b8c3407996b2a3035a8", 0x75}], 0x1, &(0x7f0000001100)=[@cred={0x18, 0x1, 0x2, r3, r8, r9}], 0x18, 0x8000}, {&(0x7f0000001140)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000022c0)=[{&(0x7f00000011c0)="0c2191cfc6f99608b4168dc0f3c962d7a167838d31400e11343597d92548d933bcd41a5c34f855223a9562282b97eb499c750e6c58d22caa8dbf419ce6a4e387186027a2796e18c99a027acc57b21620143d1ffb5cb7f6f22084d334599ac42aa16371ab326626ef48b7ef507f922931730d8e5de414c339099549a4b1c8fc1f488551a5583a7ec07f8e737aac87b16604ed88463095564dba91326ab3dd8895be97d3b240e2efa2cde0e1feb9012ea67b32bafe", 0xb4}, {&(0x7f0000001280)="7455c08727ed011295ea04cd0c2f7a232545eecfb6b799910de880118c5348d3d16000c01e332ef1e2d8", 0x2a}, {&(0x7f00000012c0)="4f2a8a35521af7dc3d7f7e254aef0cf2904986759720a2ee1d2c071e4a9a2455b6bfda038084793ae32c16aafe665da1dd410f629782c34d65e7dad175779df05ee84ccf9a083af10dc479466a59b4bdb1855b66bfe8bcb52aca814fcb9fcf5f9ed18386156526102161e202dd47f3db79803f6a65f2d90947533afa20fb29fd518ff45aff868e1de3836ba571b4f18d80b6a9a64531bf1f58ec9c054581a19ebf3fb721573de397ffaf717ff063add88dd7cad7854f4eaa23e10f19405a59c859b927874bd8dc192d98bc8607dee72d08ed0acff3ec94ce058400243e121bbe2ccc311835704b981606502641601db98fba0ea5f312a389360c278b9c78c7d104e6813814eee3e63cbaba6d7a4d4ad4c0a4e3d0e54a7dc0114bd2dbc3c3f3020e70be2a19b6d0fca43ddce91a160a36b33a629a57f1009b31d1f5f85666bff48f8a64c0e32e98a61cc76367057c10081b8f1ef4952ff15a7d0ab93d4ab5c5e6aa4e39ad349d01fc50d18a3277062298739c0d1da6bd8deb5a581947b7e96884ab3f7ad6731a0966ca3b1d9cd1c263ac8b83d0036c34bc26f609cc44d82e890beab5afffc97fc721478483884ee1f6af0b1711e4cce4fc2433e553540609c4d47b0646e3a11f52c8767b942539559879c4b5701d7a6c5daf4d873280b1a84259d83a5330bf3ba4831f84172955b21faa1c11e0f5513f05953cc8cf4d458ae66f5ee8f58c6572a01703e394d9f1a1665018347cd786cf7f1650ef97420339e51d870187d272b32b5fbecb4c00813ff6ae01149b327fda3df8eaa65071d31ee317652d5d87df46c0b653ca6303e0d7784c47d75e3621e4efb6d94ab8463f5b985f32a5c4710e8d0c2fdafb30042d56a7563030c3d1cdd78c1e2957f0d4cd9c5cd9584da08da21ff87117710218ad148a46c5bba2115937686e4ea50c93146eb3c295d7526a0ba725c9ea7050379e8deb3b91451c6ee78635f1ecc9d34f281d4195808e9d2749f2f51d8616e7309cf9e53d55ba71acd67a299a1cb175b4216352e909b91070a4088a4133b92ca335a236c20f82e098627e5bfc70bc895caaf751dee9d432383235d70444ae47c0b1f362734729c07adcb41cc4f813fdd5334b69bf0940bcc8b062e8adae0c769e20ea67ed0b91d17abf068230e3beef8a129dfe227a322cd0a2cb7254ff3bcc91d1f1d773d273d3509983cff7c37a55ff7ca8a87c33c910722404ca2b7193b833938a3058041675aabb8b4d1e7aacd6f3c72059b6c6ee5add879ed3305b05410bebd8d20f13bae8f77ea3ba29420d69597e6d0919d12a7b8540f1dd8436b10c110f2477ce51b3cbe79afd01a2d4a4ad9aed63749589caf3500be98285c376fb4b564bb6b4328dac43e5d6de50769f5d9e1a047e917dcf91e4c6dfe1f3d53a4e4777840fde6cdabc7da4602e814b00fd05d1bfae2078be81aa1829a0a281f444d83ea1a65cf6fbb8fe1c2f590bea97034ec975c7dd798d0c61992f7d93408c39372acbc52e757a5e36340d123634e08d2747634440275ec290b66389a1b5fae8453c32471a335b277e10a860af1cce88121bb760365cc70039c33a9ad3db585347a0e2f8c1b1afa09641a31b1b1b08d5bb6d79a7b85a8be9e75ee7eb0ce9c7ad5832bdcf5aca6121dab7c496bed7ab761429ceef383d7141c73e3f590ef4a5104a30f6b951f12f609c6930a8b6cfeff74b6da784aa741625da75a62ddb9e04a8dbf195b9a4c54c9cc0279807abddb34bc9e7b2240e02d21b4f62dd47f6c279b70ab3a54b444c20e1ea1b2e4e2f98e2cd62b62b46a5b6be44c824ca2a19f19b379c92bcfa3f66942d69314d1a8c6c55436cf5803727eb932202f1114ce021d2c79f48afb31c98eb39e3dcc2c99944b6415a9a7db4cee885eb023fbf4f45ef6184c2ca7d2553c208f7240f1160fa5e3e57933c8d1131ee66935ab4e8ada45e648e3a057d2ba75f1d41ddede0ff93e6d82d87920aa202026d7851f92a51ca2892a7f6a6d467b2492c05a9eee017cecbd951bff630df498df732c4a52a1995f9a43c48060142c1ac10c2db4b0d371c884aa58cf3d973ec1a02a284a1345b194a87228bd59e0088c0e9c1e165c3c5a78775f86ffb4a4b80921f29245efbc862b01ebf36a1bac237c9ebca9af21d068a032bd23677bcbf1d6ec7a522dbf9b284e1a4f4dd872dfa985982a6dfc5256dffbd9e3524000652840a59e43852b3d2dd0267a09ab7ac3569b597d708d8cf62c37f7e70e1a4c64030ec29cf00c2beb69fd493fdb9dfaa5c20a9a5028f636e409a45ed665681799e9d1244b3104db0b3e2eea2179535e3ea072ca764b0890ef3973c61b258afcd5aa5356c7fdb0c6a733f201f0f58525839177c60a4ad5f0b6185abb5baef59ea158e110cbdbc0d7782cdc9b41f8ef23d4b13a5b576436c06da356382b758ff66379e89ac498516e5e11274dc91456feb9b249cbb98e428bd4f77221f4290057d565b13aad11fc851cfae6f34cd2a2dcba516e2b3fae1e9f5baa00e2733e80591f200a80bb208da4c2bfb2f1476032c300db04dcf640f5283af8173d9f061840bd76eae7e5c1c86f3010b03657926b9baaa17d1a7190cd0595fb0914e30874ddbbb383bd0e73ae520c5243c37892486f00b8d50cd13eb2e10ee4e81a2f6b3e4254f12dfee6d275a8e8731357d8af8127cb904323faee45d683c2037320e0d166c0ad59b4fa956c2d6ee15690400fa0762eaf3906f4f5b9ed504b8f5617aaad60626219d6763e36cae5151e62f78856c7f3dd8970930cccd6e72e00c21475b1c046e3a79380f2a2b19ab3899f2bcbcd52a0e96bcca8936651579c7eba263245011ee9d92150c920e7987780ac916e8646c309f871953bfffe0209b88c1f4c35b0d14320e1578a00b028ab4444b6f39e947539e106ae6fe161168b445d5a169dca01d28b3ef540644ae9cfa099665c6ff859498586f5fc2df4b9b8980fcd57571053a3d37facb780899bc10ce5084d24210138423066bd958ecaac9500f6d00e1450d7a55f6efefe4e095cff3757f7de0dfbea89486cd334dc88d44d06aa18aff6500c45d1777009830453f87d7ccc6b94bd6bf6d7357822524996e94dae5a5c14893d61c606f12195475d84cf31b59543227d0c69ff7c751ac49963e4d85fafe0a1d4f1c4b1a7e7c8150608223b77c3e060c9be1dee998391fb1e8994c4a6c8a30d044033ba696a1d95599e7fafab67c89286bfe36c26b9d70ff322dc4b870d379fb42ab44d5603782adea4fa74fe701a620bae78459e4a6e537ee36fba36fa021e6dc4b5af0fde4f723dd91d71a105577c4bae34cd47cc39325be194b266a4355e0a8422a8e2813affa0abe4e260340161b1df131dbb46dc23acb37013889633410bc8fd60e462584e7dadec6129a31eff65a49b9064272946208a9e3d70489b84d6c27f0a253264ed491aa4a915b44aa7cd26b7723485af7e0d68eb85f1aa27484129054ae3ca2eb48d6a51dfe6c95ccd5e4a4304b9d2307a3f77a42a6007fa34407be34c75255d8dd7e14c9459877b80e4f8eca3077e6b9a187929130cde948dca8eb8b34ab6f27341aec9a4752cf742360b45396446ca5924afb62a5d0bca3abc5d361192e1aeec1e661a64925ef1051924bdc10a3cea962b90b97036cec70e099f3f6af85fd521dd1e1f3b8799aaeb8a2a7d49056135dbf0f7ff5fc6b21441557cfefdee2f64a0c2f8830348bd673f567c296e98e08334a82cbb21282105548293369d1e7b6f8767e16a63b22d1b6d2202776d424578e392caf7f30ee3a4f17a94a9ebf4af00f8e6b9e0eaad7891d50a6dc87b2819ec1d7548d80c002607fe7b4cc36ef2ce21707af27128aa12ab6f9a718fc2e06294db598e5131de0b2a2472adb941f307eb8d7966dfabf87df3d4cd98d8b67141ae21daee9b55445fd787c6c6606cbc8a82bf9295e5f58ea19bf08491b420d59cf0895c8f5d240089a634a40c02365b098e17dde3d16bbf903e4747265ca296ada63850033e7a048300d606ede655a8d241f0ae5dcc2134173f80bc278dc8fe8a4ae3ab71e2b6043a96af3bbdd4d6b322f68f7a70a7aab79f549af138d915b7b52f67d39f441a00704d1b5a1ab98f72111b61d9a2a1b9a1328311030ae8c4d78cceee7ad7ab916db43b7921d7b1773b81c7b6bca04ca8f8666ff0afaf51e1b83de15cea8b7c479ed2d6ac593d06bafc63099cb96a3b38300197c9dd9e6a8ea5def1ce23fb15f9ceed63b72887d2642538b1027935ff7ad4fcfa9fd91e4e1d691c5e1c1817a44fe483f2daa74ca2fde8e63ee73c8f87b1199ef7a4ae7e38a4f26c0890287e2bd7afa5e9dd1989eca7fb04518de3be6f33ed5d57047ee700cc189b83bd8f820e4173b9d47eb32a62c1d7e43b8e299c9797f17003f5cef390edd4147c5a69d770d90fd8a4fa0f64dac87fe10d9c92651657e2fb7cdcaa70e7491d7d7c1b3f209af4b681da10f8275a6c0756913dcdee03d6790185664017dbc3bc6ca736f29312d87868409cb03275e114bcbe9c0c8a13232b08afc5a39f20b6e8615db8aebc00035b1ca7b57d9ead30011cdea4556d9eb4f4f6122d28729b9fab8f97b1b9749b635945661a5d042b88fa155659bf8e6ec826da4a95c9aff514b99e2c43dd6138fe6e89ee753472fa42bc6a1534c6090241b886590d386fb7cb07d4f3b430048b87e7118d72e161ed2b7323ec83829996d5fa4b05844e994ccd1a8fdfbb1c34e03d4f1781d9b23828f3c40428fd245f2df6cf678ea2178bd0d4137616167cb4f1dbe7d8f7cabc3f604d7866d40ee04fccff7aabc9299bc395b065707a5a2bef8926e1993020e8bcb742429b955a0f009c4a84e4d9113744d9e119bd9ef140fc68085979d79c54267d84a5fe5d5594cec456ffb7e8fcb43dfb647b6fa06a1dff40275dc1a7db737865e3e9def0c8294666b7a2bfa798ee46b454f53074b24399879f3542117c47d1f20db0b6e171646b2e3ca5ec56692545c90315c903d1315b2fcc7c62536c6d7b2730a67154e8e41a1a3154ce8a8e149654a280adc6ffc0324091248f32b23a3f2ab42e1161bd1e7b4ccb997edb5b014bf0930a64e2007e989365b35e023e1c210d6205cb9258f10bbfc53a39b75ae80045921022103104c8af128ab23235eeba89c9ba425d5295f4660b6aef8d9648f4e462b970f6fc7d0c276ca56478e2b3786b90b4b6fe5e188b237674489daf07e978cfedc65914dc0d52000459638c3b9a16a1d5554bb88dd88469886d6fa68fe51451a91258b72d0597c42f94b1f8619ef67b55790c42df34472322daae525c6ac1835155fa2ff8b43b2d497cc09fb048b2cbbb967e4290477ff0a0cab8519423a5be6a67fde4047733a6a4e68906ab9b26edcfc455006b548e5ac52c27f70b9e320fa2042a03a4f42d654e0c73f82cc1d665cf5f421c6d5ef7459736bc5b34c5dec643c5d32b21a9dea6010f89386f3cc4faa860be919eed60ca3ffde3cbde0145b700220f6fca2a0a1e4f18aeebddd25301fc2556e63a071a67a8e3cf7aa5a685919ebdf69d57218c4d2cf8526f082620578695f4899613d221b7aae8c77c0045761094720a92f8c8729e06125fe730ed4cd406c37d740a04117782fb7b181c7e2a27eb6bb86d8fb47c3280282bd5f0328cb87d214906ea05126ff8ce5dbbf74f5bfbcfd33832585b38bc52fb870f03bd141ee6aff930850ec002128e07e49a29dc794a87bf4f085fc96a78571c8811a84bacb7bd82b2c8de335e9de33d34a6ff924d702e72ffab7bec1c7d07ab7f7", 0x1000}], 