71070") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc05c5340, &(0x7f0000dc5f98)) 17:24:20 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10000000001, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000080)}}], 0x1c) r1 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295e273b5abcf477671070") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc05c5340, &(0x7f0000dc5f98)) 17:24:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r0, 0x40086602, &(0x7f0000000000)) 17:24:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00004aaffc)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0xe14, 0x4) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0), &(0x7f0000000080)=0xfffffffffffffe67) 17:24:20 executing program 6: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x3}) 17:24:20 executing program 6: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x3}) 17:24:20 executing program 6: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x3}) 17:24:20 executing program 6: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x3}) 17:24:20 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr, 0x0, 0x0, 'rr\x00'}, 0x2c) 17:24:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0x7, &(0x7f00000000c0)={@in={{0x2, 0x0, @multicast1=0xe0000001}}, 0x0, 0x0, 0x0, "550beaaa187996ee3d57889e8bfec0e8baa5be8750fcee33689f3a11ed3f4b3a8341a5022c8937416244c16b08fbd1da0a6e3d267351e314846469cb85fc934b5ddd3a714d4ca3832382c2a69e946e06"}, 0xd8) close(r3) dup3(r1, r2, 0x0) 17:24:20 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x125000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000000c0)=[{}, {}], 0x0, [{}]}, 0x88) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000003c0)) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120000020000000000000000400000"], 0x10}, 0x1}, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000340)) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:24:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0084904, &(0x7f0000000700)="01a973fd") 17:24:20 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0xdd, 0x400) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r2, 0x1000) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000001c0)=0x4) r3 = socket$inet6(0xa, 0xa, 0x0) modify_ldt$read(0x0, &(0x7f0000000080)=""/180, 0xb4) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl(r3, 0x4000008910, &(0x7f0000000200)="295ee1311f16f477671070") remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0xfffffffffffff08e, 0xc4000) flock(r0, 0x0) r4 = socket$inet(0x10, 0xd, 0xa01) sendmsg(r4, &(0x7f0000000000)={0x0, 0xffffffffffffff34, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4000}, 0x0) 17:24:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x800000f) fallocate(r1, 0x3, 0x0, 0x1) 17:24:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x4, &(0x7f0000000000)=0x5, 0xa) close(r3) dup3(r1, r2, 0x0) 17:24:20 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff004}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000006e00)=[{{&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x80, &(0x7f00000006c0)}}, {{&(0x7f00000058c0)=@can={0x1d}, 0x80, &(0x7f0000005a40), 0x0, &(0x7f0000005a80)}}], 0x2, 0x0) 17:24:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0x40086602, &(0x7f00000001c0)={0x197000}) 17:24:20 executing program 7: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000b40)=@l2={0x1f}, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="180000eeffffff000000000000000000e20d"], 0x12}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, &(0x7f0000000000)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000008ff8)) 17:24:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") epoll_wait(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) 17:24:20 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) 17:24:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') sendfile(r0, r1, &(0x7f0000000000)=0x2d, 0xff) 17:24:20 executing program 1: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x30004}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000002d40), 0x8, 0x0) read(r2, &(0x7f0000000000)=""/128, 0x80) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) signalfd4(r2, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) 17:24:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000) 17:24:20 executing program 7: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x3}) 17:24:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') sendfile(r0, r1, &(0x7f0000000000)=0x2d, 0xff) 17:24:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x1, 0x6}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/46, 0x2e}], 0x1) dup3(r1, r0, 0x0) 17:24:21 executing program 4: r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '#! '}], 0xa}, 0xf) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000140)) 17:24:21 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5413, 0x6f3000) 17:24:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') sendfile(r0, r1, &(0x7f0000000000)=0x2d, 0xff) 17:24:21 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x4, 0x8012, r0, 0x0) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 17:24:21 executing program 4: setitimer(0x2, &(0x7f000063eff0)={{0x77359400}, {0x77359400}}, &(0x7f0000628000)) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x7530}}, 0x0) 17:24:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)="2f70726f632f76657273696f6e005aa2ac0000b8b5a28a29aecbf843385a51250398ce12d984f52a149eaf9866f3c33828fe73d4f319528bbd89fcefb625adac46df7522ebb23c98ad69bdc82509df6f43791702000000ca02988905b672c3a20d10f890b9f57724340b384eca6136eae4fd4a015e073076b8f1cde45eea0f0f0c3ca64ebdd0cefc0d9e8ea91d0bbba500000000000000000000000000000000", 0x2, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x0) 17:24:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="050100000500000000000000ffa2ada33f93820fd903378c39160aaacb57a80000067dff3dd85f4a58611537a0be625ef768bc5eef9e1814ce9508c008e265756fe5eb8f5972dcecfffc2bd9e9aba5568a12843d4342277bd6adf74af03e90f549fe2958d18d00000000000000000000005112b746ad4ed53943feb498c6", 0x7e, 0x0, &(0x7f0000000000)={0xa, 0x100200000800, 0x8000000000004, @ipv4={[], [0xff, 0xff]}}, 0x1c) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/14, 0xe}, {&(0x7f00000001c0)=""/122, 0x7a}], 0x2) 17:24:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') sendfile(r0, r1, &(0x7f0000000000)=0x2d, 0xff) 17:24:21 executing program 6: socket$inet6(0xa, 0x1, 0x0) unshare(0x8000000) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 17:24:21 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x4, 0x8012, r0, 0x0) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 17:24:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x1, 0x6}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/46, 0x2e}], 0x1) dup3(r1, r0, 0x0) 17:24:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@rand_addr, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 17:24:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000300)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x0, 0x0, 'client0\x00', 0x0, "cf39b7700b2c0e06", "3973b70b5c93d69cf542b1129b98e21b352361ae096a5fa07b5922ed71bd788c"}) 17:24:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)="2f70726f632f76657273696f6e005aa2ac0000b8b5a28a29aecbf843385a51250398ce12d984f52a149eaf9866f3c33828fe73d4f319528bbd89fcefb625adac46df7522ebb23c98ad69bdc82509df6f43791702000000ca02988905b672c3a20d10f890b9f57724340b384eca6136eae4fd4a015e073076b8f1cde45eea0f0f0c3ca64ebdd0cefc0d9e8ea91d0bbba500000000000000000000000000000000", 0x2, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x0) 17:24:21 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x4, 0x8012, r0, 0x0) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 17:24:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)="2f70726f632f76657273696f6e005aa2ac0000b8b5a28a29aecbf843385a51250398ce12d984f52a149eaf9866f3c33828fe73d4f319528bbd89fcefb625adac46df7522ebb23c98ad69bdc82509df6f43791702000000ca02988905b672c3a20d10f890b9f57724340b384eca6136eae4fd4a015e073076b8f1cde45eea0f0f0c3ca64ebdd0cefc0d9e8ea91d0bbba500000000000000000000000000000000", 0x2, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x0) 17:24:21 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x4, 0x8012, r0, 0x0) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 17:24:21 executing program 1: madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2) 17:24:21 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x4, 0x1}]}, 0x20}, 0x1}, 0x0) 17:24:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x1, 0x6}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/46, 0x2e}], 0x1) dup3(r1, r0, 0x0) 17:24:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl(r0, 0x5387, &(0x7f00000000c0)) 17:24:21 executing program 6: socket$inet6(0xa, 0x1, 0x0) unshare(0x8000000) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 17:24:21 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) fcntl$setstatus(r0, 0x4, 0x19c777672df23e91) dup2(r0, r1) 17:24:21 executing program 1: modify_ldt$write2(0x11, &(0x7f0000000180), 0x10) clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0)) 17:24:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setfsuid(r1) 17:24:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)="2f70726f632f76657273696f6e005aa2ac0000b8b5a28a29aecbf843385a51250398ce12d984f52a149eaf9866f3c33828fe73d4f319528bbd89fcefb625adac46df7522ebb23c98ad69bdc82509df6f43791702000000ca02988905b672c3a20d10f890b9f57724340b384eca6136eae4fd4a015e073076b8f1cde45eea0f0f0c3ca64ebdd0cefc0d9e8ea91d0bbba500000000000000000000000000000000", 0x2, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x0) 17:24:21 executing program 7: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$fuse(r0, &(0x7f0000000040)={0x20, 0x0, 0x0, @fuse_notify_inval_entry_out}, 0x20) 17:24:21 executing program 6: socket$inet6(0xa, 0x1, 0x0) unshare(0x8000000) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 17:24:22 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) userfaultfd(0x0) pselect6(0x2e7, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 17:24:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000000)={'bridge_slave_0\x00', @ifru_addrs=@generic={0x0, "27953e8bd0fd5e68f80260965ca3"}}) 17:24:22 executing program 0: r0 = socket$inet6(0xa, 0x1010000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") getpriority(0x3, 0x0) 17:24:22 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x58, &(0x7f0000000140)="5e19971619c31f56c739998393236ef2d9baed2f5af6b1b6c1b4067cee2d5283a08552758b978d08eaca57344ccf44b8998743b92b662fd8b016faf4ea563c38bc1467e4ff4af72ec0b5eed6844bba7674a3e26588feec70"}) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x64, 0x2}, [{}]}, 0x3d8) 17:24:22 executing program 2: modify_ldt$write2(0x11, &(0x7f00000000c0), 0x10) r0 = memfd_create(&(0x7f0000002600)="9973656ce187e6660500766d6e65743000c888449472bdb1ca03c51cafa1a9104e1773d7eb67e56a1bc28d1d45abe4f16c32ae77fc24a36b003400000000000075b6e2216ad83ccd62ef746182c049de24b0ca4076ede45956a69ff5", 0x0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 17:24:22 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x1, 0x6}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/46, 0x2e}], 0x1) dup3(r1, r0, 0x0) 17:24:22 executing program 6: socket$inet6(0xa, 0x1, 0x0) unshare(0x8000000) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 17:24:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000001280)='cgroup.procs\x00', 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_pwait(r2, &(0x7f0000001140)=[{}], 0x1, 0x0, &(0x7f00000011c0), 0x8) 17:24:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) dup3(r0, r1, 0x0) 17:24:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x0, 0x0, "ff26602457989fbd61a4770385db97a47c5bf54adcba28d8c7f7226c66da6c8565a5a1e471a686e864bcb11cd4a6252b85e53a56ef1e638b3ad9d608ec2de180c0034bf32bbf617bfeeb455a1eb41339"}, 0xd8) 17:24:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000000082002, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1}, {r1, 0x112}, {r1}], 0x3, &(0x7f0000000200)={0x0, r2+10000000}, &(0x7f0000000240), 0x8) 17:24:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'vcan0\x00', 0x4000000000002001}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)) 17:24:22 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000764ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffffffffffc0}}) 17:24:22 executing program 6: unshare(0x20000000) clone(0x13ffd, &(0x7f0000000a40), &(0x7f0000000640), &(0x7f0000000100), &(0x7f00000007c0)) 17:24:22 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/103, 0x67, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000000600)={'bpq0\x00'}) 17:24:22 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e000000100000000000000000800120002000200000000007d2200001800000003000000000000000000000000000000000000001600000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}, 0x1}, 0x0) 17:24:22 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x8000, 0x7, 0x8000, 0x7}, 0xdc96df926f8307b5) close(r0) 17:24:22 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x8}}]}, 0x34}, 0x1}, 0x0) 17:24:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") membarrier(0x0, 0x0) 17:24:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') unshare(0x2000400) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, 0x0) 17:24:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0xd, 0x1000000000a, 0xffffffffffffffff, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 17:24:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/248) 17:24:23 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 17:24:23 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f00003efff0)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000002d40), 0x8, 0x0) read(r2, &(0x7f0000000000)=""/128, 0x80) signalfd4(r2, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) 17:24:23 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @link_local={0x1, 0x80, 0xc2}}]}, 0x28}, 0x1}, 0x0) 17:24:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') unshare(0x2000400) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, 0x0) 17:24:23 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 17:24:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x8) 17:24:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') unshare(0x2000400) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, 0x0) 17:24:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') unshare(0x2000400) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, 0x0) [ 541.983603] IPVS: Creating netns size=2536 id=134 [ 542.009597] IPVS: Creating netns size=2536 id=135 17:24:23 executing program 4: r0 = memfd_create(&(0x7f0000034ffe)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000480)={0x0, 0x0, {0x1, 0x0, 0x0, 0x6}}) 17:24:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x30, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x8, 0x16, [{0x4, 0x1}]}, @IFLA_OPERSTATE={0x8, 0x10}]}, 0x30}, 0x1}, 0x0) 17:24:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x8) 17:24:23 executing program 5: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000100)={'tunl0\x00', @ifru_flags}) 17:24:23 executing program 1: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f000002b000)="1f0000000104fffffd3b54c007110000f30501000b000600000423ca0000cf", 0x1f) 17:24:23 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x8000, 0x7, 0x8000, 0x7}, 0xdc96df926f8307b5) close(r0) 17:24:23 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 17:24:23 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x8000, 0x7, 0x8000, 0x7}, 0xdc96df926f8307b5) close(r0) 17:24:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) fadvise64(r0, 0x0, 0x0, 0x3) 17:24:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x8) 17:24:23 executing program 4: r0 = userfaultfd(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)) poll(&(0x7f0000600000)=[{r1}], 0x1, 0x0) 17:24:23 executing program 0: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) sync() ftruncate(r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) 17:24:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x8) 17:24:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@remote={0xfe, 0x80, [], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 17:24:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000400)="6e65742f6172700047314e4c26deb4b78cd25d07a9fd7d501314302606e1310ae391812d0b598cb456fde964a6ce71fc4d56eb2c856ef260bc1197d5547a67cdf45fbf6d1f0f0a85580791a8ead6bec39228d135702d5d42e5ee0d6de3ef7603a528") unshare(0x400) readv(r0, &(0x7f0000000080), 0x0) 17:24:23 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x8000, 0x7, 0x8000, 0x7}, 0xdc96df926f8307b5) close(r0) 17:24:23 executing program 6: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40284504, &(0x7f0000000140)=[0x2ff]) 17:24:24 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f00000c7000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x4000000000000000) 17:24:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000400)="6e65742f6172700047314e4c26deb4b78cd25d07a9fd7d501314302606e1310ae391812d0b598cb456fde964a6ce71fc4d56eb2c856ef260bc1197d5547a67cdf45fbf6d1f0f0a85580791a8ead6bec39228d135702d5d42e5ee0d6de3ef7603a528") unshare(0x400) readv(r0, &(0x7f0000000080), 0x0) [ 543.913851] pktgen: kernel_thread() failed for cpu 0 [ 543.920264] pktgen: Cannot create thread for cpu 0 (-4) [ 543.925887] pktgen: kernel_thread() failed for cpu 1 [ 543.931568] pktgen: Cannot create thread for cpu 1 (-4) [ 543.936991] pktgen: Initialization failed for all threads [ 544.049480] pktgen: kernel_thread() failed for cpu 0 [ 544.054621] pktgen: Cannot create thread for cpu 0 (-4) [ 544.060082] pktgen: kernel_thread() failed for cpu 1 [ 544.065217] pktgen: Cannot create thread for cpu 1 (-4) [ 544.071302] pktgen: Initialization failed for all threads [ 544.169679] pktgen: kernel_thread() failed for cpu 0 [ 544.175108] pktgen: Cannot create thread for cpu 0 (-4) [ 544.180621] pktgen: kernel_thread() failed for cpu 1 [ 544.185719] pktgen: Cannot create thread for cpu 1 (-4) [ 544.191140] pktgen: Initialization failed for all threads 17:24:25 executing program 5: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) sync() ftruncate(r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) 17:24:25 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x8000, 0x7, 0x8000, 0x7}, 0xdc96df926f8307b5) close(r0) 17:24:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000400)="6e65742f6172700047314e4c26deb4b78cd25d07a9fd7d501314302606e1310ae391812d0b598cb456fde964a6ce71fc4d56eb2c856ef260bc1197d5547a67cdf45fbf6d1f0f0a85580791a8ead6bec39228d135702d5d42e5ee0d6de3ef7603a528") unshare(0x400) readv(r0, &(0x7f0000000080), 0x0) 17:24:25 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x8000, 0x7, 0x8000, 0x7}, 0xdc96df926f8307b5) close(r0) 17:24:25 executing program 4: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) umount2(&(0x7f0000000000)='../file0\x00', 0x0) 17:24:25 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001240)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xf8, &(0x7f0000000080)=""/248}, &(0x7f0000000180)="5581f1a093e8", &(0x7f0000002bc0)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000001200)}) 17:24:25 executing program 0: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) sync() ftruncate(r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) 17:24:25 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 17:24:25 executing program 4: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) sync() ftruncate(r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) 17:24:25 executing program 6: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) sync() ftruncate(r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) 17:24:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000400)="6e65742f6172700047314e4c26deb4b78cd25d07a9fd7d501314302606e1310ae391812d0b598cb456fde964a6ce71fc4d56eb2c856ef260bc1197d5547a67cdf45fbf6d1f0f0a85580791a8ead6bec39228d135702d5d42e5ee0d6de3ef7603a528") unshare(0x400) readv(r0, &(0x7f0000000080), 0x0) 17:24:25 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x8000, 0x7, 0x8000, 0x7}, 0xdc96df926f8307b5) close(r0) 17:24:25 executing program 2: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) sync() ftruncate(r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) [ 544.349906] IPVS: Creating netns size=2536 id=136 17:24:25 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x2001) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0) 17:24:25 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000580)=[{0x1000006c}, {0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") 17:24:25 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 17:24:26 executing program 5: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) sync() ftruncate(r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) 17:24:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046306}], 0x0, 0x0, &(0x7f0000008f37)}) 17:24:26 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000005c0)=""/201, 0xc9}, 0xfffffffffffffffd) 17:24:26 executing program 6: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) sync() ftruncate(r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) 17:24:26 executing program 4: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) sync() ftruncate(r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) 17:24:26 executing program 0: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) sync() ftruncate(r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) 17:24:26 executing program 2: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) sync() ftruncate(r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) 17:24:26 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001100090469001b00810800000708000000000000000001", 0x1b}], 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000f000000000000001000"], 0x12}, 0x1}, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) [ 545.533675] binder: BINDER_SET_CONTEXT_MGR already set 17:24:26 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001100090469001b00810800000708000000000000000001", 0x1b}], 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000f000000000000001000"], 0x12}, 0x1}, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 17:24:26 executing program 1: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) chdir(&(0x7f0000000340)='./file0\x00') rmdir(&(0x7f0000000040)='../file0\x00') getcwd(&(0x7f0000000280)=""/142, 0x8e) [ 545.554104] binder: 2154:2167 ioctl 40046207 0 returned -16 17:24:26 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001100090469001b00810800000708000000000000000001", 0x1b}], 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000f000000000000001000"], 0x12}, 0x1}, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 17:24:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) r1 = socket(0xa, 0x200000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000008f37)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f00000002c0)}) 17:24:26 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001100090469001b00810800000708000000000000000001", 0x1b}], 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000f000000000000001000"], 0x12}, 0x1}, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) [ 545.691956] binder: 2182:2185 tried to acquire reference to desc 0, got 1 instead [ 545.722784] binder_alloc: 2182: binder_alloc_buf, no vma 17:24:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x80012, r1, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 545.749728] binder: 2182:2185 transaction failed 29189/-3, size 0-0 line 3141 [ 545.788288] binder: BINDER_SET_CONTEXT_MGR already set 17:24:26 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000000c0)='j', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x8, @dev={0xfe, 0x80}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x5, 0x4) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000240)}, 0x0) [ 545.806051] binder: 2182:2185 ioctl 40046207 0 returned -16 [ 545.853218] binder: undelivered TRANSACTION_ERROR: 29189 [ 545.853554] pktgen: kernel_thread() failed for cpu 0 [ 545.853561] pktgen: Cannot create thread for cpu 0 (-4) [ 545.853573] pktgen: kernel_thread() failed for cpu 1 [ 545.853579] pktgen: Cannot create thread for cpu 1 (-4) [ 545.853581] pktgen: Initialization failed for all threads 17:24:27 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000000c0)='j', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x8, @dev={0xfe, 0x80}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x5, 0x4) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000240)}, 0x0) 17:24:27 executing program 5: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) sync() ftruncate(r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) 17:24:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) r1 = socket(0xa, 0x200000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000008f37)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f00000002c0)}) 17:24:27 executing program 7: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000a40)="130000001000ffdde2000200f60f050000230a009d000000119dc53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefc6463d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af55e3129849ae2d726cf4b4045ae8d5aa5a905faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c000000003400000000000000d5ba641663ac6847d35b87", 0xc4) 17:24:27 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000000c0)='j', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x8, @dev={0xfe, 0x80}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x5, 0x4) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000240)}, 0x0) 17:24:27 executing program 4: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) sync() ftruncate(r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) 17:24:27 executing program 0: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) sync() ftruncate(r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) 17:24:27 executing program 2: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) sync() ftruncate(r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) 17:24:27 executing program 6: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000300)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) sync() ftruncate(r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x24) 17:24:28 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000000c0)='j', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x8, @dev={0xfe, 0x80}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x5, 0x4) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000240)}, 0x0) 17:24:28 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80000000000051, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f0000000140)=0x100000, 0x2b428a52) [ 546.941058] binder: 2220:2235 tried to acquire reference to desc 0, got 1 instead [ 546.971305] binder_alloc: 2220: binder_alloc_buf, no vma [ 546.997730] binder: 2220:2235 transaction failed 29189/-3, size 0-0 line 3141 17:24:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) r1 = socket(0xa, 0x200000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000008f37)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f00000002c0)}) 17:24:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x4, &(0x7f0000000400), 0x14) 17:24:28 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80000000000051, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f0000000140)=0x100000, 0x2b428a52) [ 547.038505] binder: undelivered TRANSACTION_ERROR: 29189 17:24:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r1, &(0x7f0000000080)=[{}, {}], 0xfcf2) sendfile(r2, r1, &(0x7f0000000000)=0xd00, 0x100000001) [ 547.091649] binder: 2242:2245 tried to acquire reference to desc 0, got 1 instead [ 547.140479] binder_alloc: 2242: binder_alloc_buf, no vma [ 547.167348] binder: 2242:2245 transaction failed 29189/-3, size 0-0 line 3141 17:24:28 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80000000000051, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f0000000140)=0x100000, 0x2b428a52) 17:24:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) r1 = socket(0xa, 0x200000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000008f37)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f00000002c0)}) [ 547.218509] binder: undelivered TRANSACTION_ERROR: 29189 [ 547.267214] binder: 2253:2255 tried to acquire reference to desc 0, got 1 instead [ 547.302056] binder_alloc: 2253: binder_alloc_buf, no vma [ 547.323599] binder: 2253:2255 transaction failed 29189/-3, size 0-0 line 3141 [ 547.379134] binder: undelivered TRANSACTION_ERROR: 29189 17:24:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x8, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x4) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000000)=0x369) 17:24:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r0, &(0x7f00000000c0)=""/201, 0xc9, 0x2003, &(0x7f0000000280)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 17:24:29 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80000000000051, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f0000000140)=0x100000, 0x2b428a52) 17:24:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") timer_gettime(0x0, &(0x7f00000000c0)) 17:24:29 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) read(r0, &(0x7f0000000240), 0x0) 17:24:29 executing program 0: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2000000, &(0x7f0000000140)) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f00000003c0)='./bus\x00', 0x141042, 0x0) write$evdev(r0, &(0x7f0000000400)=[{}], 0x18) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 17:24:29 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x39, "27020201594a87ccfe8000000000000059"}], 0x28}, 0x0) 17:24:29 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001a0007031dfffd946f61830002200a00090000e7fe1c40000c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 17:24:29 executing program 5: epoll_create1(0x0) socket$unix(0x1, 0x5, 0x0) unshare(0x8000400) mq_open(&(0x7f000004b000)="0b7d805374877286b5e4f2", 0x42, 0x0, &(0x7f000004b000)={0x3, 0x7, 0x3}) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 17:24:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt6_stats\x00') sendfile(r0, r0, &(0x7f00000003c0)=0x41, 0x4) 17:24:29 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) accept4(0xffffffffffffffff, &(0x7f0000000680)=@l2, &(0x7f0000000000)=0x80, 0x0) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x81, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000080), 0x1, &(0x7f0000000000), 0x142}}], 0x2, 0x0) 17:24:29 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) write(r0, &(0x7f0000000740), 0xfffffcdd) close(r1) 17:24:29 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) 17:24:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}, {{0x2}}], 0x30) 17:24:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x61) read(r0, &(0x7f0000000080)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0xa9) ioctl$TCXONC(r1, 0x540a, 0x0) 17:24:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000100)) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) 17:24:29 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000), 0x55) 17:24:29 executing program 2: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f0000000040)='./control\x00') unlink(&(0x7f0000000280)='./control/file0\x00') mount(&(0x7f00000003c0)='./control\x00', &(0x7f0000000400)='./control\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) close(r0) 17:24:29 executing program 0: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2000000, &(0x7f0000000140)) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f00000003c0)='./bus\x00', 0x141042, 0x0) write$evdev(r0, &(0x7f0000000400)=[{}], 0x18) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 17:24:29 executing program 5: r0 = memfd_create(&(0x7f0000000080)="5ac006234c6da4d197", 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)="736d61707300be23d763bf090b7c3d129a54da8a181f3280d11a681a3834d4fdc4f46706f9e5d03d4b7b57d15963f3d6093e524c22c5662b258db94cc3771ae1c1c9c0ab1f2f0b8a22f0f0a0a9ebb567a2d6f1b2b30392fef62b1506773dea8fe2a4e385214deb26") sendfile(r0, r2, &(0x7f0000000000), 0x40000000009) 17:24:29 executing program 5: r0 = memfd_create(&(0x7f0000000080)="5ac006234c6da4d197", 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)="736d61707300be23d763bf090b7c3d129a54da8a181f3280d11a681a3834d4fdc4f46706f9e5d03d4b7b57d15963f3d6093e524c22c5662b258db94cc3771ae1c1c9c0ab1f2f0b8a22f0f0a0a9ebb567a2d6f1b2b30392fef62b1506773dea8fe2a4e385214deb26") sendfile(r0, r2, &(0x7f0000000000), 0x40000000009) 17:24:29 executing program 7: r0 = memfd_create(&(0x7f0000000080)="5ac006234c6da4d197", 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)="736d61707300be23d763bf090b7c3d129a54da8a181f3280d11a681a3834d4fdc4f46706f9e5d03d4b7b57d15963f3d6093e524c22c5662b258db94cc3771ae1c1c9c0ab1f2f0b8a22f0f0a0a9ebb567a2d6f1b2b30392fef62b1506773dea8fe2a4e385214deb26") sendfile(r0, r2, &(0x7f0000000000), 0x40000000009) 17:24:29 executing program 5: r0 = memfd_create(&(0x7f0000000080)="5ac006234c6da4d197", 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)="736d61707300be23d763bf090b7c3d129a54da8a181f3280d11a681a3834d4fdc4f46706f9e5d03d4b7b57d15963f3d6093e524c22c5662b258db94cc3771ae1c1c9c0ab1f2f0b8a22f0f0a0a9ebb567a2d6f1b2b30392fef62b1506773dea8fe2a4e385214deb26") sendfile(r0, r2, &(0x7f0000000000), 0x40000000009) 17:24:29 executing program 5: r0 = memfd_create(&(0x7f0000000080)="5ac006234c6da4d197", 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)="736d61707300be23d763bf090b7c3d129a54da8a181f3280d11a681a3834d4fdc4f46706f9e5d03d4b7b57d15963f3d6093e524c22c5662b258db94cc3771ae1c1c9c0ab1f2f0b8a22f0f0a0a9ebb567a2d6f1b2b30392fef62b1506773dea8fe2a4e385214deb26") sendfile(r0, r2, &(0x7f0000000000), 0x40000000009) 17:24:29 executing program 7: r0 = memfd_create(&(0x7f0000000080)="5ac006234c6da4d197", 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)="736d61707300be23d763bf090b7c3d129a54da8a181f3280d11a681a3834d4fdc4f46706f9e5d03d4b7b57d15963f3d6093e524c22c5662b258db94cc3771ae1c1c9c0ab1f2f0b8a22f0f0a0a9ebb567a2d6f1b2b30392fef62b1506773dea8fe2a4e385214deb26") sendfile(r0, r2, &(0x7f0000000000), 0x40000000009) 17:24:29 executing program 0: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2000000, &(0x7f0000000140)) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f00000003c0)='./bus\x00', 0x141042, 0x0) write$evdev(r0, &(0x7f0000000400)=[{}], 0x18) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 17:24:29 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) accept4(0xffffffffffffffff, &(0x7f0000000680)=@l2, &(0x7f0000000000)=0x80, 0x0) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x81, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000080), 0x1, &(0x7f0000000000), 0x142}}], 0x2, 0x0) 17:24:30 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@rand_addr, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@sec_ctx={0xc, 0x8, {0x1d, 0x8}}]}, 0xc4}, 0x1}, 0x0) 17:24:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f0000000200), 0x8) 17:24:30 executing program 7: r0 = memfd_create(&(0x7f0000000080)="5ac006234c6da4d197", 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)="736d61707300be23d763bf090b7c3d129a54da8a181f3280d11a681a3834d4fdc4f46706f9e5d03d4b7b57d15963f3d6093e524c22c5662b258db94cc3771ae1c1c9c0ab1f2f0b8a22f0f0a0a9ebb567a2d6f1b2b30392fef62b1506773dea8fe2a4e385214deb26") sendfile(r0, r2, &(0x7f0000000000), 0x40000000009) 17:24:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0}) recvmmsg(r1, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000940)={0x14, 0x22, 0x201}, 0x341}, 0x1}, 0x0) 17:24:30 executing program 0: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2000000, &(0x7f0000000140)) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f00000003c0)='./bus\x00', 0x141042, 0x0) write$evdev(r0, &(0x7f0000000400)=[{}], 0x18) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 17:24:30 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) accept4(0xffffffffffffffff, &(0x7f0000000680)=@l2, &(0x7f0000000000)=0x80, 0x0) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x81, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000080), 0x1, &(0x7f0000000000), 0x142}}], 0x2, 0x0) 17:24:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x200000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000004c0), 0x1000002c0) sendmmsg(r1, &(0x7f000000d8c0)=[{}], 0x1, 0x0) recvfrom(r2, &(0x7f0000000640)=""/174, 0xae, 0x0, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x709000) 17:24:30 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000140)) 17:24:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") clone(0x0, &(0x7f0000000680), &(0x7f0000000800), &(0x7f0000000640), &(0x7f00000003c0)) clock_getres(0x3, &(0x7f0000000180)) 17:24:30 executing program 6: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="0700e1311f16f477671070") vmsplice(r1, &(0x7f00004e8000)=[{&(0x7f0000004980)=';', 0x1}], 0x1, 0x0) write(r1, &(0x7f0000335000), 0xfc94) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000340)='S9', 0x2}], 0x1, 0x0) 17:24:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x20000000000000a, 0x2, 0x0) dup2(r0, r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0x800fffff034}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c}}, 0x1c}, 0x1}, 0x0) 17:24:30 executing program 2: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = socket$inet(0x2, 0x100007, 0x3) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 17:24:30 executing program 2: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f00000000c0)="2400000021002551071c0125ffbafc02020000f6fd0000000ee1000c08000b0ec29d5301", 0x24) 17:24:30 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/143, 0x7e) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) 17:24:30 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000), 0x2) 17:24:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000080)='./control\x00', 0x0) r1 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000001c0)='./control\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000040)='./control\x00', r1, &(0x7f0000036000)='./file0\x00', 0x0) linkat(r1, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./control\x00', 0x400) 17:24:30 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) accept4(0xffffffffffffffff, &(0x7f0000000680)=@l2, &(0x7f0000000000)=0x80, 0x0) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x81, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000080), 0x1, &(0x7f0000000000), 0x142}}], 0x2, 0x0) 17:24:30 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x125000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000000c0)=[{}, {}], 0x0, [{}]}, 0x88) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000003c0)) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120000020000000000000000400000"], 0x10}, 0x1}, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000340)) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:24:30 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x125000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000000c0)=[{}, {}], 0x0, [{}]}, 0x88) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000003c0)) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120000020000000000000000400000"], 0x10}, 0x1}, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000340)) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:24:31 executing program 7: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) fadvise64(r0, 0x0, 0x5, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r3 = open(&(0x7f0000000200)='./bus/file0\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001340)='./cgroup/syz0\x00', 0x200002, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) sync_file_range(r2, 0x4ff, 0x4, 0x2) lseek(r2, 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) linkat(r3, &(0x7f00000000c0)='./bus\x00', r2, &(0x7f0000000180)='./bus/file0\x00', 0x1000) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000240)='vfat\x00', 0x0, &(0x7f0000000340)="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") 17:24:31 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x484832f3d5497b8b, 0x80004) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@broadcast=0xffffffff, @multicast1=0xe0000001, r1}, 0xc) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24}, 0x10) socket$inet6(0xa, 0x0, 0x400000100000001) accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x14) unshare(0x40000000) prctl$setfpexc(0xc, 0x10001) socket$inet_tcp(0x2, 0x1, 0x0) 17:24:31 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x125000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000000c0)=[{}, {}], 0x0, [{}]}, 0x88) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000003c0)) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120000020000000000000000400000"], 0x10}, 0x1}, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000340)) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:24:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0}) recvmmsg(r1, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000940)={0x14, 0x22, 0x201}, 0x341}, 0x1}, 0x0) 17:24:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffff, 0x200001) syz_open_pts(r1, 0x111082) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") unshare(0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x10001) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000040)=0xfff, 0x4) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000080)={"72617700000000000000000000008b00000003fc00"}, &(0x7f0000000100)=0x54) 17:24:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000001300090417feb1ae7aa77cf40000ff3f08000000450001070000001419000400430100000a00005d14a4e91ee438d2fd0000000000", 0x39}], 0x1) 17:24:31 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000046e000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 17:24:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000001300090417feb1ae7aa77cf40000ff3f08000000450001070000001419000400430100000a00005d14a4e91ee438d2fd0000000000", 0x39}], 0x1) 17:24:31 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x40000000, 0x9, 0x400}, 0x10) [ 550.400690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 17:24:31 executing program 6: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000004, 0x5c831, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00008b1000/0x1000)=nil, 0x1000, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100), 0x0, 0x8) [ 550.450068] FAULT_FLAG_ALLOW_RETRY missing 30 [ 550.458595] CPU: 1 PID: 2424 Comm: syz-executor1 Not tainted 4.9.111-g03c70fe #58 [ 550.462926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 550.473702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.483098] ffff8801b9057610 ffffffff81eb2729 0000000000000002 0000000000000000 [ 550.491177] ffff8801d3964180 ffff8801b90577e0 0000000000000000 ffff8801b9057808 [ 550.499208] ffffffff81cb907b 0000000000004ff8 ffff8801ca1b6930 ffff8801d396428c [ 550.507238] Call Trace: [ 550.509812] [] dump_stack+0xc1/0x128 [ 550.515164] [] handle_userfault.cold.18+0x3e/0x51 [ 550.521646] [] ? debug_check_no_locks_freed+0x210/0x210 [ 550.528648] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 550.535043] [] ? handle_mm_fault+0x1267/0x28e0 [ 550.541272] [] ? handle_mm_fault+0x220f/0x28e0 [ 550.547502] [] handle_mm_fault+0x221d/0x28e0 [ 550.553555] [] ? vm_insert_mixed+0x200/0x200 [ 550.559614] [] ? __lock_is_held+0xa2/0xf0 [ 550.565494] [] __do_page_fault+0x5af/0xd50 [ 550.571363] [] ? mm_fault_error+0x2c0/0x2c0 [ 550.577331] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 550.583991] [] do_page_fault+0x27/0x30 [ 550.589522] [] page_fault+0x28/0x30 [ 550.594785] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 550.601616] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 550.608097] [] ? str_to_user+0xa0/0xa0 [ 550.613620] [] ? __lock_acquire+0x654/0x4070 [ 550.619689] [] evdev_ioctl+0x27/0x30 [ 550.625052] [] ? evdev_ioctl_compat+0x30/0x30 [ 550.631182] [] do_vfs_ioctl+0x1ac/0x11a0 [ 550.636900] [] ? ioctl_preallocate+0x220/0x220 [ 550.643288] [] ? selinux_capable+0x40/0x40 [ 550.649159] [] ? __fget+0x20a/0x3b0 [ 550.654431] [] ? __fget+0x231/0x3b0 [ 550.659687] [] ? __fget+0x47/0x3b0 [ 550.664859] [] ? security_file_ioctl+0x8f/0xc0 [ 550.671118] [] SyS_ioctl+0x8f/0xc0 [ 550.676743] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 550.682713] [] do_syscall_64+0x1a6/0x490 [ 550.688430] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 550.701785] IPVS: Creating netns size=2536 id=137 [ 550.737492] IPVS: Creating netns size=2536 id=138 17:24:31 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 17:24:31 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/105, 0x69}], 0x1, 0x0) 17:24:31 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0xc000, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 17:24:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000001300090417feb1ae7aa77cf40000ff3f08000000450001070000001419000400430100000a00005d14a4e91ee438d2fd0000000000", 0x39}], 0x1) 17:24:31 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x125000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000000c0)=[{}, {}], 0x0, [{}]}, 0x88) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000003c0)) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120000020000000000000000400000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:24:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0xf0ffffff, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 17:24:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140), 0x2) 17:24:31 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/105, 0x69}], 0x1, 0x0) [ 550.790124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 17:24:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0}) recvmmsg(r1, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000940)={0x14, 0x22, 0x201}, 0x341}, 0x1}, 0x0) 17:24:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0xd) 17:24:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000240)="020000000000010000ff008c5ee17688", 0x10) 17:24:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f00000002c0), 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [], 0xa}, 0xb) 17:24:32 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000001300090417feb1ae7aa77cf40000ff3f08000000450001070000001419000400430100000a00005d14a4e91ee438d2fd0000000000", 0x39}], 0x1) 17:24:32 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/105, 0x69}], 0x1, 0x0) 17:24:32 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x125000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000000c0)=[{}, {}], 0x0, [{}]}, 0x88) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000003c0)) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:24:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 17:24:32 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/105, 0x69}], 0x1, 0x0) 17:24:32 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000004500)=""/4096, 0x1000}], 0x1, 0x0) sync_file_range(r1, 0x0, 0x17, 0x2) [ 551.254978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 17:24:32 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x400000000006, 0x0, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}, 0x1}, 0x0) 17:24:32 executing program 7: r0 = open(&(0x7f0000000180)='./bus\x00', 0x800000000141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) 17:24:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 17:24:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 17:24:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 17:24:32 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x125000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000000c0)=[{}, {}], 0x0, [{}]}, 0x88) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000003c0)) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:24:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0}) recvmmsg(r1, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000940)={0x14, 0x22, 0x201}, 0x341}, 0x1}, 0x0) 17:24:33 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000004500)=""/4096, 0x1000}], 0x1, 0x0) sync_file_range(r1, 0x0, 0x17, 0x2) 17:24:33 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}, 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020f00001000000000000000000000000800120000000300000000000000000006000000000000000000000000000000e000000100000000000000000000000000000000000000000000200000000000030006000000000002000080ac14ffbb000000000000000003000500000000000200423b1d632b91c520000000000000"], 0x80}, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:24:33 executing program 3: faccessat(0xffffffffffffffff, &(0x7f0000000040)='/\x00', 0x3, 0x0) 17:24:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0d"], 0x58) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) 17:24:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 17:24:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6(0xa, 0x1000000000002, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) unshare(0x64000400) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') setns(r1, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open$dir(&(0x7f00000002c0)='./file1\x00', 0x0, 0x30) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x108, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x2) execveat(r2, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x0) 17:24:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x125000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000000c0)=[{}, {}], 0x0, [{}]}, 0x88) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000003c0)) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:24:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 17:24:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) recvfrom(r1, &(0x7f00000000c0)=""/251, 0x3f9, 0x2, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8df0d47434cdbcd50af760189e41d163f0fc8a3fcd8091d7e462359ba12143866e68a9028c2ccc7c1fc5ae13c3f188e2e7d7b8b4d32be094067b9571df0821"}, 0x709000) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 17:24:33 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f000000c300)=[{{&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000900)}}, {{&(0x7f0000002400)=@ipx={0x4, 0x0, 0x0, "527fc4f4b987"}, 0x13, &(0x7f00000057c0), 0x0, &(0x7f0000005880)}}], 0x2, 0x0) 17:24:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 17:24:33 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000004500)=""/4096, 0x1000}], 0x1, 0x0) sync_file_range(r1, 0x0, 0x17, 0x2) 17:24:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x125000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000000c0)=[{}, {}], 0x0, [{}]}, 0x88) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000003c0)) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:24:33 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}, 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020f00001000000000000000000000000800120000000300000000000000000006000000000000000000000000000000e000000100000000000000000000000000000000000000000000200000000000030006000000000002000080ac14ffbb000000000000000003000500000000000200423b1d632b91c520000000000000"], 0x80}, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:24:33 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast1=0xe0000001}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)}}], 0x3fffffffffffcc4, 0x0) [ 552.227545] IPVS: Creating netns size=2536 id=139 17:24:33 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}, 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020f00001000000000000000000000000800120000000300000000000000000006000000000000000000000000000000e000000100000000000000000000000000000000000000000000200000000000030006000000000002000080ac14ffbb000000000000000003000500000000000200423b1d632b91c520000000000000"], 0x80}, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:24:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x125000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000000c0)=[{}, {}], 0x0, [{}]}, 0x88) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000003c0)) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:24:33 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "4410051100ef000097"}], 0x20}, 0x0) 17:24:33 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000004500)=""/4096, 0x1000}], 0x1, 0x0) sync_file_range(r1, 0x0, 0x17, 0x2) 17:24:33 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, &(0x7f0000000000), 0x100000080000000) 17:24:33 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast1=0xe0000001}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)}}], 0x3fffffffffffcc4, 0x0) [ 553.044285] pktgen: kernel_thread() failed for cpu 0 [ 553.049700] pktgen: Cannot create thread for cpu 0 (-4) [ 553.055076] pktgen: kernel_thread() failed for cpu 1 [ 553.060204] pktgen: Cannot create thread for cpu 1 (-4) [ 553.065555] pktgen: Initialization failed for all threads 17:24:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") poll(&(0x7f0000000500)=[{r1}], 0x1, 0x7fffffff) sendfile(r1, r2, &(0x7f0000000140), 0x8402) 17:24:34 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast1=0xe0000001}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)}}], 0x3fffffffffffcc4, 0x0) 17:24:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)=@delpolicy={0x50, 0x14, 0x131, 0x0, 0x0, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@local={0xfe, 0x80, [], 0xaa}}, 0x0, 0x3}}, 0x50}, 0x1}, 0x0) 17:24:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x125000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000000c0)=[{}, {}], 0x0, [{}]}, 0x88) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:24:34 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}, 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020f00001000000000000000000000000800120000000300000000000000000006000000000000000000000000000000e000000100000000000000000000000000000000000000000000200000000000030006000000000002000080ac14ffbb000000000000000003000500000000000200423b1d632b91c520000000000000"], 0x80}, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:24:34 executing program 1: mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0xfe6d) 17:24:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6(0xa, 0x1000000000002, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) unshare(0x64000400) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') setns(r1, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open$dir(&(0x7f00000002c0)='./file1\x00', 0x0, 0x30) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x108, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x2) execveat(r2, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x0) 17:24:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) recvfrom(r1, &(0x7f00000000c0)=""/251, 0x3f9, 0x2, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8df0d47434cdbcd50af760189e41d163f0fc8a3fcd8091d7e462359ba12143866e68a9028c2ccc7c1fc5ae13c3f188e2e7d7b8b4d32be094067b9571df0821"}, 0x709000) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 17:24:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6(0xa, 0x1000000000002, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) unshare(0x64000400) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') setns(r1, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open$dir(&(0x7f00000002c0)='./file1\x00', 0x0, 0x30) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x108, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x2) execveat(r2, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x0) 17:24:34 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast1=0xe0000001}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)}}], 0x3fffffffffffcc4, 0x0) 17:24:34 executing program 1: mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0xfe6d) 17:24:34 executing program 3: mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0xfe6d) 17:24:34 executing program 6: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo/3\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='+io +io +io / +i'], 0x10) r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x4a48b125e13656b}) [ 553.217064] IPVS: Creating netns size=2536 id=140 17:24:34 executing program 1: mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0xfe6d) 17:24:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x125000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000000c0)=[{}, {}], 0x0, [{}]}, 0x88) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:24:34 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000014000/0x1000)=nil, 0x1000}) [ 553.274797] IPVS: Creating netns size=2536 id=141 17:24:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") poll(&(0x7f0000000500)=[{r1}], 0x1, 0x7fffffff) sendfile(r1, r2, &(0x7f0000000140), 0x8402) 17:24:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6(0xa, 0x1000000000002, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) unshare(0x64000400) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') setns(r1, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open$dir(&(0x7f00000002c0)='./file1\x00', 0x0, 0x30) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x108, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x2) execveat(r2, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x0) 17:24:35 executing program 1: mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0xfe6d) 17:24:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6(0xa, 0x1000000000002, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) unshare(0x64000400) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') setns(r1, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open$dir(&(0x7f00000002c0)='./file1\x00', 0x0, 0x30) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x108, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x2) execveat(r2, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x0) 17:24:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x125000, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:24:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) recvfrom(r1, &(0x7f00000000c0)=""/251, 0x3f9, 0x2, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8df0d47434cdbcd50af760189e41d163f0fc8a3fcd8091d7e462359ba12143866e68a9028c2ccc7c1fc5ae13c3f188e2e7d7b8b4d32be094067b9571df0821"}, 0x709000) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 554.138511] FAULT_FLAG_ALLOW_RETRY missing 30 [ 554.143283] CPU: 1 PID: 2638 Comm: syz-executor6 Not tainted 4.9.111-g03c70fe #58 [ 554.147279] FAULT_FLAG_ALLOW_RETRY missing 30 [ 554.155383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.164731] ffff8801a1e77950 ffffffff81eb2729 0000000000000002 0000000000000000 [ 554.172782] ffff8801ccc9ca80 ffff8801a1e77b20 0000000000000000 ffff8801a1e77b48 [ 554.180815] ffffffff81cb907b 000000000000051b ffff8801ca64d108 ffff8801ccc9cb8c [ 554.188850] Call Trace: [ 554.191426] [] dump_stack+0xc1/0x128 [ 554.196772] [] handle_userfault.cold.18+0x3e/0x51 [ 554.203253] [] ? debug_check_no_locks_freed+0x210/0x210 [ 554.210251] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 554.216639] [] ? handle_mm_fault+0x1267/0x28e0 [ 554.222876] [] ? handle_mm_fault+0x220f/0x28e0 [ 554.229093] [] handle_mm_fault+0x221d/0x28e0 [ 554.235150] [] ? vm_insert_mixed+0x200/0x200 [ 554.241197] [] __do_page_fault+0x5af/0xd50 [ 554.247074] [] ? mm_fault_error+0x2c0/0x2c0 [ 554.253029] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 554.259684] [] do_page_fault+0x27/0x30 [ 554.265223] [] page_fault+0x28/0x30 [ 554.270501] [] ? do_sigaltstack+0x267/0x6f0 [ 554.276478] [] ? do_sigaltstack+0x271/0x6f0 [ 554.282454] [] ? security_file_ioctl+0x8f/0xc0 17:24:35 executing program 3: mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0xfe6d) [ 554.288683] [] SyS_sigaltstack+0x6c/0x90 [ 554.294387] [] ? do_sigaction+0x8c0/0x8c0 [ 554.300176] [] do_syscall_64+0x1a6/0x490 [ 554.305874] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 554.312811] CPU: 0 PID: 2631 Comm: syz-executor6 Not tainted 4.9.111-g03c70fe #58 [ 554.320437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.329787] ffff8801c2a77610 ffffffff81eb2729 0000000000000002 0000000000000000 [ 554.337793] ffff8801ccc9ca80 ffff8801c2a777e0 0000000000000000 ffff8801c2a77808 [ 554.345841] ffffffff81cb907b 0000000000004ff8 ffff8801a92ca130 ffff8801ccc9cb8c [ 554.353849] Call Trace: [ 554.356422] [] dump_stack+0xc1/0x128 [ 554.361773] [] handle_userfault.cold.18+0x3e/0x51 [ 554.368245] [] ? debug_check_no_locks_freed+0x210/0x210 [ 554.375252] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 554.381655] [] ? check_preemption_disabled+0x3b/0x170 [ 554.388485] [] ? handle_mm_fault+0x1267/0x28e0 [ 554.394710] [] ? handle_mm_fault+0x220f/0x28e0 [ 554.400920] [] handle_mm_fault+0x221d/0x28e0 [ 554.406964] [] ? vm_insert_mixed+0x200/0x200 [ 554.413007] [] ? __lock_is_held+0xa2/0xf0 [ 554.418784] [] __do_page_fault+0x5af/0xd50 [ 554.424656] [] ? mm_fault_error+0x2c0/0x2c0 [ 554.430636] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 554.437291] [] do_page_fault+0x27/0x30 [ 554.442808] [] page_fault+0x28/0x30 [ 554.448081] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 554.454899] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 554.461379] [] ? str_to_user+0xa0/0xa0 [ 554.466899] [] ? __lock_acquire+0x654/0x4070 [ 554.472936] [] ? exit_robust_list+0x220/0x220 [ 554.479058] [] evdev_ioctl+0x27/0x30 [ 554.484406] [] ? evdev_ioctl_compat+0x30/0x30 [ 554.490533] [] do_vfs_ioctl+0x1ac/0x11a0 [ 554.496226] [] ? ioctl_preallocate+0x220/0x220 [ 554.502439] [] ? selinux_capable+0x40/0x40 [ 554.508301] [] ? __fget+0x20a/0x3b0 [ 554.513558] [] ? __fget+0x231/0x3b0 [ 554.518819] [] ? __fget+0x47/0x3b0 [ 554.523992] [] ? security_file_ioctl+0x8f/0xc0 [ 554.530209] [] SyS_ioctl+0x8f/0xc0 17:24:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xa, &(0x7f0000000100)=@req3, 0x1c) [ 554.535375] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 554.541324] [] do_syscall_64+0x1a6/0x490 [ 554.547014] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 17:24:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:24:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getrusage(0x1, &(0x7f0000000380)) 17:24:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='syz_tun\x00', 0x19) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x200408d6, &(0x7f00000011c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000000004, 0x400031, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) 17:24:35 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:24:35 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000014000/0x1000)=nil, 0x1000}) 17:24:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2000002) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0xdf) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x1) 17:24:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:24:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) [ 555.084887] pktgen: kernel_thread() failed for cpu 0 [ 555.090124] pktgen: Cannot create thread for cpu 0 (-4) [ 555.095515] pktgen: kernel_thread() failed for cpu 1 [ 555.100819] pktgen: Cannot create thread for cpu 1 (-4) [ 555.106175] pktgen: Initialization failed for all threads 17:24:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") poll(&(0x7f0000000500)=[{r1}], 0x1, 0x7fffffff) sendfile(r1, r2, &(0x7f0000000140), 0x8402) 17:24:36 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5111, &(0x7f0000000000)) 17:24:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6(0xa, 0x1000000000002, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) unshare(0x64000400) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') setns(r1, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open$dir(&(0x7f00000002c0)='./file1\x00', 0x0, 0x30) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x108, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x2) execveat(r2, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x0) 17:24:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6(0xa, 0x1000000000002, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) unshare(0x64000400) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') setns(r1, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open$dir(&(0x7f00000002c0)='./file1\x00', 0x0, 0x30) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x108, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x2) execveat(r2, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x0) 17:24:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) recvfrom(r1, &(0x7f00000000c0)=""/251, 0x3f9, 0x2, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8df0d47434cdbcd50af760189e41d163f0fc8a3fcd8091d7e462359ba12143866e68a9028c2ccc7c1fc5ae13c3f188e2e7d7b8b4d32be094067b9571df0821"}, 0x709000) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 17:24:36 executing program 2: fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) sendfile(r2, r0, &(0x7f0000000180), 0x100000001) 17:24:36 executing program 3: mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0xfe6d) [ 555.247217] IPVS: Creating netns size=2536 id=142 17:24:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x3b, "27020201594a87ccfe8000000000000059"}], 0x28}, 0x0) [ 555.283481] IPVS: Creating netns size=2536 id=143 17:24:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0x6, 0x4, 0x3, "e7158819ebe074cc60f57c5f7899e534a4dd7b78da2206a804bd5176c20e35bb8eb48d09fd729a83c3ecc46c63b7e094b2f1eac3ff66fa557fea85fc16516cd3da5fcafc5f9049c9cbe50e35f926ea43"}, 0xd8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="000027bd7000fddbdf250e00000038000200080004000800000014000100e000000100000000000000000000000008000600008000000800060007000000080005000000000028000100080009000000000008000400000000000c0006006c626c637200000008000b0073697000"], 0x2}, 0x1, 0x0, 0x0, 0x48000}, 0x48080) ioctl(r6, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_generic(r5, &(0x7f0000028fc8)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}, 0x1}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000300)="07ad87050000000000000000e623fe26", 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="cb12009c611e08ef09721c416d00e36ce2d3806d9407b189f4b3e62442614ccd28a18ae96e705ac1c37c443cb5698681c6619c8298e94342288c32c2de69a12a1e42f793be78eeaa059bc06e83c0593b7c901a3b8636fd588da3311f2ea8d6bdfadb012747deb39972dd", @ANYBLOB="000425bd7000fcdbdf250300000008000500000800000c0002007ea8a2519e7c1fd61a345f0800080007000000ea1bafbf"], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x800) recvmmsg(r4, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x80, &(0x7f0000b60000), 0x0, &(0x7f00004f9000), 0x111}, 0x7f}], 0x1, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x6) 17:24:36 executing program 2: fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) sendfile(r2, r0, &(0x7f0000000180), 0x100000001) [ 555.518596] FAULT_FLAG_ALLOW_RETRY missing 30 [ 555.523364] CPU: 1 PID: 2716 Comm: syz-executor6 Not tainted 4.9.111-g03c70fe #58 [ 555.530987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.540327] ffff8801983f7950 ffffffff81eb2729 0000000000000002 0000000000000000 [ 555.548341] ffff8801ccc9d380 ffff8801983f7b20 0000000000000000 ffff8801983f7b48 [ 555.556344] ffffffff81cb907b 000000000000051b ffff8801961e5108 ffff8801ccc9d48c [ 555.564346] Call Trace: [ 555.566932] [] dump_stack+0xc1/0x128 [ 555.572276] [] handle_userfault.cold.18+0x3e/0x51 [ 555.578758] [] ? debug_check_no_locks_freed+0x210/0x210 [ 555.585761] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 555.592160] [] ? handle_mm_fault+0x1267/0x28e0 [ 555.598370] [] ? handle_mm_fault+0x220f/0x28e0 [ 555.604584] [] handle_mm_fault+0x221d/0x28e0 [ 555.610626] [] ? vm_insert_mixed+0x200/0x200 [ 555.616674] [] __do_page_fault+0x5af/0xd50 [ 555.622541] [] ? mm_fault_error+0x2c0/0x2c0 [ 555.628493] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 555.635133] [] do_page_fault+0x27/0x30 [ 555.640652] [] page_fault+0x28/0x30 [ 555.645904] [] ? do_sigaltstack+0x267/0x6f0 [ 555.651857] [] ? do_sigaltstack+0x271/0x6f0 [ 555.657808] [] ? security_file_ioctl+0x8f/0xc0 17:24:36 executing program 2: fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) sendfile(r2, r0, &(0x7f0000000180), 0x100000001) [ 555.664017] [] SyS_sigaltstack+0x6c/0x90 [ 555.669708] [] ? do_sigaction+0x8c0/0x8c0 [ 555.675480] [] do_syscall_64+0x1a6/0x490 [ 555.681167] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 17:24:36 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000014000/0x1000)=nil, 0x1000}) 17:24:36 executing program 2: fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) sendfile(r2, r0, &(0x7f0000000180), 0x100000001) [ 556.111033] IPVS: Creating netns size=2536 id=144 [ 556.581474] FAULT_FLAG_ALLOW_RETRY missing 30 [ 556.581488] FAULT_FLAG_ALLOW_RETRY missing 30 [ 556.581497] CPU: 0 PID: 2723 Comm: syz-executor6 Not tainted 4.9.111-g03c70fe #58 [ 556.581501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.581513] ffff8801d985f610 ffffffff81eb2729 0000000000000002 0000000000000000 [ 556.581523] ffff8801b8ad2d80 ffff8801d985f7e0 0000000000000000 ffff8801d985f808 [ 556.581532] ffffffff81cb907b 0000000000004ff8 ffff8801b96b0930 ffff8801b8ad2e8c [ 556.581535] Call Trace: [ 556.581548] [] dump_stack+0xc1/0x128 [ 556.581558] [] handle_userfault.cold.18+0x3e/0x51 [ 556.581570] [] ? debug_check_no_locks_freed+0x210/0x210 [ 556.581580] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 556.581590] [] ? check_preemption_disabled+0x3b/0x170 [ 556.581599] [] ? handle_mm_fault+0x1267/0x28e0 [ 556.581607] [] ? handle_mm_fault+0x220f/0x28e0 [ 556.581614] [] handle_mm_fault+0x221d/0x28e0 [ 556.581622] [] ? vm_insert_mixed+0x200/0x200 [ 556.581629] [] ? __lock_is_held+0xa2/0xf0 [ 556.581638] [] __do_page_fault+0x5af/0xd50 [ 556.581646] [] ? mm_fault_error+0x2c0/0x2c0 [ 556.581654] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 556.581661] [] do_page_fault+0x27/0x30 [ 556.581669] [] page_fault+0x28/0x30 [ 556.581676] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 556.581687] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 556.581696] [] ? str_to_user+0xa0/0xa0 [ 556.581705] [] ? __lock_acquire+0x654/0x4070 [ 556.581716] [] ? exit_robust_list+0x220/0x220 [ 556.581724] [] evdev_ioctl+0x27/0x30 [ 556.581733] [] ? evdev_ioctl_compat+0x30/0x30 [ 556.581741] [] do_vfs_ioctl+0x1ac/0x11a0 [ 556.581747] [] ? ioctl_preallocate+0x220/0x220 [ 556.581755] [] ? selinux_capable+0x40/0x40 [ 556.581761] [] ? __fget+0x20a/0x3b0 [ 556.581767] [] ? __fget+0x231/0x3b0 [ 556.581773] [] ? __fget+0x47/0x3b0 [ 556.581781] [] ? security_file_ioctl+0x8f/0xc0 [ 556.581787] [] SyS_ioctl+0x8f/0xc0 [ 556.581794] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 556.581801] [] do_syscall_64+0x1a6/0x490 [ 556.581808] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 556.830683] CPU: 1 PID: 2737 Comm: syz-executor6 Not tainted 4.9.111-g03c70fe #58 [ 556.838286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.847624] ffff8801d43bf950 ffffffff81eb2729 0000000000000002 0000000000000000 [ 556.855633] ffff8801b8ad2d80 ffff8801d43bfb20 0000000000000000 ffff8801d43bfb48 [ 556.863644] ffffffff81cb907b 000000000000051b ffff8801a379d108 ffff8801b8ad2e8c [ 556.871654] Call Trace: [ 556.874229] [] dump_stack+0xc1/0x128 [ 556.879568] [] handle_userfault.cold.18+0x3e/0x51 [ 556.886053] [] ? debug_check_no_locks_freed+0x210/0x210 [ 556.893055] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 556.899443] [] ? handle_mm_fault+0x1267/0x28e0 [ 556.905662] [] ? handle_mm_fault+0x220f/0x28e0 [ 556.911876] [] handle_mm_fault+0x221d/0x28e0 [ 556.917912] [] ? vm_insert_mixed+0x200/0x200 [ 556.923952] [] __do_page_fault+0x5af/0xd50 [ 556.929815] [] ? mm_fault_error+0x2c0/0x2c0 [ 556.935763] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 556.942518] [] do_page_fault+0x27/0x30 [ 556.948042] [] page_fault+0x28/0x30 [ 556.953309] [] ? do_sigaltstack+0x267/0x6f0 [ 556.959254] [] ? do_sigaltstack+0x271/0x6f0 [ 556.965202] [] ? security_file_ioctl+0x8f/0xc0 [ 556.971415] [] SyS_sigaltstack+0x6c/0x90 [ 556.977119] [] ? do_sigaction+0x8c0/0x8c0 17:24:38 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000001280)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x2042, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x47c9f0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) lseek(r2, 0x0, 0x3) 17:24:38 executing program 2: unshare(0x8020000) mq_open(&(0x7f0000000180)="747275737465646370757365746c6f6367726f757073656c667b2765746830747275737465646e6f646576252a136c6f657468315b00", 0x133b2c48909cbf0, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1}) unshare(0x8000400) 17:24:38 executing program 7: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070a07031dfffd94ffffff7f0000000009000200021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 17:24:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") poll(&(0x7f0000000500)=[{r1}], 0x1, 0x7fffffff) sendfile(r1, r2, &(0x7f0000000140), 0x8402) 17:24:38 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0xbb, 0x80, 0xc2}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x8, 0x6, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f00000001c0)) 17:24:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000080)={{0x80}, 'port0\x00'}) 17:24:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0x6, 0x4, 0x3, "e7158819ebe074cc60f57c5f7899e534a4dd7b78da2206a804bd5176c20e35bb8eb48d09fd729a83c3ecc46c63b7e094b2f1eac3ff66fa557fea85fc16516cd3da5fcafc5f9049c9cbe50e35f926ea43"}, 0xd8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="000027bd7000fddbdf250e00000038000200080004000800000014000100e000000100000000000000000000000008000600008000000800060007000000080005000000000028000100080009000000000008000400000000000c0006006c626c637200000008000b0073697000"], 0x2}, 0x1, 0x0, 0x0, 0x48000}, 0x48080) ioctl(r6, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_generic(r5, &(0x7f0000028fc8)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}, 0x1}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000300)="07ad87050000000000000000e623fe26", 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="cb12009c611e08ef09721c416d00e36ce2d3806d9407b189f4b3e62442614ccd28a18ae96e705ac1c37c443cb5698681c6619c8298e94342288c32c2de69a12a1e42f793be78eeaa059bc06e83c0593b7c901a3b8636fd588da3311f2ea8d6bdfadb012747deb39972dd", @ANYBLOB="000425bd7000fcdbdf250300000008000500000800000c0002007ea8a2519e7c1fd61a345f0800080007000000ea1bafbf"], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x800) recvmmsg(r4, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x80, &(0x7f0000b60000), 0x0, &(0x7f00004f9000), 0x111}, 0x7f}], 0x1, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x6) 17:24:38 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0247e22f05d02c99240970") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000af80)=[{{&(0x7f0000003fc0)=@in6, 0x80, &(0x7f0000005440)=[{&(0x7f00000053c0)=""/122, 0x7a}], 0x1}}, {{&(0x7f0000007700)=@hci, 0x80, &(0x7f0000008b40)=[{&(0x7f0000008ac0)=""/71, 0x47}], 0x1, &(0x7f0000008bc0)=""/34, 0x22}}], 0x2, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x68b, 0x0, 0x0) 17:24:38 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="230000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 556.982895] [] do_syscall_64+0x1a6/0x490 [ 556.988599] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 17:24:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fffffff}) read(r2, &(0x7f00000002c0)=""/19, 0x13) 17:24:38 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0247e22f05d02c99240970") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000af80)=[{{&(0x7f0000003fc0)=@in6, 0x80, &(0x7f0000005440)=[{&(0x7f00000053c0)=""/122, 0x7a}], 0x1}}, {{&(0x7f0000007700)=@hci, 0x80, &(0x7f0000008b40)=[{&(0x7f0000008ac0)=""/71, 0x47}], 0x1, &(0x7f0000008bc0)=""/34, 0x22}}], 0x2, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x68b, 0x0, 0x0) 17:24:38 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000014000/0x1000)=nil, 0x1000}) [ 557.051010] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. [ 557.066263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 17:24:38 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000080)=0x4) flock(r0, 0x1ceaafebd2b9685a) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040), 0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x7}, 0x4) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 17:24:38 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0247e22f05d02c99240970") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000af80)=[{{&(0x7f0000003fc0)=@in6, 0x80, &(0x7f0000005440)=[{&(0x7f00000053c0)=""/122, 0x7a}], 0x1}}, {{&(0x7f0000007700)=@hci, 0x80, &(0x7f0000008b40)=[{&(0x7f0000008ac0)=""/71, 0x47}], 0x1, &(0x7f0000008bc0)=""/34, 0x22}}], 0x2, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x68b, 0x0, 0x0) 17:24:38 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0247e22f05d02c99240970") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000af80)=[{{&(0x7f0000003fc0)=@in6, 0x80, &(0x7f0000005440)=[{&(0x7f00000053c0)=""/122, 0x7a}], 0x1}}, {{&(0x7f0000007700)=@hci, 0x80, &(0x7f0000008b40)=[{&(0x7f0000008ac0)=""/71, 0x47}], 0x1, &(0x7f0000008bc0)=""/34, 0x22}}], 0x2, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x68b, 0x0, 0x0) 17:24:38 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000080)=0x4) flock(r0, 0x1ceaafebd2b9685a) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040), 0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x7}, 0x4) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 17:24:38 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000001280)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x2042, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x47c9f0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) lseek(r2, 0x0, 0x3) 17:24:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000cf0f50)={{0x80}, 'port0\x00', 0xbf, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000a30000)={{0x20000000000080}, "0a4ceaa05dad126e00000002a1569b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42d576589701a4", 0x79, 0x10000a}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 17:24:38 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000080)=0x4) flock(r0, 0x1ceaafebd2b9685a) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040), 0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x7}, 0x4) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 17:24:38 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000080)=0x4) flock(r0, 0x1ceaafebd2b9685a) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040), 0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x7}, 0x4) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 17:24:38 executing program 2: socketpair$unix(0x1, 0x400000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f0000000280), 0x400000000feb) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123}], 0x0, &(0x7f0000000680)=""/108}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164}], 0x3c3}, 0x3}], 0x1b1, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x400000000000000) 17:24:38 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x18}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}, 0x1}, 0x0) [ 557.952396] FAULT_FLAG_ALLOW_RETRY missing 30 [ 557.957051] CPU: 0 PID: 2812 Comm: syz-executor6 Not tainted 4.9.111-g03c70fe #58 [ 557.964663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.974011] ffff88019cd97950 ffffffff81eb2729 0000000000000002 0000000000000000 [ 557.982090] ffff8801ccc9c480 ffff88019cd97b20 0000000000000000 ffff88019cd97b48 [ 557.990160] ffffffff81cb907b 000000000000051b ffff8801d9afb908 ffff8801ccc9c58c [ 557.998212] Call Trace: 17:24:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0x6, 0x4, 0x3, "e7158819ebe074cc60f57c5f7899e534a4dd7b78da2206a804bd5176c20e35bb8eb48d09fd729a83c3ecc46c63b7e094b2f1eac3ff66fa557fea85fc16516cd3da5fcafc5f9049c9cbe50e35f926ea43"}, 0xd8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="670000006dcd19604da2740924d3a5f43d6b79c20431e2cb0d381e0d4712f12407d744de7be270307bf70f80069ab2319f6fb6cfd2d58e716e5ea52a5824a78edbb4464a15cb25194d34c1a66b6da3005ed7be513daedd3015bfeb49908f593bcd053c19ccce8f9fecc50e494ae02bf9f0f4cf778a5619f65795c8699fac5a1569c60b3c8a6b2a44889bef10a76eab2d558661261e3ff2c9e2cc8a695fcc4f9d1e0dff601cb3c080f81cb1d46397829839077535699940131b4f08e43de93a2c525b534a55dc54b0d462f5f84109014373c08055f3083d19a20c14720b02caa6780812db574da34ec1847a32d1eb9cb2b8d6dc3b93e32e7aa594229def92b8f90fa27274f10eebd126ba1c5ac98eeed6b89207b24d042a1eede447da4df9fbbcef8512679d5ac2c6270bbaad74e8", @ANYBLOB="000027bd7000fddbdf250e00000038000200080004000800000014000100e000000100000000000000000000000008000600008000000800060007000000080005000000000028000100080009000000000008000400000000000c0006006c626c637200000008000b0073697000"], 0x2}, 0x1, 0x0, 0x0, 0x48000}, 0x48080) ioctl(r6, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_generic(r5, &(0x7f0000028fc8)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}, 0x1}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000300)="07ad87050000000000000000e623fe26", 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="cb12009c611e08ef09721c416d00e36ce2d3806d9407b189f4b3e62442614ccd28a18ae96e705ac1c37c443cb5698681c6619c8298e94342288c32c2de69a12a1e42f793be78eeaa059bc06e83c0593b7c901a3b8636fd588da3311f2ea8d6bdfadb012747deb39972dd", @ANYBLOB="000425bd7000fcdbdf250300000008000500000800000c0002007ea8a2519e7c1fd61a345f0800080007000000ea1bafbf"], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x800) recvmmsg(r4, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x80, &(0x7f0000b60000), 0x0, &(0x7f00004f9000), 0x111}, 0x7f}], 0x1, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x6) 17:24:39 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000001280)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x2042, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x47c9f0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) lseek(r2, 0x0, 0x3) 17:24:39 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = dup(r0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/160, &(0x7f00000000c0)=0xa0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141062, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket(0x18, 0x0, 0x1) connect(r4, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r4, &(0x7f00000002c0), 0x4000000000000f4, 0x0) [ 558.000797] [] dump_stack+0xc1/0x128 [ 558.006170] [] handle_userfault.cold.18+0x3e/0x51 [ 558.012670] [] ? debug_check_no_locks_freed+0x210/0x210 [ 558.019687] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 558.026101] [] ? handle_mm_fault+0x1267/0x28e0 [ 558.032345] [] ? handle_mm_fault+0x220f/0x28e0 [ 558.038592] [] handle_mm_fault+0x221d/0x28e0 [ 558.044649] [] ? vm_insert_mixed+0x200/0x200 [ 558.050696] [] __do_page_fault+0x5af/0xd50 [ 558.056566] [] ? mm_fault_error+0x2c0/0x2c0 [ 558.062522] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 558.069188] [] do_page_fault+0x27/0x30 [ 558.074716] [] page_fault+0x28/0x30 [ 558.079973] [] ? do_sigaltstack+0x267/0x6f0 [ 558.085923] [] ? do_sigaltstack+0x271/0x6f0 [ 558.091880] [] ? security_file_ioctl+0x8f/0xc0 [ 558.098100] [] SyS_sigaltstack+0x6c/0x90 [ 558.103791] [] ? do_sigaction+0x8c0/0x8c0 [ 558.109599] [] do_syscall_64+0x1a6/0x490 [ 558.115297] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 17:24:39 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = dup(r0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/160, &(0x7f00000000c0)=0xa0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141062, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket(0x18, 0x0, 0x1) connect(r4, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r4, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 17:24:39 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 17:24:39 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = dup(r0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/160, &(0x7f00000000c0)=0xa0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141062, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket(0x18, 0x0, 0x1) connect(r4, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r4, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 17:24:39 executing program 4: capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000280)) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff8}) 17:24:39 executing program 6: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)) 17:24:39 executing program 4: r0 = gettid() ptrace(0x10, r0) 17:24:39 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local={0xfe, 0x80, [], 0xaa}}, 0xfdf7) 17:24:39 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000280)="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", 0x18c) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) rt_sigtimedwait(&(0x7f00000001c0), 0x0, &(0x7f0000000180), 0x8) 17:24:39 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000001280)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x2042, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x47c9f0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) lseek(r2, 0x0, 0x3) 17:24:39 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local={0xfe, 0x80, [], 0xaa}}, 0xfdf7) 17:24:39 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local={0xfe, 0x80, [], 0xaa}}, 0xfdf7) 17:24:39 executing program 2: socketpair$unix(0x1, 0x400000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f0000000280), 0x400000000feb) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123}], 0x0, &(0x7f0000000680)=""/108}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164}], 0x3c3}, 0x3}], 0x1b1, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x400000000000000) 17:24:40 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 17:24:40 executing program 4: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x8000000000004, 0xe3) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) 17:24:40 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local={0xfe, 0x80, [], 0xaa}}, 0xfdf7) 17:24:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = dup(r0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/160, &(0x7f00000000c0)=0xa0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141062, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket(0x18, 0x0, 0x1) connect(r4, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r4, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 17:24:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = dup(r0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/160, &(0x7f00000000c0)=0xa0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141062, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket(0x18, 0x0, 0x1) connect(r4, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r4, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 17:24:40 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000200)="050100000500000000001e00ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e7725f58a55afce0b86f61f7402810c3aae5dafadc57d0f699e3014e1e17b85812f29508c008e26575efe5eb24bdba7eac1bcd4f8ff185bd1f8affe65972ea77ef356844", 0x6e, 0x0, &(0x7f0000000000)={0xa, 0x100200000800, 0x8000000000005, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 17:24:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0x6, 0x4, 0x3, "e7158819ebe074cc60f57c5f7899e534a4dd7b78da2206a804bd5176c20e35bb8eb48d09fd729a83c3ecc46c63b7e094b2f1eac3ff66fa557fea85fc16516cd3da5fcafc5f9049c9cbe50e35f926ea43"}, 0xd8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="000027bd7000fddbdf250e00000038000200080004000800000014000100e000000100000000000000000000000008000600008000000800060007000000080005000000000028000100080009000000000008000400000000000c0006006c626c637200000008000b0073697000"], 0x2}, 0x1, 0x0, 0x0, 0x48000}, 0x48080) ioctl(r6, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_generic(r5, &(0x7f0000028fc8)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}, 0x1}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000300)="07ad87050000000000000000e623fe26", 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="cb12009c611e08ef09721c416d00e36ce2d3806d9407b189f4b3e62442614ccd28a18ae96e705ac1c37c443cb5698681c6619c8298e94342288c32c2de69a12a1e42f793be78eeaa059bc06e83c0593b7c901a3b8636fd588da3311f2ea8d6bdfadb012747deb39972dd", @ANYBLOB="000425bd7000fcdbdf250300000008000500000800000c0002007ea8a2519e7c1fd61a345f0800080007000000ea1bafbf"], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x800) recvmmsg(r4, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x80, &(0x7f0000b60000), 0x0, &(0x7f00004f9000), 0x111}, 0x7f}], 0x1, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x6) 17:24:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000008000)={0x8, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) r2 = dup2(r1, r1) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x4, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x7) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000000)=0x369) [ 558.927830] IPv4: Oversized IP packet from 127.0.0.1 [ 558.933094] IPv4: Oversized IP packet from 127.0.0.1 17:24:40 executing program 6: r0 = socket$nl_generic(0x2, 0x2, 0x88) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x88, 0xa, &(0x7f0000000080), 0x4) 17:24:40 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x0) [ 558.973692] IPv4: Oversized IP packet from 127.0.0.1 [ 558.978961] IPv4: Oversized IP packet from 127.0.0.1 17:24:40 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregs(0x11, r1, 0x0, &(0x7f0000000100)=""/42) 17:24:40 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 17:24:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = dup(r0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/160, &(0x7f00000000c0)=0xa0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141062, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket(0x18, 0x0, 0x1) connect(r4, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r4, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 17:24:40 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\x00', 0x0) write$selinux_create(r0, &(0x7f0000000080)=@objname={'system_u:object_r:dhcpc_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x0, 0x20, './file0\x00'}, 0x3d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") fgetxattr(r0, &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f0000001040)=""/4096, 0x12b8) 17:24:40 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 17:24:40 executing program 2: socketpair$unix(0x1, 0x400000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f0000000280), 0x400000000feb) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123}], 0x0, &(0x7f0000000680)=""/108}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164}], 0x3c3}, 0x3}], 0x1b1, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x400000000000000) 17:24:40 executing program 4: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040005031d856808000900083c14cc16ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) 17:24:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clone(0x0, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000280), &(0x7f00000001c0)) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x10) mlock(&(0x7f0000003000/0x4000)=nil, 0x4000) 17:24:40 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 17:24:40 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000000)) 17:24:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = dup(r0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/160, &(0x7f00000000c0)=0xa0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141062, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket(0x18, 0x0, 0x1) connect(r4, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r4, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 17:24:40 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0xfffffffffffffc8a}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 17:24:40 executing program 4: r0 = memfd_create(&(0x7f0000f0c000)='$\x00', 0x0) fallocate(r0, 0x12, 0x0, 0x1) 17:24:40 executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000a71ff8), 0x8, 0xfffffffffffffff6) 17:24:41 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x0) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 17:24:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}}, 0x1c}, 0x1}, 0x0) 17:24:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clone(0x0, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000280), &(0x7f00000001c0)) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x10) mlock(&(0x7f0000003000/0x4000)=nil, 0x4000) 17:24:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 17:24:41 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0xfffffffffffffc8a}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 17:24:41 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$evdev(r0, &(0x7f0000000300), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) tkill(r1, 0x1004000000016) 17:24:41 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 17:24:41 executing program 2: socketpair$unix(0x1, 0x400000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r0, r2, &(0x7f0000000280), 0x400000000feb) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123}], 0x0, &(0x7f0000000680)=""/108}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164}], 0x3c3}, 0x3}], 0x1b1, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x400000000000000) 17:24:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clone(0x0, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000280), &(0x7f00000001c0)) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x10) mlock(&(0x7f0000003000/0x4000)=nil, 0x4000) 17:24:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 17:24:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000080)="033d6fc62c543ed2b8077ba46fb64542539f4e56ba65e28cea2d1b9c9b335a19b6258244ed9f44a28d4b8cf340d750f304b30192acf3e0311f9e563eaf0293c39a4fa57537991776423beb9484175dbc70af28bca44e1e42ee7f84c8ecee6e72a039e28630373926c3b466a8d6c448bf7120", 0x1005, &(0x7f0000000000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000380)='./file0\x00', 0x2) 17:24:41 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0xfffffffffffffc8a}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 17:24:41 executing program 0: keyctl$set_reqkey_keyring(0x11, 0xfffffffffffffffc) 17:24:41 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) mlock2(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x8000}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) 17:24:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 17:24:42 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0xfffffffffffffc8a}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 17:24:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clone(0x0, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000280), &(0x7f00000001c0)) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x10) mlock(&(0x7f0000003000/0x4000)=nil, 0x4000) 17:24:42 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = inotify_init() mknod(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='./file0/file0\x00', 0x1) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 17:24:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 17:24:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f000002bff8)='./file0\x00', 0x0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r1, 0xf, &(0x7f0000fa4000)={0x0, r2}) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) removexattr(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)=@known='system.posix_acl_default\x00') 17:24:42 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000004c0)=0x810, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 17:24:42 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x410200, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r1 = getpid() capget(&(0x7f0000000200)={0x0, r1}, &(0x7f0000000300)={0x4, 0x80, 0x1}) userfaultfd(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, &(0x7f0000000480)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00008deff8)='/\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)="6e66730039ad695ab91f0928267795ce2b07ba848ecc6b7c69", 0x2007a00, &(0x7f0000000080)) umount2(&(0x7f0000000100)='./file0\x00', 0xa) 17:24:42 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:24:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:24:42 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = inotify_init() mknod(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='./file0/file0\x00', 0x1) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 17:24:42 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000500)={'veth0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x6, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1}, 0x90) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)=0x0) ioprio_set$pid(0x2, r1, 0x30d64b6d) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480)=0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x70, 0x6, 0xffffffff, 0x7, 0x401, 0x0, 0x5, 0x0, 0x8, 0x4, 0x8, 0x6, 0x2, 0x5e9c, 0x800, 0xffff, 0x7, 0xfffffffffffffff9, 0x100000000, 0x0, 0x9, 0x4, 0x101, 0x4, 0x8, 0x10000, 0x6, 0x1c69bdb3, 0x7, 0x121, 0x8, 0x1f, 0x20, 0xffff, 0x2586, 0x6, 0x4, 0x0, 0x3, 0x1, @perf_config_ext={0x2, 0x1}, 0x0, 0x1, 0x3, 0x7, 0x9, 0x3, 0x1}, r3, 0x10, r4, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x98, r2, 0x0, 0x70bd27, 0x25dfdbfe, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1=0xe0000001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x400}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8050}, 0x80) 17:24:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000100), 0x8001) write$binfmt_elf32(r1, &(0x7f0000000b80)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db720e83db29660000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005d337149cba41c3f82285b11380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x5b5) 17:24:42 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 17:24:42 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000004c0)=0x810, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 17:24:42 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) mlock2(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x8000}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) 17:24:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=@ipv6_delroute={0x64, 0x19, 0x701, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x9}, @RTA_PREF={0x8, 0x14}, @RTA_ENCAP_TYPE={0x8, 0x15}, @RTA_PRIORITY={0x8, 0x6}, @RTA_GATEWAY={0x14, 0x5, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}, @RTA_IIF={0x8, 0x1}]}, 0x64}, 0x1}, 0x0) 17:24:42 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) mlock2(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x8000}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) 17:24:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000100), 0x8001) write$binfmt_elf32(r1, &(0x7f0000000b80)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db720e83db29660000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005d337149cba41c3f82285b11380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x5b5) 17:24:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000a40)) 17:24:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) lookup_dcookie(0x6, &(0x7f0000001e80)=""/4096, 0x1000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@remote}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in, @in=@remote}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000800)={{{@in6, @in6}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000b80)={@dev, @multicast2}, &(0x7f0000000bc0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@dev, @in6=@mcast1}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000d00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d40)={{{@in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000e40)=0xe8) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 17:24:43 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = inotify_init() mknod(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='./file0/file0\x00', 0x1) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 17:24:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000a40)) 17:24:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000100), 0x8001) write$binfmt_elf32(r1, &(0x7f0000000b80)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db720e83db29660000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005d337149cba41c3f82285b11380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x5b5) 17:24:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000a40)) 17:24:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000004c0)=0x810, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 17:24:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000100), 0x8001) write$binfmt_elf32(r1, &(0x7f0000000b80)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db720e83db29660000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005d337149cba41c3f82285b11380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x5b5) 17:24:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000a40)) 17:24:43 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = inotify_init() mknod(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='./file0/file0\x00', 0x1) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 17:24:43 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 17:24:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x20000000002, 0x0, 0x0, 0x20}) syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000002}) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000002c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) timerfd_create(0x0, 0x0) 17:24:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) lookup_dcookie(0x6, &(0x7f0000001e80)=""/4096, 0x1000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@remote}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in, @in=@remote}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000800)={{{@in6, @in6}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000b80)={@dev, @multicast2}, &(0x7f0000000bc0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@dev, @in6=@mcast1}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000d00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d40)={{{@in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000e40)=0xe8) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 17:24:43 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x7ffffffef000}, 0x1}) 17:24:43 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f00000019c0)=@ethtool_dump={0x27}}) 17:24:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000004c0)=0x810, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 17:24:43 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) mlock2(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x8000}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) 17:24:43 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) mlock2(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x8000}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) 17:24:43 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 17:24:44 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x33c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r1, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 17:24:44 executing program 7: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x14, 0x1d, 0x217}, 0x14}, 0x1}, 0x0) 17:24:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0x0, @multicast2=0xe0000002, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x400}, 0x2c) 17:24:44 executing program 7: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001a002551071c0165ff00fc020200000f0029e1007907000f80000000006d98bf", 0x24) 17:24:44 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='s'], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 17:24:44 executing program 7: socket$packet(0x11, 0x800000000002, 0x300) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x40002cd, 0x0) 17:24:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) lookup_dcookie(0x6, &(0x7f0000001e80)=""/4096, 0x1000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@remote}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in, @in=@remote}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000800)={{{@in6, @in6}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000b80)={@dev, @multicast2}, &(0x7f0000000bc0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@dev, @in6=@mcast1}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000d00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d40)={{{@in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000e40)=0xe8) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 17:24:44 executing program 7: socket$packet(0x11, 0x800000000002, 0x300) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x40002cd, 0x0) 17:24:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) lookup_dcookie(0x6, &(0x7f0000001e80)=""/4096, 0x1000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@remote}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in, @in=@remote}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000800)={{{@in6, @in6}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000b80)={@dev, @multicast2}, &(0x7f0000000bc0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@dev, @in6=@mcast1}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000d00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d40)={{{@in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000e40)=0xe8) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 17:24:44 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x4, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x20004d2d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) r5 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000700)) fstat(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgrp(0xffffffffffffffff) fcntl$setlease(r3, 0x400, 0x0) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}, {&(0x7f00000067c0)={0x6c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, "", [@generic="3d64e0f3712179b86ceca5c4484b98549d31b3c49d968030b86ab8d2806da536de5368f28053a8f0002e2bc28ece5872fbd2cc8032981af775a9d8c528226858094b2aea6c507df3f69e8899bfed35c0ee876f050f1e5afb720a20", @generic]}, 0x6c}], 0x2, &(0x7f0000000900)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, 0x0, r4, r6}, @rights={0x20, 0x1, 0x1, [r5, r1, r0]}, @cred={0x20, 0x1, 0x2, r7, r4}, @cred={0x20, 0x1, 0x2, 0x0, r4}, @cred={0x20, 0x1, 0x2, 0x0, r4}], 0xb8, 0x40000}, 0x4000) 17:24:44 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) mlock2(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x8000}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) 17:24:44 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='s'], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 17:24:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='s'], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 17:24:45 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) mlock2(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x8000}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) 17:24:45 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='s'], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 17:24:45 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fchdir(r1) write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fsync(r2) fsync(r1) 17:24:45 executing program 7: socket$packet(0x11, 0x800000000002, 0x300) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x40002cd, 0x0) 17:24:45 