0x3, &(0x7f0000002300)=[@rights={0x10, 0x1, 0x1, [r6]}, @rights={0x20, 0x1, 0x1, [r6, r6, r6, r6, r6]}, @rights={0x20, 0x1, 0x1, [r6, r6, r6, r6, r6]}, @cred={0x18, 0x1, 0x2, r0, r8, r9}, @cred={0x18, 0x1, 0x2, r4, r8, r9}, @cred={0x18, 0x1, 0x2, r2, r8, r9}], 0x98, 0x4}], 0x6, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000340)={{{@in=@local, @in=@loopback, 0x4e24, 0x9e1, 0x4e22, 0xfffffffffffffff8, 0x2, 0x80, 0x0, 0x0, r7, r8}, {0x1, 0x6, 0x0, 0x200, 0x400, 0x3, 0x3ff, 0x956}, {0x1, 0x9, 0x6, 0x907}, 0x100000001, 0x6e6bb8, 0x1, 0x1, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x4d5, 0x32}, 0xa, @in6=@ipv4={[], [], @rand_addr}, 0x3500, 0x4, 0x3, 0x2, 0x3, 0x4}}, 0xe8) r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000540)={0xfffffffdfffffdb0}, 0x8, 0x80800) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r10, &(0x7f0000481000)=""/128, 0x80) r11 = syz_open_procfs(r4, &(0x7f0000000040)='net/fib_triestat\x00') ioctl$VT_DISALLOCATE(r11, 0x5608) ioctl$TUNGETFILTER(r11, 0x800854db, &(0x7f0000000080)=""/120) ioctl$TIOCSBRK(r11, 0x5427) 17:40:46 executing program 2: socketpair$inet6(0xa, 0x0, 0x800, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x8001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x1c0832, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000340)={0x5}, 0x4) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x14) 17:40:46 executing program 5: unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f00001a3000)='./file1\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f000000a000)='./file1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000500)) poll(&(0x7f0000000400), 0x0, 0x400007f) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') 17:40:46 executing program 7: r0 = socket$inet(0x10, 0xf, 0x72) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000380), 0x0, 0x20000080}, 0x48040) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000290007031dfffd946fa2830020200a00090000000600f0ffffffffffff00ff7e", 0x24}], 0x1}, 0x0) 17:40:46 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00005c5ff3)='/dev/net/tun\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000030fb4)={0x0, 0x0, 0x207}) ftruncate(r1, 0x1) r2 = dup2(r1, r0) write$sndseq(r0, &(0x7f0000000e50), 0xfffffffffffffef5) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x8000800) 17:40:46 executing program 2: unshare(0x40000000) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000005c0)={0x0, 'lo\x00', 0x4}, 0x18) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="290000008300000000000000000000000400000000000000080000000000000070726f637573657200"], 0x29) ioctl$TIOCSTI(r0, 0x5412, 0xfff) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x81, 0x0, 0x41}) 17:40:46 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f0000004fc0)={&(0x7f0000002d00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000002d80)}, {&(0x7f0000002dc0)=""/157, 0x9d}, {&(0x7f0000002e80)=""/95, 0x5f}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/98, 0x62}], 0x5, &(0x7f0000003fc0)=""/4096, 0x1000, 0x3}, 0x40000040) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000005040)=@add_del={0x2, &(0x7f0000005000)='ifb0\x00', 0xa0}) r1 = socket$inet6(0xa, 0x7, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") timer_create(0x3, &(0x7f0000000180)={0x0, 0x0, 0x1, @thr={&(0x7f00000002c0), &(0x7f00000000c0)}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f00000003c0)=ANY=[@ANYBLOB="f8dc0000c60000000297616c08a98320be5899649dea6f9bc5c2822c4dd5c2051a49cdb3b53b4d023955766430855d3f02d31d4b805590909b2dc48d5b35d670a4651482b5a6d3d10469028ccf143c7f46021a4077fcb4209fe604f60829ada56d82829943fcb6907039c61fcebef959f16f09378ccb6c75b2d895fd0d34b6e6a9f6810e1df62c240acfadc149bf1f8e10c64725377b8f72f33cc0946625577322118710e4eaaa276e6c70db26020d0192fc3a1c717fe74a0bbaed12d7482e41770d2f3a7218912aa020934bd8b6"]) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) mq_timedsend(r3, &(0x7f0000000000)="afb450", 0x3, 0xec, &(0x7f0000000140)={r4, r5+10000000}) unshare(0x2000400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x400000, 0x0) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) mq_timedreceive(r3, &(0x7f0000000080)=""/24, 0x18, 0x0, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x14082, 0x0) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000200)) r7 = gettid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) rt_tgsigqueueinfo(r7, r8, 0x9, &(0x7f0000000040)={0x37, 0x8ef4, 0x6, 0x8}) r9 = request_key(&(0x7f00000004c0)='.request_key_auth\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000540)='/dev/zero\x00', 0xfffffffffffffff8) keyctl$set_timeout(0xf, r9, 0x100000000) 17:40:46 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)="2e2f6367556f75062f73797a3100", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @loopback}, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) r3 = signalfd4(r0, &(0x7f0000000080)={0x5}, 0x8, 0x0) connect$netlink(r2, &(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc) fgetxattr(r3, &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000340)=""/142, 0x8e) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) 17:40:46 executing program 7: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x3c, 0x0, @tid=r0}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, r1+30000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, &(0x7f0000000300)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1000) 17:40:46 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x402000, 0x0) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x6000, 0x1c3) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/3) mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) ioctl$FICLONE(r1, 0x40049409, r1) 17:40:46 executing program 6: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x30000, 0x2) write$P9_RLOCK(r0, &(0x7f0000000280)={0x8, 0x35, 0x1}, 0x8) r1 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0xfffffffffffffffb}) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000040), 0x7f) r2 = getpid() sched_setattr(r2, &(0x7f00000001c0)={0x30, 0x3, 0x1, 0x3, 0xfffffffffffff44b, 0x4, 0x2, 0x8}, 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000200)) open$dir(&(0x7f00000002c0)='./file0\x00', 0x20300, 0x1) mount(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000000)='romfs\x00', 0x1000, &(0x7f00000001c0)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f00005f7ffa), 0x0, &(0x7f000002f000)) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 17:40:46 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x2000006100) ftruncate(r0, 0x208200) chroot(&(0x7f0000000280)='./file0\x00') mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x103001, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000002c0)={@rand_addr=0x9, @loopback}, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = creat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff) fsync(r3) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x120, 0x1000) tkill(r2, 0x1000000000016) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) open(&(0x7f0000000240)='./file0\x00', 0x84040, 0x4) unshare(0x40000000) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 17:40:46 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x8200) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x800002, 0x24010, r2, 0x0) ftruncate(r1, 0x9) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0xfffffffffffffffe) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000100)={{0x1, 0x7}, {0x10000, 0x9}, 0xd3, 0x1, 0x73}) 17:40:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000080)="0000c900fa10aaab093a3a0f9fd96a040000", 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0xa) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x2000005) fcntl$setstatus(r0, 0x4, 0x4400) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000180)={0x0, "00000000000000ebffffff00"}, 0x18) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="32000000030000000000000000000000000000000000000111000000000000190000c900fa10aaab093a3a0f9fd96a04000026ea28585011374177750d5d5d06127b4a6a79f263ab9f4107c523f9ee52f2c66ede7668b89ea53cec86abd1f0a4caaa5f"], 0x32) pwrite64(r1, &(0x7f0000000380)="e8", 0x1, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000000c0)) [ 69.397630] IPVS: Creating netns size=2536 id=9 [ 69.473777] IPVS: Creating netns size=2536 id=10 [ 69.507610] loop: Write error at byte offset 2949120, length 4096. [ 69.514100] blk_update_request: I/O error, dev loop0, sector 5760 [ 69.537155] loop: Write error at byte offset 0, length 4096. [ 69.543014] blk_update_request: I/O error, dev loop0, sector 0 [ 69.549137] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 69.556953] loop: Write error at byte offset 4096, length 4096. [ 69.563072] blk_update_request: I/O error, dev loop0, sector 8 [ 69.569327] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 69.577056] loop: Write error at byte offset 