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x4, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x20004d2d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) r5 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000700)) fstat(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgrp(0xffffffffffffffff) fcntl$setlease(r3, 0x400, 0x0) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}, {&(0x7f00000067c0)={0x6c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, "", [@generic="3d64e0f3712179b86ceca5c4484b98549d31b3c49d968030b86ab8d2806da536de5368f28053a8f0002e2bc28ece5872fbd2cc8032981af775a9d8c528226858094b2aea6c507df3f69e8899bfed35c0ee876f050f1e5afb720a20", @generic]}, 0x6c}], 0x2, &(0x7f0000000900)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, 0x0, r4, r6}, @rights={0x20, 0x1, 0x1, [r5, r1, r0]}, @cred={0x20, 0x1, 0x2, r7, r4}, @cred={0x20, 0x1, 0x2, 0x0, r4}, @cred={0x20, 0x1, 0x2, 0x0, r4}], 0xb8, 0x40000}, 0x4000) 17:24:45 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x4, 0x100082) r1 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x20004d2d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) r5 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000700)) fstat(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgrp(0xffffffffffffffff) fcntl$setlease(r3, 0x400, 0x0) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}, {&(0x7f00000067c0)={0x6c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, "", [@generic="3d64e0f3712179b86ceca5c4484b98549d31b3c49d968030b86ab8d2806da536de5368f28053a8f0002e2bc28ece5872fbd2cc8032981af775a9d8c528226858094b2aea6c507df3f69e8899bfed35c0ee876f050f1e5afb720a20", @generic]}, 0x6c}], 0x2, &(0x7f0000000900)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, 0x0, r4, r6}, @rights={0x20, 0x1, 0x1, [r5, r1, r0]}, @cred={0x20, 0x1, 0x2, r7, r4}, @cred={0x20, 0x1, 0x2, 0x0, r4}, @cred={0x20, 0x1, 0x2, 0x0, r4}], 0xb8, 0x40000}, 0x4000) 17:24:45 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fchdir(r1) write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fsync(r2) fsync(r1) 17:24:45 executing program 7: socket$packet(0x11, 0x800000000002, 0x300) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x40002cd, 0x0) 17:24:46 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fchdir(r1) write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fsync(r2) fsync(r1) 17:24:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fchdir(r1) write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fsync(r2) fsync(r1) 17:24:46 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='s'], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 17:24:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='s'], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 17:24:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='s'], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 17:24:46 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x4, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x20004d2d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) r5 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000700)) fstat(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgrp(0xffffffffffffffff) fcntl$setlease(r3, 0x400, 0x0) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}, {&(0x7f00000067c0)={0x6c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, "", [@generic="3d64e0f3712179b86ceca5c4484b98549d31b3c49d968030b86ab8d2806da536de5368f28053a8f0002e2bc28ece5872fbd2cc8032981af775a9d8c528226858094b2aea6c507df3f69e8899bfed35c0ee876f050f1e5afb720a20", @generic]}, 0x6c}], 0x2, &(0x7f0000000900)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, 0x0, r4, r6}, @rights={0x20, 0x1, 0x1, [r5, r1, r0]}, @cred={0x20, 0x1, 0x2, r7, r4}, @cred={0x20, 0x1, 0x2, 0x0, r4}, @cred={0x20, 0x1, 0x2, 0x0, r4}], 0xb8, 0x40000}, 0x4000) 17:24:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fchdir(r1) write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fsync(r2) fsync(r1) 17:24:46 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x4, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x20004d2d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) r5 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000700)) fstat(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgrp(0xffffffffffffffff) fcntl$setlease(r3, 0x400, 0x0) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}, {&(0x7f00000067c0)={0x6c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, "", [@generic="3d64e0f3712179b86ceca5c4484b98549d31b3c49d968030b86ab8d2806da536de5368f28053a8f0002e2bc28ece5872fbd2cc8032981af775a9d8c528226858094b2aea6c507df3f69e8899bfed35c0ee876f050f1e5afb720a20", @generic]}, 0x6c}], 0x2, &(0x7f0000000900)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, 0x0, r4, r6}, @rights={0x20, 0x1, 0x1, [r5, r1, r0]}, @cred={0x20, 0x1, 0x2, r7, r4}, @cred={0x20, 0x1, 0x2, 0x0, r4}, @cred={0x20, 0x1, 0x2, 0x0, r4}], 0xb8, 0x40000}, 0x4000) 17:24:46 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") readv(r1, &(0x7f00000002c0), 0x34d) 17:24:46 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000000), 0x10000) 17:24:46 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000000), 0x10000) 17:24:46 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fchdir(r1) write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fsync(r2) fsync(r1) 17:24:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fchdir(r1) write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fsync(r2) fsync(r1) 17:24:46 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000000), 0x10000) 17:24:46 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x4, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x20004d2d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) r5 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000700)) fstat(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgrp(0xffffffffffffffff) fcntl$setlease(r3, 0x400, 0x0) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}, {&(0x7f00000067c0)={0x6c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, "", [@generic="3d64e0f3712179b86ceca5c4484b98549d31b3c49d968030b86ab8d2806da536de5368f28053a8f0002e2bc28ece5872fbd2cc8032981af775a9d8c528226858094b2aea6c507df3f69e8899bfed35c0ee876f050f1e5afb720a20", @generic]}, 0x6c}], 0x2, &(0x7f0000000900)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, 0x0, r4, r6}, @rights={0x20, 0x1, 0x1, [r5, r1, r0]}, @cred={0x20, 0x1, 0x2, r7, r4}, @cred={0x20, 0x1, 0x2, 0x0, r4}, @cred={0x20, 0x1, 0x2, 0x0, r4}], 0xb8, 0x40000}, 0x4000) 17:24:46 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000000), 0x10000) 17:24:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fchdir(r1) write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fsync(r2) fsync(r1) 17:24:47 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000000), 0x10000) 17:24:47 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='s'], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 17:24:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='s'], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 17:24:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='s'], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 17:24:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x4, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x20004d2d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) r5 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000700)) fstat(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgrp(0xffffffffffffffff) fcntl$setlease(r3, 0x400, 0x0) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}, {&(0x7f00000067c0)={0x6c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, "", [@generic="3d64e0f3712179b86ceca5c4484b98549d31b3c49d968030b86ab8d2806da536de5368f28053a8f0002e2bc28ece5872fbd2cc8032981af775a9d8c528226858094b2aea6c507df3f69e8899bfed35c0ee876f050f1e5afb720a20", @generic]}, 0x6c}], 0x2, &(0x7f0000000900)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, 0x0, r4, r6}, @rights={0x20, 0x1, 0x1, [r5, r1, r0]}, @cred={0x20, 0x1, 0x2, r7, r4}, @cred={0x20, 0x1, 0x2, 0x0, r4}, @cred={0x20, 0x1, 0x2, 0x0, r4}], 0xb8, 0x40000}, 0x4000) 17:24:47 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000000), 0x10000) 17:24:47 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000000), 0x10000) 17:24:47 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) ptrace$getregset(0x4204, r2, 0x207, &(0x7f0000000580)={&(0x7f0000000400)=""/33, 0x21}) r3 = add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)="614479be872f779d5f28649d265b93d125f76f61d020d4bd25cd1873bd0cfbc2933d1c8fa55b1558c223518aa226ae767b22f29c3c7ff0c8621ace603ed65238600c7bc9eb6602c7de5844711ea1e0bdd42f900f316e7cbc1b4826c635aaa3f021966d4f4b8f59e967b817ed6f8ef2662ecc843808581ec99b95346b9bc5ac41930587669a2f2b20c24ca559e48ab51c41f49ace3e1b27fb18c9f9bc6c7551cd5237d4c05b3f210abf9a4547ee4d0649d222c5608a4201", 0xb7, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) keyctl$reject(0x13, r3, 0xe6, 0x0, r4) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) ptrace$peek(0x2, r5, &(0x7f00000001c0)) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r1, r6, &(0x7f0000d83ff8), 0x8000fffffffe) fadvise64(r6, 0x0, 0x0, 0x2) 17:24:47 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) ptrace$getregset(0x4204, r2, 0x207, &(0x7f0000000580)={&(0x7f0000000400)=""/33, 0x21}) r3 = add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)="614479be872f779d5f28649d265b93d125f76f61d020d4bd25cd1873bd0cfbc2933d1c8fa55b1558c223518aa226ae767b22f29c3c7ff0c8621ace603ed65238600c7bc9eb6602c7de5844711ea1e0bdd42f900f316e7cbc1b4826c635aaa3f021966d4f4b8f59e967b817ed6f8ef2662ecc843808581ec99b95346b9bc5ac41930587669a2f2b20c24ca559e48ab51c41f49ace3e1b27fb18c9f9bc6c7551cd5237d4c05b3f210abf9a4547ee4d0649d222c5608a4201", 0xb7, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) keyctl$reject(0x13, r3, 0xe6, 0x0, r4) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) ptrace$peek(0x2, r5, &(0x7f00000001c0)) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r1, r6, &(0x7f0000d83ff8), 0x8000fffffffe) fadvise64(r6, 0x0, 0x0, 0x2) 17:24:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fchdir(r1) write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fsync(r2) fsync(r1) 17:24:47 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fchdir(r1) write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fsync(r2) fsync(r1) 17:24:47 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) ptrace$getregset(0x4204, r2, 0x207, &(0x7f0000000580)={&(0x7f0000000400)=""/33, 0x21}) r3 = add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)="614479be872f779d5f28649d265b93d125f76f61d020d4bd25cd1873bd0cfbc2933d1c8fa55b1558c223518aa226ae767b22f29c3c7ff0c8621ace603ed65238600c7bc9eb6602c7de5844711ea1e0bdd42f900f316e7cbc1b4826c635aaa3f021966d4f4b8f59e967b817ed6f8ef2662ecc843808581ec99b95346b9bc5ac41930587669a2f2b20c24ca559e48ab51c41f49ace3e1b27fb18c9f9bc6c7551cd5237d4c05b3f210abf9a4547ee4d0649d222c5608a4201", 0xb7, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) keyctl$reject(0x13, r3, 0xe6, 0x0, r4) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) ptrace$peek(0x2, r5, &(0x7f00000001c0)) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r1, r6, &(0x7f0000d83ff8), 0x8000fffffffe) fadvise64(r6, 0x0, 0x0, 0x2) 17:24:47 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) ptrace$getregset(0x4204, r2, 0x207, &(0x7f0000000580)={&(0x7f0000000400)=""/33, 0x21}) r3 = add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)="614479be872f779d5f28649d265b93d125f76f61d020d4bd25cd1873bd0cfbc2933d1c8fa55b1558c223518aa226ae767b22f29c3c7ff0c8621ace603ed65238600c7bc9eb6602c7de5844711ea1e0bdd42f900f316e7cbc1b4826c635aaa3f021966d4f4b8f59e967b817ed6f8ef2662ecc843808581ec99b95346b9bc5ac41930587669a2f2b20c24ca559e48ab51c41f49ace3e1b27fb18c9f9bc6c7551cd5237d4c05b3f210abf9a4547ee4d0649d222c5608a4201", 0xb7, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) keyctl$reject(0x13, r3, 0xe6, 0x0, r4) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) ptrace$peek(0x2, r5, &(0x7f00000001c0)) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r1, r6, &(0x7f0000d83ff8), 0x8000fffffffe) fadvise64(r6, 0x0, 0x0, 0x2) 17:24:47 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) ptrace$getregset(0x4204, r2, 0x207, &(0x7f0000000580)={&(0x7f0000000400)=""/33, 0x21}) r3 = add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)="614479be872f779d5f28649d265b93d125f76f61d020d4bd25cd1873bd0cfbc2933d1c8fa55b1558c223518aa226ae767b22f29c3c7ff0c8621ace603ed65238600c7bc9eb6602c7de5844711ea1e0bdd42f900f316e7cbc1b4826c635aaa3f021966d4f4b8f59e967b817ed6f8ef2662ecc843808581ec99b95346b9bc5ac41930587669a2f2b20c24ca559e48ab51c41f49ace3e1b27fb18c9f9bc6c7551cd5237d4c05b3f210abf9a4547ee4d0649d222c5608a4201", 0xb7, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) keyctl$reject(0x13, r3, 0xe6, 0x0, r4) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) ptrace$peek(0x2, r5, &(0x7f00000001c0)) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r1, r6, &(0x7f0000d83ff8), 0x8000fffffffe) fadvise64(r6, 0x0, 0x0, 0x2) 17:24:47 executing program 7: r0 = syz_open_dev$ndb(&(0x7f000000bc80)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) 17:24:47 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) ptrace$getregset(0x4204, r2, 0x207, &(0x7f0000000580)={&(0x7f0000000400)=""/33, 0x21}) r3 = add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)="614479be872f779d5f28649d265b93d125f76f61d020d4bd25cd1873bd0cfbc2933d1c8fa55b1558c223518aa226ae767b22f29c3c7ff0c8621ace603ed65238600c7bc9eb6602c7de5844711ea1e0bdd42f900f316e7cbc1b4826c635aaa3f021966d4f4b8f59e967b817ed6f8ef2662ecc843808581ec99b95346b9bc5ac41930587669a2f2b20c24ca559e48ab51c41f49ace3e1b27fb18c9f9bc6c7551cd5237d4c05b3f210abf9a4547ee4d0649d222c5608a4201", 0xb7, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) keyctl$reject(0x13, r3, 0xe6, 0x0, r4) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) ptrace$peek(0x2, r5, &(0x7f00000001c0)) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r1, r6, &(0x7f0000d83ff8), 0x8000fffffffe) fadvise64(r6, 0x0, 0x0, 0x2) 17:24:47 executing program 7: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="580995de3c30e5d60609ab486d77978bf279164798d464a727e435a54a9b4498c60c7a0dafd764cd4cd6ffc8f9b5baa66bb5b30a368c556284891bec6d6ca5a6b252acb9c29133bf87b28988f69660897442343e769b8ca1240cbd686e73cb8082c4b8cf7cc28205dcf2b45e174ff41f491f05bf5c548cb0a7481e50e2bae314689d3456b19542ac88faa1c21afb5ef7be1e4fb9ed9101a1b1a9b2fde826013825", 0xa1, 0x10, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) fstatfs(r0, &(0x7f0000000180)=""/203) mknod(&(0x7f0000000400)='./file0\x00', 0x2, 0xfff) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000280)) setsockopt$inet_opts(r1, 0x0, 0x21, &(0x7f0000000000), 0x0) sendto$inet(r0, &(0x7f0000000340)="1689f2a665a12d074aec6fb3f43e19da4d058d47985a23628b93b94d4ccd8aaa67ee1db914b99f6bd22ee2252013b477cf85182d3237d2974e49480e6eff3ef97368e7b436cd92c9930e180d7d5ff8d830d85098c084b02a54ef72dd755a281ebed4afff7ff344797abdbe3912e0fb46ed2f42e92ac0efcf92f5caf171f792285116d4e5d862a2c4b04596bf5cdeb1dedc6246212f968f474fff560a8e7d1ed47ccad8508dbe61", 0xa7, 0x4004080, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0xfffffffffffffffa}, 0x10) accept4$packet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000580)=0x14, 0x80000) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11020040}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7c0000002d012a0328bd6500fcdbdf2500000000", @ANYBLOB="fbffe0ff0600fdff06000f00080005000709000008000b000400000008000b000600000008000b00b0b800000c0001007463696e64657800140002000800010038cf00000800020008000000080005000140000008000b00000000000800050007000000"], 0x2}, 0x1, 0x0, 0x0, 0x4090}, 0x1) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) dup3(r1, r1, 0x80000) 17:24:48 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x400, 0x100, 0x20, "281789e0ac5bc42ff4dcc83b4367a56bbee8cda459fee133837c3bc3149122a8c057cd2de8ae0ede5e4e3036ce3d800a6e36c6fe8deb4a2d03262cbf3cc59b6a3cfa7e67777c556b1b0324af4905d3ea"}, 0xd8) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f760070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) ptrace$getregset(0x4204, r2, 0x207, &(0x7f0000000580)={&(0x7f0000000400)=""/33, 0x21}) r3 = add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)="614479be872f779d5f28649d265b93d125f76f61d020d4bd25cd1873bd0cfbc2933d1c8fa55b1558c223518aa226ae767b22f29c3c7ff0c8621ace603ed65238600c7bc9eb6602c7de5844711ea1e0bdd42f900f316e7cbc1b4826c635aaa3f021966d4f4b8f59e967b817ed6f8ef2662ecc843808581ec99b95346b9bc5ac41930587669a2f2b20c24ca559e48ab51c41f49ace3e1b27fb18c9f9bc6c7551cd5237d4c05b3f210abf9a4547ee4d0649d222c5608a4201", 0xb7, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) keyctl$reject(0x13, r3, 0xe6, 0x0, r4) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) ptrace$peek(0x2, r5, &(0x7f00000001c0)) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r1, r6, &(0x7f0000d83ff8), 0x8000fffffffe) fadvise64(r6, 0x0, 0x0, 0x2) 17:24:48 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f00000000c0)) 17:24:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10000000001, 0x0) write$sndseq(r1, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000080)}}], 0x1c) r2 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc05c5340, &(0x7f0000dc5f98)) 17:24:48 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000100)="2400000002031f001cfffd946fa2830020200a000900010000e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 17:24:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54", 0x3f) write$cgroup_pid(r1, &(0x7f0000000140)={[0x0, 0x34, 0x39]}, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 17:24:48 executing program 2: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x20, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x20, &(0x7f0000000040)) rt_sigtimedwait(&(0x7f00000000c0)={0x80000001}, &(0x7f0000000000), &(0x7f0000000100), 0x8) 17:24:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000000), &(0x7f0000fea000)) 17:24:48 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 17:24:48 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0xffffffffffffd75, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x361, 0x10400003) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) 17:24:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:24:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54", 0x3f) write$cgroup_pid(r1, &(0x7f0000000140)={[0x0, 0x34, 0x39]}, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 17:24:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x38, &(0x7f0000000040), 0x0) 17:24:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10000000001, 0x0) write$sndseq(r1, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000080)}}], 0x1c) r2 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc05c5340, &(0x7f0000dc5f98)) 17:24:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0x2, 0x4e24, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[{0x10, 0x1, 0x1}], 0x10}, 0x0) 17:24:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 567.182443] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 567.221723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 17:24:48 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x340, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="6a725a5f62d02a6be55afd02d999", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x8, @dev={0xfe, 0x80}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x5, 0x4) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000240)}, 0x2000) 17:24:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54", 0x3f) write$cgroup_pid(r1, &(0x7f0000000140)={[0x0, 0x34, 0x39]}, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 17:24:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[]}, 0x1}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast2={0xff, 0x2, [], 0x1}}]}, 0x2c}, 0x1}, 0x0) 17:24:48 executing program 6: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2271, 0x7fffffffefff) 17:24:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10000000001, 0x0) write$sndseq(r1, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000080)}}], 0x1c) r2 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc05c5340, &(0x7f0000dc5f98)) [ 567.268880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 567.279605] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 17:24:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000000)=""/71, 0x47) 17:24:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:24:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54", 0x3f) write$cgroup_pid(r1, &(0x7f0000000140)={[0x0, 0x34, 0x39]}, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 17:24:48 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 17:24:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x641, 0x0) write$eventfd(r1, &(0x7f0000000040)=0x1000000100000001, 0xdd) 17:24:48 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 17:24:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10000000001, 0x0) write$sndseq(r1, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000080)}}], 0x1c) r2 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc05c5340, &(0x7f0000dc5f98)) 17:24:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:24:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2, 0x40000005, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) [ 567.376596] keychord: keycode 4096 out of range 17:24:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x388, 0x0) 17:24:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x80, [], 0xbb}}, @in=@dev={0xac, 0x14, 0x14}, {@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}, {{@in=@loopback=0x7f000001, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0xf0ffff, 0x9effffff}, [@tmpl={0x44, 0x5, [{{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x32}, 0x0, @in6}]}]}, 0x16c}, 0x1}, 0x0) 17:24:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r1, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) fallocate(r1, 0x0, 0x0, 0x8000) lseek(r1, 0x0, 0x3) 17:24:48 executing program 4: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x361, 0x10400003) 17:24:48 executing program 1: r0 = epoll_create(0x4) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000180)='5', 0x1}], 0x1) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 17:24:48 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000080)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000000a43ba5d8060000000060001000029ec2400020cd37ed01cc0730ec279b287bf4042d1", 0x4c}], 0x1}, 0x0) 17:24:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x80, [], 0xbb}}, @in=@dev={0xac, 0x14, 0x14}, {@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}, {{@in=@loopback=0x7f000001, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0xf0ffff, 0x9effffff}, [@tmpl={0x44, 0x5, [{{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x32}, 0x0, @in6}]}]}, 0x16c}, 0x1}, 0x0) 17:24:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x6}}) 17:24:48 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 17:24:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x80, [], 0xbb}}, @in=@dev={0xac, 0x14, 0x14}, {@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}, {{@in=@loopback=0x7f000001, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0xf0ffff, 0x9effffff}, [@tmpl={0x44, 0x5, [{{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x32}, 0x0, @in6}]}]}, 0x16c}, 0x1}, 0x0) 17:24:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000440)="240000002e0007031dfffd946fa2830020200a0009000000001d0500000000000000ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 17:24:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100022b0509000100030100ff3ffe58", 0x1f}], 0x1) 17:24:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x388, 0x0) 17:24:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote={0xfe, 0x80, [], 0xbb}}, @in=@dev={0xac, 0x14, 0x14}, {@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}, {{@in=@loopback=0x7f000001, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0xf0ffff, 0x9effffff}, [@tmpl={0x44, 0x5, [{{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x32}, 0x0, @in6}]}]}, 0x16c}, 0x1}, 0x0) [ 567.489708] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 17:24:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x8, 0x1a24e0fc2c2b8add) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 17:24:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2, 0x40000005, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 17:24:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$getreaper(0x7, &(0x7f0000000080)) 17:24:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) 17:24:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={"657267c71ac977ead9c300"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r3, 0x0) accept(r4, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0xe) 17:24:48 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000009, 0x0) 17:24:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x388, 0x0) 17:24:48 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 17:24:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x0) 17:24:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2286, &(0x7f0000000200)) 17:24:48 executing program 6: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, {0x1}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) keyctl$assume_authority(0x10, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 17:24:48 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000002c0)=0x6, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 17:24:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2, 0x40000005, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) [ 567.620040] sock: sock_set_timeout: `syz-executor1' (pid 3401) tries to set negative timeout 17:24:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2286, &(0x7f0000000200)) 17:24:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2286, &(0x7f0000000200)) 17:24:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) fchdir(r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000340)={'mangle\x00', 0x2}, 0x48) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x208200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x4, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8001}}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000001c0)=""/60) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r6 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 17:24:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2, 0x40000005, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 17:24:48 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r2, 0xa, 0x12) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001c4, 0x0) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) tkill(r1, 0x16) 17:24:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2286, &(0x7f0000000200)) [ 567.668863] sock: sock_set_timeout: `syz-executor1' (pid 3401) tries to set negative timeout 17:24:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={"657267c71ac977ead9c300"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r3, 0x0) accept(r4, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0xe) 17:24:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x388, 0x0) 17:24:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={"657267c71ac977ead9c300"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r3, 0x0) accept(r4, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0xe) 17:24:48 executing program 7: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000000c0)=0x40, 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb49) 17:24:48 executing program 0: r0 = socket(0x10, 0x3, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000700)="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") sendfile(r0, r1, &(0x7f0000000000), 0x80000004) [ 567.763405] sock: sock_set_timeout: `syz-executor1' (pid 3443) tries to set negative timeout [ 567.798359] sock: sock_set_timeout: `syz-executor3' (pid 3447) tries to set negative timeout 17:24:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) fchdir(r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000340)={'mangle\x00', 0x2}, 0x48) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x208200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x4, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8001}}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000001c0)=""/60) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r6 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 17:24:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={"657267c71ac977ead9c300"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r3, 0x0) accept(r4, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0xe) 17:24:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={"657267c71ac977ead9c300"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r3, 0x0) accept(r4, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0xe) 17:24:49 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000080)=""/36, 0x24) 17:24:49 executing program 5: munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = epoll_create(0x20) fcntl$notify(r0, 0x0, 0x284) pselect6(0x2e7, &(0x7f0000f33fc0), &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 17:24:49 executing program 0: r0 = socket(0x10, 0x3, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000700)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f000000000000000045cc6158f031528844209c7ed05b160ef336721bf89686ff472f71dfca5353f6323ddf8006ffc1052d6a80985adc68017065648b35c7d321fc5c0466062fbfad5acbe7ff6cefe53c88c05ab970ceebdfa589098ad40d080deb2488f9e4069682b14483f113cb6979b2f390179a18e26b4088f1f31ed04a0a681f002e007436947475ab073711c98ae3b4259f1a1aff9b09aa66cb90ca43a1dbc6de15abb4ae739f9e8f047cd29ec76b9ef6beb7839f8071aaea4d247e6a9514748c93d0bb01a7c37ca6c856327af81f296d2c2c07c2d63b") sendfile(r0, r1, &(0x7f0000000000), 0x80000004) 17:24:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) fchdir(r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000340)={'mangle\x00', 0x2}, 0x48) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x208200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x4, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8001}}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000001c0)=""/60) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r6 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 17:24:49 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) fchdir(r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000340)={'mangle\x00', 0x2}, 0x48) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x208200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x4, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8001}}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000001c0)=""/60) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r6 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 17:24:49 executing program 7: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xfffffffe8010201f}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0) 17:24:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={"657267c71ac977ead9c300"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r3, 0x0) accept(r4, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0xe) [ 568.610480] sock: sock_set_timeout: `syz-executor1' (pid 3469) tries to set negative timeout [ 568.630333] sock: sock_set_timeout: `syz-executor3' (pid 3472) tries to set negative timeout 17:24:49 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r1, 0xff7fffffffffffff, 0x1) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r0) 17:24:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x43, 0x0, 0x300) 17:24:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={"657267c71ac977ead9c300"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r3, 0x0) accept(r4, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0xe) [ 568.658993] sock: sock_set_timeout: `syz-executor3' (pid 3483) tries to set negative timeout 17:24:49 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000002180)=[{{&(0x7f0000000280)=@xdp={0x2c}, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)="bafa001e", 0x4}], 0x1, &(0x7f0000000cc0)}}, {{&(0x7f0000000980)=@ipx={0x4, 0x0, 0x0, "94fee52e2321"}, 0x80, &(0x7f0000000b80), 0x0, &(0x7f00000084c0)}}], 0x2, 0x0) 17:24:49 executing program 7: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xfffffffe8010201f}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0) 17:24:49 executing program 3: mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000292000/0x1000)=nil) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x2283, &(0x7f0000979fff)="a6") write$evdev(r0, &(0x7f0000001fdc)=[{}, {{0x0, 0x2710}}], 0x30) [ 568.744042] sock: sock_set_timeout: `syz-executor1' (pid 3493) tries to set negative timeout 17:24:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) fchdir(r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000340)={'mangle\x00', 0x2}, 0x48) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x208200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x4, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8001}}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000001c0)=""/60) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r6 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 17:24:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") unshare(0x20000000) unshare(0x20000200) 17:24:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) fchdir(r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000340)={'mangle\x00', 0x2}, 0x48) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x208200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x4, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8001}}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000001c0)=""/60) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r6 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 17:24:49 executing program 3: clone(0x2001fffe, &(0x7f0000000ffe), &(0x7f0000f13000), &(0x7f00002a7000), &(0x7f0000000000)) 17:24:49 executing program 0: r0 = socket(0x10, 0x3, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000700)="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") sendfile(r0, r1, &(0x7f0000000000), 0x80000004) 17:24:49 executing program 7: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xfffffffe8010201f}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0) 17:24:49 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) 17:24:50 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) fchdir(r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000340)={'mangle\x00', 0x2}, 0x48) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x208200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x4, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8001}}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000001c0)=""/60) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r6 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 17:24:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") unshare(0x20000000) unshare(0x20000200) 17:24:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x4, 0x279d}) socket(0xa, 0x2, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100), 0x0, 0xffffffffffffffff) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 17:24:50 executing program 5: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) prctl$intptr(0x800000000018, 0x0) 17:24:50 executing program 7: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xfffffffe8010201f}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0) 17:24:50 executing program 0: r0 = socket(0x10, 0x3, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000700)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f000000000000000045cc6158f031528844209c7ed05b160ef336721bf89686ff472f71dfca5353f6323ddf8006ffc1052d6a80985adc68017065648b35c7d321fc5c0466062fbfad5acbe7ff6cefe53c88c05ab970ceebdfa589098ad40d080deb2488f9e4069682b14483f113cb6979b2f390179a18e26b4088f1f31ed04a0a681f002e007436947475ab073711c98ae3b4259f1a1aff9b09aa66cb90ca43a1dbc6de15abb4ae739f9e8f047cd29ec76b9ef6beb7839f8071aaea4d247e6a9514748c93d0bb01a7c37ca6c856327af81f296d2c2c07c2d63b") sendfile(r0, r1, &(0x7f0000000000), 0x80000004) 17:24:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") unshare(0x20000000) unshare(0x20000200) 17:24:50 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) fchdir(r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000340)={'mangle\x00', 0x2}, 0x48) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x208200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x4, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8001}}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000001c0)=""/60) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r6 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 17:24:50 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) fchdir(r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000340)={'mangle\x00', 0x2}, 0x48) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x208200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x4, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8001}}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000001c0)=""/60) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r6 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 17:24:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x23, 0x0, 0x0, {0xa}, [@RTA_GATEWAY={0x14, 0x5}]}, 0x30}, 0x1}, 0x0) 17:24:50 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) fchdir(r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000340)={'mangle\x00', 0x2}, 0x48) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x208200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x4, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8001}}) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000001c0)=""/60) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r6 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 17:24:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000140), 0x4) 17:24:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") unshare(0x20000000) unshare(0x20000200) 17:24:50 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000080)={0x9, 0x6, 0x3, 0x871, 0x1, [{0x85b, 0xf05f, 0x7fffffff, 0x0, 0x0, 0x888}]}) 17:24:50 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x180, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006480), 0x0, 0x0, &(0x7f0000003940)={0x0, 0x1c9c380}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) preadv(r1, &(0x7f0000000140), 0x391, 0x51) 17:24:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000140), 0x4) 17:24:50 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) 17:24:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x0, r1}) fcntl$getown(r0, 0x9) 17:24:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69af40b440e1b9950810bf2c93fd2a26d9e181780aca84f48d19ac75543d591a12c8ea6136d0e14648eedd747c1d27bef0e09f9f54274d9ec66167e0b07656032855958e42d9ba1afadf2edbbafdba24fa53c5591673615b00e2293e6881ff5569e3570dd8136f03433740994d692c54a7524aa79d192afef2467c1f0d02784373ec13ddb490de8d77e553e832098ac9531d451b6447d45838769484bdf") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000080), 0x4) ioctl$fiemap(r2, 0xc020660b, &(0x7f00000000c0)=ANY=[]) 17:24:50 executing program 5: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000700)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000fa3000)={&(0x7f0000d0b000)=@ax25, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000878000)}, 0x2) 17:24:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000140), 0x4) 17:24:50 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x180, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006480), 0x0, 0x0, &(0x7f0000003940)={0x0, 0x1c9c380}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) preadv(r1, &(0x7f0000000140), 0x391, 0x51) 17:24:50 executing program 7: sync_file_range(0xffffffffffffffff, 0xfffffffffffffd23, 0x0, 0x0) 17:24:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$intptr(0x2f, 0x4) 17:24:50 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x180, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006480), 0x0, 0x0, &(0x7f0000003940)={0x0, 0x1c9c380}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) preadv(r1, &(0x7f0000000140), 0x391, 0x51) 17:24:50 executing program 5: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000700)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000fa3000)={&(0x7f0000d0b000)=@ax25, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000878000)}, 0x2) 17:24:50 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000140)='./file0\x00') chown(&(0x7f0000000080)='./control/file0\x00', 0x0, 0x0) close(r0) 17:24:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [], 0xa, "6336e1329f47e4379acec4cf1704d534146a757d68452724c2a09642c908aaf21756d79520ee4a6d52f3f6a4f3f476a9c4f5f3b18a8f98eaf757881f219e042cda48b85086ee6e47222ca5f764aef1d2c128108987197bd8885e0b119e949c0774195b8eaba84174b3961bf192d9ac919354eeca3b9134c9c4c9619003b96ed5f09ce6460e8674482fd9ba5de065fd563a662d9c1b5bafe0a785f274f4ae6173d236e7bfb6033ef45351106d190f121d09ed5fd474c9c1f37fd6b4db6695f8b04177d2eb02b0c67a3d824b3426f9601e69a1fd2fece1c37d0aaf8bbc35b4639c080ee86df576753030c5c17408ebde1d66ce55e8a480dd85bea44af2ed0dadbb88c3d59cd447288ea66bac3ea9a705f8da6eb33c207db5aca050f45ceabec591bc91fabb71e58c59a7598212a65b2446e344fb864314be839c27d6b660a07d4739ec3a81c00c873f88007d014448aedf64fb0ab42ba1e4dc91aa476f8ef056b39c13d6b962239fc01b56d2ff572a0dda873fea8206016f31fd881679e129c4592704c437cc89780820f904084864e587c6ddbdffcc2de169935f7bd0743a2ffcff8bb880b5c1a5ca0e0f77c83916cd919ce0ef8b075d48e1f6c166b4106924c6d78dc8cb4b76611fbab7de2ed4c1ff78a15881e898c5a3ddceaccc8c77f4e066527e26c373fb76b93313a5ffe5aac0b81df83bf82b598cfb33f279667788ae93a4af625217dbd6e7b75c51b470cc477d9a28180907eca32001db283f6233bc6318c03f4c32851640c677e8358fdca292555a6f725433e94bf960afbcf0cb3e0fda624b2da2c576b990630b45e925646d12c4ff286b3285bd5c8dff49e3d0751116452da9fc10d97eaa567a5f7464246b1d12913efe8a476261b1989b08021c25315ed50b71506fc124f42d0a6e57d3884f1bb64ec664736f60a91826a64d90bfd07f2e44ee3a7404953856e07f660cf0250f143f9a31992d291a20165cd61e42abf86e9a3448d2fc7811b2f88dbdfbb81bc657045c803f26e91c47e1e74297ef14879f906f0d0dd2b68809acf1754a1bcd7f1b421f23db1d3e26879aad471d93ee05b7f2fc694de04d4460927689a6b7810483d61bd8cf55be6b37b849697c88f56d141abacd67e1a24d104f39c351250515f02b2df60221ef51331eeaf279aaa13ec864e8c9631910bad4b7a7cee8a5dd304befad7f4a345eda55f85296e1ec30e860d37093c12c2808cca8f0e8c84f80ca814e26b2bd79ce9eb2651e39f5e0fd18cd02238be3efbbe3c33ff72c48ff692de5181f30d30ce9faaa8eaaeb9f0c748a9c765b4ea3fc70deaa5d6f542cf5bbda3459e6d21706afdda8e5d0d51aa804fbc876633af1b483fc1a78406ab0a582957b759ca47acf858e8b9321511723bcdffd238dd489601fee249046ccca5dcdd1866bbd5077a13132587ee6217249a68600d004c4edea2cb6eec1b17bd8b973de91bf50444b43a1b3f871fc9b507e454acfce4c7df88a0c9c990c7948e11de17656addf5daa358d6ed98743192aa4a32cd96326a3af3634955019c8aaaa97a2dc36f3bd75c5970c89204c4055628d543f8262cb84670290b08ec6c599147c1549f267c014b3c20751482edbac4ce010bf16b4d33df283f1b7d44142c0cb4b3b6c8a22360cd6dc4f6a9fb30a363b2262b45a87de96e9646ff53f94b30e59b2d074b208a8e00bff896f288d2de465433ae883306abf50c15d293d1c49f44138ba953ac700ab9c52661c98227a5c8fe20457a1ecc50c669fc4b298f9ebf5da663e722ec4880144e90a3814caddd78c9adcfb1674a632550cd98712d8e5f2129859bbc69b019ef217044dcc4b97cfbd83b2e279c5082240c35553ab862ef8536b449c4e2c4e8ca3e2a6547e814f1138f5a58006c5baed2f61bd971bcbfd8e35f724be6ef88602c1ee5dbc2ffd60e53e999d5acf325c0b5612dc6c1c97d5e60de391d7169e3b9bda256dc868d830422209e92964ac3527f5561017a081f12dd252f600eb43aad55ee2d424d6be34bb6a6d8903d173eb9926e79624224781f3db1852ada4080729cb473fc5ee922b95fa899b3048239b690c340856171876f534e60ebc37aae227391f600f8f5c563fd53e5088985d53e39a5736295b8f4ec25cf90fea70c11d99184f996f4143e58b014ff0dbe889122cfdb4c7b495831f0acc47751055fc47bd3904ea826ce3adff9b1694223129d5f35276131fc50db648753f192d57166a82f2c552e1e7cdd8451b0f4b42c0db01d7ecc3d1cbe5c54d1a6e05c72becc415328f6093161602ec70d8dc7d248f72bd74eceea54b7ee078399fb1782e191f77a74ff7c6d4dd19322664522d61a6631b3425e7c207d5e220116003803fd74309df5c83c5ea9fe49b1cd1757ed06412e75a0c9377243d9e69de530d49bff68ee8b1313270b770629de3802f58d510708d6e2b5cf7ce8cb32c3f1110d38d9809374f2c14855184f3c5c3d645a524700ae7d5aa2ad73451d11c228a11aadaaace6a29c0eac2d5dd66c58ae5beae6a714e5706fe8845d903f5513e3ed2c3a3e391691e2b8723ef42c268844e0630f841bfbb987f962e289fb6d8ef3756acceea32d57146b993ab423f6a462a7997bb1a1d23d021b678ebdbd3c2b2ac5982790749dd46c1f7fbe596c39cdab44b01dda093f66b3e68e8a5eefbf5fe09329744bf9110b08bf13b729716b036bd5194f2f42142b86ba54b715b0c118592a9ef7b8ef4efbe17cc3b418825f3580705848604923139411a1be0b69d72d113f534ecc9ea14a8486950a7229e84a778f06719f2539a3fc40d9f8d4e4648aac712076e734c0b6793992560a6bdf64e49fb393739cd312da53d2b26d376209715cc4691681be0"}, 0x800) writev(r2, &(0x7f0000003440)=[{&(0x7f0000001300)="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", 0x800}], 0x1) 17:24:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000140), 0x4) 17:24:50 executing program 5: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000700)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000fa3000)={&(0x7f0000d0b000)=@ax25, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000878000)}, 0x2) 17:24:50 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x180, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006480), 0x0, 0x0, &(0x7f0000003940)={0x0, 0x1c9c380}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) preadv(r1, &(0x7f0000000140), 0x391, 0x51) 17:24:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001fc0)={&(0x7f0000000ac0)={0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000000000)={0x1c, 0x13, 0x909, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic='C']}]}, 0x1c}, 0x1}, 0x0) 17:24:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [], 0xa, "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"}, 0x800) writev(r2, &(0x7f0000003440)=[{&(0x7f0000001300)="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", 0x800}], 0x1) 17:24:51 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0/file1/file0\x00', 0x0) rmdir(&(0x7f0000000240)='./file0/file1\x00') 17:24:51 executing program 5: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000700)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000fa3000)={&(0x7f0000d0b000)=@ax25, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000878000)}, 0x2) 17:24:51 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x10400003) setfsgid(0x0) 17:24:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$l2tp(0x18, 0x1, 0x1) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}}}, 0x2e) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x10032, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80047437, &(0x7f0000000180)) 17:24:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001fc0)={&(0x7f0000000ac0)={0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000000000)={0x1c, 0x13, 0x909, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic='C']}]}, 0x1c}, 0x1}, 0x0) 17:24:51 executing program 1: r0 = socket$inet6(0xa, 0x80000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1=0xe0000001}, 0xc) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000140)='/dev/pktcdvd/control\x00', 0x2, 0x0) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000180)) 17:24:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [], 0xa, "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"}, 0x800) writev(r2, &(0x7f0000003440)=[{&(0x7f0000001300)="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", 0x800}], 0x1) 17:24:51 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0/file1/file0\x00', 0x0) rmdir(&(0x7f0000000240)='./file0/file1\x00') 17:24:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001fc0)={&(0x7f0000000ac0)={0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000000000)={0x1c, 0x13, 0x909, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic='C']}]}, 0x1c}, 0x1}, 0x0) [ 570.018957] device lo entered promiscuous mode 17:24:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001fc0)={&(0x7f0000000ac0)={0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000000000)={0x1c, 0x13, 0x909, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic='C']}]}, 0x1c}, 0x1}, 0x0) 17:24:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r1, 0x20, 0xfff, 0x100000000) 17:24:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$l2tp(0x18, 0x1, 0x1) close(r1) 17:24:51 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x10400003) setfsgid(0x0) 17:24:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [], 0xa, "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"}, 0x800) writev(r2, &(0x7f0000003440)=[{&(0x7f0000001300)="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", 0x800}], 0x1) 17:24:51 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0505405, &(0x7f0000000040)={0x1}) 17:24:51 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000140)='./file0\x00') chown(&(0x7f0000000080)='./control/file0\x00', 0x0, 0x0) close(r0) 17:24:51 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0/file1/file0\x00', 0x0) rmdir(&(0x7f0000000240)='./file0/file1\x00') 17:24:51 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0/file1/file0\x00', 0x0) rmdir(&(0x7f0000000240)='./file0/file1\x00') 17:24:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r1, 0x20, 0xfff, 0x100000000) 17:24:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$l2tp(0x18, 0x1, 0x1) close(r1) 17:24:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') sendfile(r1, r0, &(0x7f0000000040), 0x7a000000000000) 17:24:51 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000001280)='cgroup.procs\x00', 0x2, 0x0) r2 = epoll_create1(0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000600)=""/103, 0x67}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)) 17:24:51 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="0401000000c000ddb8460900ffb25bc202938207d9033780398d5375c5f73f2e5506dc5712f29513f06f8f6575efe5eb8f5972eaecff8b307756e195", 0x3c, 0x800, &(0x7f0000000000)={0xa, 0x40100200000800, 0x8000000000009, @empty, 0x4}, 0x1c) 17:24:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r1, 0x20, 0xfff, 0x100000000) 17:24:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') sendfile(r1, r0, &(0x7f0000000040), 0x7a000000000000) 17:24:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$l2tp(0x18, 0x1, 0x1) close(r1) 17:24:51 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x10400003) setfsgid(0x0) 17:24:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r1, 0x20, 0xfff, 0x100000000) 17:24:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$l2tp(0x18, 0x1, 0x1) close(r1) 17:24:51 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') sendfile(r1, r0, &(0x7f0000000040), 0x7a000000000000) 17:24:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') sendfile(r1, r0, &(0x7f0000000040), 0x7a000000000000) 17:24:52 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000140)='./file0\x00') chown(&(0x7f0000000080)='./control/file0\x00', 0x0, 0x0) close(r0) 17:24:52 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x20000, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0xaa) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x208200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 17:24:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) 17:24:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@ipv4_newaddr={0x34, 0x14, 0x125, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffffffffffffff9}}, @IFA_LOCAL={0x8, 0x2, @loopback=0x7f000001}]}, 0x34}, 0x1}, 0x0) 17:24:52 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') sendfile(r1, r0, &(0x7f0000000040), 0x7a000000000000) 17:24:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') sendfile(r1, r0, &(0x7f0000000040), 0x7a000000000000) 17:24:52 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/114, 0x72}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 17:24:52 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x10400003) setfsgid(0x0) 17:24:52 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0xff, 0x1}, 0x20) close(r0) 17:24:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000000)=0xb235, 0x4) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)={0xa}, 0x1c) 17:24:52 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') sendfile(r1, r0, &(0x7f0000000040), 0x7a000000000000) 17:24:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') lseek(r0, 0xfffffffffffffffd, 0x4) 17:24:52 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x420a, r1, 0x0, &(0x7f0000000100)={&(0x7f0000000040)}) 17:24:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") creat(&(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180)='./file1\x00', &(0x7f0000000240)='btrfs\x00', 0x0, 0x0) 17:24:52 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c46001300000000000000000000000000000000000000000000000000004000000000000000000000"], 0x2b) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0x6) 17:24:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000000)=0xb235, 0x4) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)={0xa}, 0x1c) [ 571.779107] sg_write: data in/out 4828/1 bytes for SCSI command 0x0-- guessing data in; [ 571.779107] program syz-executor7 not setting count and/or reply_len properly 17:24:53 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000140)='./file0\x00') chown(&(0x7f0000000080)='./control/file0\x00', 0x0, 0x0) close(r0) 17:24:53 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") ioctl$KDGKBLED(r0, 0x40045108, &(0x7f0000a07fff)) 17:24:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') write$cgroup_pid(r1, &(0x7f0000000200)={[0x2b, 0x39]}, 0x2) 17:24:53 