8192, length 4096. [ 69.583119] blk_update_request: I/O error, dev loop0, sector 16 [ 69.589474] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 69.597250] loop: Write error at byte offset 12288, length 4096. [ 69.603581] blk_update_request: I/O error, dev loop0, sector 24 [ 69.609786] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 69.617477] loop: Write error at byte offset 16384, length 4096. [ 69.623632] blk_update_request: I/O error, dev loop0, sector 32 [ 69.629755] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 69.637447] loop: Write error at byte offset 20480, length 4096. [ 69.643592] blk_update_request: I/O error, dev loop0, sector 40 [ 69.649775] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 69.657567] loop: Write error at byte offset 24576, length 4096. [ 69.663817] blk_update_request: I/O error, dev loop0, sector 48 [ 69.669935] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 69.677649] loop: Write error at byte offset 28672, length 4096. [ 69.683792] blk_update_request: I/O error, dev loop0, sector 56 [ 69.690137] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 69.698105] loop: Write error at byte offset 32768, length 4096. [ 69.704263] blk_update_request: I/O error, dev loop0, sector 64 [ 69.710369] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 69.718219] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 69.753880] VFS: Dirty inode writeback failed for block device loop0 (err=-5). [ 70.274732] IPVS: Creating netns size=2536 id=11 [ 70.295088] IPVS: Creating netns size=2536 id=12 17:40:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x32, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl(r0, 0x71f, &(0x7f0000000000)) 17:40:48 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000000000000000a000000000000000000"], 0x14}}, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000180)={0x7f, 0x4}) 17:40:48 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="200000002900000002000000d205000000006a000000"], 0x16}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth0\x00', 0x10) 17:40:48 executing program 2: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2002}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x8) 17:40:48 executing program 7: socket(0x7, 0x4, 0x2) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = dup(r0) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@getsa={0x74, 0x12, 0x42f, 0x0, 0x0, {@in6}, [@algo_auth_trunc={0x4c, 0x14, {{'sha384\x00'}}}]}, 0xff5c}}, 0x0) 17:40:48 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x15, 0xf, 0x4, 0x7, 0xa, 0x8, 0x2, 0x4e, 0x1}) 17:40:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x14b680, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x222280, 0x0) dup2(r1, r0) write$P9_RWALK(r1, &(0x7f0000000000)={0x4a, 0x6f, 0x2, {0x5, [{0x20, 0x0, 0x8}, {0x10, 0x3, 0x3}, {0x80, 0x1, 0x5}, {0x2, 0x0, 0x4}, {0x8, 0x3, 0x5}]}}, 0x4a) 17:40:48 executing program 3: socket(0x10, 0x4000000000000002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='oom_adj\x00') flistxattr(r0, &(0x7f0000000240)=""/201, 0xc9) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000700)={0x5, 0x800, 0x401, 0x5}) r1 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x101000) renameat2(r1, &(0x7f00000006c0)='./file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x7) clock_gettime(0x200000000009, &(0x7f0000000780)) write$P9_RVERSION(r1, &(0x7f0000000600)={0x15, 0x65, 0xffff, 0x1ff, 0x8, '9P2000.u'}, 0x15) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000900000005000600000000000a000000000000000000000000000000000000000000000402000000000000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ad8b85c8278fb8d5aa7fe171ac34721f755b06ec2a08594e3d1798e4fc2959ba9b5a7b0739336a57525a30d463ea43084dc1840039649673b733890eb3dcc22d9e747a71a86cc8c8dda870000000002000100000000000000050080ffffff05000500000000000a00000000000000fe8000000000080010000000000000ff0000000000000000"], 0xd8}}, 0x0) 17:40:48 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000001ac14146161000000013a952ecc3878dbb7000062191414aa"], 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000000)="4367bed3554c181a0c111d2b196dc7f7ee2b2ad173dc13f73990b258d5", 0x1d, 0x10, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x8001}, 0x10) 17:40:48 executing program 4: r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/validatetrans\x00', 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x2000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000500)=""/250) flistxattr(r1, &(0x7f0000000000)=""/6, 0x6) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000ff5fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000ff7fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) ppoll(&(0x7f00004c7fb0)=[{r2, 0xd}], 0x1, &(0x7f0000000000)={r4}, &(0x7f00004c7000), 0x8) mlock(&(0x7f0000012000/0x4000)=nil, 0x4000) dup3(r3, r2, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="1a69be9cb950ac89d0952905faeab9a22020ab2f940fbcd6e64029e97d0db390b614fbdcdb0b90eb2eb0dd93356a0b7cb35b9d8caa9810", 0x37}, {&(0x7f00000001c0)="149feea663e29e05fe146fd886bf1eece88630c9151376", 0x17}, {&(0x7f0000000200)="1c3759e0fe6746c727c776a8ef843384020a32a3131576f625f906158e001f167dd15d25a6688aaba559c59031", 0x2d}], 0x4, 0x0) 17:40:48 executing program 1: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r1, 0x6) fcntl$setstatus(r1, 0x4, 0x4000) sendfile(r1, r2, &(0x7f0000001000), 0x400000000fee) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRES32], 0xfffffdf5) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123}], 0x0, &(0x7f0000000680)=""/108}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164}], 0x3c3}, 0x3}], 0x1b1, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e24, 0x0, @loopback, 0x8c66}, {0xa, 0x4e20, 0x4, @empty, 0x80}, 0x7f, [0x7, 0x0, 0xffff, 0x1b, 0x5, 0x3, 0x78d0, 0xf5]}, 0x5c) sendfile(r1, r2, &(0x7f0000000040), 0x1) sendto$unix(r2, &(0x7f0000000180)="15984985558762c9f3e2b7e5c1f92cf7034603d0879a2b51cb3898e6b60a68958d9bfb9fdc68393e3b960c62bddc9e05daf8bbf33be75ace366ea447e39681ce2b5389db4b5d324760d9b180b11085dccf6fb13833e3271139d07fce6ce4aa6ec5865121e4ebd04033f333b389e03f34deeb854557b2a18e639d6ba604491e1c8c22f1e54d4108ab2bee1af0dda07a7def3a4b28e7f35dfd3ed9b172392be5296769a9a9e92109e21e0f1ee0a178787324b697fd25154c55e90a3ea0f1cebb01a885f180fdd6406b353d447e8a9161f1301a4c6afcf66dca6a89b17c02902a9a1da1e420", 0xe4, 0x4000000, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 17:40:48 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x280, 0x0) write$P9_RSTAT(r1, &(0x7f0000000200)={0x46, 0x7d, 0x1, {0x0, 0x3f, 0x7, 0x1, {0x0, 0x2, 0x2}, 0x40850000, 0x5, 0x18c4, 0x9, 0x2, '.:', 0xa, '/dev/nbd#\x00'}}, 0x46) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f0000000080)}) pipe2$9p(&(0x7f0000000300), 0x7ff) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)={0xfffffffffffffffa, 0x6, 0x8e, &(0x7f0000000100)="a69f667d6898f37235988ee8cda8e634a0c3dbc6946c46d392d8dcaf8e3ab78b29886f8a58350361ab8931699a1032d64ebe8c780ee0580d0f5de4605015afeb0e78a956fb8dcf90d552f63e96ff8915ee19925e0ee15a646ed25cef1e9cda4ae7bdc23abf00ca54e768c266797f27f49fea5548611c9e38100dafaefb0e8e2a0aeed496adc871ed6ddf1e88d44c"}) 17:40:48 executing program 6: r0 = epoll_create1(0x40080000) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000040)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x9, 0xfffffffffffffffc}) fcntl$addseals(r0, 0x409, 0x1) [ 71.582498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=623 sclass=netlink_route_socket pig=6444 comm=syz-executor5 17:40:48 executing program 7: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) flock(r0, 0x1) 17:40:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x87}) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000001031900030007000000068100023b0509000100010100ff1ffe58", 0x1f}], 0x1) r2 = socket(0xf, 0x7, 0x5) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) 17:40:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000240), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv4_deladdr={0x18, 0x15, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}}, 0x18}}, 0x0) 17:40:48 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x6b) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fsync(r1) 17:40:48 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) recvfrom$packet(r0, &(0x7f00000001c0)=""/68, 0x44, 0x0, &(0x7f0000000240), 0x14) r2 = add_key(&(0x7f0000000140)='^ig_key\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000280)="ca54bdc559e03cedaf06ab71dbd7b07040a60105cfdc4bcbc482a58d77834a", 0x1f, 0xffffffffffffffff) ioctl$TCFLSH(r0, 0x540b, 0xfffffffffffffff9) keyctl$setperm(0x5, r2, 0x4000000022) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) fallocate(r3, 0x12, 0x40, 0x80000001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x2, @mcast2}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000300)}}], 0xc5, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) dup2(r0, r0) ioctl$RTC_PIE_OFF(r4, 0x7006) 17:40:48 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x100, 0x6a0d, 0x1ff, 0x1, 0xffffffffffffff02, 0xfffffffffffffffe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x4}) r1 = socket$inet(0x10, 0x3, 0xc) timerfd_gettime(r0, &(0x7f0000000200)) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000080)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d8060000000060000000029ec2400020cd37ed01cc0730ec279b2fcbf4042d1", 0x4c}], 0x1}, 0x0) 17:40:48 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vga_arbiter\x00', 0x200, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) clock_gettime(0x0, &(0x7f0000000840)) write$sndseq(r1, &(0x7f0000000880)=[{}, {0x7, 0x6, 0x3a29, 0x5, @time={0x0, 0x1c9c380}, {0xffffffffffffff23, 0x9}, {0x6, 0xfffffffffffffffa}, @queue={0xffffffffffffff77, {0xcb9, 0x3f}}}], 0x38) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r2 = dup(r0) ioctl$TCXONC(r1, 0x540a, 0x7) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x80000000, 0x9, @local, 0xd1}}, 0x0, 0x0, 0x0, "a9bb6985f862ac1dad8d2b48855bee347e639abfb73f25e68f05f8bd746616146cdcc00fc52e0b4fac654b2b083ef46510a626c1c733f4fc346acd5001ea72ade16ae272eff6ceff7db90a2dbf8ea398"}, 0xd8) execveat(r2, &(0x7f0000000980)='./bus\x00', &(0x7f0000000b80)=[&(0x7f00000009c0)='eth0nodevmime_type)\x00', &(0x7f0000000a00)="776c616e30890f00", &(0x7f0000000a40)='/dev/vga_arbiter\x00', &(0x7f0000000a80)='/dev/vga_arbiter\x00', &(0x7f0000000ac0)='/dev/vga_arbiter\x00', &(0x7f0000000b00)='/dev/vga_arbiter\x00', &(0x7f0000000b40)='/dev/vga_arbiter\x00'], &(0x7f0000000e00)=[&(0x7f0000000bc0)='/dev/vga_arbiter\x00', &(0x7f0000000c00)='bdev\x00', &(0x7f0000000c40)='GPLsecurity\x00', &(0x7f0000000c80)='\x00', &(0x7f0000000cc0)='/dev/vga_arbiter\x00', &(0x7f0000000d00)='/dev/vga_arbiter\x00', &(0x7f0000000d40)="776c616e307bc600", &(0x7f0000000d80)='/dev/vga_arbiter\x00', &(0x7f0000000e80)='selfvboxnet0\x00'], 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffffffffffd}, 0x1c) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000007c0)=0x2c0, 0x4) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000180)=@generic) getpeername(r2, &(0x7f00000004c0)=@hci, &(0x7f0000000580)=0x10d) accept4$inet(r3, &(0x7f0000000740)={0x2, 0x0, @broadcast}, &(0x7f0000000780)=0x10, 0x80800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[]}}, 0x0) openat(0xffffffffffffffff, &(0x7f00000008c0)='./bus\x00', 0x2000, 0x40) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@local, @in=@broadcast}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000e40)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000940)=0xc) ftruncate(r4, 0x2007fff) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000ffeffffe) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') [ 71.672108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=623 sclass=netlink_route_socket pig=6477 comm=syz-executor5 17:40:48 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = dup(r0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f00000001c0)) linkat(r1, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00', 0x1000) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', 'md5sumGPL\x00'}, &(0x7f00000000c0)='vboxnet0lo\x00', 0xb, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={&(0x7f0000000080), 0xc, &(0x7f0000000640)={&(0x7f0000000180)=@deltfilter={0x24, 0x2d, 0x535, 0x0, 0x0, {0x0, 0x0, {0x3}}}, 0x24}}, 0x0) 17:40:48 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x250000, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) ioctl$RTC_PLL_SET(r1, 0x401c7012, &(0x7f0000000040)={0x4, 0x59d, 0xe3, 0xffffffff, 0x3, 0x7157, 0x2}) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 71.760829] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. 17:40:48 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x8024, 0xffffffffffffffff) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000)=0xc7, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r2, r3) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004740)={{{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000004840)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000004880)={@empty, @remote, @mcast1, 0x4, 0xfffffffffffffffd, 0x28000000000000, 0x100, 0x2, 0x100, r4}) 17:40:48 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000200)) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x40, 0x0, 0x3}}, 0x14) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) sched_setscheduler(r1, 0x7, &(0x7f0000000140)=0x6) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) 17:40:48 executing program 5: clock_gettime(0x4, &(0x7f0000000040)) 17:40:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x0, 0x1, 0xfffffffffffffff9, 0x763}) setsockopt$inet_opts(r0, 0x0, 0x31, &(0x7f0000000000), 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x50) 17:40:49 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 17:40:49 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd177001ffffed0000464cae", 0xca) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) ptrace$getenv(0x4201, r0, 0x200005, &(0x7f00000000c0)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0xffffffffffffff0a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r1, &(0x7f0000000000)) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@remote, @in=@remote}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) 17:40:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = gettid() uname(&(0x7f0000000080)=""/78) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pktcdvd/control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0xc0000002}) setsockopt$inet6_int(r0, 0x29, 0xd6, &(0x7f0000000000)=0x30, 0x4) 17:40:49 executing program 3: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000300)=""/226, &(0x7f00000001c0)=0xe2) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)=0x3) r1 = dup2(r0, r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000100)) getsockname$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000400)=0x6e) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000480)={'filter\x00'}, &(0x7f0000000500)=0x50) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x1) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) eventfd(0x3) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000440)={0x400, 0x0, 0xb59}) 17:40:49 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0xfffffffffffffffc, &(0x7f0000000180)=0x3, 0x4) delete_module(&(0x7f0000000140)='/dev/keychord\x00', 0xa00) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local}, &(0x7f0000000300)=0xc) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000080)=""/176, &(0x7f0000000000)=0xb0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x40040, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = getpid() ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000280)=r3) getdents64(r1, &(0x7f0000000340)=""/171, 0xffffffe4) 17:40:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e23, 0x0, @ipv4={[], [], @local}, 0x100}, {0xa, 0x4e24, 0x743, @empty, 0x1000}, 0x89, [0x9, 0x80, 0x0, 0x6, 0x67e, 0x200, 0x1f, 0x100]}, 0x5c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000140)="978f4810afc26352dcbd7947ed512e384fbce5169cc862cb2bc64e70ce0b75d26a8df45dc6b63aee6f22c9d91dc79a6567d66ca81aca28c00457fd94785424f9182ae17384275a7ec6ff337dfc60e4b4e5ece549f566871431a94937385af7549798c11771b7ca6ffcf88cb649024f462c593bb7ceafd5ae97878a44d2a6426e0a62a61414c8020a46e9e34a2e02d5c4b19d2a0b07e11f4128853ff6f63b635cf4bd5514667a2e924b31bfd0a5a54c7a812bc20f70ea61154861ad93f05d03f61a9c", 0xc2) r2 = socket$inet6(0xa, 0x2, 0x0) request_key(&(0x7f0000000280)='syzkaller\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000300)='systemvboxnet1\\ppp0:\x00', 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x3ffffeb, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000240)='gretap0\x00') r3 = gettid() setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000400), 0x4) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r4}], 0x1, 0xfffffffffffffffa) syz_open_procfs(0x0, &(0x7f0000000440)="6175746f67726f757000f91b5f3e013915450f12c706c29f799f5ca1a6cf6e7fe0b5bec040e527d48ba93c7edb1e3ae6b0f77bdb8b65af21a5fc50fee6c1941fb1dce36ff53c723a633dec68afdfa3d89b71c74aca4dcefa213ce0e77d6cf0d605652f48870428ea53443475abe2a7e7e82cc6318ca8a17bc6d3cd3aeae3b78177f6ff5c8a543b79623a2e595fb5b3793b24de0e819e7b386d43e3fe28e0da6199") r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) fanotify_mark(r6, 0x40, 0x10000, r6, &(0x7f0000000340)='./file0\x00') tkill(r3, 0x1000000000016) restart_syscall() 17:40:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xc, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, @scatter, &(0x7f0000000000), &(0x7f00000005c0)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000080)}) 