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4a6}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 17:24:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000000)=0xb235, 0x4) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)={0xa}, 0x1c) 17:24:53 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c46001300000000000000000000000000000000000000000000000000004000000000000000000000"], 0x2b) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0x6) 17:24:53 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x20000, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0xaa) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x208200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 17:24:53 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000003840)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 17:24:53 executing program 3: mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000003000)=[{&(0x7f0000003fff)=""/2, 0x2}], 0x1, 0x0) sigaltstack(&(0x7f0000003000/0x2000)=nil, &(0x7f0000000080)) 17:24:53 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x1, 0x1400000000000000, &(0x7f0000000480)="e9"}) 17:24:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000000)=0xb235, 0x4) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)={0xa}, 0x1c) 17:24:53 executing program 5: r0 = socket(0x18, 0x0, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x0, @multicast2=0xe0000002, 0x0, 0x0, 'rr\x00'}, {@rand_addr}}, 0x44) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000001c0), 0x0) [ 572.563328] sg_write: data in/out 4828/1 bytes for SCSI command 0x0-- guessing data in; [ 572.563328] program syz-executor7 not setting count and/or reply_len properly 17:24:53 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c46001300000000000000000000000000000000000000000000000000004000000000000000000000"], 0x2b) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0x6) 17:24:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='\x00\x00\x00', 0x2000400, 0x0) 17:24:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) close(r0) [ 572.607788] binder: 3780:3784 ioctl c0306201 20000440 returned -14 17:24:53 executing program 5: request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000001100)={0x73, 0x79, 0x7a}, &(0x7f0000001140)='$\x00', 0x0) [ 572.651267] binder_alloc: binder_alloc_mmap_handler: 3780 20001000-20004000 already mapped failed -16 [ 572.652388] sg_write: data in/out 4828/1 bytes for SCSI command 0x0-- guessing data in; [ 572.652388] program syz-executor7 not setting count and/or reply_len properly [ 572.702624] binder: BINDER_SET_CONTEXT_MGR already set [ 572.708511] binder_alloc: 3780: binder_alloc_buf, no vma [ 572.714108] binder: 3780:3784 ioctl 40046207 0 returned -16 [ 572.721465] binder: 3780:3825 transaction failed 29189/-3, size 0-0 line 3141 [ 572.728923] binder: 3780:3825 ioctl c0306201 20000440 returned -14 [ 572.738765] binder: send failed reply for transaction 456 to 3780:3784 [ 572.745670] binder: undelivered TRANSACTION_ERROR: 29189 17:24:54 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8132, 0xffffffffffffffff, 0x0) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) 17:24:54 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c46001300000000000000000000000000000000000000000000000000004000000000000000000000"], 0x2b) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0x6) 17:24:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/4096) 17:24:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0xffffffffffffffff) clone(0x8010900, &(0x7f00009f4000), &(0x7f000078e000), &(0x7f000039f000), &(0x7f00001ea000)) 17:24:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=@setlink={0x28, 0x13, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x3001}]}]}, 0x28}, 0x1}, 0x0) 17:24:54 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x20000, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0xaa) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x208200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 17:24:54 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x1, 0x1400000000000000, &(0x7f0000000480)="e9"}) 17:24:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x54, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000001c0)}}}], 0x0, 0x0, &(0x7f0000000f4d)}) 17:24:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000001c0)=0x3, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000003880)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 'gre0\x00'}) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000000040)=@in={0x0, 0x0, @dev}, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/247}], 0x0, &(0x7f0000000280)=""/4096}}, {{&(0x7f0000001280)=@nfc, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001300)=""/50}, {&(0x7f0000001340)=""/78}, {&(0x7f00000013c0)=""/81}, {&(0x7f0000001440)=""/67}, {&(0x7f00000014c0)=""/62}, {&(0x7f0000001500)=""/188}, {&(0x7f00000015c0)=""/4096}], 0x96, &(0x7f0000002640)=""/56}}, {{&(0x7f0000002680)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x0, &(0x7f0000003700)=[{&(0x7f0000002700)=""/4096}], 0x0, &(0x7f0000003740)=""/30}}], 0x40000000000033b, 0x0, &(0x7f0000000000)={0x77359400}) 17:24:54 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000680)="295ed277a4200100360070") mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f00000001c0)) chdir(&(0x7f0000000780)='./file0\x00') open(&(0x7f0000000340)='..', 0x490003, 0x0) 17:24:54 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x1, 0x1400000000000000, &(0x7f0000000480)="e9"}) [ 573.434360] binder: 3857:3860 ioctl c0306201 20000440 returned -14 [ 573.446001] binder: BINDER_SET_CONTEXT_MGR already set [ 573.450580] sg_write: data in/out 4828/1 bytes for SCSI command 0x0-- guessing data in; 17:24:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000100)=@ethtool_eeprom={0x43}}) 17:24:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000001c0)=0x3, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000003880)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 'gre0\x00'}) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000000040)=@in={0x0, 0x0, @dev}, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/247}], 0x0, &(0x7f0000000280)=""/4096}}, {{&(0x7f0000001280)=@nfc, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001300)=""/50}, {&(0x7f0000001340)=""/78}, {&(0x7f00000013c0)=""/81}, {&(0x7f0000001440)=""/67}, {&(0x7f00000014c0)=""/62}, {&(0x7f0000001500)=""/188}, {&(0x7f00000015c0)=""/4096}], 0x96, &(0x7f0000002640)=""/56}}, {{&(0x7f0000002680)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x0, &(0x7f0000003700)=[{&(0x7f0000002700)=""/4096}], 0x0, &(0x7f0000003740)=""/30}}], 0x40000000000033b, 0x0, &(0x7f0000000000)={0x77359400}) 17:24:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0xffffffffffffffff) clone(0x8010900, &(0x7f00009f4000), &(0x7f000078e000), &(0x7f000039f000), &(0x7f00001ea000)) 17:24:54 executing program 7: r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00009d7000)=[{{&(0x7f0000000400)=@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000000000)}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x32) 17:24:54 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x1, 0x1400000000000000, &(0x7f0000000480)="e9"}) 17:24:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0xffffffffffffffff}, 0x2dd}, 0x1}, 0x0) [ 573.450580] program syz-executor7 not setting count and/or reply_len properly [ 573.495587] binder: 3861:3867 ioctl 40046207 0 returned -16 [ 573.498208] binder: send failed reply for transaction 459 to 3857:3860 17:24:54 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x15, &(0x7f0000000040), 0x4) 17:24:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000001c0)=0x3, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000003880)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 'gre0\x00'}) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000000040)=@in={0x0, 0x0, @dev}, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/247}], 0x0, &(0x7f0000000280)=""/4096}}, {{&(0x7f0000001280)=@nfc, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001300)=""/50}, {&(0x7f0000001340)=""/78}, {&(0x7f00000013c0)=""/81}, {&(0x7f0000001440)=""/67}, {&(0x7f00000014c0)=""/62}, {&(0x7f0000001500)=""/188}, {&(0x7f00000015c0)=""/4096}], 0x96, &(0x7f0000002640)=""/56}}, {{&(0x7f0000002680)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x0, &(0x7f0000003700)=[{&(0x7f0000002700)=""/4096}], 0x0, &(0x7f0000003740)=""/30}}], 0x40000000000033b, 0x0, &(0x7f0000000000)={0x77359400}) 17:24:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0xffffffffffffffff}, 0x2dd}, 0x1}, 0x0) 17:24:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 573.501471] binder: undelivered TRANSACTION_ERROR: 29189 [ 573.502119] binder: 3872:3874 ioctl c0306201 20000440 returned -14 [ 573.507291] binder: send failed reply for transaction 461 to 3872:3874 17:24:54 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x20000, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0xaa) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x208200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 17:24:54 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000180), 0x4) [ 573.507361] binder: undelivered TRANSACTION_ERROR: 29189 [ 573.541456] binder: 3885:3887 ioctl c0306201 20000440 returned -14 [ 573.564254] binder: send failed reply for transaction 463 to 3885:3887 [ 573.566146] binder: undelivered TRANSACTION_ERROR: 29189 [ 573.626442] binder: 3861:3867 Acquire 1 refcount change on invalid ref 0 ret -22 17:24:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x54, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000001c0)}}}], 0x0, 0x0, &(0x7f0000000f4d)}) 17:24:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0xffffffffffffffff) clone(0x8010900, &(0x7f00009f4000), &(0x7f000078e000), &(0x7f000039f000), &(0x7f00001ea000)) 17:24:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000001c0)=0x3, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000003880)={{0x2, 0x0, @multicast2=0xe0000002}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 'gre0\x00'}) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000000040)=@in={0x0, 0x0, @dev}, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/247}], 0x0, &(0x7f0000000280)=""/4096}}, {{&(0x7f0000001280)=@nfc, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001300)=""/50}, {&(0x7f0000001340)=""/78}, {&(0x7f00000013c0)=""/81}, {&(0x7f0000001440)=""/67}, {&(0x7f00000014c0)=""/62}, {&(0x7f0000001500)=""/188}, {&(0x7f00000015c0)=""/4096}], 0x96, &(0x7f0000002640)=""/56}}, {{&(0x7f0000002680)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x0, &(0x7f0000003700)=[{&(0x7f0000002700)=""/4096}], 0x0, &(0x7f0000003740)=""/30}}], 0x40000000000033b, 0x0, &(0x7f0000000000)={0x77359400}) 17:24:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0xffffffffffffffff}, 0x2dd}, 0x1}, 0x0) 17:24:54 executing program 7: nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000095e000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x39013) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000a26000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 17:24:54 executing program 5: r0 = syz_fuseblk_mount(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f00000005c0)) 17:24:54 executing program 6: r0 = socket$inet6(0xa, 0x2000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x3, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000280)=""/213, 0xd5, 0x0, &(0x7f0000000100)={0xa}, 0x701000) [ 573.637008] binder: 3861:3867 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 573.645579] binder: 3861:3867 transaction failed 29189/-22, size 0-0 line 3018 [ 573.655930] binder: 3861:3912 Acquire 1 refcount change on invalid ref 0 ret -22 [ 573.669409] binder: undelivered TRANSACTION_ERROR: 29189 17:24:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0xffffffffffffffff}, 0x2dd}, 0x1}, 0x0) 17:24:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311599e, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x10e, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04010000008b00ddb8460900ffb25b4802938207d9033780", 0x18, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x5, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 17:24:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0xffffffffffffffff) clone(0x8010900, &(0x7f00009f4000), &(0x7f000078e000), &(0x7f000039f000), &(0x7f00001ea000)) 17:24:54 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ptrace$getregs(0xe, r1, 0x0, &(0x7f0000000000)) 17:24:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x246) [ 573.706194] binder: 3927 invalid dec weak, ref 467 desc 0 s 1 w 0 [ 573.714274] binder: 3927:3930 got transaction to context manager from process owning it [ 573.731290] binder: 3927:3930 transaction failed 29201/-22, size 0-0 line 3009 17:24:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x54, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000001c0)}}}], 0x0, 0x0, &(0x7f0000000f4d)}) 17:24:54 executing program 2: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x2}, [{}, {0x3}]}, 0x78) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) [ 573.767624] binder: undelivered TRANSACTION_ERROR: 29201 17:24:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_getoverrun(0x0) 17:24:54 executing program 1: r0 = userfaultfd(0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") poll(&(0x7f00000002c0)=[{r0}, {r0}, {r1}], 0x3, 0x2) 17:24:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454da, 0xffffffffffffffff) [ 573.813587] binder: 3948 invalid dec weak, ref 470 desc 0 s 1 w 0 [ 573.831192] binder: 3948:3951 got transaction to context manager from process owning it [ 573.853221] binder: 3948:3951 transaction failed 29201/-22, size 0-0 line 3009 17:24:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x54, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000001c0)}}}], 0x0, 0x0, &(0x7f0000000f4d)}) 17:24:54 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") unshare(0x400) r1 = epoll_create(0x20) fcntl$notify(r1, 0x0, 0x284) 17:24:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) unlink(&(0x7f0000000040)='./bus\x00') ftruncate(r1, 0x0) [ 573.896441] binder: undelivered TRANSACTION_ERROR: 29201 [ 573.931101] binder: 3967 invalid dec weak, ref 473 desc 0 s 1 w 0 [ 573.942980] binder: 3967:3968 got transaction to context manager from process owning it [ 573.953568] binder: 3967:3968 transaction failed 29201/-22, size 0-0 line 3009 [ 573.974230] binder: undelivered TRANSACTION_ERROR: 29201 17:24:55 executing program 7: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, &(0x7f0000000780)='lo:&!wlan1{::\x00') 17:24:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fsync(0xffffffffffffffff) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') 17:24:55 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000001280)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x2042, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x47c9f0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) lseek(r2, 0x0, 0x3) 17:24:55 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x40046c, {0xffffffbfffbff270}}, &(0x7f0000000380), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/cgroup\x00') 17:24:55 executing program 0: lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="b106821f73656375726974792e696d6100"], &(0x7f0000000280)=""/75, 0x4b) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x400) pkey_alloc(0x0, 0x40) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000001c0)) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 17:24:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) unlink(&(0x7f0000000040)='./bus\x00') ftruncate(r1, 0x0) 17:24:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311599e, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x10e, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04010000008b00ddb8460900ffb25b4802938207d9033780", 0x18, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x5, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 17:24:55 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) unlink(&(0x7f0000000040)='./bus\x00') ftruncate(r1, 0x0) 17:24:55 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x1000)=nil, 0x1000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff8000/0x4000)=nil, 0x4000}, 0x1}) 17:24:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) unlink(&(0x7f0000000040)='./bus\x00') ftruncate(r1, 0x0) 17:24:55 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) unlink(&(0x7f0000000040)='./bus\x00') ftruncate(r1, 0x0) 17:24:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fsync(0xffffffffffffffff) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') 17:24:55 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x1000)=nil, 0x1000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff8000/0x4000)=nil, 0x4000}, 0x1}) 17:24:55 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x40046c, {0xffffffbfffbff270}}, &(0x7f0000000380), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/cgroup\x00') 17:24:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) unlink(&(0x7f0000000040)='./bus\x00') ftruncate(r1, 0x0) 17:24:55 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) unlink(&(0x7f0000000040)='./bus\x00') ftruncate(r1, 0x0) 17:24:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fsync(0xffffffffffffffff) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') 17:24:55 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x40046c, {0xffffffbfffbff270}}, &(0x7f0000000380), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/cgroup\x00') 17:24:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') write$cgroup_pid(r0, &(0x7f0000000000)={[0x37, 0x38, 0x34, 0x33, 0x35, 0x31, 0x33, 0x38, 0x36, 0x32]}, 0xa) 17:24:56 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x1000)=nil, 0x1000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff8000/0x4000)=nil, 0x4000}, 0x1}) 17:24:56 executing program 0: lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="b106821f73656375726974792e696d6100"], &(0x7f0000000280)=""/75, 0x4b) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x400) pkey_alloc(0x0, 0x40) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000001c0)) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 17:24:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fsync(0xffffffffffffffff) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') 17:24:56 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0047fc") chroot(&(0x7f0000000600)='./file0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080), 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80}}, 0x14) r0 = socket(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000580)="0d58ff3236d9320d302ddbe038ea1d77ad2c2490255086ca7a7108edfb691be295bafdbb99531d9e050000deebc95377c3248fae65a1230ebfbfd6584945011502afc48e6af897288c64bc3d859700fae199764d126f69e4b2b5bc92a6d7b79af3fb8e470e", 0x65, 0x7, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffffffffff8, @loopback={0x0, 0x8}}, 0x1c) sendfile(r0, r0, &(0x7f0000000140), 0x7f) keyctl$session_to_parent(0x12) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000040)="0009e0ffffffffffffff05000000000400000000", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fallocate(r1, 0x11, 0x0, 0x100000001) 17:24:56 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000001280)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x2042, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x47c9f0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) lseek(r2, 0x0, 0x3) 17:24:56 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x40046c, {0xffffffbfffbff270}}, &(0x7f0000000380), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/cgroup\x00') 17:24:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x1000005) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)) write$evdev(r1, &(0x7f0000000240)=[{{0x0, 0x7530}, 0x0, 0x1}], 0x3de) 17:24:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311599e, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x10e, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04010000008b00ddb8460900ffb25b4802938207d9033780", 0x18, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x5, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 17:24:56 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x1000)=nil, 0x1000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff8000/0x4000)=nil, 0x4000}, 0x1}) 17:24:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, 0x0, [{r1}, {r0}, {r1}]}) 17:24:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = gettid() select(0xb, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000480), &(0x7f0000000180)={0x77359400}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 17:24:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents(r1, &(0x7f0000000380)=""/198, 0xc6) 17:24:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, 0x0, [{r1}, {r0}, {r1}]}) 17:24:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f0000000100)=""/4096, 0xffffffff00000018) 17:24:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x1000005) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)) write$evdev(r1, &(0x7f0000000240)=[{{0x0, 0x7530}, 0x0, 0x1}], 0x3de) 17:24:56 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) lseek(r1, 0x40000, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) write(r0, &(0x7f00000000c0)="96b8ac833c577b", 0x7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x401004000000016) 17:24:56 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x2000400) flistxattr(r0, &(0x7f0000000000), 0x0) 17:24:56 executing program 0: lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="b106821f73656375726974792e696d6100"], &(0x7f0000000280)=""/75, 0x4b) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x400) pkey_alloc(0x0, 0x40) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000001c0)) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 17:24:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, 0x0, [{r1}, {r0}, {r1}]}) 17:24:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$sock_buf(r0, 0x1, 0x200400000000001, &(0x7f0000b56f40)=""/192, &(0x7f0000000000)=0xc0) 17:24:56 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000001280)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x2042, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x47c9f0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) lseek(r2, 0x0, 0x3) 17:24:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x1000005) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)) write$evdev(r1, &(0x7f0000000240)=[{{0x0, 0x7530}, 0x0, 0x1}], 0x3de) 17:24:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, 0x0, [{r1}, {r0}, {r1}]}) 17:24:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 17:24:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311599e, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x10e, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04010000008b00ddb8460900ffb25b4802938207d9033780", 0x18, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x5, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 17:24:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$intptr(0x2000000002, 0xa07000) 17:24:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x208000) close(r1) [ 575.486675] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 17:24:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = gettid() select(0xb, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000480), &(0x7f0000000180)={0x77359400}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 17:24:57 executing program 7: r0 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000001000)="ac", 0x1, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f0000000140)=""/4, 0x4) 17:24:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r1, 0x406855c9, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil}) 17:24:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x1000005) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)) write$evdev(r1, &(0x7f0000000240)=[{{0x0, 0x7530}, 0x0, 0x1}], 0x3de) 17:24:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) lseek(r1, 0x40000, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) write(r0, &(0x7f00000000c0)="96b8ac833c577b", 0x7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x401004000000016) 17:24:57 executing program 5: pipe(&(0x7f0000000040)) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x1fffffe, 0x8032, 0xffffffffffffffff, 0x0) 17:24:57 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000001280)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x2042, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x47c9f0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) lseek(r2, 0x0, 0x3) 17:24:57 executing program 0: lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="b106821f73656375726974792e696d6100"], &(0x7f0000000280)=""/75, 0x4b) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x400) pkey_alloc(0x0, 0x40) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000001c0)) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 17:24:57 executing program 7: r0 = socket(0x800000000000018, 0x0, 0x1000000000000001) connect(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2, {0xa}}}, 0x32) setsockopt(r0, 0x400000000000111, 0x1, &(0x7f0000000580)="4f4610cf", 0x4) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'bcsf0\x00'}) 17:24:57 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) ptrace$setregset(0x4209, r1, 0x100000021000004, &(0x7f0000000140)={&(0x7f0000000040), 0x305}) 17:24:57 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendfile(r0, r1, &(0x7f0000000040), 0x88001) 17:24:57 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) lseek(r1, 0x40000, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) write(r0, &(0x7f00000000c0)="96b8ac833c577b", 0x7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x401004000000016) 17:24:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0xffffff7f}}, 0x1c}, 0x1}, 0x0) 17:24:57 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) ptrace$setregset(0x4209, r1, 0x100000021000004, &(0x7f0000000140)={&(0x7f0000000040), 0x305}) 17:24:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0xffffff7f}}, 0x1c}, 0x1}, 0x0) 17:24:57 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) ptrace$setregset(0x4209, r1, 0x100000021000004, &(0x7f0000000140)={&(0x7f0000000040), 0x305}) 17:24:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = gettid() select(0xb, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000480), &(0x7f0000000180)={0x77359400}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 17:24:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @loopback=0x7f000001}}) 17:24:57 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) ptrace$setregset(0x4209, r1, 0x100000021000004, &(0x7f0000000140)={&(0x7f0000000040), 0x305}) 17:24:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0xffffff7f}}, 0x1c}, 0x1}, 0x0) 17:24:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) lseek(r1, 0x40000, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) write(r0, &(0x7f00000000c0)="96b8ac833c577b", 0x7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x401004000000016) 17:24:58 executing program 0: rt_sigpending(&(0x7f0000000140), 0xffffffffffffffc9) 17:24:58 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [{0x20}, {0x20}, {0x20, '&'}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '*sem0'}, {0x20, '\x00'}], 0xa, "180e22511ec2b809160d9462246837f938cc1a65472b60c043f244fe893021a99e639d895e00000e1d3576530137bbc5267ed4b40f4c299de425ef3136e54ff155426f234ae3a5314ff9c330ee604e5bda4d030430720af03038ae01e14e6509"}, 0x7f) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 17:24:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x3f8, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r1, 0x1) 17:24:58 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f00003ee000/0x4000)=nil, 0x4000}) 17:24:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0xffffff7f}}, 0x1c}, 0x1}, 0x0) 17:24:58 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000008000/0x1000)=nil) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 17:24:58 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) lseek(r1, 0x40000, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) write(r0, &(0x7f00000000c0)="96b8ac833c577b", 0x7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x401004000000016) 17:24:58 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x6, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x2c00, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 17:24:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000680)}}, {{&(0x7f0000000d40)=@generic={0xa, "a7c42a4da932595f64b39ef589ddd60e681cc1420e345d9fb21451b5dcea43fcd744a23a377c6ae4bb663f31a2fd795d9a0ba5fa6777dc30e8726b487cfdb6e5849063ce30aa610834c5b498f3bb739f58dbae8f1fed21b3964528ea32aedb173f29e18e00e5efd5959f10351591532e220e4a0d1c084824c2750d94f323"}, 0x80, &(0x7f0000002180)}}], 0x2, 0x0) 17:24:58 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) lseek(r1, 0x40000, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r4, 0x401004000000016) 17:24:58 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) 17:24:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = gettid() select(0xb, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000480), &(0x7f0000000180)={0x77359400}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 17:24:58 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) 17:24:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000680)}}, {{&(0x7f0000000d40)=@generic={0xa, "a7c42a4da932595f64b39ef589ddd60e681cc1420e345d9fb21451b5dcea43fcd744a23a377c6ae4bb663f31a2fd795d9a0ba5fa6777dc30e8726b487cfdb6e5849063ce30aa610834c5b498f3bb739f58dbae8f1fed21b3964528ea32aedb173f29e18e00e5efd5959f10351591532e220e4a0d1c084824c2750d94f323"}, 0x80, &(0x7f0000002180)}}], 0x2, 0x0) 17:24:58 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) 17:24:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) lseek(r1, 0x40000, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) write(r0, &(0x7f00000000c0)="96b8ac833c577b", 0x7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x401004000000016) 17:24:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000680)}}, {{&(0x7f0000000d40)=@generic={0xa, "a7c42a4da932595f64b39ef589ddd60e681cc1420e345d9fb21451b5dcea43fcd744a23a377c6ae4bb663f31a2fd795d9a0ba5fa6777dc30e8726b487cfdb6e5849063ce30aa610834c5b498f3bb739f58dbae8f1fed21b3964528ea32aedb173f29e18e00e5efd5959f10351591532e220e4a0d1c084824c2750d94f323"}, 0x80, &(0x7f0000002180)}}], 0x2, 0x0) 17:24:58 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) 17:24:58 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) 17:24:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x3f8, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r1, 0x1) 17:24:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000680)}}, {{&(0x7f0000000d40)=@generic={0xa, "a7c42a4da932595f64b39ef589ddd60e681cc1420e345d9fb21451b5dcea43fcd744a23a377c6ae4bb663f31a2fd795d9a0ba5fa6777dc30e8726b487cfdb6e5849063ce30aa610834c5b498f3bb739f58dbae8f1fed21b3964528ea32aedb173f29e18e00e5efd5959f10351591532e220e4a0d1c084824c2750d94f323"}, 0x80, &(0x7f0000002180)}}], 0x2, 0x0) 17:24:59 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) 17:24:59 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) 17:24:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)=ANY=[]) 17:24:59 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) lseek(r1, 0x40000, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r4, 0x401004000000016) 17:24:59 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) lseek(r1, 0x40000, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) write(r0, &(0x7f00000000c0)="96b8ac833c577b", 0x7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x401004000000016) 17:24:59 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) 17:24:59 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) 17:24:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0xf, &(0x7f0000b56f40)=""/192, &(0x7f0000000000)=0x141) 17:24:59 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) 17:24:59 executing program 2: r0 = memfd_create(&(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1'}, 0x4) setrlimit(0x7, &(0x7f0000000080)) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 17:24:59 executing program 2: syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2000400) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 17:24:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0xf, &(0x7f0000b56f40)=""/192, &(0x7f0000000000)=0x141) 17:24:59 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) 17:24:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clock_gettime(0x9, &(0x7f00000000c0)) 17:24:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x3f8, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r1, 0x1) 17:24:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 17:24:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0xf, &(0x7f0000b56f40)=""/192, &(0x7f0000000000)=0x141) 17:24:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000049c0)=[{0x30, 0x0, 0x7, "131ceccd8d3892f1abe2d869cbd26c5ff4140e6522cfba15681528847a30"}], 0x30}}], 0x2, 0x0) 17:25:00 executing program 3: r0 = userfaultfd(0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) fcntl$getownex(r0, 0x10, &(0x7f0000000980)) 17:25:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0xf, &(0x7f0000b56f40)=""/192, &(0x7f0000000000)=0x141) 17:25:00 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) lseek(r1, 0x40000, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r4, 0x401004000000016) 17:25:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000340)="0401000000c000ddb8460400ffb25b4202938207d9fb3780398d5375c5f73f939029298d7535352cd5a1f57590080053c0e385672da722a59a7a033b970720a42f2a2bb404e156ce2da6c538d24c10d6afcc2f2dbd96ff9cebb47f3941258f2ad5a94e55", 0x64, 0x0, &(0x7f00000003c0)={0xa, 0x4000200000800, 0x20000000006, @dev={0xfe, 0x80}}, 0x1c) 17:25:00 executing program 6: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000010001900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) 17:25:00 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004001) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4134e475824fbfaeefb278580e4aedd886c0b629cd32c56ebff94329c3a32a4b8c171676b94083085709923fd77ead8ca0073183b09c62b90673944ded2f276e", "49710f29a576931228cd8c92a1b9375555874f087c556b616155647a2732f399"}) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000140), 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000080)) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000500)={'filter\x00'}, &(0x7f0000000180)=0x24) pipe(&(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000040)) 17:25:00 executing program 3: r0 = userfaultfd(0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) fcntl$getownex(r0, 0x10, &(0x7f0000000980)) 17:25:00 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0xf002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 17:25:00 executing program 0: fanotify_mark(0xffffffffffffffff, 0xc0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') 17:25:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt(r0, 0x1, 0x5, &(0x7f0000000200)=""/162, &(0x7f00000002c0)=0xa2) 17:25:00 executing program 2: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) sendfile(r0, r0, 0x0, 0x9) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xddb, 0x105082) memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x9) 17:25:00 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x823}, 0x14}, 0x1}, 0x0) [ 579.046495] device lo left promiscuous mode 17:25:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x3f8, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r1, 0x1) 17:25:00 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) tkill(r1, 0x15) fstatfs(0xffffffffffffffff, &(0x7f0000000080)=""/88) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 17:25:00 executing program 3: r0 = userfaultfd(0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) fcntl$getownex(r0, 0x10, &(0x7f0000000980)) 17:25:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 17:25:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clock_gettime(0xfffffffffffffff0, &(0x7f00000000c0)) 17:25:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000180)=0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet6(0xa, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 17:25:00 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x80000000000002, 0x8003, 0x400000000000, 0xfffffffffffffffd}) syz_extract_tcp_res(&(0x7f0000000140), 0x0, 0xffffffff) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x0, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, {0xf, 0xb}, {0x0, 0xfff7}, {0x1, 0xfff3}}, [""]}, 0x24}, 0x1}, 0x2004c004) 17:25:00 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0xf002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 17:25:00 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) lseek(r1, 0x40000, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r4, 0x401004000000016) 17:25:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0xf002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 17:25:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clock_gettime(0xfffffffffffffff0, &(0x7f00000000c0)) 17:25:00 executing program 3: r0 = userfaultfd(0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) fcntl$getownex(r0, 0x10, &(0x7f0000000980)) 17:25:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000180)=0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet6(0xa, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 17:25:00 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 17:25:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clock_gettime(0xfffffffffffffff0, &(0x7f00000000c0)) [ 579.887124] device lo left promiscuous mode 17:25:01 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x80000000000002, 0x8003, 0x400000000000, 0xfffffffffffffffd}) syz_extract_tcp_res(&(0x7f0000000140), 0x0, 0xffffffff) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x0, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, {0xf, 0xb}, {0x0, 0xfff7}, {0x1, 0xfff3}}, [""]}, 0x24}, 0x1}, 0x2004c004) 17:25:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) clock_gettime(0xfffffffffffffff0, &(0x7f00000000c0)) 17:25:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000180)=0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet6(0xa, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 17:25:01 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0xf002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 17:25:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0xf002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 17:25:01 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x80000000000002, 0x8003, 0x400000000000, 0xfffffffffffffffd}) syz_extract_tcp_res(&(0x7f0000000140), 0x0, 0xffffffff) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x0, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, {0xf, 0xb}, {0x0, 0xfff7}, {0x1, 0xfff3}}, [""]}, 0x24}, 0x1}, 0x2004c004) 17:25:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001fc0)={&(0x7f0000000ac0)={0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000000000)={0x14, 0x13, 0x301, 0x0, 0x0, {0x9}}, 0x1dd}, 0x1}, 0x0) 17:25:01 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000100)=0x3, 0x4) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read(r2, &(0x7f0000000180)=""/230, 0xff4e) 17:25:01 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x80000000000002, 0x8003, 0x400000000000, 0xfffffffffffffffd}) syz_extract_tcp_res(&(0x7f0000000140), 0x0, 0xffffffff) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x0, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, {0xf, 0xb}, {0x0, 0xfff7}, {0x1, 0xfff3}}, [""]}, 0x24}, 0x1}, 0x2004c004) [ 580.513448] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:25:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) recvmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000007540)}}], 0x1, 0x2, &(0x7f0000007880)) 17:25:01 executing program 5: mknod(&(0x7f0000000200)='./file0\x00', 0x1040, 0x0) r0 = gettid() open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) tkill(r0, 0x15) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 17:25:01 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000100)=0x3, 0x4) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read(r2, &(0x7f0000000180)=""/230, 0xff4e) 17:25:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000180)=0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet6(0xa, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 17:25:01 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0xf002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 17:25:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000010107041dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c824392986ad06b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 17:25:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0xf002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 17:25:01 executing program 0: r0 = epoll_create(0x5) r1 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf8ff4)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000100)=""/4096}, &(0x7f0000001100)="44be86ddbaef", &(0x7f0000001200)=""/190, 0x0, 0x0, 0x0, &(0x7f00000012c0)}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 580.760713] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:25:01 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000100)=0x3, 0x4) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read(r2, &(0x7f0000000180)=""/230, 0xff4e) 17:25:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 17:25:01 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) unshare(0x40000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1, 0x1000, 0x1f}, 0xc) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)={'nat\x00'}, &(0x7f0000000080)=0x54) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000400)={0x0, 0x7a, "1868ea988ab6b2a2f231366e63000c6cfce8897652d924a34cd2ad3e222ca94850bfcf92aebe6c3c3bda569a332003f7c48809eb98c59060f1a8b1a05d7b381b755a6059a67b41bf52fd40a3d754a5b26950e62ac074717edd720705b24cbd27302b3617da8e053e6f8abc157d9b841a89cf2c30af2c7a5754ed"}) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=@srh={0x6, 0x6, 0x4, 0x3, 0x4, 0x20, 0x6, [@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x38) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, {0x2}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @broadcast=0xffffffff}, 0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='ipddp0\x00', 0x0, 0x7ff}) 17:25:01 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000100)=0x3, 0x4) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read(r2, &(0x7f0000000180)=""/230, 0xff4e) [ 580.848139] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 580.910723] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 580.944206] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 17:25:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 17:25:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") arch_prctl(0x1003, &(0x7f0000000180)="85f2750cbcfd525554a54f3859ebb2562014d4d38bc6e5134b7a4be9dfabd9f820cc899edc2b289e7b331dfb634ac2289fcd64f8b8c7728b5f5c9b7bcbebbc0a17d5725c005a05603c848f2efa8725edda71306ef57117e150b232d70998205a124ac230c95baa45a3b3f7efdc6a986f4c91fd4322ecfdc2430974de7f041e68e1d96d68126c926233f6458c58537d228c3fd2c75d04ad9165a1e8744c1a711137a086ca22634e036414f57577237371c8b3b2d54b4249b5235c11bf44dd94cd83fb9a3c0a04e2fcdec5") unshare(0x2000400) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x4, 0x0, &(0x7f0000000340)="cfb78cca"}) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000001380)) ioctl(r2, 0x4000008912, &(0x7f0000000080)="29d7e1311f160577651070") clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0xc0145401, &(0x7f0000000340)=""/4096) r3 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control\x00', 0x444002, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f00000002c0)=""/42) bind(r3, &(0x7f00000013c0)=@un=@file={0x0, './file0\x00'}, 0x80) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000300)=""/20) r4 = memfd_create(&(0x7f0000000080)='ppp0\x00', 0x1) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000140)='comm\x00') r7 = dup2(r6, r4) execveat(r7, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 17:25:02 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x11f, 0xffe5) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x1, 0x7068a81a753b9b84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) [ 580.953956] binder: 4430:4433 got transaction with invalid offsets ptr [ 580.953984] binder: 4430:4433 transaction failed 29201/-14, size 0-12288 line 3169 [ 580.964066] binder_alloc: binder_alloc_mmap_handler: 4430 20002000-20006000 already mapped failed -16 [ 580.965275] binder: BINDER_SET_CONTEXT_MGR already set [ 580.965283] binder: 4430:4433 ioctl 40046207 0 returned -16 [ 580.968355] binder_alloc: 4430: binder_alloc_buf, no vma 17:25:02 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f00000000c0)=0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000180)="267a3dec6cd8b1b63d569587d51871dab9ff56744afb735eadffe85a18ea1bde7e", &(0x7f0000000300)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000240)}) 17:25:02 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f00000000c0)=0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000180)="267a3dec6cd8b1b63d569587d51871dab9ff56744afb735eadffe85a18ea1bde7e", &(0x7f0000000300)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000240)}) [ 580.968477] binder: 4430:4444 transaction failed 29189/-3, size 0-12288 line 3141 [ 580.969157] IPVS: Creating netns size=2536 id=145 [ 580.988978] binder: undelivered TRANSACTION_ERROR: 29189 [ 580.992974] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.028772] sd 0:0:1:0: [sg0] tag#363 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 581.028785] sd 0:0:1:0: [sg0] tag#363 CDB: opcode=0x26 [ 581.028798] sd 0:0:1:0: [sg0] tag#363 CDB[00]: 26 7a 3d ec 6c d8 b1 b6 3d 56 95 87 d5 18 71 da [ 581.028809] sd 0:0:1:0: [sg0] tag#363 CDB[10]: b9 ff 56 74 4a fb 73 5e ad ff e8 5a 18 ea 1b de [ 581.028823] sd 0:0:1:0: [sg0] tag#363 CDB[20]: 7e [ 581.029267] sd 0:0:1:0: [sg0] tag#363 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 581.029278] sd 0:0:1:0: [sg0] tag#363 CDB: opcode=0x26 [ 581.029290] sd 0:0:1:0: [sg0] tag#363 CDB[00]: 26 7a 3d ec 6c d8 b1 b6 3d 56 95 87 d5 18 71 da [ 581.029302] sd 0:0:1:0: [sg0] tag#363 CDB[10]: b9 ff 56 74 4a fb 73 5e ad ff e8 5a 18 ea 1b de [ 581.029311] sd 0:0:1:0: [sg0] tag#363 CDB[20]: 7e [ 581.040896] sd 0:0:1:0: [sg0] tag#363 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 581.040907] sd 0:0:1:0: [sg0] tag#363 CDB: opcode=0x26 [ 581.040920] sd 0:0:1:0: [sg0] tag#363 CDB[00]: 26 7a 3d ec 6c d8 b1 b6 3d 56 95 87 d5 18 71 da [ 581.040932] sd 0:0:1:0: [sg0] tag#363 CDB[10]: b9 ff 56 74 4a fb 73 5e ad ff e8 5a 18 ea 1b de [ 581.040943] sd 0:0:1:0: [sg0] tag#363 CDB[20]: 7e [ 581.194945] binder: 4447:4448 got transaction with invalid offsets ptr [ 581.208458] binder: 4447:4448 transaction failed 29201/-14, size 0-12288 line 3169 [ 581.228347] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.235589] IPVS: Creating netns size=2536 id=146 17:25:02 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) rt_sigqueueinfo(r1, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff9}) ptrace(0x4208, r1) 17:25:02 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f00000000c0)=0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000180)="267a3dec6cd8b1b63d569587d51871dab9ff56744afb735eadffe85a18ea1bde7e", &(0x7f0000000300)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000240)}) 17:25:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=@newspdinfo={0x24, 0x24, 0x1, 0x0, 0x0, 0x0, [@ipv6_hthresh={0x8, 0x4}, @ipv4_hthresh={0x8, 0x3}]}, 0x24}, 0x1}, 0x0) 17:25:02 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 17:25:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x2271, &(0x7f0000000000)) 17:25:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 17:25:02 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) unshare(0x40000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1, 0x1000, 0x1f}, 0xc) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)={'nat\x00'}, &(0x7f0000000080)=0x54) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000400)={0x0, 0x7a, "1868ea988ab6b2a2f231366e63000c6cfce8897652d924a34cd2ad3e222ca94850bfcf92aebe6c3c3bda569a332003f7c48809eb98c59060f1a8b1a05d7b381b755a6059a67b41bf52fd40a3d754a5b26950e62ac074717edd720705b24cbd27302b3617da8e053e6f8abc157d9b841a89cf2c30af2c7a5754ed"}) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=@srh={0x6, 0x6, 0x4, 0x3, 0x4, 0x20, 0x6, [@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x38) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, {0x2}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @broadcast=0xffffffff}, 0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='ipddp0\x00', 0x0, 0x7ff}) 17:25:02 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) unshare(0x40000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1, 0x1000, 0x1f}, 0xc) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)={'nat\x00'}, &(0x7f0000000080)=0x54) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000400)={0x0, 0x7a, "1868ea988ab6b2a2f231366e63000c6cfce8897652d924a34cd2ad3e222ca94850bfcf92aebe6c3c3bda569a332003f7c48809eb98c59060f1a8b1a05d7b381b755a6059a67b41bf52fd40a3d754a5b26950e62ac074717edd720705b24cbd27302b3617da8e053e6f8abc157d9b841a89cf2c30af2c7a5754ed"}) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=@srh={0x6, 0x6, 0x4, 0x3, 0x4, 0x20, 0x6, [@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x38) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, {0x2}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @broadcast=0xffffffff}, 0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='ipddp0\x00', 0x0, 0x7ff}) 17:25:02 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 17:25:02 executing program 6: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x100000009, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040)=0x2, 0x4) [ 581.626793] sd 0:0:1:0: [sg0] tag#274 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 581.635482] sd 0:0:1:0: [sg0] tag#274 CDB: opcode=0x26 [ 581.640857] sd 0:0:1:0: [sg0] tag#274 CDB[00]: 26 7a 3d ec 6c d8 b1 b6 3d 56 95 87 d5 18 71 da [ 581.649778] sd 0:0:1:0: [sg0] tag#274 CDB[10]: b9 ff 56 74 4a fb 73 5e ad ff e8 5a 18 ea 1b de [ 581.658654] sd 0:0:1:0: [sg0] tag#274 CDB[20]: 7e 17:25:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unlinkat(0xffffffffffffffff, &(0x7f000057d000)='./file0\x00', 0x1fc) 17:25:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/11, 0xb) r2 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r2, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f0000000200)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents(r3, &(0x7f0000000080)=""/103, 0x67) exit(0x0) getdents(r3, &(0x7f0000000100)=""/181, 0x20) 17:25:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x2271, &(0x7f0000000000)) [ 581.678827] binder: 4475:4484 got transaction with invalid offsets ptr [ 581.690009] binder: 4475:4484 transaction failed 29201/-14, size 0-12288 line 3169 17:25:02 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f00000000c0)=0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000180)="267a3dec6cd8b1b63d569587d51871dab9ff56744afb735eadffe85a18ea1bde7e", &(0x7f0000000300)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000240)}) 17:25:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) getsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000004000), &(0x7f0000000040)=0x71) 17:25:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 17:25:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x2271, &(0x7f0000000000)) [ 581.731141] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.761843] sd 0:0:1:0: [sg0] tag#274 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 581.762410] binder: 4513:4514 got transaction with invalid offsets ptr 17:25:02 executing program 6: setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000100)={0x0, @multicast2=0xe0000002, 0x0, 0x5, 'fo\x00', 0x0, 0x101}, 0x29e) setrlimit(0x7, &(0x7f0000a9cff8)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17:25:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x2271, &(0x7f0000000000)) 17:25:02 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000180)="94", 0x1}, {&(0x7f0000000240)}, {&(0x7f0000000380)="ec", 0x1}], 0x3, 0x0) 17:25:02 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)="01034d") r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x51000}]}) syz_open_procfs(0x0, &(0x7f0000000200)='schedstat\x00') [ 581.762478] binder: 4513:4514 transaction failed 29201/-14, size 0-12288 line 3169 [ 581.785240] sd 0:0:1:0: [sg0] tag#274 CDB: opcode=0x26 [ 581.790553] sd 0:0:1:0: [sg0] tag#274 CDB[00]: 26 7a 3d ec 6c d8 b1 b6 3d 56 95 87 d5 18 71 da [ 581.790629] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.804761] sd 0:0:1:0: [sg0] tag#274 CDB[10]: b9 ff 56 74 4a fb 73 5e ad ff e8 5a 18 ea 1b de [ 581.813549] sd 0:0:1:0: [sg0] tag#274 CDB[20]: 7e 17:25:02 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) write$selinux_access(r1, &(0x7f00000000c0)={'system_u:object_r:crontab_exec_t:s0', 0x20, 'unconfined', 0x20, 0x37}, 0x32) [ 581.958909] IPVS: Creating netns size=2536 id=147 17:25:03 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) unshare(0x40000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1, 0x1000, 0x1f}, 0xc) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)={'nat\x00'}, &(0x7f0000000080)=0x54) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000400)={0x0, 