17:40:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffd7b, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f0000000040)="ab"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@increfs_done], 0x0, 0x0, &(0x7f0000000180)}) dup2(r1, r0) 17:40:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) prctl$getname(0x10, &(0x7f0000000000)=""/78) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pktcdvd/control\x00', 0x100, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 17:40:49 executing program 6: sendto(0xffffffffffffffff, &(0x7f0000000400), 0xfffffffffffffd81, 0x0, &(0x7f00000004c0)=@ipx={0x4, 0x0, 0x0, "dcbb9da4f1cc"}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000000100), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14ff07f0ce3bee123a197949eecf000000000000"], 0x14}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) recvmmsg(r0, &(0x7f00000013c0), 0x2ca3bfc89d2264d, 0x2, &(0x7f0000000c40)={0x0, 0x989680}) 17:40:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x20, 0x0, 0x300) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7d9abe96c17b7348e624139bda140c9a280dddaaefc2f8b18a5f5aff432bd702f775ada2d02592b2a4036d7f44aecb142f8f334b5689a2da2c1b8c81cb276509f1a86054bcddf46f09c8d3372f1097c7bd4ca632be5e2de4b5b1733ff87597c43f3530bff33d1f0a62b5a02de86248e04e6226147b95f6e6e63da7d2c236cab91f3554c577f61f284f9f1143273c9636353cb2750cd7150da3342f410826cd13c3de4aff108fa3"}, 0xab) 17:40:49 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000001240)=@generic) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 72.501604] binder: 6548:6553 unknown command 0 [ 72.517952] binder: 6548:6553 ioctl c0306201 20000140 returned -22 17:40:49 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 72.567027] input:  as /devices/virtual/input/input4 17:40:49 executing program 4: r0 = socket$inet(0x10, 0x3, 0xfffffffffffffffd) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f00000001c0)="4c00000012006d60583bfd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) close(r0) fchmod(r0, 0x160) 17:40:49 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000180), &(0x7f0000048000), 0x0) [ 72.609070] binder: release 6548:6578 transaction 2 out, still active [ 72.616248] binder_alloc: binder_alloc_mmap_handler: 6548 20001000-20004000 already mapped failed -16 [ 72.621769] binder: 6548:6593 unknown command 0 [ 72.621780] binder: 6548:6593 ioctl c0306201 20000140 returned -22 [ 72.621873] binder: BINDER_SET_CONTEXT_MGR already set [ 72.621892] binder: 6548:6553 ioctl 40046207 0 returned -16 [ 72.621940] binder_alloc: 6548: binder_alloc_buf, no vma 17:40:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f00000000c0)={'tunl0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 17:40:49 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x11) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x10000, 0x40, 0x3, {0x0, 0x989680}, 0xbf, 0x5}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) listen(r1, 0x0) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0) clock_getres(0x1, &(0x7f0000000000)) 17:40:49 executing program 3: socketpair$inet(0x2, 0x80002, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) lookup_dcookie(0x9017, &(0x7f0000000180)=""/149, 0x95) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x3fd, 0xe1d, 0xb16, 0x1ddde3f9, 0x9}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r1) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f00000000c0)=0x9) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@ipv4={[], [], @local}}, 0x14) 17:40:49 executing program 2: r0 = userfaultfd(0x80000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x8800, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x8, 0xf55, 0x2, 0x0, 0x0, [{r1, 0x0, 0x6}, {r2, 0x0, 0x28d7}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_int(r3, &(0x7f0000000080)=0xfffffffffffffffb, 0x3) [ 72.621960] binder: 6548:6578 transaction failed 29189/-3, size 24-8 line 3136 [ 72.622081] binder: 6548:6553 Release 1 refcount change on invalid ref 1 ret -22 [ 72.622109] binder: 6548:6578 BC_INCREFS_DONE u0000000000000000 no match 17:40:49 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000017c0)='/selinux/checkreqprot\x00', 0x201, 0x0) getsockname$packet(r0, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001840)=0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @local}, {0x1, @local}, 0xa, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 'vlan0\x00'}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)={r3}) getsockname$netlink(r0, &(0x7f0000000200), &(0x7f0000000240)=0xc) 17:40:49 executing program 5: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x101}, 0x14) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/zero\x00', 0x80000, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000680)={0x0, 0xc1bf, 0x7, 0x100, 0xffffffff, 0x3, 0x4, 0x8000, 0x1, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0x6}, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0x1c9c380}, 0x8) r2 = request_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)='({/cpusetnodev\x00', 0xfffffffffffffff9) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000640)=""/56) r3 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="a7f5211d8163a2f4c1ea6352439aa7ea05c23b81d0858648e6d15346063d4b4ae2539468110ccfae", 0x28, 0xfffffffffffffffa) r4 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/pktcdvd/control\x00', 0x80, 0x0) keyctl$clear(0x7, r2) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000600)={0x2f2, 0xde3}) r5 = request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)='[\x00', 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000300)={r2, r3, r5}, &(0x7f0000000340)=""/232, 0xe8, &(0x7f0000000580)={&(0x7f0000000440)={'sm3-generic\x00'}, &(0x7f0000000480)="befd01bfa391c02fbc46c41717a6b173dd4d4fb44066dcdba69b75e0ff0f0b18a03e401fa47abeaf29491538becddd00cd556e3a7015a35faf8f7baad2b381aa870bfca65fa401ee1f8bd61f9720c3067aa36ce6b75d2f5efd10eb6f3db306140670942b8a1b2b4f4b1a73559fb596b0b31b8a13f40f62c2fe434cc2ead57582275f861e36d878c3030a51f6189065f85529e2d1cbca53100141f551aa9b3d86a6da1bee7ebee3237a7c1278ff482fab59e5a82b52b39e7120edb356ad29ec61252e931f78a377ad24e18c6ebc9f950cc02ab1e07d3e518eb163aac88d005148480b7885b8e3ccf44e4cbbf34813d8af1fac2d6f5da7fc", 0xf7}) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) [ 72.905069] binder: send failed reply for transaction 2, target dead 17:40:50 executing program 7: r0 = geteuid() quotactl(0x8, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)="5c6bb5905d86b048c3916dfbac747857fc4cd78a75f6693781f4d4ce383a531c5bf48269b63cb3d8fe3d5b5d2f590b600c169e91ebe680b894c58a8a79d38c564af79020b9ae570868438252c92ca44621bc90") syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005a00)='ns/mnt\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000007440)='ns/mnt\x00') r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000000100)={{0x100, 0x400}, 'port1\x00', 0x40, 0x8000a, 0x80, 0x80000001, 0xee, 0x6, 0x7, 0x0, 0x1, 0x2}) 17:40:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000080)="0000c900fa10aaab093a3a0f9fd96a040000", 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0xa) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x2000005) pwrite64(r0, &(0x7f0000000380)="e8", 0x1, 0x0) 17:40:50 executing program 2: getitimer(0x1, &(0x7f0000000140)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000000000)="86dc79fae5467f04995a8d0d9446ff27ca58691f586005bb46f314ea58b27f2f9485bbdefcb1283836c5e49d7ed30f4cf8cb9140af3cb9f4de2ddda926c289cb645472c07ccc1866be924be4798f3c67bbf21d947c9cdfddf69bef5a140053ea7df16ce6fa7aa309ee30f0daa3676739fb8f97763d9d97258cf91ffa472174d2d1cc2f6af8521a0f43048945ada7536c192f9b94e7dace89569e518ace6bd4e598d16b6c1bbdf4e2980356f75d") getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback, r1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000440)={0x1, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @broadcast}}]}, 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x104) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) 17:40:50 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) ioctl(r1, 0x1, &(0x7f0000000180)="bda0ed7ef9db54b09887a46826490f03e9fb907cdbe5cb33c837275beb3a4c3c71a6c837184921b19eb8d00802dc27079816161365d916bc891535b022b46f12ca6727c5f05ddba7847e4adb34e0a0bc02c2ba1a26ec83032df488b0097b0fae470677006d9dff656631ea99607fc285b67042bf3b7ace61fd00301bc0297cd9") sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0x8, 0x3, 0x4, 0x4, 0x6}, 0x14) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x100, 0x0) fchdir(r3) 17:40:50 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x41000000003a) ioctl$FICLONE(r0, 0x40049409, r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xb0000, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000140)={'ip6tnl0\x00', {0x2, 0x4e21, @multicast2}}) write$selinux_create(r1, &(0x7f00000000c0)=@access={'system_u:object_r:pam_var_run_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x4}, 0x48) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'ip6gre0\x00', 0x3}, 0x18) 17:40:50 executing program 4: madvise(&(0x7f00003d0000/0x2000)=nil, 0x2000, 0xf) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000da8000/0x4000)=nil, 0x4000}, 0x1}) 17:40:50 executing program 5: prctl$intptr(0x18, 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000140)=""/134, &(0x7f0000000080)=0x86) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000000c0)=ANY=[@ANYBLOB="64000000a1900000000000000000b7d66c1b80fa4b62675d7627fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) 17:40:50 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) close(r0) close(r1) 17:40:50 executing program 5: keyctl$set_reqkey_keyring(0x11, 0xfffffffffffffffc) r0 = open(&(0x7f0000000000)='./file0\x00', 0x123000, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 17:40:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x20100) fsync(r0) r1 = memfd_create(&(0x7f0000000100)='\x00', 0x8000000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0xffffffffffffffff) sendfile(r1, r1, &(0x7f0000317000), 0xff8) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00') setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000880400005c010000000000005c010000a4030000a4030000a403000004000000", @ANYPTR=&(0x7f0000000640)=ANY=[@ANYBLOB="000000000000f604000000000000000000000000000000000000000069698a6afb0a99e100000000000000ce20b67a4c073f2975bda3b955dcc38000000000000000000000000000000000000000"], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0005c0100000000000000000000000000000000000000000000000000006c004e464c4f4700000000000000000000000000000000000000000000000000010000000400810001000000608702111ea03b433f230406894c9c6b8bd0b9548dae3c357363fb8c007cd496d7e2663ec0734f4b69f996c95c99c0212866e54452098becfb8a6ea140830acb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004d41524b0000000000000000000000000000000000000000000000000002080000006f0b0000ac141412ac1414aaff000000ff000000000000000000000000000000000000000000000000000000ffffffffffff00000000000000000000000000000000000000000000000000000000000000000000ffff00ffffff0000000000000000000065866710000000070004006e73797a5f74756e000000000000000000726f736530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000a80000000000000000000000f0003001000000000000000000000000000000000000000000000000000040004552524f52000000000000000000000000000000000000000000000000008e2ec3747829977f9273b21b9a6de0aa84d44fc8db4af3937a1aca4b882f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e4000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff"], 0x4d4) 17:40:50 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000500)='/dev/urandom\x00', 0x0, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x101dd}], 0x30e) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x12b) 17:40:50 executing program 0: r0 = socket$inet6(0xa, 0x400000000002, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000100)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/108) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x1c) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x0, 0x5, 0x10001}, 0xa) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x30b, 0x0) 17:40:50 executing program 2: clock_getres(0x2, &(0x7f0000000040)) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x80) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r1, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8d}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r2 = dup(0xffffffffffffffff) setsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000000000)=0x1000, 0x4) 17:40:50 executing program 7: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000080), &(0x7f0000000000), 0x270, 0xfffffffffffffffd) 17:40:50 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040), 0x4) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000080)=""/82) 17:40:50 executing program 4: setrlimit(0x7, &(0x7f0000becff0)) r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x1ff, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r1 = dup(r0) openat(r1, &(0x7f0000000180)='./file0\x00', 0x80, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="910000000400000001040000c10e2b2df8aad85f8585e6ef79b4be0456b081191a813c71b6b35db87b835d3398bd6a8383dc037696d52e7b25473681609c6d4579f29631451fee9d917f24ea42740baef4b5ba0d151ce3e4e1d2dc02b59cad33779cb623afd020aeeae887974799092b484732a94c5da6c914a091dc726b8ae6219ed25771dfd0a0361c4b29acf5cd478cbe6f2b5217a63838ecd1db60a79436335c2cd809288e5a21443640d24de0410abc59b935142f59e6be9c905e929ef7a9bdb1d3e5f8ba76f567b144ee11b3217a3579af77e381099bbacce008"]) 17:40:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000080)='/dev/loop#\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000240)=0x90) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x0, 0x1800000000000000, 0x0, 0x1, 0xffffffffffffffc0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7fff}) sync() ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00000000c0)) 17:40:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000002000)}) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3e2098adca716544, 0x10, r1, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, &(0x7f0000000300)}) getsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:40:50 executing program 7: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x4000, 0x80) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000240)=""/226) 17:40:50 executing program 3: r0 = socket(0x1b, 0x8000b, 0x4) bind(r0, &(0x7f0000000040)=@generic={0x11, "8a87c823d5a62d85372deb5a0b555fa76d884b1b6f8db73292f888cd8226e3078d2ccb44bb9361b62e5462ad592bbc035bce6ecfd25ebe88c7493f52c5c7cb7c9ac41b95d6356c710e35c4b974c26610fdaa75bdb0e9ec65dd43a1d5adbd17897e0bc187e59e84280233d9f5604d07ed0b591663d8a56ada3655ac7ae009"}, 0x80) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000100)=@srh={0x2b, 0x8, 0x4, 0x4, 0xefa2, 0x20, 0x1, [@loopback, @remote, @empty, @dev={0xfe, 0x80, [], 0x16}]}, 0x48) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) openat$cgroup_int(r1, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 17:40:50 executing program 4: mmap(&(0x7f000000f000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x100000) fsetxattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000100)='system_u:object_r:wireless_device_t:s0\x00', 0xffc7, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) 17:40:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x2) r2 = socket$inet(0x10, 0x0, 0x400000) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='$\x00', 0x2}], 0x1}, 0x0) ioctl$sock_netdev_private(r2, 0x89fc, &(0x7f00000001c0)="12fa57a8ac5de2903a90f6bb4ffc118bb8793da9574246c450c025dec5329893429f2498e2e66413a8cfe3507998957d213af9a9527c98dda09b65dc9d695a6277f422baee1624687fecad7dbab8a3cbb94b5288c422f0f8523cd2f0c51af3f3cfda") ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendfile(r1, r0, &(0x7f0000000240), 0x2000005) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000140)={0x0, 0x3}) 17:40:50 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) getpeername$unix(r2, &(0x7f0000000080), &(0x7f0000000140)=0x6e) lstat(&(0x7f0000002b80)='./bus\x00', &(0x7f0000000000)) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000300)={0x0, 0xfffffffffffffff8}) 17:40:50 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000800)='/dev/input/mice\x00', 0x0, 0x200480) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000e40)={0x2, 0x3, 'client0\x00', 0xffffffff80000003, "0c97affd9dbad2d1", "31451e4073d479e8a50d7314ad1001cee6a17909d83347a9270e437fafb53405", 0x6}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vga_arbiter\x00', 0x200, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) clock_gettime(0x0, &(0x7f0000000840)) write$sndseq(r2, &(0x7f0000000880)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x7ff, 0x8, 0x0, 0x87, @tick, {0x0, 0x8}, {0xa0000000000, 0x7c000000000000}, @addr={0x6, 0x273}}, {0x4, 0x9, 0x3f, 0x100000001, @tick=0x37b, {0x200, 0x3}, {0x8, 0x5c}, @note={0xffffffffffff8226, 0x9, 0x8, 0x4, 0x701d}}, {0x7, 0x6, 0x3a29, 0x5, @time={0x0, 0x1c9c380}, {0xffffffffffffff23, 0x9}, {0x6, 0xfffffffffffffffa}, @queue={0xffffffffffffff77, {0xcb9, 0x3f}}}], 0x70) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r1) ioctl$TCXONC(r2, 0x540a, 0x7) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x80000000, 0x9, @local, 0xd1}}, 0x0, 0x0, 0x0, "a9bb6985f862ac1dad8d2b48855bee347e639abfb73f25e68f05f8bd746616146cdcc00fc52e0b4fac654b2b083ef46510a626c1c733f4fc346acd5001ea72ade16ae272eff6ceff7db90a2dbf8ea398"}, 0xd8) execveat(r3, &(0x7f0000000980)='./bus\x00', &(0x7f0000000b80)=[&(0x7f00000009c0)='eth0nodevmime_type)\x00', &(0x7f0000000a00)="776c616e30890f00", &(0x7f0000000a40)='/dev/vga_arbiter\x00', &(0x7f0000000a80)='/dev/vga_arbiter\x00', &(0x7f0000000ac0)='/dev/vga_arbiter\x00', &(0x7f0000000b00)='/dev/vga_arbiter\x00', &(0x7f0000000b40)='/dev/vga_arbiter\x00'], &(0x7f0000000e00)=[&(0x7f0000000bc0)='/dev/vga_arbiter\x00', &(0x7f0000000c00)='bdev\x00', &(0x7f0000000c40)='GPLsecurity\x00', &(0x7f0000000c80)='\x00', &(0x7f0000000cc0)='/dev/vga_arbiter\x00', &(0x7f0000000d00)='/dev/vga_arbiter\x00', &(0x7f0000000d40)="776c616e307bc600", &(0x7f0000000d80)='/dev/vga_arbiter\x00', &(0x7f0000000dc0)='/dev/vga_arbiter\x00'], 