0x7a, "1868ea988ab6b2a2f231366e63000c6cfce8897652d924a34cd2ad3e222ca94850bfcf92aebe6c3c3bda569a332003f7c48809eb98c59060f1a8b1a05d7b381b755a6059a67b41bf52fd40a3d754a5b26950e62ac074717edd720705b24cbd27302b3617da8e053e6f8abc157d9b841a89cf2c30af2c7a5754ed"}) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=@srh={0x6, 0x6, 0x4, 0x3, 0x4, 0x20, 0x6, [@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x38) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, {0x2}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @broadcast=0xffffffff}, 0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='ipddp0\x00', 0x0, 0x7ff}) 17:25:03 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) unshare(0x40000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1, 0x1000, 0x1f}, 0xc) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)={'nat\x00'}, &(0x7f0000000080)=0x54) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000400)={0x0, 0x7a, "1868ea988ab6b2a2f231366e63000c6cfce8897652d924a34cd2ad3e222ca94850bfcf92aebe6c3c3bda569a332003f7c48809eb98c59060f1a8b1a05d7b381b755a6059a67b41bf52fd40a3d754a5b26950e62ac074717edd720705b24cbd27302b3617da8e053e6f8abc157d9b841a89cf2c30af2c7a5754ed"}) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=@srh={0x6, 0x6, 0x4, 0x3, 0x4, 0x20, 0x6, [@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x38) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, {0x2}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @broadcast=0xffffffff}, 0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='ipddp0\x00', 0x0, 0x7ff}) 17:25:03 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={"73797a5f74756e00000000000000e8ff", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@newneigh={0x30, 0x1c, 0x38f163091dab26e7, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @local={0xfe, 0x80, [], 0xaa}}]}, 0x30}, 0x1}, 0x0) 17:25:03 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback={0x0, 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x80}, 0x1}, 0x0) 17:25:03 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/149, 0x95) [ 581.987032] IPVS: Creating netns size=2536 id=148 [ 582.796564] IPVS: Creating netns size=2536 id=149 [ 582.810888] IPVS: Creating netns size=2536 id=150 17:25:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x8040, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000340)) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x42) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="07017f0727000000c103000083c8000041020020af627cf97ecad5d6ed1a34f3d2a9ae1859120cfb7a6561ec6b84a1fd923bece02dbfeaeaa2dfa2170dfb36b7b59144354efa09688bd9b9b9fd81e6a1e9"], 0x51) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x1, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) getsockname$packet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@multicast2=0xe0000002, @rand_addr, r4}, 0xc) vmsplice(r2, &(0x7f0000000280), 0x0, 0xc) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffef06, 0xdc, 0x9}) 17:25:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = open(&(0x7f0000000080)='./bus\x00', 0x8000400141042, 0x0) personality(0xe43b847ef4ff6b96) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r1, 0x0) 17:25:03 executing program 5: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000080)={0x0, 0x4}) 17:25:03 executing program 6: r0 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$revoke(0x3, r1) keyctl$read(0xb, r1, &(0x7f0000000000)=""/13, 0xd) 17:25:03 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_deladdr={0x34, 0x15, 0x703, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x5}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x0, 0x0, 0x2ee3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40408d0) 17:25:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000000c0)={{0x4}, 'port1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 17:25:03 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) unshare(0x40000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1, 0x1000, 0x1f}, 0xc) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)={'nat\x00'}, &(0x7f0000000080)=0x54) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000400)={0x0, 0x7a, "1868ea988ab6b2a2f231366e63000c6cfce8897652d924a34cd2ad3e222ca94850bfcf92aebe6c3c3bda569a332003f7c48809eb98c59060f1a8b1a05d7b381b755a6059a67b41bf52fd40a3d754a5b26950e62ac074717edd720705b24cbd27302b3617da8e053e6f8abc157d9b841a89cf2c30af2c7a5754ed"}) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=@srh={0x6, 0x6, 0x4, 0x3, 0x4, 0x20, 0x6, [@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x38) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, {0x2}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @broadcast=0xffffffff}, 0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='ipddp0\x00', 0x0, 0x7ff}) 17:25:03 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) unshare(0x40000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x1, 0x1000, 0x1f}, 0xc) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)={'nat\x00'}, &(0x7f0000000080)=0x54) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000400)={0x0, 0x7a, "1868ea988ab6b2a2f231366e63000c6cfce8897652d924a34cd2ad3e222ca94850bfcf92aebe6c3c3bda569a332003f7c48809eb98c59060f1a8b1a05d7b381b755a6059a67b41bf52fd40a3d754a5b26950e62ac074717edd720705b24cbd27302b3617da8e053e6f8abc157d9b841a89cf2c30af2c7a5754ed"}) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=@srh={0x6, 0x6, 0x4, 0x3, 0x4, 0x20, 0x6, [@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x38) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, {0x2}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @broadcast=0xffffffff}, 0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='ipddp0\x00', 0x0, 0x7ff}) 17:25:03 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 17:25:03 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0, &(0x7f0000000100), 0x8) 17:25:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d24e3a398312bdf693f1710d2f0b47f0b028b0b01eddf5a4772a036bcae45f4be37903efc3111bb37c647ff7f7d862cdda9c2bf349e0626f4d468ac1ef7769"}, 0x20) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000040)={'tunl0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 17:25:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x0, [{{0x2, 0x0, @rand_addr}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}, {{0x2, 0x0, @broadcast=0xffffffff}}, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @rand_addr}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}, {{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}]}, 0xff64) 17:25:04 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0, &(0x7f0000000100), 0x8) 17:25:04 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x3, &(0x7f000000a000)) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 17:25:04 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 17:25:04 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 17:25:05 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0, &(0x7f0000000100), 0x8) 17:25:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x8, 0x2}, 0x10}, 0x1}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 17:25:05 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 17:25:05 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x3, &(0x7f000000a000)) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 17:25:05 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r2, &(0x7f0000000080), 0xfffffe5e) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000040), 0x80000001) ftruncate(r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.evm\x00') ioctl(r0, 0x4000008912, &(0x7f0000000100)="295e273b5abcf477671070") 17:25:05 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) [ 584.060392] pktgen: kernel_thread() failed for cpu 0 [ 584.066560] pktgen: Cannot create thread for cpu 0 (-4) [ 584.076010] pktgen: kernel_thread() failed for cpu 1 [ 584.084620] pktgen: Cannot create thread for cpu 1 (-4) [ 584.090242] pktgen: Initialization failed for all threads 17:25:05 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0, &(0x7f0000000100), 0x8) [ 584.260467] pktgen: kernel_thread() failed for cpu 0 [ 584.265687] pktgen: Cannot create thread for cpu 0 (-4) [ 584.273893] pktgen: kernel_thread() failed for cpu 1 [ 584.280885] pktgen: Cannot create thread for cpu 1 (-4) [ 584.286589] pktgen: Initialization failed for all threads 17:25:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) 17:25:05 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x3, &(0x7f000000a000)) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 17:25:05 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 17:25:05 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 17:25:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000003040)=[{{&(0x7f00000012c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}}, 0x80, &(0x7f00000001c0)}}, {{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80), 0x26e}}], 0x203, 0x0) 17:25:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clock_getres(0xfffffefffffffff1, &(0x7f0000000040)) 17:25:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x20011, r1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001540), 0x8, 0x0) 17:25:05 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x3, &(0x7f000000a000)) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 17:25:05 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) setns(r0, 0x0) 17:25:05 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000280)=0x4) 17:25:05 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="0501000005006e0000000000ffa2ada33f93820fd903378c39160aaacb57a80000061a80e19e33e3c2e7725f4a58611537a0be625ef7402810fadc5712f29508c008e265756fe5eb8f590e78ecfffc27d9e9aba5568a12840f2a38d18de194fbc420ec249784d63babc905000000000000000000000000000000", 0x7a, 0x0, &(0x7f0000000100)={0xa, 0x100200000800, 0x8000000000004, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) read(r1, &(0x7f0000000240)=""/199, 0xc7) 17:25:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clock_getres(0xfffffefffffffff1, &(0x7f0000000040)) 17:25:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000003040)=[{{&(0x7f00000012c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}}, 0x80, &(0x7f00000001c0)}}, {{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80), 0x26e}}], 0x203, 0x0) 17:25:06 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ed277a4200100360070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000009c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x80000, &(0x7f0000000900)) mount(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000700)='fuse\x00', 0x9000, 0x0) mount(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='.', &(0x7f00000002c0)='mslos\x00', 0x3002480, &(0x7f0000000700)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 17:25:06 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="0501000005006e0000000000ffa2ada33f93820fd903378c39160aaacb57a80000061a80e19e33e3c2e7725f4a58611537a0be625ef7402810fadc5712f29508c008e265756fe5eb8f590e78ecfffc27d9e9aba5568a12840f2a38d18de194fbc420ec249784d63babc905000000000000000000000000000000", 0x7a, 0x0, &(0x7f0000000100)={0xa, 0x100200000800, 0x8000000000004, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) read(r1, &(0x7f0000000240)=""/199, 0xc7) 17:25:06 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) 17:25:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_newrule={0x5c, 0x20, 0x80d, 0x0, 0x0, {0xa, 0x30, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80}}, @FRA_DST={0x14, 0x1, @mcast1={0xff, 0x1, [], 0x1}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80}}]}, 0x5c}, 0x1}, 0x0) 17:25:06 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clock_getres(0xfffffefffffffff1, &(0x7f0000000040)) 17:25:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r2, &(0x7f0000000080), 0xfffffe5e) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000040), 0x80000001) ftruncate(r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.evm\x00') ioctl(r0, 0x4000008912, &(0x7f0000000100)="295e273b5abcf477671070") 17:25:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_SIOCGIFBR(r0, 0x8983, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000000)='syzkaller1\x00'}) 17:25:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000003040)=[{{&(0x7f00000012c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}}, 0x80, &(0x7f00000001c0)}}, {{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80), 0x26e}}], 0x203, 0x0) 17:25:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r2, &(0x7f0000000080), 0xfffffe5e) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000040), 0x80000001) ftruncate(r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.evm\x00') ioctl(r0, 0x4000008912, &(0x7f0000000100)="295e273b5abcf477671070") 17:25:06 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clock_getres(0xfffffefffffffff1, &(0x7f0000000040)) 17:25:06 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="0501000005006e0000000000ffa2ada33f93820fd903378c39160aaacb57a80000061a80e19e33e3c2e7725f4a58611537a0be625ef7402810fadc5712f29508c008e265756fe5eb8f590e78ecfffc27d9e9aba5568a12840f2a38d18de194fbc420ec249784d63babc905000000000000000000000000000000", 0x7a, 0x0, &(0x7f0000000100)={0xa, 0x100200000800, 0x8000000000004, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) read(r1, &(0x7f0000000240)=""/199, 0xc7) 17:25:06 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) set_robust_list(&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x2b8, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000200)=0xfffffffffffffffa) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1=0xe0000001}}, 0x0, 0x3, [{{0x2, 0x0, @broadcast=0xffffffff}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}, {{0x2, 0x0, @loopback=0x7f000001}}]}, 0x210) 17:25:06 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x6, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0xfe56) 17:25:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000003040)=[{{&(0x7f00000012c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}}, 0x80, &(0x7f00000001c0)}}, {{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80), 0x26e}}], 0x203, 0x0) 17:25:06 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x18, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xbb}}, 0x1) 17:25:06 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="0501000005006e0000000000ffa2ada33f93820fd903378c39160aaacb57a80000061a80e19e33e3c2e7725f4a58611537a0be625ef7402810fadc5712f29508c008e265756fe5eb8f590e78ecfffc27d9e9aba5568a12840f2a38d18de194fbc420ec249784d63babc905000000000000000000000000000000", 0x7a, 0x0, &(0x7f0000000100)={0xa, 0x100200000800, 0x8000000000004, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) read(r1, &(0x7f0000000240)=""/199, 0xc7) 17:25:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x2) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000080)=0x80000000004) [ 585.177481] blk_update_request: 33796 callbacks suppressed [ 585.177487] blk_update_request: I/O error, dev loop0, sector 0 [ 585.190005] buffer_io_error: 33796 callbacks suppressed [ 585.190012] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 585.203038] blk_update_request: I/O error, dev loop0, sector 8 [ 585.209027] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 585.216666] blk_update_request: I/O error, dev loop0, sector 16 [ 585.222729] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 585.230375] blk_update_request: I/O error, dev loop0, sector 24 [ 585.236423] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 585.244070] blk_update_request: I/O error, dev loop0, sector 32 [ 585.250171] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 585.257807] blk_update_request: I/O error, dev loop0, sector 40 [ 585.263975] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 585.271653] blk_update_request: I/O error, dev loop0, sector 48 [ 585.277708] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 585.285385] blk_update_request: I/O error, dev loop0, sector 56 [ 585.291470] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 585.299138] blk_update_request: I/O error, dev loop0, sector 64 [ 585.305191] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 585.312863] blk_update_request: I/O error, dev loop0, sector 72 [ 585.318935] Buffer I/O error on dev loop0, logical block 9, lost async page write 17:25:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r2, &(0x7f0000000080), 0xfffffe5e) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000040), 0x80000001) ftruncate(r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.evm\x00') ioctl(r0, 0x4000008912, &(0x7f0000000100)="295e273b5abcf477671070") 17:25:07 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) write$evdev(r1, &(0x7f0000037fe8)=[{}], 0x18) sendfile(r1, r1, &(0x7f00009bcffe), 0x2000000800004c39) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:25:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') fchdir(r0) umount2(&(0x7f0000000040)='4/file0\x00', 0x0) syz_fuseblk_mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='4/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:25:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) 17:25:07 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x3d, "f4dfaea8f2f8cfd7ba5af6f943efc078f36a8c3f165b5709e17d918221e91b53fa46223f44a110f72b583a25e1fa37f47b09159e87ea21d6193b86f74c"}, &(0x7f0000000140)=0x61) 17:25:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) set_robust_list(&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x2b8, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000200)=0xfffffffffffffffa) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1=0xe0000001}}, 0x0, 0x3, [{{0x2, 0x0, @broadcast=0xffffffff}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}, {{0x2, 0x0, @loopback=0x7f000001}}]}, 0x210) 17:25:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f00000000c0), 0x0) close(r3) dup3(r1, r2, 0x0) 17:25:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0x15c) 17:25:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r2, &(0x7f0000000080), 0xfffffe5e) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000040), 0x80000001) ftruncate(r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.evm\x00') ioctl(r0, 0x4000008912, &(0x7f0000000100)="295e273b5abcf477671070") 17:25:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0x15c) 17:25:07 executing program 7: socketpair(0x1, 0x1, 0x0, &(0x7f0000002000)={0x0, 0x0}) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xb702, &(0x7f0000008000)=':vboxnet1user\x00') 17:25:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0x15c) 17:25:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0x15c) 17:25:07 executing program 7: socketpair(0x1, 0x1, 0x0, &(0x7f0000002000)={0x0, 0x0}) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xb702, &(0x7f0000008000)=':vboxnet1user\x00') 17:25:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) set_robust_list(&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x2b8, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000200)=0xfffffffffffffffa) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1=0xe0000001}}, 0x0, 0x3, [{{0x2, 0x0, @broadcast=0xffffffff}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}, {{0x2, 0x0, @loopback=0x7f000001}}]}, 0x210) 17:25:07 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x3d, "f4dfaea8f2f8cfd7ba5af6f943efc078f36a8c3f165b5709e17d918221e91b53fa46223f44a110f72b583a25e1fa37f47b09159e87ea21d6193b86f74c"}, &(0x7f0000000140)=0x61) 17:25:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r2, &(0x7f0000000080), 0xfffffe5e) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000040), 0x80000001) ftruncate(r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.evm\x00') ioctl(r0, 0x4000008912, &(0x7f0000000100)="295e273b5abcf477671070") 17:25:08 executing program 7: socketpair(0x1, 0x1, 0x0, &(0x7f0000002000)={0x0, 0x0}) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xb702, &(0x7f0000008000)=':vboxnet1user\x00') 17:25:08 executing program 0: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) read(r0, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) dup2(r0, r2) 17:25:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) 17:25:09 executing program 7: socketpair(0x1, 0x1, 0x0, &(0x7f0000002000)={0x0, 0x0}) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xb702, &(0x7f0000008000)=':vboxnet1user\x00') 17:25:09 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x3d, "f4dfaea8f2f8cfd7ba5af6f943efc078f36a8c3f165b5709e17d918221e91b53fa46223f44a110f72b583a25e1fa37f47b09159e87ea21d6193b86f74c"}, &(0x7f0000000140)=0x61) 17:25:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) set_robust_list(&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x2b8, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000200)=0xfffffffffffffffa) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1=0xe0000001}}, 0x0, 0x3, [{{0x2, 0x0, @broadcast=0xffffffff}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}, {{0x2, 0x0, @loopback=0x7f000001}}]}, 0x210) 17:25:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f00000000c0), 0x0) close(r3) dup3(r1, r2, 0x0) 17:25:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r2, &(0x7f0000000080), 0xfffffe5e) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000040), 0x80000001) ftruncate(r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.evm\x00') ioctl(r0, 0x4000008912, &(0x7f0000000100)="295e273b5abcf477671070") 17:25:09 executing program 0: r0 = socket$inet6(0xa, 0x80000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0xff}, 0x0, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e21}, 0x1c) 17:25:09 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000000000)) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='iso9660\x00', 0x1020, &(0x7f0000000340)) syz_fuseblk_mount(&(0x7f00000068c0)='./file0\x00', &(0x7f0000006900)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:25:09 executing program 0: r0 = socket$inet6(0xa, 0x80000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0xff}, 0x0, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e21}, 0x1c) 17:25:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x22, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) 17:25:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x76c6) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r5) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r5) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000140)=""/207, 0xcf) 17:25:09 executing program 0: r0 = socket$inet6(0xa, 0x80000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0xff}, 0x0, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e21}, 0x1c) 17:25:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x22, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) 17:25:09 executing program 0: r0 = socket$inet6(0xa, 0x80000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0xff}, 0x0, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e21}, 0x1c) 17:25:09 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f00007a8000)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000d97000)={0xffffffffffffffff, 0x1000000200007d}) 17:25:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x22, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) 17:25:10 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) 17:25:10 executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f000076eff4)) 17:25:10 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x3d, "f4dfaea8f2f8cfd7ba5af6f943efc078f36a8c3f165b5709e17d918221e91b53fa46223f44a110f72b583a25e1fa37f47b09159e87ea21d6193b86f74c"}, &(0x7f0000000140)=0x61) 17:25:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x22, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) 17:25:10 executing program 5: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040005031d856813000900083c14cc16ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) 17:25:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x76c6) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r5) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r5) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000140)=""/207, 0xcf) 17:25:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f00000000c0), 0x0) close(r3) dup3(r1, r2, 0x0) 17:25:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x76c6) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r5) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r5) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000140)=""/207, 0xcf) 17:25:10 executing program 5: mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 17:25:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") alarm(0x10000) alarm(0x0) 17:25:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 17:25:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x4008081, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 17:25:10 executing program 7: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000002600)=@l2={0x1f}, 0x80, &(0x7f0000003780), 0x0, &(0x7f00000037c0)=[{0x10}], 0x10}}], 0x1, 0x0) 17:25:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x76c6) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r5) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r5) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000140)=""/207, 0xcf) 17:25:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 17:25:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 17:25:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f00000000c0), 0x0) close(r3) dup3(r1, r2, 0x0) 17:25:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 17:25:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() process_vm_writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000600)=""/132, 0x84}, {&(0x7f00000006c0)=""/239, 0xef}, {&(0x7f0000000840)=""/121, 0x79}], 0x4, &(0x7f0000000e00)=[{&(0x7f00000007c0)}, {&(0x7f0000000b40)=""/188, 0xbc}, {&(0x7f0000000c00)=""/87, 0x57}, {&(0x7f0000000c80)=""/186, 0xba}, {&(0x7f0000000d40)=""/166, 0xa6}], 0x5, 0x0) 17:25:11 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x76c6) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r5) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r5) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000140)=""/207, 0xcf) 17:25:11 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000027c0)={'team0\x00'}) 17:25:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x76c6) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r5) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r5) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000140)=""/207, 0xcf) 17:25:11 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x100000004e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000004840), 0x0, 0x200007fc, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) write$binfmt_aout(r0, &(0x7f0000000ac0)=ANY=[], 0x6bb) recvmmsg(r0, &(0x7f0000007180)=[{{&(0x7f0000005e00)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000006e80)=[{&(0x7f0000005e80)=""/4096, 0x1000}], 0x1, &(0x7f0000006ec0)=""/134, 0x86}}, {{&(0x7f0000006f80)=@in={0x0, 0x0, @local}, 0x80, &(0x7f0000007100), 0x0, &(0x7f0000007140)=""/46, 0x2e, 0xfffffffffffffeff}}], 0x2, 0x0, 0x0) shutdown(r0, 0x1) 17:25:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x4008081, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 17:25:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mremap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3) 17:25:11 executing program 0: r0 = memfd_create(&(0x7f0000000480)='\x00', 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000070f000/0x4000)=nil, 0x4000, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) 17:25:11 executing program 6: prctl$intptr(0xf, 0xffffffffffffffff) 17:25:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r1, 0x29, 0x23, 0x0, 0x300) 17:25:11 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1=0xe0000001, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@multicast2=0xe0000002, 0x0, 0xfffffffffffffffd}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:25:11 executing program 7: pkey_mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x6) write$evdev(r0, &(0x7f0000001fdc)=[{}, {{0x0, 0x2710}}], 0x30) [ 590.620193] blk_update_request: 770 callbacks suppressed [ 590.620199] blk_update_request: I/O error, dev loop0, sector 0 [ 590.631820] buffer_io_error: 770 callbacks suppressed [ 590.631828] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 590.644714] blk_update_request: I/O error, dev loop0, sector 8 [ 590.650711] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 590.658390] blk_update_request: I/O error, dev loop0, sector 16 17:25:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f000007d000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/159) 17:25:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f000007d000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/159) [ 590.664451] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 590.672142] blk_update_request: I/O error, dev loop0, sector 24 [ 590.678212] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 590.685853] blk_update_request: I/O error, dev loop0, sector 32 [ 590.691935] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 590.699696] blk_update_request: I/O error, dev loop0, sector 40 [ 590.705749] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 590.713421] blk_update_request: I/O error, dev loop0, sector 48 [ 590.719523] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 590.727169] blk_update_request: I/O error, dev loop0, sector 56 [ 590.733254] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 590.740912] blk_update_request: I/O error, dev loop0, sector 64 [ 590.746964] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 590.754627] blk_update_request: I/O error, dev loop0, sector 72 [ 590.760707] Buffer I/O error on dev loop0, logical block 9, lost async page write 17:25:12 executing program 4: clock_getres(0xa, &(0x7f0000000040)) 17:25:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f000007d000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/159) 17:25:12 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') preadv(r1, &(0x7f0000000100), 0x361, 0x10400003) 17:25:12 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1=0xe0000001, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@multicast2=0xe0000002, 0x0, 0xfffffffffffffffd}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:25:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 17:25:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x76c6) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r5) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r5) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000140)=""/207, 0xcf) 17:25:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x4008081, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 17:25:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) connect(r0, &(0x7f0000000100)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') sendfile(r0, r1, &(0x7f0000000000), 0xff) 17:25:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f000007d000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/159) 17:25:12 executing program 0: r0 = memfd_create(&(0x7f0000000480)='\x00', 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000070f000/0x4000)=nil, 0x4000, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) 17:25:12 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1=0xe0000001, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@multicast2=0xe0000002, 0x0, 0xfffffffffffffffd}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:25:12 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') preadv(r1, &(0x7f0000000100), 0x361, 0x10400003) 17:25:12 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 17:25:12 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="550000001e007f5300fe01b2a4a280930a60000000a84302910000f83900090035000200060000001900050000000000000000dc1338d54400009b84136ef75afb83de448daa7227c43a0608299b060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000100)}, 0x0) 17:25:12 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001b5, 0x10400003) 17:25:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)={0x0, 0x1e0576d2775b914b, [@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @link_local={0x1, 0x80, 0xc2}, @empty, @link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}]}) 17:25:12 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001b5, 0x10400003) 17:25:12 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1=0xe0000001, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@multicast2=0xe0000002, 0x0, 0xfffffffffffffffd}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 17:25:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x4008081, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 17:25:12 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x1f, 0x5) fallocate(r1, 0x0, 0x0, 0x1f) fallocate(r1, 0x3, 0x0, 0xffff) fallocate(r1, 0x0, 0x0, 0x2) 17:25:12 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') preadv(r1, &(0x7f0000000100), 0x361, 0x10400003) 17:25:12 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001b5, 0x10400003) 17:25:12 executing program 6: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f00000002c0)='..', &(0x7f0000000300)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='../file0\x00', &(0x7f00000000c0)='xfs\x00', 0x21000, &(0x7f0000000100)) 17:25:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)={0x0, 0x1e0576d2775b914b, [@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @link_local={0x1, 0x80, 0xc2}, @empty, @link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}]}) 17:25:12 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/raw\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001b5, 0x10400003) 17:25:13 executing program 0: r0 = memfd_create(&(0x7f0000000480)='\x00', 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000070f000/0x4000)=nil, 0x4000, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) 17:25:13 executing program 6: socketpair$unix(0x1, 0x1000005, 0x0, &(0x7f0000000000)) 17:25:13 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f000042d000)=@routing={0x0, 0x2, 0x2, 0x80000001, 0x0, [@mcast1={0xff, 0x1, [], 0x1}]}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) r4 = dup3(r3, r2, 0x80000) recvmmsg(r4, &(0x7f0000002380)=[{{&(0x7f0000001580)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001600)=""/241, 0xf1}, {&(0x7f0000001700)=""/82, 0x52}, {&(0x7f00000001c0)=""/27, 0x1b}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000001840)=""/234, 0xea}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000001a00)=""/194, 0x4b2}], 0x7, &(0x7f0000001b80)=""/219, 0xdb, 0x100000000}, 0x8000}, {{&(0x7f0000001c80)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d00)=""/208, 0xd0}, {&(0x7f0000001e00)=""/97, 0x61}, {&(0x7f0000001e80)=""/12, 0xc}], 0x3, &(0x7f0000001f00)=""/176, 0xb0}, 0x2e95}, {{&(0x7f0000000300)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002200)=[{&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000002080)=""/170, 0xaa}, {&(0x7f0000002140)=""/15, 0xf}, {&(0x7f0000002180)=""/2, 0x2}, {&(0x7f00000021c0)=""/33, 0x21}], 0x5, &(0x7f0000002280)=""/224, 0xe0, 0xffff}, 0x40}], 0x3, 0x2000, &(0x7f0000002440)={0x0, 0x989680}) 17:25:13 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') preadv(r1, &(0x7f0000000100), 0x361, 0x10400003) 17:25:13 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x1f, 0x5) fallocate(r1, 0x0, 0x0, 0x1f) fallocate(r1, 0x3, 0x0, 0xffff) fallocate(r1, 0x0, 0x0, 0x2) 17:25:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)={0x0, 0x1e0576d2775b914b, [@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @link_local={0x1, 0x80, 0xc2}, @empty, @link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}]}) 17:25:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) sendfile(r2, r3, &(0x7f0000000100), 0x8000fffffffe) 17:25:13 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 17:25:13 executing program 6: mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x0, 0x71, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000b8b000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000afb000/0x3000)=nil) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) 17:25:13 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x1f, 0x5) fallocate(r1, 0x0, 0x0, 0x1f) fallocate(r1, 0x3, 0x0, 0xffff) fallocate(r1, 0x0, 0x0, 0x2) 17:25:13 executing program 6: mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x0, 0x71, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000b8b000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000afb000/0x3000)=nil) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) 17:25:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) sendfile(r2, r3, &(0x7f0000000100), 0x8000fffffffe) 17:25:13 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x1f, 0x5) fallocate(r1, 0x0, 0x0, 0x1f) fallocate(r1, 0x3, 0x0, 0xffff) fallocate(r1, 0x0, 0x0, 0x2) 17:25:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)={0x0, 0x1e0576d2775b914b, [@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @link_local={0x1, 0x80, 0xc2}, @empty, @link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}]}) 17:25:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "4410050300ef000097"}], 0x20}, 0x0) 17:25:13 executing program 6: mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x0, 0x71, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000b8b000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000afb000/0x3000)=nil) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) 17:25:14 executing program 0: r0 = memfd_create(&(0x7f0000000480)='\x00', 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000070f000/0x4000)=nil, 0x4000, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) 17:25:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="29000000200019004995613bffffda060a00000010e80001040000040d000300ea1100000005000000", 0x29}], 0x1) 17:25:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000040), 0x4) 17:25:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) sendfile(r2, r3, &(0x7f0000000100), 0x8000fffffffe) 17:25:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "4410050300ef000097"}], 0x20}, 0x0) 17:25:14 executing program 6: mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x0, 0x71, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000b8b000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000afb000/0x3000)=nil) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) 17:25:14 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 17:25:14 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff8}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x34}]}, 0x10) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 17:25:14 executing program 2: r0 = epoll_create(0x4) r1 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 17:25:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "4410050300ef000097"}], 0x20}, 0x0) 17:25:14 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='s'], 0x1) ftruncate(r1, 0x800007) fdatasync(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000200)=ANY=[]) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) geteuid() getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000280)) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) setregid(r3, r4) 17:25:14 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300090468fe000081000000c9ffff3f03000000450001070000003719001a000400020007e91ee400538a274d69a26cdf12f24006", 0x39}], 0x1) 17:25:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) sendfile(r2, r3, &(0x7f0000000100), 0x8000fffffffe) 17:25:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "4410050300ef000097"}], 0x20}, 0x0) 17:25:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0xc0046d00, &(0x7f0000a07fff)) 17:25:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x59, &(0x7f0000000280), 0x0, &(0x7f0000000540)=[{0x10, 0x3}], 0x62}}], 0x2, 0x0) 17:25:15 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x20000000000001a}, 0x90) 17:25:15 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001bd000/0x4000)=nil, 0x4000}}) 17:25:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001c80)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000001c40)={&(0x7f0000000580)=@getae={0x4c, 0x1f, 0x27947ae51d8afc3, 0x0, 0x0, {{@in=@loopback=0x7f000001}, @in6=@local={0xfe, 0x80, [], 0xaa}}, [@mark={0xc, 0x15}]}, 0x4c}, 0x1}, 0x0) 17:25:15 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 17:25:15 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) close(r0) 17:25:15 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff8}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x34}]}, 0x10) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 17:25:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='s'], 0x1) ftruncate(r1, 0x800007) fdatasync(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000200)=ANY=[]) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) geteuid() getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000280)) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) setregid(r3, r4) 17:25:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x10000000000020, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=@mpls_delroute={0x24, 0x19, 0x10, 0x0, 0x0, {0x1c}, [@RTA_TTL_PROPAGATE={0x8, 0x1a}]}, 0x24}, 0x1}, 0x0) 17:25:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000001240)="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", 0x0) signalfd(r1, &(0x7f0000000200)={0x7}, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'teql0\x00', 0x400}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000780)="b8", 0x1}], 0x1) r3 = dup2(r1, r0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0x16}, 0x9}, {0xa, 0x4e22, 0x8, @mcast1={0xff, 0x1, [], 0x1}}, 0x6, [0x5, 0x5, 0x9, 0xe9, 0x8, 0x3ff, 0x7fff, 0x8]}, 0x5c) 17:25:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000340)="240000005a001f00ff03f4f9002304000a04f51108000100020100020800038001c9a800", 0x24) 17:25:15 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast=0xffffffff}, 0x1}}, 0x2e) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000004c0)="060086be") 17:25:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000240), 0x0) 17:25:15 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:15 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "b441d632cdbbcb211363807aec73d3883762a61dc02d349bfa3ac974b987aa7fb97eb324d594fbbb77bab759418aa8d451d921e8f5d2cf2b08292111701192e97cac366dd3eb2e0fb039e58314ef4709c5f3556db6a1ab6b4fb2bdd83cdc26e8395ec4984ec3faf71a611d1569545d654cded93be827a85188b803c19c1b56aab522862a718b81e512b49690994d3425e33bd93f0e744c66a083c1f9f1bd7bb8f9e123c08f3f041ed3fdc058136cf0071a47cc0e38720a12e11e842a7b5b26dff07f578fdb9a7b14662a625c1ee76c41ccb2b1fc6376aa718e1067b9e4af511ef5b360dbfad326108bb033db193dab27974eb8c462739eaee51d87f31c516e7e391073770da3202e02c41a7277c847df24bd5b0a7ab6e252f3c8ebf00688cc55311d887e8bfd95a7f4c6a126af3fe26714ddb869c66d18f870631bbd497e8a06881b754ecdcdd0dcffc51cd52a6b560f8d64b63a1674745edc5f53b18a8ffcc5c2fbc4d2bbcc2faf3c189d9b36c0655d1394f5c127ec86b8a764a87b546c2b6ac37d0a8ec3edd7cda6f930570763dbdc0640d219749bd57c7c89eaadfdae41d654a46b17be069a32a7d94d29b612fbe61b8bd11a2d10ba5d4ac7014fc0465c3f144598bd1f913343e7293711040eee0ae8df1e49f04ed1037d4b742aed0e932116060aaf6b985238d2e10fb5b11d19d7801befed4833287d96a85a7cdd9e211a672760335655576fc0fa0336621c2b2b1018ef71bb5077c67ee5fa8d479d6776013363e98b1f1213712be7e47549b6035459008c509f0f983130a451531381ee3c1ab9e1cbb8e558b56ca1a70939389addc5f9632b37ff3f634abb504bb0be0a51649683f6e29588c15cda40255e173328681884ffef6729e9058c5623e1401fdcc7b8cb5623a8fd725fbeea05fc417c44e46500619218dff7c70aa068994c58883cada505a2aa85b6620dfe9c45b707c9aa1222b86972eae564b28a05ddfa3545df231fde2707d4bf67dc6ba41daba91dee8081e5c7e2bcfbebebd42d5ab8a32d6e098fd57233e3b813dc0d772134775def451823b7fef2bc93da01722cd613b9a3db7e2d4c51fb7b56006ee9cea53b62343599a56167388d45247f9289fb1cab67a7cb0c3665ddf1e1411875b4de3428b32fc6603691a023d8e4cb93c667acb7b535fb5f77af9a49640cbe8ffe3a193cf4df1b556a67cb753c60bdf978b871aa513c07074c6602037ebc32199290e3c7ac6f103ad9358951ad4de0c8f1b34951b0e6a48295975cf08b2c3c95064855fc95317e386f1c18608d1d08699003c998b93332cd316f17a5139d350cbfa9dabc3f77c4197a0186e50913978e980a7a028e7ccdeee718af028200e94a6b3a0ec93ba14b0c64dfaf3967e230d8cf876f26287d436ebc9588b52b43f2380836bfe3"}}}}}, 0x0) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300), 0x8) 17:25:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000001940)={0x0, 0xb, 0x0, @thr={&(0x7f0000000880), &(0x7f0000001880)}}, &(0x7f0000001980)) close(r1) 17:25:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000001240)="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", 0x0) signalfd(r1, &(0x7f0000000200)={0x7}, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'teql0\x00', 0x400}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000780)="b8", 0x1}], 0x1) r3 = dup2(r1, r0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0x16}, 0x9}, {0xa, 0x4e22, 0x8, @mcast1={0xff, 0x1, [], 0x1}}, 0x6, [0x5, 0x5, 0x9, 0xe9, 0x8, 0x3ff, 0x7fff, 0x8]}, 0x5c) 17:25:15 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000001240)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) signalfd(r1, &(0x7f0000000200)={0x7}, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'teql0\x00', 0x400}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000780)="b8", 0x1}], 0x1) r3 = dup2(r1, r0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0x16}, 0x9}, {0xa, 0x4e22, 0x8, @mcast1={0xff, 0x1, [], 0x1}}, 0x6, [0x5, 0x5, 0x9, 0xe9, 0x8, 0x3ff, 0x7fff, 0x8]}, 0x5c) 17:25:15 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x21, &(0x7f0000000080)={@broadcast=0xffffffff, @loopback=0x7f000001}, 0xc) 17:25:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0xfffffffffffffffe}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) 17:25:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000001240)="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", 0x0) signalfd(r1, &(0x7f0000000200)={0x7}, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'teql0\x00', 0x400}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000780)="b8", 0x1}], 0x1) r3 = dup2(r1, r0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0x16}, 0x9}, {0xa, 0x4e22, 0x8, @mcast1={0xff, 0x1, [], 0x1}}, 0x6, [0x5, 0x5, 0x9, 0xe9, 0x8, 0x3ff, 0x7fff, 0x8]}, 0x5c) 17:25:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0\x00', 0x1005}) 17:25:15 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff8}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x34}]}, 0x10) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 17:25:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='s'], 0x1) ftruncate(r1, 0x800007) fdatasync(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000200)=ANY=[]) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) geteuid() getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000280)) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) setregid(r3, r4) 17:25:15 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:15 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:15 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000001240)="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", 0x0) signalfd(r1, &(0x7f0000000200)={0x7}, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'teql0\x00', 0x400}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000780)="b8", 0x1}], 0x1) r3 = dup2(r1, r0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0x16}, 0x9}, {0xa, 0x4e22, 0x8, @mcast1={0xff, 0x1, [], 0x1}}, 0x6, [0x5, 0x5, 0x9, 0xe9, 0x8, 0x3ff, 0x7fff, 0x8]}, 0x5c) 17:25:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x2, 0x100000001, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) 17:25:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0xfffffffffffffffe}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) 17:25:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000001240)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) signalfd(r1, &(0x7f0000000200)={0x7}, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'teql0\x00', 0x400}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000780)="b8", 0x1}], 0x1) r3 = dup2(r1, r0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0x16}, 0x9}, {0xa, 0x4e22, 0x8, @mcast1={0xff, 0x1, [], 0x1}}, 0x6, [0x5, 0x5, 0x9, 0xe9, 0x8, 0x3ff, 0x7fff, 0x8]}, 0x5c) 17:25:15 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff8}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x34}]}, 0x10) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 17:25:15 executing program 1: r0 = memfd_create(&(0x7f0000004000)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000600)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 17:25:15 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000001240)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) signalfd(r1, &(0x7f0000000200)={0x7}, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'teql0\x00', 0x400}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000780)="b8", 0x1}], 0x1) r3 = dup2(r1, r0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0x16}, 0x9}, {0xa, 0x4e22, 0x8, @mcast1={0xff, 0x1, [], 0x1}}, 0x6, [0x5, 0x5, 0x9, 0xe9, 0x8, 0x3ff, 0x7fff, 0x8]}, 0x5c) 17:25:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0xfffffffffffffffe}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) 17:25:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x2, 0x100000001, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) 17:25:15 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x2, 0x100000001, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) 17:25:15 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:15 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x2, 0x100000001, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) 17:25:16 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='s'], 0x1) ftruncate(r1, 0x800007) fdatasync(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000200)=ANY=[]) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) geteuid() getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000280)) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) setregid(r3, r4) 17:25:16 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x2, 0x100000001, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) 17:25:16 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}, 0x4) r1 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) sendto$inet6(r1, &(0x7f0000000140)="4500009613076193cd3b2336d644d8a62b7192622708f4c1720900f2f955085323c2fe5630e08644d75a07f6e623a27de1cc84e7360384eb8792f9bed1d7cbe01ba8506e3f3f82fd9475f9d8cea59bdeef1ec8c405e2108afea9eff924d0e15ffa507e5e1bdc1128307c1a420c5cb2d253ea2a9cc73ef107f7e63701e8a41bdf68a3e82185043eb6b043c394e09b60ec382fbd000000", 0x96, 0x0, 0x0, 0x0) 17:25:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0xfffffffffffffffe}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) 17:25:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x2, 0x100000001, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) 17:25:16 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:16 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:16 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x2, 0x100000001, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) 17:25:16 executing program 1: r0 = memfd_create(&(0x7f0000004000)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000600)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 17:25:16 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000000004, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x36, &(0x7f0000001f40)={0x0, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x108) 17:25:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) sendto$inet6(r0, &(0x7f00000000c0)="6a725a5f62d02a6be55afd02d999", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) recvmsg(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/106, 0x6a}], 0x1}, 0x2000) 17:25:16 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x5}) mq_timedsend(r0, &(0x7f00000001c0)="caf265ebee91", 0x6, 0x0, &(0x7f0000000240)={0x77359400}) 17:25:16 executing program 7: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 17:25:16 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0)=0x2, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x3a16, 0x1, 0x4}, 0xc) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8b2b, &(0x7f0000000000)) syz_extract_tcp_res(&(0x7f0000000080), 0x7, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x4}, 0xfffffdc3) r2 = creat(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff) ioctl$TIOCEXCL(r2, 0x540c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xb605) 17:25:16 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}, 0x4) r1 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) sendto$inet6(r1, &(0x7f0000000140)="4500009613076193cd3b2336d644d8a62b7192622708f4c1720900f2f955085323c2fe5630e08644d75a07f6e623a27de1cc84e7360384eb8792f9bed1d7cbe01ba8506e3f3f82fd9475f9d8cea59bdeef1ec8c405e2108afea9eff924d0e15ffa507e5e1bdc1128307c1a420c5cb2d253ea2a9cc73ef107f7e63701e8a41bdf68a3e82185043eb6b043c394e09b60ec382fbd000000", 0x96, 0x0, 0x0, 0x0) 17:25:16 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}, 0x4) r1 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) sendto$inet6(r1, &(0x7f0000000140)="4500009613076193cd3b2336d644d8a62b7192622708f4c1720900f2f955085323c2fe5630e08644d75a07f6e623a27de1cc84e7360384eb8792f9bed1d7cbe01ba8506e3f3f82fd9475f9d8cea59bdeef1ec8c405e2108afea9eff924d0e15ffa507e5e1bdc1128307c1a420c5cb2d253ea2a9cc73ef107f7e63701e8a41bdf68a3e82185043eb6b043c394e09b60ec382fbd000000", 0x96, 0x0, 0x0, 0x0) 17:25:16 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)={0x303, 0x33}, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 17:25:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x6, 