0x800) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000007c0)=0x2c0, 0x4) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000180)=@generic) getpeername(r3, &(0x7f00000004c0)=@hci, &(0x7f0000000580)=0x10d) accept4$inet(r4, &(0x7f0000000740)={0x2, 0x0, @broadcast}, &(0x7f0000000780)=0x10, 0x80800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[]}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@local, @in=@broadcast}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000700)) ftruncate(r5, 0x2007fff) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000ffeffffe) syz_genetlink_get_family_id$fou(&(0x7f0000000900)='fou\x00') 17:40:50 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0), 0xfd06, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) setsockopt$inet6_buf(r2, 0x29, 0xfe, &(0x7f0000000040)="fda376245fac294db404d59b74c90e3e2eeca869f0217c460922b083c7c2566a63a1d47ca1a425d9bcd18fdbe6b69ae9344a4b21e48984d545f260baab79c4e131f64ff044d57c264844e33a20e53b39c94ac5b67539fdafbf", 0x59) ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000000000), 0x6) write(r0, &(0x7f00000001c0)="b0", 0x1) sendfile(r0, r2, &(0x7f0000000200), 0x2008000fffffffd) 17:40:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "f5261e68096d5c0229a3b790564806b2d199ab53bb15d0f456464f127c998493b19e80"}, 0x2e) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000e000000400000000000000000000000000000"], 0x2a) readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000001680)=""/201}, {&(0x7f0000001780)=""/211}, {&(0x7f0000000300)=""/12}, {&(0x7f0000001880)=""/110, 0xfffffffffffffe93}, {&(0x7f0000000340)=""/40}, {&(0x7f0000001b00), 0x22f}, {&(0x7f0000001940)=""/237, 0xfffffffffffffedb}, {&(0x7f0000001a40)=""/108}], 0x4) poll(&(0x7f00000003c0), 0x0, 0x0) 17:40:50 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x1) 17:40:50 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) getpgrp(0xffffffffffffffff) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) getgid() openat$uhid(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/uhid\x00', 0x802, 0x0) socketpair(0x4, 0x80006, 0x101, &(0x7f0000000ac0)) syz_open_dev$usbmon(&(0x7f0000000b00)='/dev/usbmon#\x00', 0x7fffffff, 0x4000) syz_open_dev$rtc(&(0x7f0000000b40)='/dev/rtc#\x00', 0x9, 0x24800) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000b80)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/hwrng\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000c00)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c40)={{{@in6=@mcast1, @in=@dev}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000d40)=0xe8) getresgid(&(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/ppp\x00', 0x900, 0x0) perf_event_open$cgroup(&(0x7f0000001140)={0x4, 0x70, 0x20e6, 0x5, 0x5, 0xfffffffffffffffa, 0x0, 0x10000, 0x2000, 0x1, 0x8, 0x4, 0x1, 0x7, 0x10000, 0xb06, 0xff35, 0x6, 0xa4cc, 0x8, 0x40, 0x100000001, 0x1, 0x81, 0x9, 0x1, 0x8001, 0x1, 0x1000, 0x61bf, 0x1, 0x6, 0x20, 0x5, 0x8, 0xffffffffffffa339, 0xb31a, 0x100000001, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000001100), 0x4}, 0x20041, 0x1f, 0x8, 0x2, 0xc55, 0x100000000, 0xc5}, 0xffffffffffffff9c, 0x8, 0xffffffffffffff9c, 0xb) accept4$inet6(0xffffffffffffffff, &(0x7f00000011c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000001200)=0x1c, 0x800) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001240)='cgroup.subtree_control\x00', 0x2, 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x404, &(0x7f0000000140)) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/62) 17:40:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002ac0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f00000002c0), 0xc, &(0x7f0000001880)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000013000501000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000004002b00"], 0x24}}, 0x0) 17:40:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x39}}) 17:40:50 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x653a459125c256f1, 0x1) r1 = syz_open_procfs(r0, &(0x7f0000000080)="6e65742f69665f696e65743600689d001e363b6c264fa887a26fda3eca58373161f13a12a92be6a993b4720d86396a9b1cc039d178e14492de97786eb30b86bb0ae2163b7ed177ff87e312d09bd390ce2ce4d13622dbc9d6b533c3f99225e401466f9ef8a9ea53c0f11c5a10cf9677596ce7721105a3ac3b287b2ca64a5ad4aad7c941387ab5acedea8f64c584562f2a3eb7aac4df59716b44156fd857da4ad2") readv(r1, &(0x7f0000000380)=[{&(0x7f0000000140)=""/206, 0xce}, {&(0x7f0000000280)=""/253, 0xfd}], 0x2) execveat(r1, &(0x7f0000000240)='./file1\x00', &(0x7f0000000480)=[&(0x7f00000003c0)='posix_acl_access\x00', &(0x7f0000000400)='%\x00', &(0x7f0000000440)=':vmnet0selinuxselinuxself\x00'], &(0x7f00000005c0)=[&(0x7f00000004c0)='^\x00', &(0x7f0000000500)="6e65742f69665f696e65743600689d001e363b6c264fa887a26fda3eca58373161f13a12a92be6a993b4720d86396a9b1cc039d178e14492de97786eb30b86bb0ae2163b7ed177ff87e312d09bd390ce2ce4d13622dbc9d6b533c3f99225e401466f9ef8a9ea53c0f11c5a10cf9677596ce7721105a3ac3b287b2ca64a5ad4aad7c941387ab5acedea8f64c584562f2a3eb7aac4df59716b44156fd857da4ad2"], 0xc00) [ 74.007816] binder: 6732:6746 Release 1 refcount change on invalid ref 0 ret -22 17:40:50 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200, 0x48) getdents(r0, &(0x7f0000000600)=""/4096, 0x1000) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x30, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x10, 0x16, [{0xc, 0x1, [@typed={0x8, 0x0, @uid}]}]}]}, 0x30}}, 0x0) 17:40:51 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ptrace$setregset(0x4205, r1, 0x0, &(0x7f0000000100)={&(0x7f0000000040)}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r2, &(0x7f0000000080)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="3ce6a7e6f1cb646e0c1e2c54f5364f1fad73a75185976d4c4cd19695ce8fd5690bbff316b2023df61da9f92a8fdfd1823672be7cdffc3b546aea9dec3fdf0bc1ed4aca9dd8bb4f9315d92074ba0b88e00bf2dc5488787d93b72730a32b0ebb434d318b03d31f438543df90c41b99c145015f531d699691b585924b8b0b6e0000000000"], 0x8f4}], 0x1, 0x0, 0x0, 0x800}, 0x800) 17:40:51 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$void(r0, 0x5451) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x104) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x4, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x104) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x399) [ 74.067242] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 17:40:51 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) fcntl$setsig(r0, 0xa, 0x43) 17:40:51 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000002c0)=""/4096, 0xbf060ee193c652c9) getdents64(r0, &(0x7f00000001c0)=""/62, 0x3e) 17:40:51 executing program 0: r0 = socket$inet(0x2, 0xa, 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/103, 0x67, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x8000, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000140)=0x8, 0x4) syz_emit_ethernet(0xfed1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff08004500001c0000000000009078ac14ffbbe000000100000000000890789b5cd096639feb11da001cea"], 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) sendmsg$nl_generic(r1, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440300003f00210229bd7000fcdbdf2511000000f66a4ad89c05e301a8ece612eb65ed2854e6d9f8193e60242611bbe60ca55260a580bd20774dfcd1ee3c9b51f10f34b6f77784271ee40410cdfad395666fbc3aaaab74bd0562434a85bbcb973428a3aa60ef7e084b96d1ef2b0453b0e0145a385dcd3a4ca55328b75a76fbc85ae966616adeb9ab5d4a8ecb0d9b73914371bbd6cc4ebd6ebfa535f29c8e81a6940f3a5d9c921f9e831dfe40463502ec56603803402edbdcfb371fa873e1ff16c9af41a943bcce362d988a41d36fe486c7475cf8fd4a8fe27ad6fb8442c59eedcda11d6adb0a2701f70431845b164565ac803606eaf97b4e757c062b1029a9b3d9afcdda06f45cbb71aa6ab42521407174819a2fa2fd3e71de92ef94944bd42c5e815a9b85a198c81457f739cb8e0ce0ae907ea46051a5193c5ceea806b7fbed44b5211569840add10249594a88d315982390349921217f6bb42ab67db01d62b9156b60f01c64fb83ee59a37976d10af5fd95986dc628d8c4bd91aa711e5fe511c2228f86f2e6a2f462692fa430522b5b3141e2189b83487d646cdf444ae86ec17fa20087a8090fcdc2be1e77e490b339909c6e0d3a340005c0024bc75e5ffabbae66bc94c63b89d2ce34d68958b07bd7471f76e5918d1136941818120d5d5dadb9d0c00270081fb15fd3f00000008000e0003000000c4008400ba00ff59c376217a537bfc310929f30cd102f5e0ca1efee72aa245bf569dad28d1bb30a7a4c3c22045ac60a1b4b395d7273e22b92e0c3139f8b965e986353cded84f4ece0123a86e85011391bf2f5fd927388c06db1b619bde2b669e6d0638b31dcfb0849c21fca08eab07a951602bcbac22fd5a380446b2519f1ac3b2b25d9401b4b6375ef79de0496fbd2b3b1e82c2e3eb5239d8ad2a99463f6ebd4454d019625bb46ac097c36fde0eddc3da8297f6781ca7ecb5948987ce2b6a75480000003c0076002763155d6691a64d1efe96c20714f2d69688820c6bff9c898de9358f3ff0df7a0bcc772bd84172c473722cc4c3bdc7d01e2ea858df2cc1ad09c15ae0fd37a9ff4b42d483b041020632f0b081148672dc99d793994a51d8c7688dcaa4c2369d2c98326b975a1d7546e12dfc50d46199b9e519333e080015007f00000108005700", @ANYRES32=r2, @ANYBLOB="f900"], 