0x15, &(0x7f0000000100), &(0x7f0000013000)=0x4) close(r2) close(r1) [ 595.516440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17440 sclass=netlink_route_socket pig=5364 comm=syz-executor7 [ 595.546689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=5364 comm=syz-executor7 17:25:16 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x40, 0x0) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open$dir(&(0x7f0000000140)='./file0/bus\x00', 0x2, 0x0) [ 595.565946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17440 sclass=netlink_route_socket pig=5385 comm=syz-executor7 17:25:16 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x40, 0x0) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open$dir(&(0x7f0000000140)='./file0/bus\x00', 0x2, 0x0) 17:25:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000140)="04010000008b00ddb8460900ffb25b4802938207d9033780398d5375a41640939029ef0712f295136f8f6575eb353c72e475f7fd54482c03ac4db09698c0e2d2000011000000fffba371917c4d7e459959e78aa4d5a68caf5a9290bf11dbb68e1934052f", 0x64, 0x0, &(0x7f0000000000)={0xa, 0x200000800, 0x5, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 17:25:16 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}, 0x4) r1 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) sendto$inet6(r1, &(0x7f0000000140)="4500009613076193cd3b2336d644d8a62b7192622708f4c1720900f2f955085323c2fe5630e08644d75a07f6e623a27de1cc84e7360384eb8792f9bed1d7cbe01ba8506e3f3f82fd9475f9d8cea59bdeef1ec8c405e2108afea9eff924d0e15ffa507e5e1bdc1128307c1a420c5cb2d253ea2a9cc73ef107f7e63701e8a41bdf68a3e82185043eb6b043c394e09b60ec382fbd000000", 0x96, 0x0, 0x0, 0x0) 17:25:16 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}, 0x4) r1 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) sendto$inet6(r1, &(0x7f0000000140)="4500009613076193cd3b2336d644d8a62b7192622708f4c1720900f2f955085323c2fe5630e08644d75a07f6e623a27de1cc84e7360384eb8792f9bed1d7cbe01ba8506e3f3f82fd9475f9d8cea59bdeef1ec8c405e2108afea9eff924d0e15ffa507e5e1bdc1128307c1a420c5cb2d253ea2a9cc73ef107f7e63701e8a41bdf68a3e82185043eb6b043c394e09b60ec382fbd000000", 0x96, 0x0, 0x0, 0x0) 17:25:16 executing program 7: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) sendfile(r0, r1, &(0x7f0000000000), 0x80000003) [ 595.738961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17440 sclass=netlink_route_socket pig=5402 comm=syz-executor7 17:25:17 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}, 0x4) r1 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) sendto$inet6(r1, &(0x7f0000000140)="4500009613076193cd3b2336d644d8a62b7192622708f4c1720900f2f955085323c2fe5630e08644d75a07f6e623a27de1cc84e7360384eb8792f9bed1d7cbe01ba8506e3f3f82fd9475f9d8cea59bdeef1ec8c405e2108afea9eff924d0e15ffa507e5e1bdc1128307c1a420c5cb2d253ea2a9cc73ef107f7e63701e8a41bdf68a3e82185043eb6b043c394e09b60ec382fbd000000", 0x96, 0x0, 0x0, 0x0) 17:25:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000001600)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0xb605) 17:25:17 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)={0x303, 0x33}, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 17:25:17 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x40, 0x0) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open$dir(&(0x7f0000000140)='./file0/bus\x00', 0x2, 0x0) 17:25:17 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}, 0x4) r1 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) sendto$inet6(r1, &(0x7f0000000140)="4500009613076193cd3b2336d644d8a62b7192622708f4c1720900f2f955085323c2fe5630e08644d75a07f6e623a27de1cc84e7360384eb8792f9bed1d7cbe01ba8506e3f3f82fd9475f9d8cea59bdeef1ec8c405e2108afea9eff924d0e15ffa507e5e1bdc1128307c1a420c5cb2d253ea2a9cc73ef107f7e63701e8a41bdf68a3e82185043eb6b043c394e09b60ec382fbd000000", 0x96, 0x0, 0x0, 0x0) 17:25:17 executing program 1: r0 = memfd_create(&(0x7f0000004000)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000600)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 17:25:17 executing program 7: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 17:25:17 executing program 6: recvmmsg(0xffffffffffffff9c, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=""/136, 0x88}}], 0x1, 0x0, &(0x7f0000002500)) r0 = inotify_init() readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/6, 0x10}], 0x286) creat(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x2a) creat(&(0x7f0000000180)='./file0\x00', 0x0) 17:25:17 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x40, 0x0) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open$dir(&(0x7f0000000140)='./file0/bus\x00', 0x2, 0x0) [ 596.454127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17440 sclass=netlink_route_socket pig=5414 comm=syz-executor7 [ 596.474643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=5414 comm=syz-executor7 17:25:17 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)={0x303, 0x33}, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 17:25:17 executing program 7: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 17:25:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900080003000c00060000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 17:25:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000040)="0009e0ffffffffffffff05000000000400000000", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fallocate(r1, 0x11, 0x0, 0x100000001) 17:25:17 executing program 4: clone(0x0, &(0x7f00000002c0)="f7e6864b5228f9b868543d2dba09ae8a05fa4770b08cf91cab6dd866e1ea153152f1c028af9cbff0976139c55c518f023af505fc8514b01ebf7c6202b8331be5236bd9bb6308c41157cc01a1bdbffb49a9895debee03054b70011e07065fe8f92f0e47081c0e190385f697b728577928d4cd1b9633062ec07ca1d516366d47bba1ef63e16704f357b49aab80f0731a2a60f2a7bda4a7b69a54f2e6265fc22f5906632f72901cb7b1472f3227b9ce39fa264b7d68", &(0x7f0000001800), &(0x7f0000000180), &(0x7f0000001700)="05280c62c2524d92fd1b13220620c4e6bd8e6a24874054b4e5a1146999e20c8c4332af9c2130d3d6827f2b1ba8b4ebdd53a87f2d35ad98e3deb14aeb1a98917568a39acc8fd62dcc8ab6616b4f1561f2a927ff70aa541a0b70e51bdd283e7a0a2a86cd10868dea9434eb6fd2bff3f9e8d209bf439c3c5488796544605b01f5fa794fb3d7885ef23350786eb31ebe9873dee4003719b283c152a9a4cdccbe9892f07f5db48e0e1a1819bc314466afb1f097bc03db5f65cf948a6ed2d9972a6c2925cae831a5fd0cfab78245ab764abb62e8e5b0") mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000003c0)='./file1\x00', r0, r1) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) keyctl$session_to_parent(0x12) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000208911, &(0x7f0000000380)="10ac") r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x12, &(0x7f0000b56f40)=""/192, &(0x7f0000000040)=0xc0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x4, 0x401, 0xe34}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e23, 0x20, @mcast1={0xff, 0x1, [], 0x1}, 0xd5a4}, {0xa, 0x4e20, 0x839, @ipv4={[], [0xff, 0xff]}, 0x55}, 0x400, [0x46, 0x7ff, 0x100000001, 0x7fff, 0x4, 0x9, 0x80, 0x1]}, 0x5c) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000100)) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) r6 = dup(r2) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000680)) [ 596.592940] IPv6: Can't replace route, no match found [ 596.599587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17440 sclass=netlink_route_socket pig=5434 comm=syz-executor7 17:25:17 executing program 4: clone(0x0, &(0x7f00000002c0)="f7e6864b5228f9b868543d2dba09ae8a05fa4770b08cf91cab6dd866e1ea153152f1c028af9cbff0976139c55c518f023af505fc8514b01ebf7c6202b8331be5236bd9bb6308c41157cc01a1bdbffb49a9895debee03054b70011e07065fe8f92f0e47081c0e190385f697b728577928d4cd1b9633062ec07ca1d516366d47bba1ef63e16704f357b49aab80f0731a2a60f2a7bda4a7b69a54f2e6265fc22f5906632f72901cb7b1472f3227b9ce39fa264b7d68", &(0x7f0000001800), &(0x7f0000000180), &(0x7f0000001700)="05280c62c2524d92fd1b13220620c4e6bd8e6a24874054b4e5a1146999e20c8c4332af9c2130d3d6827f2b1ba8b4ebdd53a87f2d35ad98e3deb14aeb1a98917568a39acc8fd62dcc8ab6616b4f1561f2a927ff70aa541a0b70e51bdd283e7a0a2a86cd10868dea9434eb6fd2bff3f9e8d209bf439c3c5488796544605b01f5fa794fb3d7885ef23350786eb31ebe9873dee4003719b283c152a9a4cdccbe9892f07f5db48e0e1a1819bc314466afb1f097bc03db5f65cf948a6ed2d9972a6c2925cae831a5fd0cfab78245ab764abb62e8e5b0") mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000003c0)='./file1\x00', r0, r1) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) keyctl$session_to_parent(0x12) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000208911, &(0x7f0000000380)="10ac") r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x12, &(0x7f0000b56f40)=""/192, &(0x7f0000000040)=0xc0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x4, 0x401, 0xe34}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e23, 0x20, @mcast1={0xff, 0x1, [], 0x1}, 0xd5a4}, {0xa, 0x4e20, 0x839, @ipv4={[], [0xff, 0xff]}, 0x55}, 0x400, [0x46, 0x7ff, 0x100000001, 0x7fff, 0x4, 0x9, 0x80, 0x1]}, 0x5c) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000100)) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) r6 = dup(r2) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000680)) 17:25:17 executing program 7: clone(0x0, &(0x7f00000002c0)="f7e6864b5228f9b868543d2dba09ae8a05fa4770b08cf91cab6dd866e1ea153152f1c028af9cbff0976139c55c518f023af505fc8514b01ebf7c6202b8331be5236bd9bb6308c41157cc01a1bdbffb49a9895debee03054b70011e07065fe8f92f0e47081c0e190385f697b728577928d4cd1b9633062ec07ca1d516366d47bba1ef63e16704f357b49aab80f0731a2a60f2a7bda4a7b69a54f2e6265fc22f5906632f72901cb7b1472f3227b9ce39fa264b7d68", &(0x7f0000001800), &(0x7f0000000180), &(0x7f0000001700)="05280c62c2524d92fd1b13220620c4e6bd8e6a24874054b4e5a1146999e20c8c4332af9c2130d3d6827f2b1ba8b4ebdd53a87f2d35ad98e3deb14aeb1a98917568a39acc8fd62dcc8ab6616b4f1561f2a927ff70aa541a0b70e51bdd283e7a0a2a86cd10868dea9434eb6fd2bff3f9e8d209bf439c3c5488796544605b01f5fa794fb3d7885ef23350786eb31ebe9873dee4003719b283c152a9a4cdccbe9892f07f5db48e0e1a1819bc314466afb1f097bc03db5f65cf948a6ed2d9972a6c2925cae831a5fd0cfab78245ab764abb62e8e5b0") mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000003c0)='./file1\x00', r0, r1) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) keyctl$session_to_parent(0x12) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000208911, &(0x7f0000000380)="10ac") r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x12, &(0x7f0000b56f40)=""/192, &(0x7f0000000040)=0xc0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x4, 0x401, 0xe34}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e23, 0x20, @mcast1={0xff, 0x1, [], 0x1}, 0xd5a4}, {0xa, 0x4e20, 0x839, @ipv4={[], [0xff, 0xff]}, 0x55}, 0x400, [0x46, 0x7ff, 0x100000001, 0x7fff, 0x4, 0x9, 0x80, 0x1]}, 0x5c) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000100)) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) r6 = dup(r2) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000680)) 17:25:17 executing program 4: clone(0x0, &(0x7f00000002c0)="f7e6864b5228f9b868543d2dba09ae8a05fa4770b08cf91cab6dd866e1ea153152f1c028af9cbff0976139c55c518f023af505fc8514b01ebf7c6202b8331be5236bd9bb6308c41157cc01a1bdbffb49a9895debee03054b70011e07065fe8f92f0e47081c0e190385f697b728577928d4cd1b9633062ec07ca1d516366d47bba1ef63e16704f357b49aab80f0731a2a60f2a7bda4a7b69a54f2e6265fc22f5906632f72901cb7b1472f3227b9ce39fa264b7d68", &(0x7f0000001800), &(0x7f0000000180), &(0x7f0000001700)="05280c62c2524d92fd1b13220620c4e6bd8e6a24874054b4e5a1146999e20c8c4332af9c2130d3d6827f2b1ba8b4ebdd53a87f2d35ad98e3deb14aeb1a98917568a39acc8fd62dcc8ab6616b4f1561f2a927ff70aa541a0b70e51bdd283e7a0a2a86cd10868dea9434eb6fd2bff3f9e8d209bf439c3c5488796544605b01f5fa794fb3d7885ef23350786eb31ebe9873dee4003719b283c152a9a4cdccbe9892f07f5db48e0e1a1819bc314466afb1f097bc03db5f65cf948a6ed2d9972a6c2925cae831a5fd0cfab78245ab764abb62e8e5b0") mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000003c0)='./file1\x00', r0, r1) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) keyctl$session_to_parent(0x12) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000208911, &(0x7f0000000380)="10ac") r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x12, &(0x7f0000b56f40)=""/192, &(0x7f0000000040)=0xc0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x4, 0x401, 0xe34}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e23, 0x20, @mcast1={0xff, 0x1, [], 0x1}, 0xd5a4}, {0xa, 0x4e20, 0x839, @ipv4={[], [0xff, 0xff]}, 0x55}, 0x400, [0x46, 0x7ff, 0x100000001, 0x7fff, 0x4, 0x9, 0x80, 0x1]}, 0x5c) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000100)) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) r6 = dup(r2) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000680)) 17:25:18 executing program 1: r0 = memfd_create(&(0x7f0000004000)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000600)=@hci, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000001d40)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000000c00)={0x0, 0x1c9c380}) 17:25:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000001600)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0xb605) 17:25:18 executing program 7: clone(0x0, &(0x7f00000002c0)="f7e6864b5228f9b868543d2dba09ae8a05fa4770b08cf91cab6dd866e1ea153152f1c028af9cbff0976139c55c518f023af505fc8514b01ebf7c6202b8331be5236bd9bb6308c41157cc01a1bdbffb49a9895debee03054b70011e07065fe8f92f0e47081c0e190385f697b728577928d4cd1b9633062ec07ca1d516366d47bba1ef63e16704f357b49aab80f0731a2a60f2a7bda4a7b69a54f2e6265fc22f5906632f72901cb7b1472f3227b9ce39fa264b7d68", &(0x7f0000001800), &(0x7f0000000180), &(0x7f0000001700)="05280c62c2524d92fd1b13220620c4e6bd8e6a24874054b4e5a1146999e20c8c4332af9c2130d3d6827f2b1ba8b4ebdd53a87f2d35ad98e3deb14aeb1a98917568a39acc8fd62dcc8ab6616b4f1561f2a927ff70aa541a0b70e51bdd283e7a0a2a86cd10868dea9434eb6fd2bff3f9e8d209bf439c3c5488796544605b01f5fa794fb3d7885ef23350786eb31ebe9873dee4003719b283c152a9a4cdccbe9892f07f5db48e0e1a1819bc314466afb1f097bc03db5f65cf948a6ed2d9972a6c2925cae831a5fd0cfab78245ab764abb62e8e5b0") mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000003c0)='./file1\x00', r0, r1) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) keyctl$session_to_parent(0x12) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000208911, &(0x7f0000000380)="10ac") r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x12, &(0x7f0000b56f40)=""/192, &(0x7f0000000040)=0xc0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x4, 0x401, 0xe34}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e23, 0x20, @mcast1={0xff, 0x1, [], 0x1}, 0xd5a4}, {0xa, 0x4e20, 0x839, @ipv4={[], [0xff, 0xff]}, 0x55}, 0x400, [0x46, 0x7ff, 0x100000001, 0x7fff, 0x4, 0x9, 0x80, 0x1]}, 0x5c) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000100)) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) r6 = dup(r2) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000680)) 17:25:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x34, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000ff8b94b20f8fd826000000000058000000000000006000000000000000"], 0x0, 0x0, &(0x7f0000002000)}) 17:25:18 executing program 4: clone(0x0, &(0x7f00000002c0)="f7e6864b5228f9b868543d2dba09ae8a05fa4770b08cf91cab6dd866e1ea153152f1c028af9cbff0976139c55c518f023af505fc8514b01ebf7c6202b8331be5236bd9bb6308c41157cc01a1bdbffb49a9895debee03054b70011e07065fe8f92f0e47081c0e190385f697b728577928d4cd1b9633062ec07ca1d516366d47bba1ef63e16704f357b49aab80f0731a2a60f2a7bda4a7b69a54f2e6265fc22f5906632f72901cb7b1472f3227b9ce39fa264b7d68", &(0x7f0000001800), &(0x7f0000000180), &(0x7f0000001700)="05280c62c2524d92fd1b13220620c4e6bd8e6a24874054b4e5a1146999e20c8c4332af9c2130d3d6827f2b1ba8b4ebdd53a87f2d35ad98e3deb14aeb1a98917568a39acc8fd62dcc8ab6616b4f1561f2a927ff70aa541a0b70e51bdd283e7a0a2a86cd10868dea9434eb6fd2bff3f9e8d209bf439c3c5488796544605b01f5fa794fb3d7885ef23350786eb31ebe9873dee4003719b283c152a9a4cdccbe9892f07f5db48e0e1a1819bc314466afb1f097bc03db5f65cf948a6ed2d9972a6c2925cae831a5fd0cfab78245ab764abb62e8e5b0") mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000003c0)='./file1\x00', r0, r1) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) keyctl$session_to_parent(0x12) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000208911, &(0x7f0000000380)="10ac") r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x12, &(0x7f0000b56f40)=""/192, &(0x7f0000000040)=0xc0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x4, 0x401, 0xe34}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e23, 0x20, @mcast1={0xff, 0x1, [], 0x1}, 0xd5a4}, {0xa, 0x4e20, 0x839, @ipv4={[], [0xff, 0xff]}, 0x55}, 0x400, [0x46, 0x7ff, 0x100000001, 0x7fff, 0x4, 0x9, 0x80, 0x1]}, 0x5c) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000100)) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) r6 = dup(r2) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000680)) 17:25:18 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)={0x303, 0x33}, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 17:25:18 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_int(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='8'], 0x1) write$cgroup_int(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fadvise64(r0, 0x0, 0x2, 0x4) 17:25:18 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)={0x303, 0x33}, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 17:25:18 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000001600)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0xb605) 17:25:18 executing program 7: clone(0x0, &(0x7f00000002c0)="f7e6864b5228f9b868543d2dba09ae8a05fa4770b08cf91cab6dd866e1ea153152f1c028af9cbff0976139c55c518f023af505fc8514b01ebf7c6202b8331be5236bd9bb6308c41157cc01a1bdbffb49a9895debee03054b70011e07065fe8f92f0e47081c0e190385f697b728577928d4cd1b9633062ec07ca1d516366d47bba1ef63e16704f357b49aab80f0731a2a60f2a7bda4a7b69a54f2e6265fc22f5906632f72901cb7b1472f3227b9ce39fa264b7d68", &(0x7f0000001800), &(0x7f0000000180), &(0x7f0000001700)="05280c62c2524d92fd1b13220620c4e6bd8e6a24874054b4e5a1146999e20c8c4332af9c2130d3d6827f2b1ba8b4ebdd53a87f2d35ad98e3deb14aeb1a98917568a39acc8fd62dcc8ab6616b4f1561f2a927ff70aa541a0b70e51bdd283e7a0a2a86cd10868dea9434eb6fd2bff3f9e8d209bf439c3c5488796544605b01f5fa794fb3d7885ef23350786eb31ebe9873dee4003719b283c152a9a4cdccbe9892f07f5db48e0e1a1819bc314466afb1f097bc03db5f65cf948a6ed2d9972a6c2925cae831a5fd0cfab78245ab764abb62e8e5b0") mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000003c0)='./file1\x00', r0, r1) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) keyctl$session_to_parent(0x12) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000208911, &(0x7f0000000380)="10ac") r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x12, &(0x7f0000b56f40)=""/192, &(0x7f0000000040)=0xc0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x4, 0x401, 0xe34}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e23, 0x20, @mcast1={0xff, 0x1, [], 0x1}, 0xd5a4}, {0xa, 0x4e20, 0x839, @ipv4={[], [0xff, 0xff]}, 0x55}, 0x400, [0x46, 0x7ff, 0x100000001, 0x7fff, 0x4, 0x9, 0x80, 0x1]}, 0x5c) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000100)) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) r6 = dup(r2) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000680)) [ 597.600536] binder: 5476:5478 got transaction with invalid data ptr [ 597.628244] binder: 5476:5478 transaction failed 29201/-14, size 88-96 line 3160 17:25:18 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20004d2d) creat(&(0x7f0000000280)='./file1\x00', 0x0) 17:25:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x15) [ 597.649959] binder_alloc: binder_alloc_mmap_handler: 5476 20001000-20004000 already mapped failed -16 [ 597.678307] binder: BINDER_SET_CONTEXT_MGR already set [ 597.678319] binder: 5476:5478 ioctl 40046207 0 returned -16 17:25:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() setpriority(0x0, r1, 0x0) 17:25:18 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) 17:25:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000140), 0x4) 17:25:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000000)=[@fda={0x66646185}], &(0x7f0000000040)=[0x0]}}], 0x0, 0xfdfd, &(0x7f00000000c0)}) [ 597.708374] binder_alloc: 5476: binder_alloc_buf, no vma [ 597.713943] binder: 5476:5500 transaction failed 29189/-3, size 88-96 line 3141 [ 597.730290] binder: undelivered TRANSACTION_ERROR: 29189 [ 597.737560] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.788518] binder: 5510:5513 got transaction with invalid parent offset or type [ 597.801276] binder: 5510:5513 transaction failed 29201/-22, size 32-8 line 3264 [ 597.817314] binder: BINDER_SET_CONTEXT_MGR already set [ 597.823012] binder: 5510:5515 ioctl 40046207 0 returned -16 [ 597.831707] binder_alloc: 5510: binder_alloc_buf, no vma [ 597.837478] binder: 5510:5515 transaction failed 29189/-3, size 32-8 line 3141 [ 597.851976] binder: undelivered TRANSACTION_ERROR: 29189 [ 597.857789] binder: undelivered TRANSACTION_ERROR: 29201 17:25:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000140), 0x4) 17:25:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000001600)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0xb605) 17:25:19 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20004d2d) creat(&(0x7f0000000280)='./file1\x00', 0x0) 17:25:19 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20004d2d) creat(&(0x7f0000000280)='./file1\x00', 0x0) 17:25:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000140), 0x4) 17:25:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000100)) read(r1, &(0x7f0000a16000)=""/71, 0x47) 17:25:19 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)={0x303, 0x33}, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 17:25:19 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)={0x303, 0x33}, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 17:25:19 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000001600)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0xb605) 17:25:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000140), 0x4) 17:25:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2"], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000000140), 0x8000ffffffff) ioctl$fiemap(r3, 0xc020660b, &(0x7f0000000180)={0x0, 0x10000000000005, 0xfffffffffffffffe}) 17:25:19 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20004d2d) creat(&(0x7f0000000280)='./file1\x00', 0x0) 17:25:19 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000040)="06", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r1, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 17:25:19 executing program 7: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x33}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90, 0xffffffffffffffff}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 17:25:19 executing program 7: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x33}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90, 0xffffffffffffffff}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 17:25:19 executing program 7: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x33}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90, 0xffffffffffffffff}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 17:25:19 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20004d2d) creat(&(0x7f0000000280)='./file1\x00', 0x0) 17:25:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000001600)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0xb605) 17:25:20 executing program 7: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x33}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90, 0xffffffffffffffff}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 17:25:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2"], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000000140), 0x8000ffffffff) ioctl$fiemap(r3, 0xc020660b, &(0x7f0000000180)={0x0, 0x10000000000005, 0xfffffffffffffffe}) 17:25:20 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20004d2d) creat(&(0x7f0000000280)='./file1\x00', 0x0) 17:25:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2"], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000000140), 0x8000ffffffff) ioctl$fiemap(r3, 0xc020660b, &(0x7f0000000180)={0x0, 0x10000000000005, 0xfffffffffffffffe}) 17:25:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setrlimit(0x0, &(0x7f0000000000)) clone(0x0, &(0x7f0000001340), &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000140)) 17:25:20 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000001600)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0xb605) 17:25:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000057000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000002e000)={{}, {0x0, 0x9}}, &(0x7f0000046000)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) 17:25:20 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000005a0007241dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 17:25:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000057000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000002e000)={{}, {0x0, 0x9}}, &(0x7f0000046000)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) [ 599.664448] device lo left promiscuous mode 17:25:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000057000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000002e000)={{}, {0x0, 0x9}}, &(0x7f0000046000)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) 17:25:20 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20004d2d) creat(&(0x7f0000000280)='./file1\x00', 0x0) 17:25:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000005a0007241dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 17:25:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000057000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000002e000)={{}, {0x0, 0x9}}, &(0x7f0000046000)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) [ 599.794904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 599.817296] device lo entered promiscuous mode [ 599.870248] device lo left promiscuous mode 17:25:21 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 599.995749] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 17:25:21 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x8000000000001, @loopback={0x0, 0x1}}, 0x1c) 17:25:21 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:21 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000005a0007241dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 17:25:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2"], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000000140), 0x8000ffffffff) ioctl$fiemap(r3, 0xc020660b, &(0x7f0000000180)={0x0, 0x10000000000005, 0xfffffffffffffffe}) 17:25:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2"], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000000140), 0x8000ffffffff) ioctl$fiemap(r3, 0xc020660b, &(0x7f0000000180)={0x0, 0x10000000000005, 0xfffffffffffffffe}) 17:25:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='security.ima\x00', &(0x7f0000000200)='[keyring\x00', 0x9, 0x0) 17:25:21 executing program 6: r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="a85883156f794c05e0b02a03983b5addde9e46e1145c5c3fcb185a36d20d52d097399fd15648c6641aa80f04", 0x2c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:25:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000005a0007241dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 17:25:21 executing program 6: r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="a85883156f794c05e0b02a03983b5addde9e46e1145c5c3fcb185a36d20d52d097399fd15648c6641aa80f04", 0x2c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 600.618864] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 17:25:21 executing program 6: r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="a85883156f794c05e0b02a03983b5addde9e46e1145c5c3fcb185a36d20d52d097399fd15648c6641aa80f04", 0x2c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:25:21 executing program 6: r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="a85883156f794c05e0b02a03983b5addde9e46e1145c5c3fcb185a36d20d52d097399fd15648c6641aa80f04", 0x2c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:25:21 executing program 6: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000400000000000000cf", 0x1f) 17:25:21 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c720e6ff0000000000710e13"], 0x89) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000040)="0700e1311f16f477671070") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xffff}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x7fffffff}) [ 600.793875] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 600.804183] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 17:25:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f000039a000)=[{0x35, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f00000012c0)=@can={0x1d}, 0x80, &(0x7f0000001840)}}, {{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80)}}], 0x2, 0x0) [ 600.873287] device lo entered promiscuous mode [ 600.886575] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 600.900476] device lo entered promiscuous mode [ 600.914134] device lo entered promiscuous mode 17:25:22 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:22 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:22 executing program 6: r0 = gettid() unshare(0x40000000) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip_tables_names\x00') sendfile(r1, r1, &(0x7f0000000000)=0x10, 0x5) 17:25:22 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000140)={'HL\x00'}, &(0x7f0000000180)=0x1e) 17:25:22 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 601.056313] device lo left promiscuous mode [ 601.135527] device lo entered promiscuous mode [ 601.143136] device lo left promiscuous mode [ 601.164344] IPVS: Creating netns size=2536 id=151 [ 601.214937] device lo left promiscuous mode [ 601.271948] device lo entered promiscuous mode 17:25:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2"], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000000140), 0x8000ffffffff) ioctl$fiemap(r3, 0xc020660b, &(0x7f0000000180)={0x0, 0x10000000000005, 0xfffffffffffffffe}) 17:25:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2}, 0x10) 17:25:22 executing program 7: r0 = socket(0x18, 0x0, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000fc4ff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000860000)) 17:25:22 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:22 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c2"], 0x1) ftruncate(r2, 0x800007) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r2, r3, &(0x7f0000000140), 0x8000ffffffff) ioctl$fiemap(r3, 0xc020660b, &(0x7f0000000180)={0x0, 0x10000000000005, 0xfffffffffffffffe}) 17:25:22 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 601.302943] pktgen: kernel_thread() failed for cpu 0 [ 601.310788] pktgen: Cannot create thread for cpu 0 (-4) [ 601.319811] device lo entered promiscuous mode [ 601.336238] pktgen: kernel_thread() failed for cpu 1 [ 601.341714] pktgen: Cannot create thread for cpu 1 (-4) 17:25:22 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) 17:25:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f760070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) 17:25:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 601.354105] pktgen: Initialization failed for all threads [ 601.369021] device lo left promiscuous mode [ 601.429475] device lo left promiscuous mode [ 601.508436] device lo left promiscuous mode 17:25:22 executing program 7: r0 = socket$inet(0x2, 0x200000002, 0x10000000000) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x5}}}, 0x3a) sendmmsg(r1, &(0x7f0000004540)=[{{&(0x7f00000000c0)=@ll={0x11, 0x18, 0x0, 0x1, 0xce7, 0x6, @random="f441a726ac43"}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000380), 0x0, 0x40000}, 0xd5f}], 0x1, 0x0) [ 601.721623] device lo entered promiscuous mode [ 601.732674] device lo entered promiscuous mode 17:25:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 601.782063] device lo entered promiscuous mode 17:25:22 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) unshare(0x400) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x2c, 0xd7, 0x4, 0x4, 0x1, 0xf5b, 0xffffffff, 0xfff, 0x7, 0xbcd, 0x81, 0xfff}) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000), 0x4) ioctl(r0, 0x84000008912, &(0x7f0000000100)="295ee1311f16f48f491070") setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0xfffffffffffffffd}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) r7 = dup3(r6, r5, 0x80000) getpeername$netlink(r7, &(0x7f0000000000), &(0x7f0000000040)=0xc) 17:25:22 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x0, 0x0) fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00') 17:25:22 executing program 7: r0 = getpgrp(0x0) capset(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000100)) 17:25:22 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xfffd) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000007, 0x11, r1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x4fb, &(0x7f0000000000)=[{}]}, 0x10) 17:25:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) unshare(0x400) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x2c, 0xd7, 0x4, 0x4, 0x1, 0xf5b, 0xffffffff, 0xfff, 0x7, 0xbcd, 0x81, 0xfff}) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000), 0x4) ioctl(r0, 0x84000008912, &(0x7f0000000100)="295ee1311f16f48f491070") setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0xfffffffffffffffd}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) r7 = dup3(r6, r5, 0x80000) getpeername$netlink(r7, &(0x7f0000000000), &(0x7f0000000040)=0xc) 17:25:23 executing program 7: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/dev_mcast\x00') sendfile(r0, r1, &(0x7f0000000040)=0x4, 0xcb49) 17:25:23 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') lseek(r0, 0x0, 0x2) 17:25:23 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) keyctl$join(0x1, &(0x7f00000001c0)={0x73, 0x79, 0x7a}) 17:25:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) unshare(0x400) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x2c, 0xd7, 0x4, 0x4, 0x1, 0xf5b, 0xffffffff, 0xfff, 0x7, 0xbcd, 0x81, 0xfff}) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000), 0x4) ioctl(r0, 0x84000008912, &(0x7f0000000100)="295ee1311f16f48f491070") setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0xfffffffffffffffd}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) r7 = dup3(r6, r5, 0x80000) getpeername$netlink(r7, &(0x7f0000000000), &(0x7f0000000040)=0xc) 17:25:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 17:25:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 17:25:23 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f00000000c0)="295ee1311216f477671070") setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 17:25:23 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$KDGKBLED(r0, 0x80045104, &(0x7f000084dfff)) 17:25:23 executing program 7: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/dev_mcast\x00') sendfile(r0, r1, &(0x7f0000000040)=0x4, 0xcb49) 17:25:23 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/dev_mcast\x00') sendfile(r0, r1, &(0x7f0000000040)=0x4, 0xcb49) [ 602.322349] binder: 5726:5730 ioctl c0306201 2000efd0 returned -11 [ 602.358925] binder: BINDER_SET_CONTEXT_MGR already set 17:25:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) unshare(0x400) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x2c, 0xd7, 0x4, 0x4, 0x1, 0xf5b, 0xffffffff, 0xfff, 0x7, 0xbcd, 0x81, 0xfff}) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000), 0x4) ioctl(r0, 0x84000008912, &(0x7f0000000100)="295ee1311f16f48f491070") setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0xfffffffffffffffd}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) r7 = dup3(r6, r5, 0x80000) getpeername$netlink(r7, &(0x7f0000000000), &(0x7f0000000040)=0xc) 17:25:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) unshare(0x400) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x2c, 0xd7, 0x4, 0x4, 0x1, 0xf5b, 0xffffffff, 0xfff, 0x7, 0xbcd, 0x81, 0xfff}) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000), 0x4) ioctl(r0, 0x84000008912, &(0x7f0000000100)="295ee1311f16f48f491070") setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0xfffffffffffffffd}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) r7 = dup3(r6, r5, 0x80000) getpeername$netlink(r7, &(0x7f0000000000), &(0x7f0000000040)=0xc) 17:25:23 executing program 7: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/dev_mcast\x00') sendfile(r0, r1, &(0x7f0000000040)=0x4, 0xcb49) [ 602.371475] binder: 5726:5737 ioctl 40046207 0 returned -16 17:25:23 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/dev_mcast\x00') sendfile(r0, r1, &(0x7f0000000040)=0x4, 0xcb49) [ 602.403392] binder_alloc: 5726: binder_alloc_buf, no vma [ 602.403412] binder: 5726:5744 transaction failed 29189/-3, size 0-0 line 3141 [ 602.467252] binder: undelivered TRANSACTION_ERROR: 29189 [ 602.473395] binder: release 5726:5730 transaction 491 out, still active [ 602.493546] binder: undelivered TRANSACTION_COMPLETE [ 602.509920] binder: send failed reply for transaction 491, target dead 17:25:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xfffd) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000007, 0x11, r1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x4fb, &(0x7f0000000000)=[{}]}, 0x10) 17:25:23 executing program 7: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/dev_mcast\x00') sendfile(r0, r1, &(0x7f0000000040)=0x4, 0xcb49) 17:25:23 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/dev_mcast\x00') sendfile(r0, r1, &(0x7f0000000040)=0x4, 0xcb49) 17:25:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000006dc0)=0xd83) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:25:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) unshare(0x400) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x2c, 0xd7, 0x4, 0x4, 0x1, 0xf5b, 0xffffffff, 0xfff, 0x7, 0xbcd, 0x81, 0xfff}) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000), 0x4) ioctl(r0, 0x84000008912, &(0x7f0000000100)="295ee1311f16f48f491070") setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0xfffffffffffffffd}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) r7 = dup3(r6, r5, 0x80000) getpeername$netlink(r7, &(0x7f0000000000), &(0x7f0000000040)=0xc) 17:25:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r1, &(0x7f0000000380)=""/206, 0x56) mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x6000400) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x3, 0x0, {0xa, 0x2, 0x3, @remote={0xfe, 0x80}, 0x4}}}, 0x32) getpeername(r3, &(0x7f0000000080)=@vsock={0x0, 0x0, 0x0, @reserved}, &(0x7f0000000000)=0x80) 17:25:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) unshare(0x400) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x2c, 0xd7, 0x4, 0x4, 0x1, 0xf5b, 0xffffffff, 0xfff, 0x7, 0xbcd, 0x81, 0xfff}) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000), 0x4) ioctl(r0, 0x84000008912, &(0x7f0000000100)="295ee1311f16f48f491070") setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0xfffffffffffffffd}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) r7 = dup3(r6, r5, 0x80000) getpeername$netlink(r7, &(0x7f0000000000), &(0x7f0000000040)=0xc) 17:25:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 602.838530] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 17:25:23 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0)="dd", 0x1, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\b', 0x1, 0x3fffffa, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) 17:25:23 executing program 5: fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) ftruncate(r2, 0x0) 17:25:24 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 17:25:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}, 0x5000000, 0x0, 0x2}, 0x2a) 17:25:24 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 17:25:24 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0)="dd", 0x1, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\b', 0x1, 0x3fffffa, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) 17:25:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}, 0x5000000, 0x0, 0x2}, 0x2a) 17:25:24 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) 17:25:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xfffd) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000007, 0x11, r1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x4fb, &(0x7f0000000000)=[{}]}, 0x10) 17:25:24 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mount(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='./bus\x00', &(0x7f00000002c0)="7270635f706970656673002a88f5f1b5a0b9de4d0a20e6702bfcd1a0e4d6d2d70d8c384e1d0265666dbb00c1a9662b932f07cc8e5561c8d37b2a411875c40b0ac4142f2a2e150cba02b6d97e4c7bd6b6c06978c807fd3f80fa1e345759441b994d4cc203059e89acdc9b931d400eaaa107c4d68f0b65aff614e55ca1be0fbd66cd4c624a7518ba6e234e5466439dc969dfcdbb4f051dd429", 0x2001, 0x0) 17:25:24 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0)="dd", 0x1, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\b', 0x1, 0x3fffffa, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) 17:25:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}, 0x5000000, 0x0, 0x2}, 0x2a) 17:25:24 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 17:25:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)) tkill(0x0, 0x0) 17:25:24 executing program 3: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xb5) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) 17:25:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}, 0x5000000, 0x0, 0x2}, 0x2a) 17:25:24 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 17:25:25 executing program 5: fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) ftruncate(r2, 0x0) 17:25:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) 17:25:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x9, &(0x7f0000000100)=@req3, 0x3) 17:25:25 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0)="dd", 0x1, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)='\b', 0x1, 0x3fffffa, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) 17:25:25 executing program 7: seccomp(0x1, 0x5, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6}]}) 17:25:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback={0x0, 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x80}, 0x1}, 0x0) 17:25:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000340), 0x38f, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r2 = open(&(0x7f0000000000)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff}]}, 0x10) sendfile(r1, r2, &(0x7f0000d83ff8), 0x200800900000002) 17:25:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xfffd) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000007, 0x11, r1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x4fb, &(0x7f0000000000)=[{}]}, 0x10) 17:25:25 executing program 3: fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) ftruncate(r2, 0x0) 17:25:25 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}, 0x1}, 0x0) 17:25:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fanotify_mark(0xffffffffffffffff, 0x1, 0x40000012, 0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00') 17:25:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000340), 0x38f, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r2 = open(&(0x7f0000000000)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff}]}, 0x10) sendfile(r1, r2, &(0x7f0000d83ff8), 0x200800900000002) 17:25:25 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='net/psched\x00') sendfile(r0, r1, &(0x7f0000000000), 0x7ffffffe) 17:25:25 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000140)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 17:25:25 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl(r0, 0x3359, &(0x7f0000000100)) 17:25:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x70}, 0x1}, 0x0) 17:25:25 executing program 5: fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) ftruncate(r2, 0x0) 17:25:25 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='net/psched\x00') sendfile(r0, r1, &(0x7f0000000000), 0x7ffffffe) 17:25:25 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}, 0x1}, 0x0) 17:25:25 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl(r0, 0x3359, &(0x7f0000000100)) 17:25:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000340), 0x38f, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r2 = open(&(0x7f0000000000)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff}]}, 0x10) sendfile(r1, r2, &(0x7f0000d83ff8), 0x200800900000002) 17:25:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}, 0x1}, 0x0) 17:25:25 executing program 2: vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x1000000000000078, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x1000000000000251, 0x0) 17:25:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}, 0x1}, 0x0) 17:25:26 executing program 3: fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) ftruncate(r2, 0x0) 17:25:26 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl(r0, 0x3359, &(0x7f0000000100)) 17:25:26 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7006, &(0x7f0000000040)) 17:25:26 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='net/psched\x00') sendfile(r0, r1, &(0x7f0000000000), 0x7ffffffe) 17:25:26 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}, 0x1}, 0x0) 17:25:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}, 0x1}, 0x0) 17:25:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000340), 0x38f, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r2 = open(&(0x7f0000000000)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff}]}, 0x10) sendfile(r1, r2, &(0x7f0000d83ff8), 0x200800900000002) 17:25:26 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl(r0, 0x3359, &(0x7f0000000100)) 17:25:26 executing program 5: fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) ftruncate(r2, 0x0) 17:25:26 executing program 2: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'security\x00'}, &(0x7f0000000000)=0x24) 17:25:26 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='net/psched\x00') sendfile(r0, r1, &(0x7f0000000000), 0x7ffffffe) 17:25:26 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 17:25:26 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0xfea4) 17:25:26 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}, 0x1}, 0x0) 17:25:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mkdir(&(0x7f0000a7aff6)='./control\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f000003a000)='./control\x00', 0x81000100) read(r2, &(0x7f0000000140)=""/229, 0xe5) dup3(r1, r2, 0x0) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) 17:25:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000001000)=@newsa={0x184, 0x10, 0x3, 0x0, 0x0, {{@in=@loopback=0x7f000001}, {@in6, 0x0, 0x33}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha3-224-generic\x00'}}}]}, 0x184}, 0x1}, 0x0) 17:25:27 executing program 3: fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x80000001) ftruncate(r2, 0x0) 17:25:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000340)) ioctl$int_out(r1, 0x5460, &(0x7f0000000040)) 17:25:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000064b2274099dad7f5f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326539269f269ab7a961fba57c8ef3d681b1b3b32eebf87846855d69fc554499085f4f882cfbe870cc6cad1e2703813e2a5b87d89f08703cceee45b60c045c5591d6d112e08fd1834a7086adf7456b0e5d9897064742a63bc36577ab06f793ba55dc9a9f9b00691df2b00c55bcfe4dbff808cdce4088a7d6311a8") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) sendfile(r0, r2, &(0x7f0000000040), 0x5745) ftruncate(r2, 0x8200) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x111440, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) pread64(r0, &(0x7f0000000740)=""/4096, 0xff33, 0x0) 17:25:27 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@updsa={0x110, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@loopback=0x7f000001}, {@in6, 0x0, 0x2b}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@local={0xac, 0x14, 0x14, 0xaa}}, @mark={0xc, 0x15}]}, 0x110}, 0x1}, 0x0) 17:25:27 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0xfea4) 17:25:27 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) unshare(0x2000400) signalfd(r0, &(0x7f0000000040), 0x8) 17:25:27 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0xfea4) 17:25:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480), 0x1, 0x0, &(0x7f0000000040)='J'}) [ 606.102484] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 17:25:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000064b2274099dad7f5f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326539269f269ab7a961fba57c8ef3d681b1b3b32eebf87846855d69fc554499085f4f882cfbe870cc6cad1e2703813e2a5b87d89f08703cceee45b60c045c5591d6d112e08fd1834a7086adf7456b0e5d9897064742a63bc36577ab06f793ba55dc9a9f9b00691df2b00c55bcfe4dbff808cdce4088a7d6311a8") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) sendfile(r0, r2, &(0x7f0000000040), 0x5745) ftruncate(r2, 0x8200) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x111440, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) pread64(r0, &(0x7f0000000740)=""/4096, 0xff33, 0x0) 17:25:27 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@updsa={0x110, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@loopback=0x7f000001}, {@in6, 0x0, 0x2b}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@local={0xac, 0x14, 0x14, 0xaa}}, @mark={0xc, 0x15}]}, 0x110}, 0x1}, 0x0) 17:25:27 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/2, 0x357) 17:25:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x0, 0x100, 0x80}, 0xc) 17:25:27 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0xfea4) 17:25:27 executing program 5: rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x40040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f0000000140)) r0 = gettid() syz_open_procfs(r0, &(0x7f0000000040)='net/sctp\x00') mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x800000000044031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') 17:25:27 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="89130400004514ad773f717ff3f3768e83", 0x11) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 17:25:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000002c0)) [ 606.772121] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 17:25:28 executing program 4: r0 = memfd_create(&(0x7f0000000080)="5bd295e7a5c45ebd0000", 0x0) write$binfmt_aout(r0, &(0x7f0000000400)={{0x108, 0x0, 0x0, 0x3db, 0x2c0, 0x0, 0x2e2}}, 0x20) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000003c0), &(0x7f00000005c0), 0x1000) 17:25:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000064b2274099dad7f5f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326539269f269ab7a961fba57c8ef3d681b1b3b32eebf87846855d69fc554499085f4f882cfbe870cc6cad1e2703813e2a5b87d89f08703cceee45b60c045c5591d6d112e08fd1834a7086adf7456b0e5d9897064742a63bc36577ab06f793ba55dc9a9f9b00691df2b00c55bcfe4dbff808cdce4088a7d6311a8") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) sendfile(r0, r2, &(0x7f0000000040), 0x5745) ftruncate(r2, 0x8200) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x111440, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) pread64(r0, &(0x7f0000000740)=""/4096, 0xff33, 0x0) 17:25:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setrlimit(0xe, &(0x7f0000000000)={0x0, 0x4}) 17:25:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a600804e220000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 17:25:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@updsa={0x110, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@loopback=0x7f000001}, {@in6, 0x0, 0x2b}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@local={0xac, 0x14, 0x14, 0xaa}}, @mark={0xc, 0x15}]}, 0x110}, 0x1}, 0x0) 17:25:28 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/2, 0x357) 17:25:28 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/2, 0x357) 17:25:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x18, &(0x7f0000000080)=""/56, &(0x7f00000000c0)=0x38) 17:25:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000064b2274099dad7f5f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326539269f269ab7a961fba57c8ef3d681b1b3b32eebf87846855d69fc554499085f4f882cfbe870cc6cad1e2703813e2a5b87d89f08703cceee45b60c045c5591d6d112e08fd1834a7086adf7456b0e5d9897064742a63bc36577ab06f793ba55dc9a9f9b00691df2b00c55bcfe4dbff808cdce4088a7d6311a8") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) sendfile(r0, r2, &(0x7f0000000040), 0x5745) ftruncate(r2, 0x8200) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x111440, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) pread64(r0, &(0x7f0000000740)=""/4096, 0xff33, 0x0) 17:25:28 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/2, 0x357) 17:25:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r2) 17:25:28 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/2, 0x357) 17:25:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) write(r2, &(0x7f00000000c0)="1b0000004a001f0fff07f4f9002304000a04f51108000100020100", 0x1b) recvmmsg(r2, &(0x7f0000004c40)=[{{&(0x7f0000004500)=@rc, 0x80, &(0x7f0000004640), 0x0, &(0x7f0000004680)=""/160, 0x52}}, {{&(0x7f0000004740)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000004ac0), 0x147, &(0x7f0000004b40)=""/206, 0xce}}], 0x2, 0x0, &(0x7f0000004dc0)={0x77359400}) 17:25:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat(r1, &(0x7f00000000c0)='./bus\x00', 0x20000, 0x1b1) fcntl$setstatus(r1, 0x4, 0x6100) fallocate(r1, 0x0, 0x0, 0xea86) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x4) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:28 executing program 2: mlock2(&(0x7f00009b5000/0x3000)=nil, 0xd5ff438933b6e90a, 0x0) 17:25:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r2) [ 607.065576] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 17:25:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000015ff8)={0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x33, &(0x7f0000abaff9)={0x3, 