0x344}}, 0x84) r3 = memfd_create(&(0x7f0000000000)="81fb15fd3f", 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r3, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000680)) getpeername$inet6(r1, &(0x7f00000006c0)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000700)=0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8906, &(0x7f0000000600)={'team_slave_1\x00'}) [ 74.117970] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 74.180380] syz-executor0 uses obsolete (PF_INET,SOCK_PACKET) 17:40:51 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x1, 0x0, &(0x7f0000002640)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='security.selinux\x00') setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) prctl$setendian(0x14, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') pwritev(r0, &(0x7f0000001400), 0x2a6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000014c0)) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) 17:40:51 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'ip6tnl0\x00', 0x8001}) listen(r0, 0x0) socketpair(0x0, 0xa, 0xfffffffffffffff9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='vegas\x00', 0x6) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000000)=0x8da, 0xffffffc3) sendto$inet6(r3, &(0x7f0000000040), 0x10, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) getpeername(r3, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, &(0x7f00000000c0)=0x80) [ 74.333490] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:40:51 executing program 2: r0 = socket$inet6(0xa, 0x10000000000001, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}, 0x1c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x505200, 0x0) r2 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffff9c, 0x0) r3 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000002c0)={0x0}) r5 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x89013, 0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="09631040", @ANYRES64=r2, @ANYBLOB="030000000000000009631040", @ANYRES64=r3, @ANYBLOB="000000000000000004630440020000000e630c4001000000030000000000000004630440010000000b630000046304400400000008631040", @ANYRES64=r4, @ANYBLOB="0400000000000000056304400400000008631040", @ANYRES64=r5, @ANYBLOB="010000000000000000d8a3e0559e1a00"], 0x8c, 0x0, &(0x7f0000000400)="f2b0f6b4ccfb11f2a5c7a6ae04b53a9114d5974ff47afd2a3b33b64b1920e52996a24751ccb01b910c93a15bf67a23b3fee960cfa5ec87252fcddcf3a0f5567b0e656f316ff2c42c3ea6d35e0964cfb65672268f7c4079dcfb1ec1a3eef34732e64dd7b27fb4bf2803fd3e6734220ff385487e51ea1a448bf23a4075034a06bb19f44f7a09bace9efdc00955"}) getsockopt$inet6_int(r0, 0x29, 0x10000000000010, &(0x7f0000534000), &(0x7f0000000040)=0x4) r6 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000280), 0xd1ab4808) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000340)={@multicast1, @multicast2, 0x0}, &(0x7f0000000380)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000003c0)={@mcast1, 0x63, r8}) write$P9_RRENAMEAT(r7, &(0x7f0000000080)={0x2, 0x4b, 0x2}, 0x7) recvfrom(r7, &(0x7f0000000140)=""/244, 0xf4, 0x100, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@local}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000006c0)=0xe8) sendfile(r6, r7, &(0x7f0000000040), 0x8001) ioctl$PERF_EVENT_IOC_QUERY_BPF(r7, 0xc004240a, &(0x7f0000000240)=ANY=[@ANYBLOB="3a85f9cd16eca98d6703ee8f1415a507364ac13abaa8c3ccc03ace0f3df6e21cbd5766da2932e4dbc49bbd10ef0907000000000000008649e9bd07766f7cc1"]) 17:40:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000400)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000080)) write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0xa, {0x400}}, 0x18) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 17:40:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x29, &(0x7f00000001c0)={0x0, 'bridge_slave_0\x00'}, 0x18) r1 = dup3(r0, r0, 0x80000) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'\x00', 0x8}) r2 = socket(0x11, 0x803, 0xffffffffffffff44) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0x401, @dev={0xfe, 0x80, [], 0xd}, 0xffffffffffffffc4}, {0xa, 0x4e24, 0x1000, @ipv4={[], [], @rand_addr=0x2}, 0x1}, 0x3, [0xffffffffffffff80, 0x8001, 0x7, 0x5, 0x8, 0x954a, 0x8, 0x2]}, 0x5c) 17:40:51 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'security\x00', 0x2, [{}, {}]}, 0x48) 17:40:51 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0xd43b, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000000), 0x4) r1 = pkey_alloc(0x0, 0x2) mremap(&(0x7f0000347000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f000009c000/0x4000)=nil) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, r1) pkey_free(r1) 17:40:51 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x401) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffffffffffe}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4000, 0x0) getsockopt$packet_buf(r1, 0x107, 0x1f, &(0x7f0000000080)=""/18, &(0x7f00000000c0)=0x12) ioctl$TCSETAW(r0, 0x5408, &(0x7f0000000280)) 17:40:51 executing program 6: madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2) prctl$getreaper(0x26, &(0x7f0000000040)) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000bf3000)={0xfffffffffffffffe}) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000001c0)={0x7d}, 0xffffffffffffffcc) readv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/113, 0x71}], 0x1) 17:40:51 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)={0x0, 0x0}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) setpgid(r1, 0x0) [ 74.668149] BUG: unable to handle kernel paging request at ffffeafff97c8020 [ 74.675608] IP: [] __split_huge_pmd+0x391/0x1870 [ 74.682074] PGD 0 [ 74.684038] [ 74.685677] Oops: 0000 [#1] PREEMPT SMP KASAN [ 74.690158] Dumping ftrace buffer: [ 74.693679] (ftrace buffer empty) [ 74.697387] Modules linked in: [ 74.700692] CPU: 0 PID: 6829 Comm: syz-executor5 Not tainted 4.9.122-g54068d6 #30 [ 74.708294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.717631] task: ffff8801a2508000 task.stack: ffff8801a6478000 [ 74.723668] RIP: 0010:[] [] __split_huge_pmd+0x391/0x1870 [ 74.732562] RSP: 0018:ffff8801a647fa40 EFLAGS: 00010246 [ 74.737993] RAX: dffffc0000000000 RBX: ffffeafff97c8000 RCX: ffffc900080e9000 [ 74.745261] RDX: 1ffffd5fff2f9004 RSI: ffffffff8154df6e RDI: ffffeafff97c8020 [ 74.752518] RBP: ffff8801a647fb70 R08: ffff8801a2508910 R09: 0000000000000001 [ 74.759774] R10: ffff8801a2508000 R11: 1ffff100344a111d R12: ffffea0000000000 [ 74.767040] R13: 0000000000000000 R14: ffff8801cdd57518 R15: ffff8801cd99a800 [ 74.774297] FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f57b3b40 [ 74.782505] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 74.788370] CR2: ffffeafff97c8020 CR3: 00000001cb5d3000 CR4: 00000000001606f0 [ 74.795623] Stack: [ 74.797757] ffffffff8153e677 ffffffff8153ec42 ffffffff8153a57e ffffffff814e075c [ 74.805853] ffffffff855d3710 ffffffff814f000e 0000000000005293 ffff8801a2508908 [ 74.813878] ffff8801a25088b8 ffff8801a2508910 ffff8801a25088c0 1ffff10034c8ff5d [ 74.821921] Call Trace: [ 74.824507] [] ? kasan_kmalloc+0xc7/0xe0 [ 74.830223] [] ? kasan_slab_alloc+0x12/0x20 [ 74.836182] [] ? kmem_cache_alloc+0xbe/0x290 [ 74.842230] [] ? __split_vma.isra.40+0xcc/0x670 [ 74.848538] [] ? SyS_mremap+0x82e/0xd20 [ 74.854148] [] ? copy_user_handle_tail+0xaa/0xe0 [ 74.860545] [] ? change_huge_pmd+0x540/0x540 [ 74.866588] [] split_huge_pmd_address+0x1a9/0x1f0 [ 74.873065] [] vma_adjust_trans_huge+0x1e3/0x250 [ 74.879458] [] __vma_adjust+0x168/0x16c0 [ 74.885182] [] ? anon_vma_clone+0x31a/0x4b0 [ 74.891146] [] __split_vma.isra.40+0x530/0x670 [ 74.897362] [] do_munmap+0x252/0xe50 [ 74.902740] [] SyS_mremap+0x82e/0xd20 [ 74.908176] [] ? move_vma+0x930/0x930 [ 74.913614] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 74.920614] [] ? SyS_pkey_alloc+0x203/0x440 [ 74.926574] [] ? do_fast_syscall_32+0xcf/0x870 [ 74.932793] [] ? move_vma+0x930/0x930 [ 74.938229] [] do_fast_syscall_32+0x2f7/0x870 [ 74.944356] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 74.951027] [] entry_SYSENTER_compat+0x90/0xa2 [ 74.957244] Code: ff df 4c 21 e3 49 bc 00 00 00 00 00 ea ff ff 48 c1 eb 06 4c 01 e3 48 8d 7b 20 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 14 13 00 00 <4c> 8b 6b 20 49 89 dc 41 f6 c5 01 0f 85 ab 0a 00 00 e8 b9 2d e1 [ 74.984882] RIP [] __split_huge_pmd+0x391/0x1870 [ 74.991422] RSP [ 74.995043] CR2: ffffeafff97c8020 [ 74.998932] ---[ end trace 2f9baeacb51156a4 ]--- [ 75.003667] Kernel panic - not syncing: Fatal exception [ 75.009357] Dumping ftrace buffer: [ 75.012880] (ftrace buffer empty) [ 75.016564] Kernel Offset: disabled [ 75.020167] Rebooting in 86400 seconds..