0xfff}, 0x10) 17:25:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@updsa={0x110, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@loopback=0x7f000001}, {@in6, 0x0, 0x2b}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@local={0xac, 0x14, 0x14, 0xaa}}, @mark={0xc, 0x15}]}, 0x110}, 0x1}, 0x0) 17:25:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) write(r2, &(0x7f00000000c0)="1b0000004a001f0fff07f4f9002304000a04f51108000100020100", 0x1b) recvmmsg(r2, &(0x7f0000004c40)=[{{&(0x7f0000004500)=@rc, 0x80, &(0x7f0000004640), 0x0, &(0x7f0000004680)=""/160, 0x52}}, {{&(0x7f0000004740)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000004ac0), 0x147, &(0x7f0000004b40)=""/206, 0xce}}], 0x2, 0x0, &(0x7f0000004dc0)={0x77359400}) 17:25:28 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/2, 0x357) 17:25:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r2) 17:25:28 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/2, 0x357) 17:25:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r2) 17:25:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) write(r2, &(0x7f00000000c0)="1b0000004a001f0fff07f4f9002304000a04f51108000100020100", 0x1b) recvmmsg(r2, &(0x7f0000004c40)=[{{&(0x7f0000004500)=@rc, 0x80, &(0x7f0000004640), 0x0, &(0x7f0000004680)=""/160, 0x52}}, {{&(0x7f0000004740)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000004ac0), 0x147, &(0x7f0000004b40)=""/206, 0xce}}], 0x2, 0x0, &(0x7f0000004dc0)={0x77359400}) 17:25:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r2) 17:25:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r2) 17:25:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}], 0x0, 0x0, &(0x7f0000000340)}) 17:25:28 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f85fa0)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback=0x7f000001}}]}, 0x60}, 0x1}, 0x0) 17:25:28 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) ppoll(&(0x7f0000000200)=[{r1}], 0x1, &(0x7f0000000240), &(0x7f0000000280), 0x8) [ 607.187808] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 607.265019] binder: 6061:6064 ERROR: BC_REGISTER_LOOPER called without request [ 607.289503] binder_alloc: 6061: binder_alloc_buf, no vma [ 607.295321] binder: 6061:6064 transaction failed 29189/-3, size 0-0 line 3141 [ 607.303206] binder: send failed reply for transaction 494 to 6061:6064 [ 607.311640] binder_alloc: binder_alloc_mmap_handler: 6061 20001000-20004000 already mapped failed -16 [ 607.322337] binder: BINDER_SET_CONTEXT_MGR already set [ 607.328019] binder: 6061:6064 ioctl 40046207 0 returned -16 [ 607.333368] binder_alloc: 6061: binder_alloc_buf, no vma [ 607.333388] binder: 6061:6075 transaction failed 29189/-3, size 0-0 line 3141 [ 607.336749] binder: 6061:6073 ERROR: BC_REGISTER_LOOPER called without request [ 607.336789] binder: 6061:6075 got reply transaction with no transaction stack 17:25:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat(r1, &(0x7f00000000c0)='./bus\x00', 0x20000, 0x1b1) fcntl$setstatus(r1, 0x4, 0x6100) fallocate(r1, 0x0, 0x0, 0xea86) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x4) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) write(r2, &(0x7f00000000c0)="1b0000004a001f0fff07f4f9002304000a04f51108000100020100", 0x1b) recvmmsg(r2, &(0x7f0000004c40)=[{{&(0x7f0000004500)=@rc, 0x80, &(0x7f0000004640), 0x0, &(0x7f0000004680)=""/160, 0x52}}, {{&(0x7f0000004740)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000004ac0), 0x147, &(0x7f0000004b40)=""/206, 0xce}}], 0x2, 0x0, &(0x7f0000004dc0)={0x77359400}) 17:25:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r2) 17:25:28 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") rmdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) 17:25:28 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2={0xff, 0x2, [], 0x1}}, 0x20) 17:25:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) 17:25:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) [ 607.336797] binder: 6061:6075 transaction failed 29201/-71, size 0-0 line 2926 17:25:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000bfcffc), &(0x7f0000d12ffc)=0x4) 17:25:28 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x7fe) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x806, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d34") unshare(0x48000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000340)=0x54) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f0000000000)=0x54) 17:25:28 executing program 7: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ppoll(&(0x7f000081dfe8), 0x0, &(0x7f000059a000), &(0x7f0000404ff8), 0x8) 17:25:28 executing program 6: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000000080), 0x0) 17:25:28 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 17:25:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) [ 607.387457] binder: undelivered TRANSACTION_ERROR: 29201 17:25:28 executing program 7: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ppoll(&(0x7f000081dfe8), 0x0, &(0x7f000059a000), &(0x7f0000404ff8), 0x8) 17:25:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000181, 0x0) 17:25:28 executing program 1: r0 = memfd_create(&(0x7f0000000180)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000006, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) [ 607.442055] binder: undelivered TRANSACTION_COMPLETE [ 607.449985] binder: undelivered TRANSACTION_ERROR: 29189 [ 607.477594] binder: undelivered TRANSACTION_ERROR: 29190 [ 607.514986] IPVS: Creating netns size=2536 id=152 17:25:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat(r1, &(0x7f00000000c0)='./bus\x00', 0x20000, 0x1b1) fcntl$setstatus(r1, 0x4, 0x6100) fallocate(r1, 0x0, 0x0, 0xea86) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x4) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 17:25:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) 17:25:28 executing program 7: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ppoll(&(0x7f000081dfe8), 0x0, &(0x7f000059a000), &(0x7f0000404ff8), 0x8) 17:25:28 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 17:25:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x28}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000180)=[{{&(0x7f00000012c0)=@can={0x1d}, 0x80, &(0x7f0000000200)}}, {{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80)}}], 0x2, 0x0) 17:25:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) 17:25:28 executing program 7: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ppoll(&(0x7f000081dfe8), 0x0, &(0x7f000059a000), &(0x7f0000404ff8), 0x8) 17:25:28 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 607.548891] binder: undelivered TRANSACTION_ERROR: 29189 [ 607.622050] IPVS: Creating netns size=2536 id=153 17:25:28 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x7fe) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x806, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d34") unshare(0x48000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000340)=0x54) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f0000000000)=0x54) 17:25:28 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000240)="6e65740010df90fb2f000074d194152cab5074736e6d703600") getdents(r1, &(0x7f0000001100)=""/182, 0xb6) 17:25:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@loopback=0x7f000001}, {@in6, 0x5000000, 0x3c}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@local={0xac, 0x14, 0x14, 0xaa}}]}, 0x104}, 0x1}, 0x0) 17:25:29 executing program 7: seccomp(0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000140)}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001800)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001880)=0x80, 0x80800) 17:25:29 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 17:25:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 17:25:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat(r1, &(0x7f00000000c0)='./bus\x00', 0x20000, 0x1b1) fcntl$setstatus(r1, 0x4, 0x6100) fallocate(r1, 0x0, 0x0, 0xea86) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x4) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) [ 608.390073] mip6: mip6_destopt_init_state: spi is not 0: 5 17:25:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 17:25:29 executing program 1: r0 = memfd_create(&(0x7f0000000180)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000006, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 17:25:29 executing program 6: r0 = socket(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000000), 0x4) 17:25:29 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6) 17:25:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x92, r0, 0x0) clone(0x0, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000e80)) 17:25:29 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x7fe) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x806, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d34") unshare(0x48000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000340)=0x54) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f0000000000)=0x54) 17:25:29 executing program 5: open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) mount$9p_tcp(&(0x7f0000000000)='224.20.20.0\n', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=', 'tcp', 0x2c, {'port', 0x3d}, 0x2c, {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 17:25:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 17:25:29 executing program 6: r0 = socket(0x11, 0x8080a, 0x0) getpeername(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) [ 608.613660] 9pnet: p9_fd_create_tcp (6194): problem connecting socket to 224.20.20.0 [ 608.613660] [ 609.552245] pktgen: kernel_thread() failed for cpu 0 [ 609.557419] pktgen: Cannot create thread for cpu 0 (-4) [ 609.562887] pktgen: kernel_thread() failed for cpu 1 [ 609.568297] pktgen: Cannot create thread for cpu 1 (-4) [ 609.573661] pktgen: Initialization failed for all threads 17:25:30 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x7fe) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x806, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d34") unshare(0x48000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000340)=0x54) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f0000000000)=0x54) 17:25:30 executing program 7: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b01"], 0x2) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x1000) 17:25:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 17:25:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)=@setlink={0x40, 0x13, 0x101, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x4, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x40}, 0x1}, 0x0) 17:25:30 executing program 5: open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) mount$9p_tcp(&(0x7f0000000000)='224.20.20.0\n', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=', 'tcp', 0x2c, {'port', 0x3d}, 0x2c, {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 17:25:30 executing program 6: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r1, 0x0, 0x0) 17:25:30 executing program 1: r0 = memfd_create(&(0x7f0000000180)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000006, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 17:25:30 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") ioperm(0x0, 0x800, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) write$cgroup_pid(r1, &(0x7f0000000040)={[0x35]}, 0x145) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x20044, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) [ 609.679285] pktgen: kernel_thread() failed for cpu 0 [ 609.684466] pktgen: Cannot create thread for cpu 0 (-4) [ 609.690020] pktgen: kernel_thread() failed for cpu 1 [ 609.695125] pktgen: Cannot create thread for cpu 1 (-4) [ 609.700520] pktgen: Initialization failed for all threads 17:25:30 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x4, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr, @multicast2=0xe0000002}, 0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'bond_slave_0\x00'}, 0x18) close(r2) dup3(r0, r1, 0x0) 17:25:30 executing program 6: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r1, 0x0, 0x0) [ 609.760582] 9pnet: p9_fd_create_tcp (6218): problem connecting socket to 224.20.20.0 [ 609.760582] 17:25:30 executing program 6: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r1, 0x0, 0x0) 17:25:30 executing program 5: open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) mount$9p_tcp(&(0x7f0000000000)='224.20.20.0\n', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=', 'tcp', 0x2c, {'port', 0x3d}, 0x2c, {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) [ 609.858638] 9pnet: p9_fd_create_tcp (6246): problem connecting socket to 224.20.20.0 [ 609.858638] 17:25:31 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x7fe) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x806, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d34") unshare(0x48000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000340)=0x54) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f0000000000)=0x54) 17:25:31 executing program 6: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r1, 0x0, 0x0) 17:25:31 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") ioperm(0x0, 0x800, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) write$cgroup_pid(r1, &(0x7f0000000040)={[0x35]}, 0x145) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x20044, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) 17:25:31 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x3}}]}, 0x48}, 0x1}, 0x0) [ 609.958752] IPVS: Creating netns size=2536 id=154 17:25:31 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x7fe) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x806, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d34") unshare(0x48000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000340)=0x54) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f0000000000)=0x54) 17:25:31 executing program 5: open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) mount$9p_tcp(&(0x7f0000000000)='224.20.20.0\n', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=', 'tcp', 0x2c, {'port', 0x3d}, 0x2c, {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 17:25:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0xa, 0x8) recvfrom$packet(r1, &(0x7f0000000000)=""/191, 0xbf, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x709000) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) syz_emit_ethernet(0x32, &(0x7f000018f000)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) 17:25:31 executing program 7: r0 = socket(0xa, 0x10000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)="2f70726f632f6e65742f697076342f6e000000000000000000000400000000", 0x2, 0x0) 17:25:31 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x707000) 17:25:31 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x707000) [ 610.053250] 9pnet: p9_fd_create_tcp (6270): problem connecting socket to 224.20.20.0 [ 610.053250] 17:25:31 executing program 1: r0 = memfd_create(&(0x7f0000000180)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000006, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 17:25:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14, {0x2, 0x0, @loopback=0x7f000001}, 'lo\x00'}) 17:25:31 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") ioperm(0x0, 0x800, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) write$cgroup_pid(r1, &(0x7f0000000040)={[0x35]}, 0x145) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x20044, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) 17:25:31 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x707000) 17:25:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) dup2(r0, r1) 17:25:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14, {0x2, 0x0, @loopback=0x7f000001}, 'lo\x00'}) [ 611.540583] pktgen: kernel_thread() failed for cpu 0 [ 611.545732] pktgen: Cannot create thread for cpu 0 (-4) [ 611.551487] pktgen: kernel_thread() failed for cpu 1 [ 611.556594] pktgen: Cannot create thread for cpu 1 (-4) [ 611.562296] pktgen: Initialization failed for all threads 17:25:32 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x7fe) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x806, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d34") unshare(0x48000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000340)=0x54) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f0000000000)=0x54) 17:25:32 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x707000) 17:25:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14, {0x2, 0x0, @loopback=0x7f000001}, 'lo\x00'}) 17:25:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fremovexattr(r0, &(0x7f0000000100)=@known='system.posix_acl_access\x00') [ 611.699936] pktgen: kernel_thread() failed for cpu 0 [ 611.705133] pktgen: Cannot create thread for cpu 0 (-4) [ 611.711060] pktgen: kernel_thread() failed for cpu 1 [ 611.716329] pktgen: Cannot create thread for cpu 1 (-4) [ 611.722066] pktgen: Initialization failed for all threads [ 611.840243] IPVS: Creating netns size=2536 id=155 17:25:32 executing program 7: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)="1db510774375f47a05942c459e810c73fdf5623fb1eea51ac1e04c0907bc6c8326e016c477b652f66bcff5828246a8c69e7a40e2aa1197a1d13cb6162194e50a799882e500", 0x45, r0) keyctl$search(0xa, r0, &(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0) 17:25:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") ioperm(0x0, 0x800, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) write$cgroup_pid(r1, &(0x7f0000000040)={[0x35]}, 0x145) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x20044, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) 17:25:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0xa, 0x8) recvfrom$packet(r1, &(0x7f0000000000)=""/191, 0xbf, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x709000) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) syz_emit_ethernet(0x32, &(0x7f000018f000)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) 17:25:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xa73000)=nil, 0xa73000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00000000c0)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r1, r2, 0x33, &(0x7f0000000180)={0x0, 0x0, 0x6ffff}) rt_sigtimedwait(&(0x7f0000000200)={0x7fffffffffffff66}, &(0x7f0000a72ff0), &(0x7f0000a72000)={0x77359400}, 0x8) 17:25:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14, {0x2, 0x0, @loopback=0x7f000001}, 'lo\x00'}) 17:25:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x42, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) 17:25:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)}) 17:25:33 executing program 0: ioprio_set$uid(0x0, 0x0, 0x800) 17:25:33 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000001200)='./file0\x00', 0x0) pause() r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000200)=ANY=[], 0xfffffcf6) lseek(r1, 0x0, 0x1000000003) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'user.', './cgroup.net\x00'}, &(0x7f0000000180)='./cgroup.net\x00', 0xd, 0x0) [ 611.920445] binder: 6337:6340 got transaction with too large buffer [ 611.927855] binder: 6337:6340 transaction failed 29201/-22, size 88-96 line 3300 17:25:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000029000000050000009602020100000016"], 0x18}}], 0x2, 0x0) 17:25:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="fa"], 0x0, 0x0, &(0x7f0000000500)}) 17:25:33 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x6f55) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) fallocate(r1, 0x3, 0x7fff, 0x7) fallocate(r1, 0x3, 0x5e89, 0xffff) 17:25:33 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'io', 0x20}]}, 0x4) 17:25:33 executing program 3: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x100000001, 0x4}], 0x18) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x41) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 17:25:33 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="24000000100001000000fd946fa2830020200a0009000300001c85680c1ba3a20400ff5e28000000060affffba16a0aa1c0009c001da5a80d1090000000000000029090000000cd37eaa0e9e", 0x4c}], 0x1}, 0x0) [ 611.960887] binder_alloc: binder_alloc_mmap_handler: 6337 20001000-20004000 already mapped failed -16 [ 611.972468] binder_alloc: 6337: binder_alloc_buf, no vma [ 611.973892] binder: BINDER_SET_CONTEXT_MGR already set [ 611.973899] binder: 6337:6340 ioctl 40046207 0 returned -16 [ 611.998186] binder: 6337:6349 transaction failed 29189/-3, size 88-96 line 3141 17:25:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sockstat6\x00') pread64(r1, &(0x7f0000002000)=""/4096, 0x1000, 0x0) 17:25:33 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x84, @loopback=0x7f000001, 0x0, 0xffffffffffffffff, "73680000ea65031cb4d62d93ff000700"}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 17:25:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sockstat6\x00') pread64(r1, &(0x7f0000002000)=""/4096, 0x1000, 0x0) [ 612.018697] binder: 6357:6363 unknown command 250 [ 612.018708] binder: 6357:6363 ioctl c0306201 20000080 returned -22 [ 612.031319] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. [ 612.088667] binder: undelivered TRANSACTION_ERROR: 29189 [ 612.095927] binder: undelivered TRANSACTION_ERROR: 29201 17:25:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0xa, 0x8) recvfrom$packet(r1, &(0x7f0000000000)=""/191, 0xbf, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x709000) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) syz_emit_ethernet(0x32, &(0x7f000018f000)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) 17:25:33 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) ftruncate(r1, 0x401) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x0, 0x0, 0x5f5) lseek(r2, 0x0, 0x4) 17:25:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)}) 17:25:33 executing program 0: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000016c0), &(0x7f0000000800)=0x30) 17:25:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sockstat6\x00') pread64(r1, &(0x7f0000002000)=""/4096, 0x1000, 0x0) 17:25:33 executing program 3: r0 = socket(0x10, 0x2, 0xc) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000594000), 0x0) dup2(r1, r0) [ 612.806222] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 612.811504] binder: 6388:6396 got transaction with too large buffer [ 612.811531] binder: 6388:6396 transaction failed 29201/-22, size 88-96 line 3300 [ 612.835098] binder: undelivered TRANSACTION_ERROR: 29201 [ 612.862091] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 17:25:34 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="cf", @ANYBLOB="000000000000000000000e000000"], 0x2}, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 17:25:34 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x6f55) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) fallocate(r1, 0x3, 0x7fff, 0x7) fallocate(r1, 0x3, 0x5e89, 0xffff) 17:25:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0xfff) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x80300, 0x0) unshare(0x40000000) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="00060300000000fa08593a5ed56340eb01009aabc04052a5000002"]) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 17:25:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)}) 17:25:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sockstat6\x00') pread64(r1, &(0x7f0000002000)=""/4096, 0x1000, 0x0) 17:25:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) ftruncate(r1, 0x401) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x0, 0x0, 0x5f5) lseek(r2, 0x0, 0x4) 17:25:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000000)=0x9f5f, 0x4) 17:25:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000003, 0x31, 0xffffffffffffffff, 0x0) clock_getres(0xfffffffffffffffe, &(0x7f0000000000)) 17:25:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000000)=0x9f5f, 0x4) 17:25:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) ftruncate(r1, 0x401) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x0, 0x0, 0x5f5) lseek(r2, 0x0, 0x4) [ 613.053507] binder: 6410:6417 got transaction with too large buffer [ 613.060424] binder: 6410:6417 transaction failed 29201/-22, size 88-96 line 3300 [ 613.097212] binder: undelivered TRANSACTION_ERROR: 29201 [ 613.287157] IPVS: Creating netns size=2536 id=156 [ 613.319118] pktgen: kernel_thread() failed for cpu 1 [ 613.324704] pktgen: Cannot create thread for cpu 1 (-4) [ 613.332541] IPVS: Creating netns size=2536 id=157 17:25:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0xa, 0x8) recvfrom$packet(r1, &(0x7f0000000000)=""/191, 0xbf, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x709000) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) syz_emit_ethernet(0x32, &(0x7f000018f000)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) 17:25:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd={0x66642a85}, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)}) 17:25:34 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f0000004000), 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x401ffffffe) 17:25:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) ftruncate(r1, 0x401) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x0, 0x0, 0x5f5) lseek(r2, 0x0, 0x4) 17:25:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000000)=0x9f5f, 0x4) 17:25:34 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x6f55) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) fallocate(r1, 0x3, 0x7fff, 0x7) fallocate(r1, 0x3, 0x5e89, 0xffff) [ 613.699557] binder: 6439:6450 got transaction with too large buffer [ 613.716587] binder: 6439:6450 transaction failed 29201/-22, size 88-96 line 3300 [ 613.739323] binder: undelivered TRANSACTION_ERROR: 29201 17:25:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000000)=0x9f5f, 0x4) 17:25:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0xfff) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x80300, 0x0) unshare(0x40000000) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="00060300000000fa08593a5ed56340eb01009aabc04052a5000002"]) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 17:25:35 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f0000004000), 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x401ffffffe) 17:25:35 executing program 5: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x3e5) 17:25:35 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40485404, &(0x7f0000000040)={{0x1}}) 17:25:35 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="cf", @ANYBLOB="000000000000000000000e000000"], 0x2}, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 17:25:35 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x6f55) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) fallocate(r1, 0x3, 0x7fff, 0x7) fallocate(r1, 0x3, 0x5e89, 0xffff) 17:25:35 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f0000004000), 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x401ffffffe) 17:25:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="cf", @ANYBLOB="000000000000000000000e000000"], 0x2}, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 17:25:35 executing program 3: r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x2d) fcntl$setown(r3, 0x8, r0) readv(r1, &(0x7f0000002280)=[{&(0x7f0000002140)=""/252, 0xfc}], 0x1) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) dup3(r3, r4, 0x0) tkill(r2, 0x16) [ 614.119585] IPVS: Creating netns size=2536 id=158 17:25:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000ffc), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0xffffffffffffffff, 0x80000000000032, 0xffffffffffffffff, 0x0) close(r1) 17:25:35 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f0000004000), 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x401ffffffe) 17:25:35 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r1, r2, &(0x7f0000000000), 0x80000007ffffffe) 17:25:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0xfff) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x80300, 0x0) unshare(0x40000000) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="00060300000000fa08593a5ed56340eb01009aabc04052a5000002"]) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 17:25:35 executing program 6: unshare(0x40000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) 17:25:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@local={0xfe, 0x80, [], 0xaa}, @empty, @local={0xfe, 0x80, [], 0xaa}}) 17:25:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f0000000000)='#system\x00', 0x0, 0x0) 17:25:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000080), 0x4) close(r3) dup3(r1, r2, 0x0) 17:25:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80605414, &(0x7f0000000340)=""/4096) 17:25:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80605414, &(0x7f0000000340)=""/4096) 17:25:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80605414, &(0x7f0000000340)=""/4096) 17:25:35 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="cf", @ANYBLOB="000000000000000000000e000000"], 0x2}, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 17:25:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80605414, &(0x7f0000000340)=""/4096) 17:25:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x1d, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f00000075c0)=[{{&(0x7f0000002ec0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80, &(0x7f0000004380), 0x0, &(0x7f0000004400)}}, {{&(0x7f0000007440)=@ethernet, 0x80, &(0x7f0000007580)}}], 0x2, 0x0) 17:25:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="cf", @ANYBLOB="000000000000000000000e000000"], 0x2}, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) [ 614.897574] IPVS: Creating netns size=2536 id=159 17:25:36 executing program 3: r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x2d) fcntl$setown(r3, 0x8, r0) readv(r1, &(0x7f0000002280)=[{&(0x7f0000002140)=""/252, 0xfc}], 0x1) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) dup3(r3, r4, 0x0) tkill(r2, 0x16) [ 614.922121] IPVS: Creating netns size=2536 id=160 17:25:36 executing program 2: unshare(0x40000000) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000040)) socket(0x0, 0x0, 0x0) 17:25:36 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x9, 0x0) 17:25:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0xfff) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x80300, 0x0) unshare(0x40000000) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="00060300000000fa08593a5ed56340eb01009aabc04052a5000002"]) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 17:25:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) [ 615.645783] pktgen: kernel_thread() failed for cpu 0 [ 615.651069] pktgen: Cannot create thread for cpu 0 (-4) [ 615.656466] pktgen: kernel_thread() failed for cpu 1 [ 615.661604] pktgen: Cannot create thread for cpu 1 (-4) [ 615.666965] pktgen: Initialization failed for all threads [ 615.812404] IPVS: Creating netns size=2536 id=161 [ 615.828974] IPVS: Creating netns size=2536 id=162 17:25:36 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="cf", @ANYBLOB="000000000000000000000e000000"], 0x2}, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 17:25:36 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed0000464caeedf840d001fe92b08c3f7b8e1596417d7dcd645413be450000000000000001c122283846253398a04d99ca8680deb20632834bc027c44d4cf3fd102724d6748de61eebb06801048dea7636f3a248a9bf3123882ca9fc66b4e70b06d43045", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0xffffffffffffff0a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 17:25:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000080), 0x4) close(r3) dup3(r1, r2, 0x0) 17:25:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc80a2b345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)={0x5000000, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 17:25:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="cf", @ANYBLOB="000000000000000000000e000000"], 0x2}, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 17:25:36 executing program 3: r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x2d) fcntl$setown(r3, 0x8, r0) readv(r1, &(0x7f0000002280)=[{&(0x7f0000002140)=""/252, 0xfc}], 0x1) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) dup3(r3, r4, 0x0) tkill(r2, 0x16) 17:25:36 executing program 0: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000629000)={0xfffffffffffffffa}, 0x0, 0x8) rt_tgsigqueueinfo(r1, r2, 0x20, &(0x7f00003efff0)={0x0, 0x0, 0x40003}) rt_sigtimedwait(&(0x7f000031bff8)={0x8000080000001}, &(0x7f0000000000), &(0x7f000005b000)={0x77359400}, 0x8) 17:25:37 executing program 6: r0 = socket(0x10, 0x3, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000700)="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") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 17:25:37 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_dellink={0x24, 0x11, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4, 0x1a}]}, 0x24}, 0x1}, 0x0) 17:25:37 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 17:25:37 executing program 5: r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)='selinux\x00', 0xfffffffffffffffc) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000240)='e', 0x1, r0) keyctl$read(0xb, r1, &(0x7f0000000200)=""/44, 0x2c) 17:25:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [0xff, 0xff], @broadcast=0xffffffff}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1}, 0x0) [ 616.613722] pktgen: kernel_thread() failed for cpu 0 [ 616.618913] pktgen: Cannot create thread for cpu 0 (-4) [ 616.624307] pktgen: kernel_thread() failed for cpu 1 [ 616.629434] pktgen: Cannot create thread for cpu 1 (-4) [ 616.634787] pktgen: Initialization failed for all threads 17:25:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000080)={{}, 'port0\x00'}) 17:25:37 executing program 6: r0 = socket(0x10, 0x3, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000700)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f000000000000000045cc6158f031528844209c7ed05b160ef336721bf89686ff472f71dfca5353f6323ddf8006ffc1052d6a80985adc68017065648b35c7d321fc5c0466062fbfad5acbe7ff6cefe53c88c05ab970ceebdfa589098ad40d080deb2488f9e4069682b14483f113cb6979b2f390179a18e26b4088f1f31ed04a0a681f002e007436947475ab073711c98ae3b4259f1a1aff9b09aa66cb90ca43a1dbc6de15abb4ae739f9e8f047cd29ec76b9ef6beb7839f8071aaea4d247e6a9514748c93d0bb01a7c37ca6c856327af81f296d2c2c07c2d63b") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 17:25:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000980)="3a760ac4dcf828c0dd2d13f7626f786ee36f9ad3a39f3f61e1dcd0aa6333b6ce96fe6c263c766137c551de760ff538fcc79e0504003ed7fada717d9a48862d2128684ab099e538cbd4319c9dc8903fd93adcd61aeb4686814bc7a289253f9c9aa878b5dc577c9f052f4e7cc65504bfcf7348cc13bc90f5211cc2504ac2d32e4ae53ec60781abb92950b7fce94905a39e3946eee677420800ce34da0b2fa50847c2679fa51d5a7a3b9240b0954723db0b9538fa362af7047f22558b991bb876068ea011fd95c9e23f745e616d89703d977200000000000000003050c4d282455ff349a466b376cad96f94301703e77c5457b298", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) 17:25:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x5) ftruncate(r1, 0x5) 17:25:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000080), 0x4) close(r3) dup3(r1, r2, 0x0) 17:25:37 executing program 3: r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x2d) fcntl$setown(r3, 0x8, r0) readv(r1, &(0x7f0000002280)=[{&(0x7f0000002140)=""/252, 0xfc}], 0x1) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) dup3(r3, r4, 0x0) tkill(r2, 0x16) 17:25:37 executing program 7: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="0001705f66696c657300") getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 17:25:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000001ac0), &(0x7f0000000000)=0x4) 17:25:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="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") r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x10012, r0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x80086601, &(0x7f0000000000)) 17:25:37 executing program 2: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000100)='../file0\x00', &(0x7f00000001c0)='../file0\x00', &(0x7f0000000200)='debugfs\x00', 0x44000, &(0x7f0000000240)) mkdir(&(0x7f0000000000)='../file0\x00', 0x0) 17:25:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x5) ftruncate(r1, 0x5) 17:25:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) ftruncate(r1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) dup2(r1, r4) 17:25:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x12, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) 17:25:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="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") r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x10012, r0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x80086601, &(0x7f0000000000)) 17:25:37 executing program 6: r0 = socket(0x10, 0x3, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000700)="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") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 17:25:37 executing program 2: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') read(r2, &(0x7f00000000c0)=""/240, 0xff7b) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x1, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000100)={0x12}) 17:25:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x12, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) 17:25:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="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") r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x10012, r0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x80086601, &(0x7f0000000000)) 17:25:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x5) ftruncate(r1, 0x5) 17:25:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x12, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) 17:25:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000080), 0x4) close(r3) dup3(r1, r2, 0x0) 17:25:38 executing program 6: r0 = socket(0x10, 0x3, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000700)="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") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 17:25:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x5) ftruncate(r1, 0x5) 17:25:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="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") r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x10012, r0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x80086601, &(0x7f0000000000)) 17:25:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x12, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) 17:25:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x12, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) 17:25:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000e3dffc)=0x7, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000d11000), &(0x7f0000000000)=0x4) 17:25:39 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x8000010, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 17:25:39 executing program 0: setrlimit(0x7, &(0x7f0000a9cff8)) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) 17:25:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x12, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) 17:25:39 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000017c0)="295ee1311f16f477671070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) syz_extract_tcp_res$synack(&(0x7f0000001740), 0x1, 0x0) 17:25:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 17:25:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00004aaffc), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x46, &(0x7f0000325f23)=""/221, &(0x7f0000000000)=0xdd) mremap(&(0x7f000004f000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) 17:25:39 executing program 6: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="2f0000001800030007fffd946fa283bc8020000000040005031d856808000500000000000000f9f2d23b0b42fa3ccc", 0x2f}], 0x1}, 0x0) 17:25:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x12, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) 17:25:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8400008912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) pwritev(r1, &(0x7f0000001440)=[{&(0x7f0000000440)="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", 0xe0a}, {&(0x7f0000000300)="b56d16bdd452e6e9f464307e66baad25024e3fad071fe57a16a3f1838ebe00bd9af7705dba91b1a7af512eca992c72dabef4bdfac25aafc90c390ce94d19da467d2a02e4c7d0f0cb0330b0c4d97074fbd10e2ea3243d8318458bb5ec77ddd6", 0x5f}], 0x2, 0x0) 17:25:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xb278d57a0026eeac) 17:25:39 executing program 0: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000000)="130000001000ffdde200f49ff60f050000230a009d0000001104c53022e5f9ec364fe86bc337747a04cb1c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af559bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000000000000000000000", 0xb1) 17:25:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000140)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 17:25:39 executing program 6: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') ioctl$VT_RELDISP(r0, 0xb701) 17:25:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x64000400) r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x81, 0x0, 0x2, 0x33ed78863f3785}) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 17:25:39 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@setlink={0x34, 0x13, 0x32b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@nested={0xc, 0x9, [@generic="b21aa0212d"]}]}]}]}, 0x34}, 0x1}, 0x0) 17:25:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, 0x7, 0x800000000a, 0x1, 0x0, 0x0, {0x2}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 17:25:39 executing program 2: r0 = socket(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x50, &(0x7f0000000080)=""/8, &(0x7f0000000180)=0x12f) 17:25:39 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) socket$key(0xf, 0x3, 0x2) 17:25:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240)={0x303, 0x33}, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)) [ 618.699254] IPVS: Creating netns size=2536 id=163 [ 618.719201] IPVS: Creating netns size=2536 id=164 17:25:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x8000000000000007, &(0x7f00000000c0)) fcntl$lock(r0, 0x24, &(0x7f000001d000)={0x8000000000000001}) 17:25:40 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xb278d57a0026eeac) 17:25:40 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r1 = socket(0x10, 0x2, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 17:25:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) getrlimit(0x0, &(0x7f0000000000)) 17:25:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x64000400) r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x81, 0x0, 0x2, 0x33ed78863f3785}) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 17:25:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 17:25:40 executing program 6: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xffff, 0x4) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/239, 0xef}, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x6, 0x4) syz_emit_ethernet(0xfdef, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 17:25:40 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xb278d57a0026eeac) 17:25:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syslog(0x3, &(0x7f0000000140)=""/156, 0x9c) 17:25:40 executing program 1: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x51, r0, 0x0) writev(r0, &(0x7f0000003780)=[{&(0x7f0000000240)="e7", 0x1}], 0x1) writev(r0, &(0x7f0000003480)=[{}, {&(0x7f00000000c0)="3df85cbf7fbd2843b05ada732075c0a2deb85b17c6b5520e5a507732c9fb4113d9fc3f240d7d2f99e7edb2b811188bb23fe476acda91ee9f64512dc6a2a4de06b0b0b9df3e7f2a8da604b03e83dd094a9c9f3d0de18151125003f245f157545776208e6d59b5bd45d3694d2ef1d683cc712622da40c4cf178dce0cd49afe6cfb16e34ffb55d60910baafe6cb9b329d9f35dcf6c559da60245d21871e2f40dc095346e165753211bea307841410573dd2b428185a2c", 0xb5}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000001c0)="97750b961cf651523b98bab1314be94773f82926671fab2e163b0d11f1d0b2b36757bc064a6b0025df09b4e9c437", 0x2e}, {&(0x7f0000003380)="fe87ff4637834caf20636c663fbd5a35c10feebdfe2972fa863b7a8cac2f0a64b66cba4f159d748a0a866251fb7f4179e55bc7ed38780a0b7ad310bb40cbf81dba3ca6d67e255b483e05c48f2966534faf4bc44ce7d0c7ff886eba41eb8de3f3ce158666e2a165e3a21c91f484f844e5f9910003810e683e5803c9d59412a5a93d581152202af0a96e4fd686a846e0291dafa90203bd26273aa7b803822e408dda5a5f7b53f410ed9b15958fcadfceffd940a36b25f524e75a33b7e97215e8131d1ef5cef820f90ea7f91ccdfef2e6efba9cd312bda3d585b3a4435fa9ae0bc3f0bd02ccd93e9151820fb3368aff82cddc908e42f8b908", 0xf7}], 0x5) 17:25:40 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xb278d57a0026eeac) 17:25:40 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r1 = socket(0x10, 0x2, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 17:25:40 executing program 5: prctl$intptr(0x1e, 0x0) 17:25:40 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1080012, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 17:25:40 executing program 5: r0 = memfd_create(&(0x7f0000000000)="40722773656c9e402294d8432d665c272d5b76626f786e65743000", 0x2) fcntl$addseals(r0, 0x409, 0x2) write(r0, &(0x7f0000000080)="fb", 0x1) ftruncate(r0, 0x0) 17:25:40 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240)={0x303, 0x33}, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)) 17:25:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x46, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) 17:25:40 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000240)="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", 0xfc) [ 619.468989] IPVS: Creating netns size=2536 id=165 17:25:40 executing program 6: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xffff, 0x4) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/239, 0xef}, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x6, 0x4) syz_emit_ethernet(0xfdef, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 17:25:40 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1080012, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 17:25:40 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r1 = socket(0x10, 0x2, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 17:25:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240)={0x303, 0x33}, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)) 17:25:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 17:25:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000d00)="09320d157b2155ea7f4d52d375335c63"}) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x0) 17:25:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x64000400) r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x81, 0x0, 0x2, 0x33ed78863f3785}) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 17:25:41 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1080012, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 17:25:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r1 = socket(0x10, 0x2, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 17:25:41 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1080012, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 17:25:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000d00)="09320d157b2155ea7f4d52d375335c63"}) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x0) 17:25:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000d00)="09320d157b2155ea7f4d52d375335c63"}) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x0) 17:25:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) 17:25:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240)={0x303, 0x33}, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)) 17:25:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000d00)="09320d157b2155ea7f4d52d375335c63"}) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x0) 17:25:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) [ 620.535550] IPVS: Creating netns size=2536 id=166 17:25:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) 17:25:41 executing program 6: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xffff, 0x4) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/239, 0xef}, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x6, 0x4) syz_emit_ethernet(0xfdef, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 17:25:41 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = dup2(r0, r1) read(r2, &(0x7f00004b8fab)=""/85, 0x55) 17:25:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240)={0x303, 0x33}, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)) 17:25:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 17:25:41 executing program 5: prctl$intptr(0x1d, 0x0) 17:25:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x64000400) r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x81, 0x0, 0x2, 0x33ed78863f3785}) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 17:25:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) 17:25:41 executing program 7: r0 = epoll_create1(0x0) close(r0) r1 = memfd_create(&(0x7f0000002000)="6d696d655f747970655e5c76626f780565743028255b73656375726974796370757365742d262727a0255b7070703000", 0x2) fcntl$addseals(r1, 0x409, 0x4) ftruncate(r0, 0x6) 17:25:41 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 17:25:41 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0084905, &(0x7f0000000080)) 17:25:41 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x20, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10}}, 0x20}, 0x1}, 0x0) 17:25:41 executing program 7: r0 = getpgrp(0x0) r1 = gettid() madvise(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0xa) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x2ffff}) rt_sigtimedwait(&(0x7f0000a72000)={0x563}, &(0x7f0000a77ff0), &(0x7f000044a000)={0x0, 0x989680}, 0x8) [ 620.882797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 17:25:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240)={0x303, 0x33}, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)) 17:25:42 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x20, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10}}, 0x20}, 0x1}, 0x0) 17:25:42 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 17:25:42 executing program 7: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x20, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10}}, 0x20}, 0x1}, 0x0) [ 621.105018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 621.115254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 621.280153] IPVS: Creating netns size=2536 id=167 17:25:42 executing program 6: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xffff, 0x4) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/239, 0xef}, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x6, 0x4) syz_emit_ethernet(0xfdef, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 17:25:42 executing program 7: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x20, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10}}, 0x20}, 0x1}, 0x0) 17:25:42 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240)={0x303, 0x33}, 0x4) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)) [ 621.494304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 17:25:42 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 17:25:42 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x20, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10}}, 0x20}, 0x1}, 0x0) 17:25:42 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1'}, 0x4) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 17:25:42 executing program 7: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x20, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10}}, 0x20}, 0x1}, 0x0) 17:25:42 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1'}, 0x4) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 17:25:42 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x20, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10}}, 0x20}, 0x1}, 0x0) 17:25:42 executing program 7: r0 = memfd_create(&(0x7f00000000c0)="7dbf2a78892d764fd34a556b884fc44e1d3903c25662e82a6cdc43eba6e41224d1a37a7a85f41eccfcf6b65f5fcaef1b9d0e50771b4e5b81921550c50e061708af0a75d844397a9e52086a68cea96adaf842848d122eeb959a0ab24dc7d1874ec54f7322fc0cfafe", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') readv(r1, &(0x7f00000021c0)=[{&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2) [ 621.701100] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 621.713921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 17:25:42 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r1, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x80, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r2 = dup2(r0, r1) write$cgroup_int(r2, &(0x7f0000000000)=ANY=[], 0x0) 17:25:42 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1'}, 0x4) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) [ 621.772268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 17:25:43 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 17:25:43 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000080)=0x80000000002, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)=@l2={0x1f}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco={0x1f}, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000000), 0x291}}], 0x2, 0x0) 17:25:43 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1'}, 0x4) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 17:25:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0xd}}, 0x14}, 0x1}, 0x0) 17:25:43 executing program 7: r0 = inotify_init() mkdir(&(0x7f0000a7aff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./control\x00', 0x4000000) r1 = inotify_init() inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x81000100) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) 17:25:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = userfaultfd(0x80000) fchdir(r3) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000180)=0x8) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r5, 0x1, 0x0, 0x20004d2d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000240)={@dev={0xfe, 0x80}, 0x22}) r7 = creat(&(0x7f0000000280)='./file1\x00', 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000600)) r8 = gettid() fcntl$getownex(r0, 0x10, &(0x7f0000000700)) fstat(r3, &(0x7f0000000740)) r9 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000880)) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc, &(0x7f0000000680)=[{&(0x7f0000001c80)={0x10c8, 0x15, 0x200, 0x70bd2d, 0x25dfdbff, "", [@generic="b5105ffdaabdbbd38e39d4a44a6e71bd454ec65d6125d9219f5f6c2a9f77dc836e1e32b48b35325e6e9f25a0595f374682e41322ba8fac9cb5173e38d20ca7676c2f7b57c963b212c6f0ef20cb07299091046baadc2e6dd5341e530155ed66e6c8c7d4b971e2e5ed2f52aef4cacc52a0f0a02f5287ec346de1e7a00a29ad5e11ff586cae82cd461a84f4ff31c0908b67ff4ea20017b563c6872c711a344666ed77aed8a9d3da6562920b26edc459c984c8ef00c7d1281b021ac54528f66b6fbeea42d822c64a7f2e558e561559a46497c523b2dec2e2ee5bf987665330812f0bae4a84e79e2d13a6cec228dfbbcf6f937a11e03116f8dc5d26f782d1f5dec77ae1c6acef139c22041ef915d9bc47a1943684457d744c96d23d71a1eecdd8062f0085d4708e69f5ea59714c12195b3b7b9b5f8eee2b897d45a4ab841f4e9ccf0cd8a9ffd76825dbd9be365374e5957edfda39bda9b2056a2b2f7fd02f4140f9914ba24d6ecb83c52dc14044d536f4838c6056a7df9068a8548555c579aed73dee4027d4bfccf85cfadbab31d48b209066fcd5e48a1bfe2925d645e57b67c817a28042559028c64faca06ae7609f440cdef3523d69912b4a26e0a9b7cbea420ce927241e4a79740a4cde4fdc5ffb8db11ba92246cf5ca6f017a555882a61483402e6fd2deb8fbe2578676dbaad91c0c7779dd92e571dd34811cf1d04054fba529a5d040dfdc160961d818292a0de1e08b407f6171168e74f14fa8d3244d508db817adfcb8ab6807dc1262554caa7b45f7ce340844054d6cd7a9d7b97d9aaed7a4df9c1c0c82e0d82a84888a8de364d9bee74ade2afca5330697b2d39e7ef507934ef3a3667676ed8f96503241b9eb3fd3fe012ffaf94a4a5648d2d6be44c1278f2aa930b3214c3c616f4aaf51ed8e61ec0d254498e4f7995121119e304e13387fd96772dadeecd10ef16c665b0829059a9a7eced32bf959c83cbf46c3c4d052ad5a5c80cae4b771879798e9e81983ce3fd8a5677a637ade2eb337e59060c5a9fb17315d0c89da3c1740ca58749baecb0335189fd44a0f384ada4d887eef3f8ad3e26758302318336db1cf50ac85e183f1a895eccdf26dc63b0e3c6ab880c4dddf3f7e019de5ce716a5a251a28ce83a9fa1a42dbd8e6ca4dc76488c79854bd6c00ec76728236e687d9c3dc65a52a91980f45ed9f3d6c10b6ba9a0cb5a9ebdfdc87cb4209df54bed574f639006f62f90e4afb835b7aab4fe40166b06f2f1f3a4e3fec4b4838e18898efed6d93f853f878e1351398136bb91086ac178ca44baa7f2f669d12bb2b42b525348648ec999601262365321dfb258f93f6fe7f5a7f17c22a54bf45bb8b584c35dc40fc9a231d1918b2c4ca79c17f3cb9dce3e074d58d62a24255e16449f93a7bd976552e4269dc09c8657a0ecc7c6c997baf220ef12d28f3176a71a250bef9f25188c38263300d6a19163de142e7ba91685d3c1f40a6b01663fa8a94554302941ffbf25a616bd6886153db076844cffbbfa2b7b04d51d3c869fd2184d4c921c43e3023a0b45134e5de7f6be45f7b6794cb941cba90dfcb4def96cd6b4375728ec2c326c38bdc5b1cf73cc3105dd9a0252dc96d5dcfe0a115e8f84c06d2b31bf663bc0d099a65321c63e49f5d765e5042c7a6db3e972b9d487d51102af443d3a51f36a570091559666a44c80f606e494ce81814c7d191294029c6dbb894e8a525e439302945aefbb02b74ba3ef5c5be9508a2ff316b5a9c33c1e377ebc60dd09bf48c35cdf337696fd786eed65bd34a5b8d77b6a3418ad9b5614b3058ebad7b6df5d20a3a37f6c7b361d63d9dabba7736a1984c8862c5dd57b6a9d12298b46f522a523555931ee698bbdb74fe0f3361c5dbf59c53200b66edc9ce6054d1946c00c60827536f185518e109d16b840d13fc11b6bf12d03f35174d26bf9f0c82d929642c40a2ac24c173e3cc64bfc919a080bb3d7bb78869ab8a8af8caa8eedf33fa4a37f22bd169eacb68b4c122d1107a708f3b5451c706661e92e676c6340e28242f2d5c05c03f2ae3360c9e8c3bbafe6da1c4d0915fd59d24a874142cce45e34f85f87777b0dfec24d3753186f878ea0be643584f6393ded80b73ad9bc79eb5abf2ac9b4329e44bd14769f6e3a4e6848cb3812071787266d00cfa421a1901088ee1d654403952b0fd2aa3693b7e7b31725c753c7941fa111c72b791b8f5f7e04377ae326f958bee801c8123a291c57e4c361ad70ae305c128eead3fbee749bf4b3c2123eebd0c152f5343cd3cc14e2dd7bfe8171880980b7c7362ac322a8e0f7574d5492242dda95e3d8b07f276c7243186a03b81595c4b356e6e60c9f2cbbdc08cbd97ed135ef20cee55f022fdaedaf3ad01f83f7da53254b88a4995fbf2e4a8b0b2dc08b2fbec449dfedac631aba2f3b84be7fcd59b7d0a89f377e201be39c120c8886c6daaf284617b9472067e6b0108e346376861f5c51d2f8c043a047f5dc7e34cf2b4a5a042cc9ac123fa27d17d52dddb326ec73cb9326784fb37788ba3c368f13986d1d8d114c509a278625de096f69e25e16292dac3f65bfe1423a125ab8c9e72283dba4c913cf6877eb48ce8f676ef9dca31bfa073946ce9b0726162c86bd8da424c6598bfdd738b8231a53cc2e2c4756996b1766a839ca8da4cac23b9ba124f1f485b7d42a10057ec91c4a11db16dabe820356ff81ebda0b6e6195e93cbf5dea03ff50700d35c6ffd649189b61910c7f87a4ccbcb5ebac1c759bf910bc4656757d2be136e99f5cda31fff066f7fc5bc47f813397b4d8dd7590ad5072ff8ee8411a70f60d6feb3310bb24ef50eac7010d609358d8d2c1473514a78b5490b0f17a1532d6e89ee525d24a4850e991c4513f91ab4332933610532124bf0aaaed3ab7189ba62c5c0f3b0a625e63d78a3fa410f23f6814538f1d7e85ba1d3d91e7e5f05dd97765ff57d54770e2f876903dc02060705b5b04ed8be1624508f9591ba09720613071a6a7801d0450f14f3f8ed414ca92c6292f1f78c8c8ab0871317330dc81a93dc19c3cf1b141bcef898e63354492054ce24d469f64fdce54c5f50210327c6a041e12bb15f6635325f696ad6d8d46168e3a4408243a9acafcdbaea07cdc40da9900f888b8c0fe5316f7912ece5ff534f31861acc105ba29563eba8920899e14640c4834004ae8d4c5ba76b8a47e06cdc6dcf37b8b60cb972cbb29689936fc81623e37d5f12222c3e15b7414a8cccd3b7e5e8c3845e50195d45b16525080fe56f42320409a2b0d515f43c829bb936fe9434663da2f57eeff716f5f10057fbf1a857fcd9baf846436cbac71f55e6b10ba2b4a5dc09b768e66bf77ab5f680a7b649c2407172c2d5f7a1a35d60c418d0becf457e9f65af8a5be8c28de5226413257a41379c946ffeda7b478da14d24706af557d275c1d33eb5317a7537685b91f36ce60b1b6bd8aaccc5dbb33efdfb34e77713d65e0561d1c7a80acb423519254a0a18c127cc14754ee962b07f5f716485741423ac3165d8bc18eb298b51fc2e5ac091d28662b8b21053b32549548a28cf514e5f722406fac7dbd027ad3a2a87e563ed412ba7b61a9e3338e4c36e721dbc93d1729e4f267bd1cd39ea2ca8925f8af7167fee91276e4f1fbcb587116cf0231eda9fcfeb62bd85ec35fd2b06bd50465f6b23297eaea7bde505b37611e661318f2584115d0c32bf08a5b5d636f739ee6a2c92f8293e5bedf4f503bfc9efab6bf97305b186a4e511f84c42311c45a28b11850662500bd5708951767836319819b6cf7a29648ccba0be4465fc0052f217d1455d5fca38e16e4caa7e51496e5297b92d34d3c9820d0b5c5b6d6d487ff147fe818e5e5fd5a6e0ec9bf3a89371c241bc9d0ab8b448af25d5fc89f38d178bf8619dd7e2c7558197a4b1d15cef9b2c8328f5663c8ca285a75ca303564c8c40d911326a10d18a3c2d17353afe761e9be0c9182dd37f4152ca6bee12fc91228fb74ca36a0e1a5f1bbd41365cd712a7f59ebc7d213bfeecca03b2fb55578fbb5e4663e35ddfc489eff9e193a18772f72a2ca42ea2ebdf7b581a89979c4d0981ae775562a2e3337f3870d4cfe6f05303caf1c452f027467947b933a65a28c7d9d51aae2b770f543789fb1634ceedea533436cf87c2b967cefbdc878f5276d032333071b3a92511bad0285b7553bbe2b15e94cc77116707232f4d55b75064d1f124ac6a099ea796af79beaea9bc3176192ec09d7d20e40dea319fb36a81261cb6a73c92e439af28a3231a7d53add7280d7271504403a9c6061ab30229f939a8719e99792400d215277f4b731fe201518173c7fcf7807f82a351d427d28770079b6896098a3fe9f7e4904c3d2c6d626df5b7f3cb704f9b63e30b24986ac1aec340f2c6209f0383e4b10d2dc6e844b9d1b87aaf94c36571d6bf41bbda0930dbb1fadc9e09f55a4a91fa199b537e5afacf173e3258d7f0e209bf50f5baceec9f82a28ec2084431814eb4c85765f92d7b95b7fce3e53deb526201cd7631136fd5ab3a9983a1e2a131680f7cd0d24b05645d4163b265f5d4f6315479d8de014b9ab32c9fc8c16f7f4a956311143269772a548d5d1e2f6fbb254c7bc171faf0dad87718943055a3ef70ffd35acae129e2b757a4c05dfc0d0dae3be443d15ee35fae2a1a1553c6ad93cdd2a764576d707b32980b1947b6adf7da542232cb96e07d2a7152d972598b45e05539844e602b8b1ae1c9ed15330442e432971a6648b72ffa89f9fe2991a35316f0e58aafe679c7b149ffc41bbb96db80267a5869d0da3e813622918be20ee4370c12dc68f114f7a6fa4deba5a637c8c99be4b48589666aec2d4ede8ae5b2d61b31256c923c0795ff3778414b4f3980307e18c87b52cb40bd26f40e60d7431dbfec420baf09d29ad2dcc5574da244ce80bcc029f6687e880ee60bb8c91508e9087569c55e98c501ae9e8e1e641bc186b5c3ed1c44ba9c923ef42997fb39966f0f6cd676d7a6c9eeb52bab5f53c8185d473febbfe25a4390c2f98ae5321195222f590c1c9f56b29f326f88bee1dad8049af101f4ca1ecdd55d23bca7834155459e89cde0e1655321f333901366ef7a6f43ca96c937b8f14197c199067ff96ca36b8765a197b9f69e47f7fc7b4e6d954d291d0ba88cd9dfa36032e8994d3fcc68f0b7a5b5db79b2db8012a9fa8e83627e76ea5de6f44b78850f4252e3e52fd611b0be3c30e1a1e6d8c8e1e53299fb355e3a0e4c4a050d0db669302a4e71da42bd74e18b468f5397752265a1a3a3343cb4f46f3e0de5a83abe4cddb9536132fc9f607ac65b7d64b3794726144e019105faf2c7c66f801d855494511d4026a85d42d57a8c34823de80827f6e11d8d3924f8d1112a4cb7eb16af99ffb53ef1466949b556bcbc822d5fa7fe045d4d5b37e69b6383d2e4eaa0a25d425f0f4180414a129a0e0216272385e829ea70dad6e2fc7a921a4b4fdbd2402ba90bd7d0690acefb5f272551ba619ba8a94c91f7028d071aef4fdb47007b1994b8620d5031ebf1632fd0816305fd45024b7b5c204ffb3796bd22ea615cbbe6dd4ce2ec1c4409c942d3a07eac571fc69376d93f7816e962ca5457c89279a8c1e152b2d00ec43d5e4c5f1f88ec207ec4cef0690435fa08b5c2e3ef39e517598228bb45073d85a21873c1074b970f0aafe1b89ab95f09990bc62b452f4bd4e3dfafa685f4af23c467212c1824589b87b3748c1c92688f50388dc0fe32f7974d8e953f2c0551e4c056d4e5232cc9468a85e97c6f4702d14614e", @generic="6afedda10ecf6430bce791d1d6a79b65558616e550fdfbf61839cde51c9f9605c603709d94f2e1e7c698a77595ac815c6001234f1e8f25175b671a68a8995055eca25123b553f85b0e8109f5e2efe4fd2878faf341b7e9e7eefbacc74577610fdcbbc98818bc89e9a5922912f68622965a93e2cb4a65b1442c20dad6f5c34b24b2ec2a10ad0cfa88611754b34132102718148d2c725c2b835ddd57564ccd10e17d87a0c84a257dea7685f13b6c72cd94f02f4469209109"]}, 0x10c8}, {&(0x7f0000000640)={0x10, 0x23, 0x200, 0x70bd25, 0x25dfdbff}, 0x10}, {&(0x7f0000003ec0)={0xc0, 0x10, 0x0, 0x70bd2b, 0x25dfdbff, "", [@nested={0x10, 0x96, [@typed={0x4, 0x36}, @typed={0x8, 0x6d, @pid=r8}, @generic]}, @typed={0x94, 0x95, @binary="710cc4be914de52e2bbef89c6cb7d03727c737aee379b54e58fb521ea4e75c2d14afc629e201098683f1ecc25d7767487c1d4bae4c34f59205f570652a94a02a48eef900150a0db21996781cb31e4454bac9733f3480853ea2a05e1d80c93f82caedbdfe74ae16fe0ba6e39a558f5b8669676eb729e57d87b52d4034d2497ae6a8f95239fcca68e69984b91f06"}, @generic="c9d8eb3893c115bb82"]}, 0xc0}, {&(0x7f00000067c0)={0x1c8, 0x34, 0x20, 0x70bd28, 0x25dfdbfc, "", [@typed={0xc, 0x8c, @u64=0xfffffffffffff383}, @generic, @nested={0x148, 0x5f, [@generic, @typed={0xc, 0x63, @u64=0xffffffff00000000}, @generic="86da5c98daa278d7e9c0d8180b5e2051ccff98daff12c57c3d8a4453041e085c721161b47a7ffa377d9f1645ad7ab647503e28fbbd1227de69f5cb19e723f212a1329050e14b709ce67532687fb669a335f9bab48689869d734d0b8f01b1c9f37f4216e406fa9d5bd39769d4f5bb67517afecfd4d304a1a2f987549f90acb33c0f3431ca06ebe852889eae482f46d18074ee826f37e083cf3160a73875d879786cfa396008079e8591f0726a35f8644184356cf84ce8ff305bd5c939e4a3fc41947b9b74d81efb64e25a246994", @typed={0x8, 0x3a, @uid=r6}, @generic="6b2e57714d39d66f6c02181ad674f05837d7231c786a8d2967464e2ed3b7311d45381cb487989ec96f738812ce793d7f6dbd067aef0f86e4ec352bfeff954c26ea9cf69eceb02a994b1dc49a7ae0a6310e96517fb991fed0f8f3a44f623616476e", @generic]}, @generic="8cb6a4fc5c0b18d1f626a4304ccb23fd1a4c9fed14d5cfbeecd7afbe9cb1c34b95b10e25930ec4698a0dcf679663b3081383285023cf66377db6d7e53fcaab2b5dd640e130e524a2690d734b36150d2e384cd9e80a7acc6b0a0dba31530e084730c03f"]}, 0x1c8}], 0x4, &(0x7f0000000900)=[@rights={0x18, 0x1, 0x1, [r3]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r7, r1, r7, r1, r5, r0]}, @cred={0x20, 0x1, 0x2, 0x0, r6, r9}, @cred={0x20, 0x1, 0x2, 0x0, r6, r10}], 0x98, 0x40000}, 0x4000) lgetxattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@random={'system.', 'net/route\x00'}, &(0x7f0000000340)=""/63, 0x3f) 17:25:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) unshare(0x2000400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 17:25:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x40000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 17:25:43 executing program 2: unshare(0x40000000) 17:25:43 executing program 6: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x0, &(0x7f0000000380)) 17:25:43 executing program 7: r0 = inotify_init() mkdir(&(0x7f0000a7aff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./control\x00', 0x4000000) r1 = inotify_init() inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x81000100) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) 17:25:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = userfaultfd(0x80000) fchdir(r3) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000180)=0x8) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r5, 0x1, 0x0, 0x20004d2d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000240)={@dev={0xfe, 0x80}, 0x22}) r7 = creat(&(0x7f0000000280)='./file1\x00', 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000600)) r8 = gettid() fcntl$getownex(r0, 0x10, &(0x7f0000000700)) fstat(r3, &(0x7f0000000740)) r9 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000880)) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc, &(0x7f0000000680)=[{&(0x7f0000001c80)={0x10c8, 0x15, 0x200, 0x70bd2d, 0x25dfdbff, "", [@generic="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", @generic="6afedda10ecf6430bce791d1d6a79b65558616e550fdfbf61839cde51c9f9605c603709d94f2e1e7c698a77595ac815c6001234f1e8f25175b671a68a8995055eca25123b553f85b0e8109f5e2efe4fd2878faf341b7e9e7eefbacc74577610fdcbbc98818bc89e9a5922912f68622965a93e2cb4a65b1442c20dad6f5c34b24b2ec2a10ad0cfa88611754b34132102718148d2c725c2b835ddd57564ccd10e17d87a0c84a257dea7685f13b6c72cd94f02f4469209109"]}, 0x10c8}, {&(0x7f0000000640)={0x10, 0x23, 0x200, 0x70bd25, 0x25dfdbff}, 0x10}, {&(0x7f0000003ec0)={0xc0, 0x10, 0x0, 0x70bd2b, 0x25dfdbff, "", [@nested={0x10, 0x96, [@typed={0x4, 0x36}, @typed={0x8, 0x6d, @pid=r8}, @generic]}, @typed={0x94, 0x95, @binary="710cc4be914de52e2bbef89c6cb7d03727c737aee379b54e58fb521ea4e75c2d14afc629e201098683f1ecc25d7767487c1d4bae4c34f59205f570652a94a02a48eef900150a0db21996781cb31e4454bac9733f3480853ea2a05e1d80c93f82caedbdfe74ae16fe0ba6e39a558f5b8669676eb729e57d87b52d4034d2497ae6a8f95239fcca68e69984b91f06"}, @generic="c9d8eb3893c115bb82"]}, 0xc0}, {&(0x7f00000067c0)={0x1c8, 0x34, 0x20, 0x70bd28, 0x25dfdbfc, "", [@typed={0xc, 0x8c, @u64=0xfffffffffffff383}, @generic, @nested={0x148, 0x5f, [@generic, @typed={0xc, 0x63, @u64=0xffffffff00000000}, @generic="86da5c98daa278d7e9c0d8180b5e2051ccff98daff12c57c3d8a4453041e085c721161b47a7ffa377d9f1645ad7ab647503e28fbbd1227de69f5cb19e723f212a1329050e14b709ce67532687fb669a335f9bab48689869d734d0b8f01b1c9f37f4216e406fa9d5bd39769d4f5bb67517afecfd4d304a1a2f987549f90acb33c0f3431ca06ebe852889eae482f46d18074ee826f37e083cf3160a73875d879786cfa396008079e8591f0726a35f8644184356cf84ce8ff305bd5c939e4a3fc41947b9b74d81efb64e25a246994", @typed={0x8, 0x3a, @uid=r6}, @generic="6b2e57714d39d66f6c02181ad674f05837d7231c786a8d2967464e2ed3b7311d45381cb487989ec96f738812ce793d7f6dbd067aef0f86e4ec352bfeff954c26ea9cf69eceb02a994b1dc49a7ae0a6310e96517fb991fed0f8f3a44f623616476e", @generic]}, @generic="8cb6a4fc5c0b18d1f626a4304ccb23fd1a4c9fed14d5cfbeecd7afbe9cb1c34b95b10e25930ec4698a0dcf679663b3081383285023cf66377db6d7e53fcaab2b5dd640e130e524a2690d734b36150d2e384cd9e80a7acc6b0a0dba31530e084730c03f"]}, 0x1c8}], 0x4, &(0x7f0000000900)=[@rights={0x18, 0x1, 0x1, [r3]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r7, r1, r7, r1, r5, r0]}, @cred={0x20, 0x1, 0x2, 0x0, r6, r9}, @cred={0x20, 0x1, 0x2, 0x0, r6, r10}], 0x98, 0x40000}, 0x4000) lgetxattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@random={'system.', 'net/route\x00'}, &(0x7f0000000340)=""/63, 0x3f) 17:25:43 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = userfaultfd(0x80000) fchdir(r3) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000180)=0x8) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r5, 0x1, 0x0, 0x20004d2d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000240)={@dev={0xfe, 0x80}, 0x22}) r7 = creat(&(0x7f0000000280)='./file1\x00', 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000600)) r8 = gettid() fcntl$getownex(r0, 0x10, &(0x7f0000000700)) fstat(r3, &(0x7f0000000740)) r9 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000880)) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc, &(0x7f0000000680)=[{&(0x7f0000001c80)={0x10c8, 0x15, 0x200, 0x70bd2d, 0x25dfdbff, "", [@generic="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", @generic="6afedda10ecf6430bce791d1d6a79b65558616e550fdfbf61839cde51c9f9605c603709d94f2e1e7c698a77595ac815c6001234f1e8f25175b671a68a8995055eca25123b553f85b0e8109f5e2efe4fd2878faf341b7e9e7eefbacc74577610fdcbbc98818bc89e9a5922912f68622965a93e2cb4a65b1442c20dad6f5c34b24b2ec2a10ad0cfa88611754b34132102718148d2c725c2b835ddd57564ccd10e17d87a0c84a257dea7685f13b6c72cd94f02f4469209109"]}, 0x10c8}, {&(0x7f0000000640)={0x10, 0x23, 0x200, 0x70bd25, 0x25dfdbff}, 0x10}, {&(0x7f0000003ec0)={0xc0, 0x10, 0x0, 0x70bd2b, 0x25dfdbff, "", [@nested={0x10, 0x96, [@typed={0x4, 0x36}, @typed={0x8, 0x6d, @pid=r8}, @generic]}, @typed={0x94, 0x95, @binary="710cc4be914de52e2bbef89c6cb7d03727c737aee379b54e58fb521ea4e75c2d14afc629e201098683f1ecc25d7767487c1d4bae4c34f59205f570652a94a02a48eef900150a0db21996781cb31e4454bac9733f3480853ea2a05e1d80c93f82caedbdfe74ae16fe0ba6e39a558f5b8669676eb729e57d87b52d4034d2497ae6a8f95239fcca68e69984b91f06"}, @generic="c9d8eb3893c115bb82"]}, 0xc0}, {&(0x7f00000067c0)={0x1c8, 0x34, 0x20, 0x70bd28, 0x25dfdbfc, "", [@typed={0xc, 0x8c, @u64=0xfffffffffffff383}, @generic, @nested={0x148, 0x5f, [@generic, @typed={0xc, 0x63, @u64=0xffffffff00000000}, @generic="86da5c98daa278d7e9c0d8180b5e2051ccff98daff12c57c3d8a4453041e085c721161b47a7ffa377d9f1645ad7ab647503e28fbbd1227de69f5cb19e723f212a1329050e14b709ce67532687fb669a335f9bab48689869d734d0b8f01b1c9f37f4216e406fa9d5bd39769d4f5bb67517afecfd4d304a1a2f987549f90acb33c0f3431ca06ebe852889eae482f46d18074ee826f37e083cf3160a73875d879786cfa396008079e8591f0726a35f8644184356cf84ce8ff305bd5c939e4a3fc41947b9b74d81efb64e25a246994", @typed={0x8, 0x3a, @uid=r6}, @generic="6b2e57714d39d66f6c02181ad674f05837d7231c786a8d2967464e2ed3b7311d45381cb487989ec96f738812ce793d7f6dbd067aef0f86e4ec352bfeff954c26ea9cf69eceb02a994b1dc49a7ae0a6310e96517fb991fed0f8f3a44f623616476e", @generic]}, @generic="8cb6a4fc5c0b18d1f626a4304ccb23fd1a4c9fed14d5cfbeecd7afbe9cb1c34b95b10e25930ec4698a0dcf679663b3081383285023cf66377db6d7e53fcaab2b5dd640e130e524a2690d734b36150d2e384cd9e80a7acc6b0a0dba31530e084730c03f"]}, 0x1c8}], 0x4, &(0x7f0000000900)=[@rights={0x18, 0x1, 0x1, [r3]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r7, r1, r7, r1, r5, r0]}, @cred={0x20, 0x1, 0x2, 0x0, r6, r9}, @cred={0x20, 0x1, 0x2, 0x0, r6, r10}], 0x98, 0x40000}, 0x4000) lgetxattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@random={'system.', 'net/route\x00'}, &(0x7f0000000340)=""/63, 0x3f) 17:25:43 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x800) [ 622.446193] IPVS: Creating netns size=2536 id=168 [ 622.503194] IPVS: Creating netns size=2536 id=169 [ 622.551392] IPVS: Creating netns size=2536 id=170 [ 622.599783] IPVS: Creating netns size=2536 id=171 17:25:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f00000000c0)='fd\x00', 0x0) write(r1, &(0x7f0000000180)="6963e6424304006da3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba406d59a5958def156c9c8a2ac4677afffffffc800000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000025c0)=""/57, 0x39) 17:25:43 executing program 7: r0 = inotify_init() mkdir(&(0x7f0000a7aff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./control\x00', 0x4000000) r1 = inotify_init() inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x81000100) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) 17:25:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x8001, &(0x7f00000000c0), 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400, &(0x7f0000000100), 0x8) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) 17:25:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = userfaultfd(0x80000) fchdir(r3) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000180)=0x8) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r5, 0x1, 0x0, 0x20004d2d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000240)={@dev={0xfe, 0x80}, 0x22}) r7 = creat(&(0x7f0000000280)='./file1\x00', 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000600)) r8 = gettid() fcntl$getownex(r0, 0x10, &(0x7f0000000700)) fstat(r3, &(0x7f0000000740)) r9 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000880)) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc, &(0x7f0000000680)=[{&(0x7f0000001c80)={0x10c8, 0x15, 0x200, 0x70bd2d, 0x25dfdbff, "", [@generic="b5105ffdaabdbbd38e39d4a44a6e71bd454ec65d6125d9219f5f6c2a9f77dc836e1e32b48b35325e6e9f25a0595f374682e41322ba8fac9cb5173e38d20ca7676c2f7b57c963b212c6f0ef20cb07299091046baadc2e6dd5341e530155ed66e6c8c7d4b971e2e5ed2f52aef4cacc52a0f0a02f5287ec346de1e7a00a29ad5e11ff586cae82cd461a84f4ff31c0908b67ff4ea20017b563c6872c711a344666ed77aed8a9d3da6562920b26edc459c984c8ef00c7d1281b021ac54528f66b6fbeea42d822c64a7f2e558e561559a46497c523b2dec2e2ee5bf987665330812f0bae4a84e79e2d13a6cec228dfbbcf6f937a11e03116f8dc5d26f782d1f5dec77ae1c6acef139c22041ef915d9bc47a1943684457d744c96d23d71a1eecdd8062f0085d4708e69f5ea59714c12195b3b7b9b5f8eee2b897d45a4ab841f4e9ccf0cd8a9ffd76825dbd9be365374e5957edfda39bda9b2056a2b2f7fd02f4140f9914ba24d6ecb83c52dc14044d536f4838c6056a7df9068a8548555c579aed73dee4027d4bfccf85cfadbab31d48b209066fcd5e48a1bfe2925d645e57b67c817a28042559028c64faca06ae7609f440cdef3523d69912b4a26e0a9b7cbea420ce927241e4a79740a4cde4fdc5ffb8db11ba92246cf5ca6f017a555882a61483402e6fd2deb8fbe2578676dbaad91c0c7779dd92e571dd34811cf1d04054fba529a5d040dfdc160961d818292a0de1e08b407f6171168e74f14fa8d3244d508db817adfcb8ab6807dc1262554caa7b45f7ce340844054d6cd7a9d7b97d9aaed7a4df9c1c0c82e0d82a84888a8de364d9bee74ade2afca5330697b2d39e7ef507934ef3a3667676ed8f96503241b9eb3fd3fe012ffaf94a4a5648d2d6be44c1278f2aa930b3214c3c616f4aaf51ed8e61ec0d254498e4f7995121119e304e13387fd96772dadeecd10ef16c665b0829059a9a7eced32bf959c83cbf46c3c4d052ad5a5c80cae4b771879798e9e81983ce3fd8a5677a637ade2eb337e59060c5a9fb17315d0c89da3c1740ca58749baecb0335189fd44a0f384ada4d887eef3f8ad3e26758302318336db1cf50ac85e183f1a895eccdf26dc63b0e3c6ab880c4dddf3f7e019de5ce716a5a251a28ce83a9fa1a42dbd8e6ca4dc76488c79854bd6c00ec76728236e687d9c3dc65a52a91980f45ed9f3d6c10b6ba9a0cb5a9ebdfdc87cb4209df54bed574f639006f62f90e4afb835b7aab4fe40166b06f2f1f3a4e3fec4b4838e18898efed6d93f853f878e1351398136bb91086ac178ca44baa7f2f669d12bb2b42b525348648ec999601262365321dfb258f93f6fe7f5a7f17c22a54bf45bb8b584c35dc40fc9a231d1918b2c4ca79c17f3cb9dce3e074d58d62a24255e16449f93a7bd976552e4269dc09c8657a0ecc7c6c997baf220ef12d28f3176a71a250bef9f25188c38263300d6a19163de142e7ba91685d3c1f40a6b01663fa8a94554302941ffbf25a616bd6886153db076844cffbbfa2b7b04d51d3c869fd2184d4c921c43e3023a0b45134e5de7f6be45f7b6794cb941cba90dfcb4def96cd6b4375728ec2c326c38bdc5b1cf73cc3105dd9a0252dc96d5dcfe0a115e8f84c06d2b31bf663bc0d099a65321c63e49f5d765e5042c7a6db3e972b9d487d51102af443d3a51f36a570091559666a44c80f606e494ce81814c7d191294029c6dbb894e8a525e439302945aefbb02b74ba3ef5c5be9508a2ff316b5a9c33c1e377ebc60dd09bf48c35cdf337696fd786eed65bd34a5b8d77b6a3418ad9b5614b3058ebad7b6df5d20a3a37f6c7b361d63d9dabba7736a1984c8862c5dd57b6a9d12298b46f522a523555931ee698bbdb74fe0f3361c5dbf59c53200b66edc9ce6054d1946c00c60827536f185518e109d16b840d13fc11b6bf12d03f35174d26bf9f0c82d929642c40a2ac24c173e3cc64bfc919a080bb3d7bb78869ab8a8af8caa8eedf33fa4a37f22bd169eacb68b4c122d1107a708f3b5451c706661e92e676c6340e28242f2d5c05c03f2ae3360c9e8c3bbafe6da1c4d0915fd59d24a874142cce45e34f85f87777b0dfec24d3753186f878ea0be643584f6393ded80b73ad9bc79eb5abf2ac9b4329e44bd14769f6e3a4e6848cb3812071787266d00cfa421a1901088ee1d654403952b0fd2aa3693b7e7b31725c753c7941fa111c72b791b8f5f7e04377ae326f958bee801c8123a291c57e4c361ad70ae305c128eead3fbee749bf4b3c2123eebd0c152f5343cd3cc14e2dd7bfe8171880980b7c7362ac322a8e0f7574d5492242dda95e3d8b07f276c7243186a03b81595c4b356e6e60c9f2cbbdc08cbd97ed135ef20cee55f022fdaedaf3ad01f83f7da53254b88a4995fbf2e4a8b0b2dc08b2fbec449dfedac631aba2f3b84be7fcd59b7d0a89f377e201be39c120c8886c6daaf284617b9472067e6b0108e346376861f5c51d2f8c043a047f5dc7e34cf2b4a5a042cc9ac123fa27d17d52dddb326ec73cb9326784fb37788ba3c368f13986d1d8d114c509a278625de096f69e25e16292dac3f65bfe1423a125ab8c9e72283dba4c913cf6877eb48ce8f676ef9dca31bfa073946ce9b0726162c86bd8da424c6598bfdd738b8231a53cc2e2c4756996b1766a839ca8da4cac23b9ba124f1f485b7d42a10057ec91c4a11db16dabe820356ff81ebda0b6e6195e93cbf5dea03ff50700d35c6ffd649189b61910c7f87a4ccbcb5ebac1c759bf910bc4656757d2be136e99f5cda31fff066f7fc5bc47f813397b4d8dd7590ad5072ff8ee8411a70f60d6feb3310bb24ef50eac7010d609358d8d2c1473514a78b5490b0f17a1532d6e89ee525d24a4850e991c4513f91ab4332933610532124bf0aaaed3ab7189ba62c5c0f3b0a625e63d78a3fa410f23f6814538f1d7e85ba1d3d91e7e5f05dd97765ff57d54770e2f876903dc02060705b5b04ed8be1624508f9591ba09720613071a6a7801d0450f14f3f8ed414ca92c6292f1f78c8c8ab0871317330dc81a93dc19c3cf1b141bcef898e63354492054ce24d469f64fdce54c5f50210327c6a041e12bb15f6635325f696ad6d8d46168e3a4408243a9acafcdbaea07cdc40da9900f888b8c0fe5316f7912ece5ff534f31861acc105ba29563eba8920899e14640c4834004ae8d4c5ba76b8a47e06cdc6dcf37b8b60cb972cbb29689936fc81623e37d5f12222c3e15b7414a8cccd3b7e5e8c3845e50195d45b16525080fe56f42320409a2b0d515f43c829bb936fe9434663da2f57eeff716f5f10057fbf1a857fcd9baf846436cbac71f55e6b10ba2b4a5dc09b768e66bf77ab5f680a7b649c2407172c2d5f7a1a35d60c418d0becf457e9f65af8a5be8c28de5226413257a41379c946ffeda7b478da14d24706af557d275c1d33eb5317a7537685b91f36ce60b1b6bd8aaccc5dbb33efdfb34e77713d65e0561d1c7a80acb423519254a0a18c127cc14754ee962b07f5f716485741423ac3165d8bc18eb298b51fc2e5ac091d28662b8b21053b32549548a28cf514e5f722406fac7dbd027ad3a2a87e563ed412ba7b61a9e3338e4c36e721dbc93d1729e4f267bd1cd39ea2ca8925f8af7167fee91276e4f1fbcb587116cf0231eda9fcfeb62bd85ec35fd2b06bd50465f6b23297eaea7bde505b37611e661318f2584115d0c32bf08a5b5d636f739ee6a2c92f8293e5bedf4f503bfc9efab6bf97305b186a4e511f84c42311c45a28b11850662500bd5708951767836319819b6cf7a29648ccba0be4465fc0052f217d1455d5fca38e16e4caa7e51496e5297b92d34d3c9820d0b5c5b6d6d487ff147fe818e5e5fd5a6e0ec9bf3a89371c241bc9d0ab8b448af25d5fc89f38d178bf8619dd7e2c7558197a4b1d15cef9b2c8328f5663c8ca285a75ca303564c8c40d911326a10d18a3c2d17353afe761e9be0c9182dd37f4152ca6bee12fc91228fb74ca36a0e1a5f1bbd41365cd712a7f59ebc7d213bfeecca03b2fb55578fbb5e4663e35ddfc489eff9e193a18772f72a2ca42ea2ebdf7b581a89979c4d0981ae775562a2e3337f3870d4cfe6f05303caf1c452f027467947b933a65a28c7d9d51aae2b770f543789fb1634ceedea533436cf87c2b967cefbdc878f5276d032333071b3a92511bad0285b7553bbe2b15e94cc77116707232f4d55b75064d1f124ac6a099ea796af79beaea9bc3176192ec09d7d20e40dea319fb36a81261cb6a73c92e439af28a3231a7d53add7280d7271504403a9c6061ab30229f939a8719e99792400d215277f4b731fe201518173c7fcf7807f82a351d427d28770079b6896098a3fe9f7e4904c3d2c6d626df5b7f3cb704f9b63e30b24986ac1aec340f2c6209f0383e4b10d2dc6e844b9d1b87aaf94c36571d6bf41bbda0930dbb1fadc9e09f55a4a91fa199b537e5afacf173e3258d7f0e209bf50f5baceec9f82a28ec2084431814eb4c85765f92d7b95b7fce3e53deb526201cd7631136fd5ab3a9983a1e2a131680f7cd0d24b05645d4163b265f5d4f6315479d8de014b9ab32c9fc8c16f7f4a956311143269772a548d5d1e2f6fbb254c7bc171faf0dad87718943055a3ef70ffd35acae129e2b757a4c05dfc0d0dae3be443d15ee35fae2a1a1553c6ad93cdd2a764576d707b32980b1947b6adf7da542232cb96e07d2a7152d972598b45e05539844e602b8b1ae1c9ed15330442e432971a6648b72ffa89f9fe2991a35316f0e58aafe679c7b149ffc41bbb96db80267a5869d0da3e813622918be20ee4370c12dc68f114f7a6fa4deba5a637c8c99be4b48589666aec2d4ede8ae5b2d61b31256c923c0795ff3778414b4f3980307e18c87b52cb40bd26f40e60d7431dbfec420baf09d29ad2dcc5574da244ce80bcc029f6687e880ee60bb8c91508e9087569c55e98c501ae9e8e1e641bc186b5c3ed1c44ba9c923ef42997fb39966f0f6cd676d7a6c9eeb52bab5f53c8185d473febbfe25a4390c2f98ae5321195222f590c1c9f56b29f326f88bee1dad8049af101f4ca1ecdd55d23bca7834155459e89cde0e1655321f333901366ef7a6f43ca96c937b8f14197c199067ff96ca36b8765a197b9f69e47f7fc7b4e6d954d291d0ba88cd9dfa36032e8994d3fcc68f0b7a5b5db79b2db8012a9fa8e83627e76ea5de6f44b78850f4252e3e52fd611b0be3c30e1a1e6d8c8e1e53299fb355e3a0e4c4a050d0db669302a4e71da42bd74e18b468f5397752265a1a3a3343cb4f46f3e0de5a83abe4cddb9536132fc9f607ac65b7d64b3794726144e019105faf2c7c66f801d855494511d4026a85d42d57a8c34823de80827f6e11d8d3924f8d1112a4cb7eb16af99ffb53ef1466949b556bcbc822d5fa7fe045d4d5b37e69b6383d2e4eaa0a25d425f0f4180414a129a0e0216272385e829ea70dad6e2fc7a921a4b4fdbd2402ba90bd7d0690acefb5f272551ba619ba8a94c91f7028d071aef4fdb47007b1994b8620d5031ebf1632fd0816305fd45024b7b5c204ffb3796bd22ea615cbbe6dd4ce2ec1c4409c942d3a07eac571fc69376d93f7816e962ca5457c89279a8c1e152b2d00ec43d5e4c5f1f88ec207ec4cef0690435fa08b5c2e3ef39e517598228bb45073d85a21873c1074b970f0aafe1b89ab95f09990bc62b452f4bd4e3dfafa685f4af23c467212c1824589b87b3748c1c92688f50388dc0fe32f7974d8e953f2c0551e4c056d4e5232cc9468a85e97c6f4702d14614e", @generic="6afedda10ecf6430bce791d1d6a79b65558616e550fdfbf61839cde51c9f9605c603709d94f2e1e7c698a77595ac815c6001234f1e8f25175b671a68a8995055eca25123b553f85b0e8109f5e2efe4fd2878faf341b7e9e7eefbacc74577610fdcbbc98818bc89e9a5922912f68622965a93e2cb4a65b1442c20dad6f5c34b24b2ec2a10ad0cfa88611754b34132102718148d2c725c2b835ddd57564ccd10e17d87a0c84a257dea7685f13b6c72cd94f02f4469209109"]}, 0x10c8}, {&(0x7f0000000640)={0x10, 0x23, 0x200, 0x70bd25, 0x25dfdbff}, 0x10}, {&(0x7f0000003ec0)={0xc0, 0x10, 0x0, 0x70bd2b, 0x25dfdbff, "", [@nested={0x10, 0x96, [@typed={0x4, 0x36}, @typed={0x8, 0x6d, @pid=r8}, @generic]}, @typed={0x94, 0x95, @binary="710cc4be914de52e2bbef89c6cb7d03727c737aee379b54e58fb521ea4e75c2d14afc629e201098683f1ecc25d7767487c1d4bae4c34f59205f570652a94a02a48eef900150a0db21996781cb31e4454bac9733f3480853ea2a05e1d80c93f82caedbdfe74ae16fe0ba6e39a558f5b8669676eb729e57d87b52d4034d2497ae6a8f95239fcca68e69984b91f06"}, @generic="c9d8eb3893c115bb82"]}, 0xc0}, {&(0x7f00000067c0)={0x1c8, 0x34, 0x20, 0x70bd28, 0x25dfdbfc, "", [@typed={0xc, 0x8c, @u64=0xfffffffffffff383}, @generic, @nested={0x148, 0x5f, [@generic, @typed={0xc, 0x63, @u64=0xffffffff00000000}, @generic="86da5c98daa278d7e9c0d8180b5e2051ccff98daff12c57c3d8a4453041e085c721161b47a7ffa377d9f1645ad7ab647503e28fbbd1227de69f5cb19e723f212a1329050e14b709ce67532687fb669a335f9bab48689869d734d0b8f01b1c9f37f4216e406fa9d5bd39769d4f5bb67517afecfd4d304a1a2f987549f90acb33c0f3431ca06ebe852889eae482f46d18074ee826f37e083cf3160a73875d879786cfa396008079e8591f0726a35f8644184356cf84ce8ff305bd5c939e4a3fc41947b9b74d81efb64e25a246994", @typed={0x8, 0x3a, @uid=r6}, @generic="6b2e57714d39d66f6c02181ad674f05837d7231c786a8d2967464e2ed3b7311d45381cb487989ec96f738812ce793d7f6dbd067aef0f86e4ec352bfeff954c26ea9cf69eceb02a994b1dc49a7ae0a6310e96517fb991fed0f8f3a44f623616476e", @generic]}, @generic="8cb6a4fc5c0b18d1f626a4304ccb23fd1a4c9fed14d5cfbeecd7afbe9cb1c34b95b10e25930ec4698a0dcf679663b3081383285023cf66377db6d7e53fcaab2b5dd640e130e524a2690d734b36150d2e384cd9e80a7acc6b0a0dba31530e084730c03f"]}, 0x1c8}], 0x4, &(0x7f0000000900)=[@rights={0x18, 0x1, 0x1, [r3]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r7, r1, r7, r1, r5, r0]}, @cred={0x20, 0x1, 0x2, 0x0, r6, r9}, @cred={0x20, 0x1, 0x2, 0x0, r6, r10}], 0x98, 0x40000}, 0x4000) lgetxattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@random={'system.', 'net/route\x00'}, &(0x7f0000000340)=""/63, 0x3f) 17:25:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x40000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 17:25:43 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x800) 17:25:43 executing program 2: unshare(0x40000000) 17:25:43 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = userfaultfd(0x80000) fchdir(r3) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000180)=0x8) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r5, 0x1, 0x0, 0x20004d2d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000240)={@dev={0xfe, 0x80}, 0x22}) r7 = creat(&(0x7f0000000280)='./file1\x00', 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000600)) r8 = gettid() fcntl$getownex(r0, 0x10, &(0x7f0000000700)) fstat(r3, &(0x7f0000000740)) r9 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000880)) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc, &(0x7f0000000680)=[{&(0x7f0000001c80)={0x10c8, 0x15, 0x200, 0x70bd2d, 0x25dfdbff, "", [@generic="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", @generic="6afedda10ecf6430bce791d1d6a79b65558616e550fdfbf61839cde51c9f9605c603709d94f2e1e7c698a77595ac815c6001234f1e8f25175b671a68a8995055eca25123b553f85b0e8109f5e2efe4fd2878faf341b7e9e7eefbacc74577610fdcbbc98818bc89e9a5922912f68622965a93e2cb4a65b1442c20dad6f5c34b24b2ec2a10ad0cfa88611754b34132102718148d2c725c2b835ddd57564ccd10e17d87a0c84a257dea7685f13b6c72cd94f02f4469209109"]}, 0x10c8}, {&(0x7f0000000640)={0x10, 0x23, 0x200, 0x70bd25, 0x25dfdbff}, 0x10}, {&(0x7f0000003ec0)={0xc0, 0x10, 0x0, 0x70bd2b, 0x25dfdbff, "", [@nested={0x10, 0x96, [@typed={0x4, 0x36}, @typed={0x8, 0x6d, @pid=r8}, @generic]}, @typed={0x94, 0x95, @binary="710cc4be914de52e2bbef89c6cb7d03727c737aee379b54e58fb521ea4e75c2d14afc629e201098683f1ecc25d7767487c1d4bae4c34f59205f570652a94a02a48eef900150a0db21996781cb31e4454bac9733f3480853ea2a05e1d80c93f82caedbdfe74ae16fe0ba6e39a558f5b8669676eb729e57d87b52d4034d2497ae6a8f95239fcca68e69984b91f06"}, @generic="c9d8eb3893c115bb82"]}, 0xc0}, {&(0x7f00000067c0)={0x1c8, 0x34, 0x20, 0x70bd28, 0x25dfdbfc, "", [@typed={0xc, 0x8c, @u64=0xfffffffffffff383}, @generic, @nested={0x148, 0x5f, [@generic, @typed={0xc, 0x63, @u64=0xffffffff00000000}, @generic="86da5c98daa278d7e9c0d8180b5e2051ccff98daff12c57c3d8a4453041e085c721161b47a7ffa377d9f1645ad7ab647503e28fbbd1227de69f5cb19e723f212a1329050e14b709ce67532687fb669a335f9bab48689869d734d0b8f01b1c9f37f4216e406fa9d5bd39769d4f5bb67517afecfd4d304a1a2f987549f90acb33c0f3431ca06ebe852889eae482f46d18074ee826f37e083cf3160a73875d879786cfa396008079e8591f0726a35f8644184356cf84ce8ff305bd5c939e4a3fc41947b9b74d81efb64e25a246994", @typed={0x8, 0x3a, @uid=r6}, @generic="6b2e57714d39d66f6c02181ad674f05837d7231c786a8d2967464e2ed3b7311d45381cb487989ec96f738812ce793d7f6dbd067aef0f86e4ec352bfeff954c26ea9cf69eceb02a994b1dc49a7ae0a6310e96517fb991fed0f8f3a44f623616476e", @generic]}, @generic="8cb6a4fc5c0b18d1f626a4304ccb23fd1a4c9fed14d5cfbeecd7afbe9cb1c34b95b10e25930ec4698a0dcf679663b3081383285023cf66377db6d7e53fcaab2b5dd640e130e524a2690d734b36150d2e384cd9e80a7acc6b0a0dba31530e084730c03f"]}, 0x1c8}], 0x4, &(0x7f0000000900)=[@rights={0x18, 0x1, 0x1, [r3]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r7, r1, r7, r1, r5, r0]}, @cred={0x20, 0x1, 0x2, 0x0, r6, r9}, @cred={0x20, 0x1, 0x2, 0x0, r6, r10}], 0x98, 0x40000}, 0x4000) lgetxattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@random={'system.', 'net/route\x00'}, &(0x7f0000000340)=""/63, 0x3f) 17:25:43 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x800) 17:25:43 executing program 7: r0 = inotify_init() mkdir(&(0x7f0000a7aff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./control\x00', 0x4000000) r1 = inotify_init() inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x81000100) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) 17:25:43 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00') mount(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000280)="e73654f55bf7b9c19e667fd5aeb613840bad97e5bcdaeb3c417a382a1705e0dad5c3a9b32c") 17:25:43 executing program 4: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x800) 17:25:43 executing program 7: r0 = socket(0x18, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000480)=""/234, 0xea}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000680)=""/49, 0x31}, {&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/5, 0x5}, {&(0x7f0000001780)=""/151, 0x97}, {&(0x7f0000001840)=""/136, 0x88}], 0xa, &(0x7f00000019c0)=""/252, 0xfc}}], 0x1, 0x0, &(0x7f0000004dc0)) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000045, 0x0) 17:25:43 executing program 3: futex(&(0x7f000000cffc), 0xffffffffffffffff, 0x0, &(0x7f0000a12000), &(0x7f0000048000), 0x0) 17:25:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = userfaultfd(0x80000) fchdir(r3) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000180)=0x8) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r5, 0x1, 0x0, 0x20004d2d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000240)={@dev={0xfe, 0x80}, 0x22}) r7 = creat(&(0x7f0000000280)='./file1\x00', 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000600)) r8 = gettid() fcntl$getownex(r0, 0x10, &(0x7f0000000700)) fstat(r3, &(0x7f0000000740)) r9 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000880)) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc, &(0x7f0000000680)=[{&(0x7f0000001c80)={0x10c8, 0x15, 0x200, 0x70bd2d, 0x25dfdbff, "", [@generic="b5105ffdaabdbbd38e39d4a44a6e71bd454ec65d6125d9219f5f6c2a9f77dc836e1e32b48b35325e6e9f25a0595f374682e41322ba8fac9cb5173e38d20ca7676c2f7b57c963b212c6f0ef20cb07299091046baadc2e6dd5341e530155ed66e6c8c7d4b971e2e5ed2f52aef4cacc52a0f0a02f5287ec346de1e7a00a29ad5e11ff586cae82cd461a84f4ff31c0908b67ff4ea20017b563c6872c711a344666ed77aed8a9d3da6562920b26edc459c984c8ef00c7d1281b021ac54528f66b6fbeea42d822c64a7f2e558e561559a46497c523b2dec2e2ee5bf987665330812f0bae4a84e79e2d13a6cec228dfbbcf6f937a11e03116f8dc5d26f782d1f5dec77ae1c6acef139c22041ef915d9bc47a1943684457d744c96d23d71a1eecdd8062f0085d4708e69f5ea59714c12195b3b7b9b5f8eee2b897d45a4ab841f4e9ccf0cd8a9ffd76825dbd9be365374e5957edfda39bda9b2056a2b2f7fd02f4140f9914ba24d6ecb83c52dc14044d536f4838c6056a7df9068a8548555c579aed73dee4027d4bfccf85cfadbab31d48b209066fcd5e48a1bfe2925d645e57b67c817a28042559028c64faca06ae7609f440cdef3523d69912b4a26e0a9b7cbea420ce927241e4a79740a4cde4fdc5ffb8db11ba92246cf5ca6f017a555882a61483402e6fd2deb8fbe2578676dbaad91c0c7779dd92e571dd34811cf1d04054fba529a5d040dfdc160961d818292a0de1e08b407f6171168e74f14fa8d3244d508db817adfcb8ab6807dc1262554caa7b45f7ce340844054d6cd7a9d7b97d9aaed7a4df9c1c0c82e0d82a84888a8de364d9bee74ade2afca5330697b2d39e7ef507934ef3a3667676ed8f96503241b9eb3fd3fe012ffaf94a4a5648d2d6be44c1278f2aa930b3214c3c616f4aaf51ed8e61ec0d254498e4f7995121119e304e13387fd96772dadeecd10ef16c665b0829059a9a7eced32bf959c83cbf46c3c4d052ad5a5c80cae4b771879798e9e81983ce3fd8a5677a637ade2eb337e59060c5a9fb17315d0c89da3c1740ca58749baecb0335189fd44a0f384ada4d887eef3f8ad3e26758302318336db1cf50ac85e183f1a895eccdf26dc63b0e3c6ab880c4dddf3f7e019de5ce716a5a251a28ce83a9fa1a42dbd8e6ca4dc76488c79854bd6c00ec76728236e687d9c3dc65a52a91980f45ed9f3d6c10b6ba9a0cb5a9ebdfdc87cb4209df54bed574f639006f62f90e4afb835b7aab4fe40166b06f2f1f3a4e3fec4b4838e18898efed6d93f853f878e1351398136bb91086ac178ca44baa7f2f669d12bb2b42b525348648ec999601262365321dfb258f93f6fe7f5a7f17c22a54bf45bb8b584c35dc40fc9a231d1918b2c4ca79c17f3cb9dce3e074d58d62a24255e16449f93a7bd976552e4269dc09c8657a0ecc7c6c997baf220ef12d28f3176a71a250bef9f25188c38263300d6a19163de142e7ba91685d3c1f40a6b01663fa8a94554302941ffbf25a616bd6886153db076844cffbbfa2b7b04d51d3c869fd2184d4c921c43e3023a0b45134e5de7f6be45f7b6794cb941cba90dfcb4def96cd6b4375728ec2c326c38bdc5b1cf73cc3105dd9a0252dc96d5dcfe0a115e8f84c06d2b31bf663bc0d099a65321c63e49f5d765e5042c7a6db3e972b9d487d51102af443d3a51f36a570091559666a44c80f606e494ce81814c7d191294029c6dbb894e8a525e439302945aefbb02b74ba3ef5c5be9508a2ff316b5a9c33c1e377ebc60dd09bf48c35cdf337696fd786eed65bd34a5b8d77b6a3418ad9b5614b3058ebad7b6df5d20a3a37f6c7b361d63d9dabba7736a1984c8862c5dd57b6a9d12298b46f522a523555931ee698bbdb74fe0f3361c5dbf59c53200b66edc9ce6054d1946c00c60827536f185518e109d16b840d13fc11b6bf12d03f35174d26bf9f0c82d929642c40a2ac24c173e3cc64bfc919a080bb3d7bb78869ab8a8af8caa8eedf33fa4a37f22bd169eacb68b4c122d1107a708f3b5451c706661e92e676c6340e28242f2d5c05c03f2ae3360c9e8c3bbafe6da1c4d0915fd59d24a874142cce45e34f85f87777b0dfec24d3753186f878ea0be643584f6393ded80b73ad9bc79eb5abf2ac9b4329e44bd14769f6e3a4e6848cb3812071787266d00cfa421a1901088ee1d654403952b0fd2aa3693b7e7b31725c753c7941fa111c72b791b8f5f7e04377ae326f958bee801c8123a291c57e4c361ad70ae305c128eead3fbee749bf4b3c2123eebd0c152f5343cd3cc14e2dd7bfe8171880980b7c7362ac322a8e0f7574d5492242dda95e3d8b07f276c7243186a03b81595c4b356e6e60c9f2cbbdc08cbd97ed135ef20cee55f022fdaedaf3ad01f83f7da53254b88a4995fbf2e4a8b0b2dc08b2fbec449dfedac631aba2f3b84be7fcd59b7d0a89f377e201be39c120c8886c6daaf284617b9472067e6b0108e346376861f5c51d2f8c043a047f5dc7e34cf2b4a5a042cc9ac123fa27d17d52dddb326ec73cb9326784fb37788ba3c368f13986d1d8d114c509a278625de096f69e25e16292dac3f65bfe1423a125ab8c9e72283dba4c913cf6877eb48ce8f676ef9dca31bfa073946ce9b0726162c86bd8da424c6598bfdd738b8231a53cc2e2c4756996b1766a839ca8da4cac23b9ba124f1f485b7d42a10057ec91c4a11db16dabe820356ff81ebda0b6e6195e93cbf5dea03ff50700d35c6ffd649189b61910c7f87a4ccbcb5ebac1c759bf910bc4656757d2be136e99f5cda31fff066f7fc5bc47f813397b4d8dd7590ad5072ff8ee8411a70f60d6feb3310bb24ef50eac7010d609358d8d2c1473514a78b5490b0f17a1532d6e89ee525d24a4850e991c4513f91ab4332933610532124bf0aaaed3ab7189ba62c5c0f3b0a625e63d78a3fa410f23f6814538f1d7e85ba1d3d91e7e5f05dd97765ff57d54770e2f876903dc02060705b5b04ed8be1624508f9591ba09720613071a6a7801d0450f14f3f8ed414ca92c6292f1f78c8c8ab0871317330dc81a93dc19c3cf1b141bcef898e63354492054ce24d469f64fdce54c5f50210327c6a041e12bb15f6635325f696ad6d8d46168e3a4408243a9acafcdbaea07cdc40da9900f888b8c0fe5316f7912ece5ff534f31861acc105ba29563eba8920899e14640c4834004ae8d4c5ba76b8a47e06cdc6dcf37b8b60cb972cbb29689936fc81623e37d5f12222c3e15b7414a8cccd3b7e5e8c3845e50195d45b16525080fe56f42320409a2b0d515f43c829bb936fe9434663da2f57eeff716f5f10057fbf1a857fcd9baf846436cbac71f55e6b10ba2b4a5dc09b768e66bf77ab5f680a7b649c2407172c2d5f7a1a35d60c418d0becf457e9f65af8a5be8c28de5226413257a41379c946ffeda7b478da14d24706af557d275c1d33eb5317a7537685b91f36ce60b1b6bd8aaccc5dbb33efdfb34e77713d65e0561d1c7a80acb423519254a0a18c127cc14754ee962b07f5f716485741423ac3165d8bc18eb298b51fc2e5ac091d28662b8b21053b32549548a28cf514e5f722406fac7dbd027ad3a2a87e563ed412ba7b61a9e3338e4c36e721dbc93d1729e4f267bd1cd39ea2ca8925f8af7167fee91276e4f1fbcb587116cf0231eda9fcfeb62bd85ec35fd2b06bd50465f6b23297eaea7bde505b37611e661318f2584115d0c32bf08a5b5d636f739ee6a2c92f8293e5bedf4f503bfc9efab6bf97305b186a4e511f84c42311c45a28b11850662500bd5708951767836319819b6cf7a29648ccba0be4465fc0052f217d1455d5fca38e16e4caa7e51496e5297b92d34d3c9820d0b5c5b6d6d487ff147fe818e5e5fd5a6e0ec9bf3a89371c241bc9d0ab8b448af25d5fc89f38d178bf8619dd7e2c7558197a4b1d15cef9b2c8328f5663c8ca285a75ca303564c8c40d911326a10d18a3c2d17353afe761e9be0c9182dd37f4152ca6bee12fc91228fb74ca36a0e1a5f1bbd41365cd712a7f59ebc7d213bfeecca03b2fb55578fbb5e4663e35ddfc489eff9e193a18772f72a2ca42ea2ebdf7b581a89979c4d0981ae775562a2e3337f3870d4cfe6f05303caf1c452f027467947b933a65a28c7d9d51aae2b770f543789fb1634ceedea533436cf87c2b967cefbdc878f5276d032333071b3a92511bad0285b7553bbe2b15e94cc77116707232f4d55b75064d1f124ac6a099ea796af79beaea9bc3176192ec09d7d20e40dea319fb36a81261cb6a73c92e439af28a3231a7d53add7280d7271504403a9c6061ab30229f939a8719e99792400d215277f4b731fe201518173c7fcf7807f82a351d427d28770079b6896098a3fe9f7e4904c3d2c6d626df5b7f3cb704f9b63e30b24986ac1aec340f2c6209f0383e4b10d2dc6e844b9d1b87aaf94c36571d6bf41bbda0930dbb1fadc9e09f55a4a91fa199b537e5afacf173e3258d7f0e209bf50f5baceec9f82a28ec2084431814eb4c85765f92d7b95b7fce3e53deb526201cd7631136fd5ab3a9983a1e2a131680f7cd0d24b05645d4163b265f5d4f6315479d8de014b9ab32c9fc8c16f7f4a956311143269772a548d5d1e2f6fbb254c7bc171faf0dad87718943055a3ef70ffd35acae129e2b757a4c05dfc0d0dae3be443d15ee35fae2a1a1553c6ad93cdd2a764576d707b32980b1947b6adf7da542232cb96e07d2a7152d972598b45e05539844e602b8b1ae1c9ed15330442e432971a6648b72ffa89f9fe2991a35316f0e58aafe679c7b149ffc41bbb96db80267a5869d0da3e813622918be20ee4370c12dc68f114f7a6fa4deba5a637c8c99be4b48589666aec2d4ede8ae5b2d61b31256c923c0795ff3778414b4f3980307e18c87b52cb40bd26f40e60d7431dbfec420baf09d29ad2dcc5574da244ce80bcc029f6687e880ee60bb8c91508e9087569c55e98c501ae9e8e1e641bc186b5c3ed1c44ba9c923ef42997fb39966f0f6cd676d7a6c9eeb52bab5f53c8185d473febbfe25a4390c2f98ae5321195222f590c1c9f56b29f326f88bee1dad8049af101f4ca1ecdd55d23bca7834155459e89cde0e1655321f333901366ef7a6f43ca96c937b8f14197c199067ff96ca36b8765a197b9f69e47f7fc7b4e6d954d291d0ba88cd9dfa36032e8994d3fcc68f0b7a5b5db79b2db8012a9fa8e83627e76ea5de6f44b78850f4252e3e52fd611b0be3c30e1a1e6d8c8e1e53299fb355e3a0e4c4a050d0db669302a4e71da42bd74e18b468f5397752265a1a3a3343cb4f46f3e0de5a83abe4cddb9536132fc9f607ac65b7d64b3794726144e019105faf2c7c66f801d855494511d4026a85d42d57a8c34823de80827f6e11d8d3924f8d1112a4cb7eb16af99ffb53ef1466949b556bcbc822d5fa7fe045d4d5b37e69b6383d2e4eaa0a25d425f0f4180414a129a0e0216272385e829ea70dad6e2fc7a921a4b4fdbd2402ba90bd7d0690acefb5f272551ba619ba8a94c91f7028d071aef4fdb47007b1994b8620d5031ebf1632fd0816305fd45024b7b5c204ffb3796bd22ea615cbbe6dd4ce2ec1c4409c942d3a07eac571fc69376d93f7816e962ca5457c89279a8c1e152b2d00ec43d5e4c5f1f88ec207ec4cef0690435fa08b5c2e3ef39e517598228bb45073d85a21873c1074b970f0aafe1b89ab95f09990bc62b452f4bd4e3dfafa685f4af23c467212c1824589b87b3748c1c92688f50388dc0fe32f7974d8e953f2c0551e4c056d4e5232cc9468a85e97c6f4702d14614e", @generic="6afedda10ecf6430bce791d1d6a79b65558616e550fdfbf61839cde51c9f9605c603709d94f2e1e7c698a77595ac815c6001234f1e8f25175b671a68a8995055eca25123b553f85b0e8109f5e2efe4fd2878faf341b7e9e7eefbacc74577610fdcbbc98818bc89e9a5922912f68622965a93e2cb4a65b1442c20dad6f5c34b24b2ec2a10ad0cfa88611754b34132102718148d2c725c2b835ddd57564ccd10e17d87a0c84a257dea7685f13b6c72cd94f02f4469209109"]}, 0x10c8}, {&(0x7f0000000640)={0x10, 0x23, 0x200, 0x70bd25, 0x25dfdbff}, 0x10}, {&(0x7f0000003ec0)={0xc0, 0x10, 0x0, 0x70bd2b, 0x25dfdbff, "", [@nested={0x10, 0x96, [@typed={0x4, 0x36}, @typed={0x8, 0x6d, @pid=r8}, @generic]}, @typed={0x94, 0x95, @binary="710cc4be914de52e2bbef89c6cb7d03727c737aee379b54e58fb521ea4e75c2d14afc629e201098683f1ecc25d7767487c1d4bae4c34f59205f570652a94a02a48eef900150a0db21996781cb31e4454bac9733f3480853ea2a05e1d80c93f82caedbdfe74ae16fe0ba6e39a558f5b8669676eb729e57d87b52d4034d2497ae6a8f95239fcca68e69984b91f06"}, @generic="c9d8eb3893c115bb82"]}, 0xc0}, {&(0x7f00000067c0)={0x1c8, 0x34, 0x20, 0x70bd28, 0x25dfdbfc, "", [@typed={0xc, 0x8c, @u64=0xfffffffffffff383}, @generic, @nested={0x148, 0x5f, [@generic, @typed={0xc, 0x63, @u64=0xffffffff00000000}, @generic="86da5c98daa278d7e9c0d8180b5e2051ccff98daff12c57c3d8a4453041e085c721161b47a7ffa377d9f1645ad7ab647503e28fbbd1227de69f5cb19e723f212a1329050e14b709ce67532687fb669a335f9bab48689869d734d0b8f01b1c9f37f4216e406fa9d5bd39769d4f5bb67517afecfd4d304a1a2f987549f90acb33c0f3431ca06ebe852889eae482f46d18074ee826f37e083cf3160a73875d879786cfa396008079e8591f0726a35f8644184356cf84ce8ff305bd5c939e4a3fc41947b9b74d81efb64e25a246994", @typed={0x8, 0x3a, @uid=r6}, @generic="6b2e57714d39d66f6c02181ad674f05837d7231c786a8d2967464e2ed3b7311d45381cb487989ec96f738812ce793d7f6dbd067aef0f86e4ec352bfeff954c26ea9cf69eceb02a994b1dc49a7ae0a6310e96517fb991fed0f8f3a44f623616476e", @generic]}, @generic="8cb6a4fc5c0b18d1f626a4304ccb23fd1a4c9fed14d5cfbeecd7afbe9cb1c34b95b10e25930ec4698a0dcf679663b3081383285023cf66377db6d7e53fcaab2b5dd640e130e524a2690d734b36150d2e384cd9e80a7acc6b0a0dba31530e084730c03f"]}, 0x1c8}], 0x4, &(0x7f0000000900)=[@rights={0x18, 0x1, 0x1, [r3]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r7, r1, r7, r1, r5, r0]}, @cred={0x20, 0x1, 0x2, 0x0, r6, r9}, @cred={0x20, 0x1, 0x2, 0x0, r6, r10}], 0x98, 0x40000}, 0x4000) lgetxattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@random={'system.', 'net/route\x00'}, &(0x7f0000000340)=""/63, 0x3f) 17:25:43 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="1d5ddcaa60fb347f", 0x8}], 0x1, 0x0) tee(r2, r1, 0x8, 0x0) 17:25:43 executing program 3: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x27}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @rand_addr}}) 17:25:44 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = userfaultfd(0x80000) fchdir(r3) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000180)=0x8) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r5, 0x1, 0x0, 0x20004d2d) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000240)={@dev={0xfe, 0x80}, 0x22}) r7 = creat(&(0x7f0000000280)='./file1\x00', 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000600)) r8 = gettid() fcntl$getownex(r0, 0x10, &(0x7f0000000700)) fstat(r3, &(0x7f0000000740)) r9 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000880)) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc, &(0x7f0000000680)=[{&(0x7f0000001c80)={0x10c8, 0x15, 0x200, 0x70bd2d, 0x25dfdbff, "", [@generic="b5105ffdaabdbbd38e39d4a44a6e71bd454ec65d6125d9219f5f6c2a9f77dc836e1e32b48b35325e6e9f25a0595f374682e41322ba8fac9cb5173e38d20ca7676c2f7b57c963b212c6f0ef20cb07299091046baadc2e6dd5341e530155ed66e6c8c7d4b971e2e5ed2f52aef4cacc52a0f0a02f5287ec346de1e7a00a29ad5e11ff586cae82cd461a84f4ff31c0908b67ff4ea20017b563c6872c711a344666ed77aed8a9d3da6562920b26edc459c984c8ef00c7d1281b021ac54528f66b6fbeea42d822c64a7f2e558e561559a46497c523b2dec2e2ee5bf987665330812f0bae4a84e79e2d13a6cec228dfbbcf6f937a11e03116f8dc5d26f782d1f5dec77ae1c6acef139c22041ef915d9bc47a1943684457d744c96d23d71a1eecdd8062f0085d4708e69f5ea59714c12195b3b7b9b5f8eee2b897d45a4ab841f4e9ccf0cd8a9ffd76825dbd9be365374e5957edfda39bda9b2056a2b2f7fd02f4140f9914ba24d6ecb83c52dc14044d536f4838c6056a7df9068a8548555c579aed73dee4027d4bfccf85cfadbab31d48b209066fcd5e48a1bfe2925d645e57b67c817a28042559028c64faca06ae7609f440cdef3523d69912b4a26e0a9b7cbea420ce927241e4a79740a4cde4fdc5ffb8db11ba92246cf5ca6f017a555882a61483402e6fd2deb8fbe2578676dbaad91c0c7779dd92e571dd34811cf1d04054fba529a5d040dfdc160961d818292a0de1e08b407f6171168e74f14fa8d3244d508db817adfcb8ab6807dc1262554caa7b45f7ce340844054d6cd7a9d7b97d9aaed7a4df9c1c0c82e0d82a84888a8de364d9bee74ade2afca5330697b2d39e7ef507934ef3a3667676ed8f96503241b9eb3fd3fe012ffaf94a4a5648d2d6be44c1278f2aa930b3214c3c616f4aaf51ed8e61ec0d254498e4f7995121119e304e13387fd96772dadeecd10ef16c665b0829059a9a7eced32bf959c83cbf46c3c4d052ad5a5c80cae4b771879798e9e81983ce3fd8a5677a637ade2eb337e59060c5a9fb17315d0c89da3c1740ca58749baecb0335189fd44a0f384ada4d887eef3f8ad3e26758302318336db1cf50ac85e183f1a895eccdf26dc63b0e3c6ab880c4dddf3f7e019de5ce716a5a251a28ce83a9fa1a42dbd8e6ca4dc76488c79854bd6c00ec76728236e687d9c3dc65a52a91980f45ed9f3d6c10b6ba9a0cb5a9ebdfdc87cb4209df54bed574f639006f62f90e4afb835b7aab4fe40166b06f2f1f3a4e3fec4b4838e18898efed6d93f853f878e1351398136bb91086ac178ca44baa7f2f669d12bb2b42b525348648ec999601262365321dfb258f93f6fe7f5a7f17c22a54bf45bb8b584c35dc40fc9a231d1918b2c4ca79c17f3cb9dce3e074d58d62a24255e16449f93a7bd976552e4269dc09c8657a0ecc7c6c997baf220ef12d28f3176a71a250bef9f25188c38263300d6a19163de142e7ba91685d3c1f40a6b01663fa8a94554302941ffbf25a616bd6886153db076844cffbbfa2b7b04d51d3c869fd2184d4c921c43e3023a0b45134e5de7f6be45f7b6794cb941cba90dfcb4def96cd6b4375728ec2c326c38bdc5b1cf73cc3105dd9a0252dc96d5dcfe0a115e8f84c06d2b31bf663bc0d099a65321c63e49f5d765e5042c7a6db3e972b9d487d51102af443d3a51f36a570091559666a44c80f606e494ce81814c7d191294029c6dbb894e8a525e439302945aefbb02b74ba3ef5c5be9508a2ff316b5a9c33c1e377ebc60dd09bf48c35cdf337696fd786eed65bd34a5b8d77b6a3418ad9b5614b3058ebad7b6df5d20a3a37f6c7b361d63d9dabba7736a1984c8862c5dd57b6a9d12298b46f522a523555931ee698bbdb74fe0f3361c5dbf59c53200b66edc9ce6054d1946c00c60827536f185518e109d16b840d13fc11b6bf12d03f35174d26bf9f0c82d929642c40a2ac24c173e3cc64bfc919a080bb3d7bb78869ab8a8af8caa8eedf33fa4a37f22bd169eacb68b4c122d1107a708f3b5451c706661e92e676c6340e28242f2d5c05c03f2ae3360c9e8c3bbafe6da1c4d0915fd59d24a874142cce45e34f85f87777b0dfec24d3753186f878ea0be643584f6393ded80b73ad9bc79eb5abf2ac9b4329e44bd14769f6e3a4e6848cb3812071787266d00cfa421a1901088ee1d654403952b0fd2aa3693b7e7b31725c753c7941fa111c72b791b8f5f7e04377ae326f958bee801c8123a291c57e4c361ad70ae305c128eead3fbee749bf4b3c2123eebd0c152f5343cd3cc14e2dd7bfe8171880980b7c7362ac322a8e0f7574d5492242dda95e3d8b07f276c7243186a03b81595c4b356e6e60c9f2cbbdc08cbd97ed135ef20cee55f022fdaedaf3ad01f83f7da53254b88a4995fbf2e4a8b0b2dc08b2fbec449dfedac631aba2f3b84be7fcd59b7d0a89f377e201be39c120c8886c6daaf284617b9472067e6b0108e346376861f5c51d2f8c043a047f5dc7e34cf2b4a5a042cc9ac123fa27d17d52dddb326ec73cb9326784fb37788ba3c368f13986d1d8d114c509a278625de096f69e25e16292dac3f65bfe1423a125ab8c9e72283dba4c913cf6877eb48ce8f676ef9dca31bfa073946ce9b0726162c86bd8da424c6598bfdd738b8231a53cc2e2c4756996b1766a839ca8da4cac23b9ba124f1f485b7d42a10057ec91c4a11db16dabe820356ff81ebda0b6e6195e93cbf5dea03ff50700d35c6ffd649189b61910c7f87a4ccbcb5ebac1c759bf910bc4656757d2be136e99f5cda31fff066f7fc5bc47f813397b4d8dd7590ad5072ff8ee8411a70f60d6feb3310bb24ef50eac7010d609358d8d2c1473514a78b5490b0f17a1532d6e89ee525d24a4850e991c4513f91ab4332933610532124bf0aaaed3ab7189ba62c5c0f3b0a625e63d78a3fa410f23f6814538f1d7e85ba1d3d91e7e5f05dd97765ff57d54770e2f876903dc02060705b5b04ed8be1624508f9591ba09720613071a6a7801d0450f14f3f8ed414ca92c6292f1f78c8c8ab0871317330dc81a93dc19c3cf1b141bcef898e63354492054ce24d469f64fdce54c5f50210327c6a041e12bb15f6635325f696ad6d8d46168e3a4408243a9acafcdbaea07cdc40da9900f888b8c0fe5316f7912ece5ff534f31861acc105ba29563eba8920899e14640c4834004ae8d4c5ba76b8a47e06cdc6dcf37b8b60cb972cbb29689936fc81623e37d5f12222c3e15b7414a8cccd3b7e5e8c3845e50195d45b16525080fe56f42320409a2b0d515f43c829bb936fe9434663da2f57eeff716f5f10057fbf1a857fcd9baf846436cbac71f55e6b10ba2b4a5dc09b768e66bf77ab5f680a7b649c2407172c2d5f7a1a35d60c418d0becf457e9f65af8a5be8c28de5226413257a41379c946ffeda7b478da14d24706af557d275c1d33eb5317a7537685b91f36ce60b1b6bd8aaccc5dbb33efdfb34e77713d65e0561d1c7a80acb423519254a0a18c127cc14754ee962b07f5f716485741423ac3165d8bc18eb298b51fc2e5ac091d28662b8b21053b32549548a28cf514e5f722406fac7dbd027ad3a2a87e563ed412ba7b61a9e3338e4c36e721dbc93d1729e4f267bd1cd39ea2ca8925f8af7167fee91276e4f1fbcb587116cf0231eda9fcfeb62bd85ec35fd2b06bd50465f6b23297eaea7bde505b37611e661318f2584115d0c32bf08a5b5d636f739ee6a2c92f8293e5bedf4f503bfc9efab6bf97305b186a4e511f84c42311c45a28b11850662500bd5708951767836319819b6cf7a29648ccba0be4465fc0052f217d1455d5fca38e16e4caa7e51496e5297b92d34d3c9820d0b5c5b6d6d487ff147fe818e5e5fd5a6e0ec9bf3a89371c241bc9d0ab8b448af25d5fc89f38d178bf8619dd7e2c7558197a4b1d15cef9b2c8328f5663c8ca285a75ca303564c8c40d911326a10d18a3c2d17353afe761e9be0c9182dd37f4152ca6bee12fc91228fb74ca36a0e1a5f1bbd41365cd712a7f59ebc7d213bfeecca03b2fb55578fbb5e4663e35ddfc489eff9e193a18772f72a2ca42ea2ebdf7b581a89979c4d0981ae775562a2e3337f3870d4cfe6f05303caf1c452f027467947b933a65a28c7d9d51aae2b770f543789fb1634ceedea533436cf87c2b967cefbdc878f5276d032333071b3a92511bad0285b7553bbe2b15e94cc77116707232f4d55b75064d1f124ac6a099ea796af79beaea9bc3176192ec09d7d20e40dea319fb36a81261cb6a73c92e439af28a3231a7d53add7280d7271504403a9c6061ab30229f939a8719e99792400d215277f4b731fe201518173c7fcf7807f82a351d427d28770079b6896098a3fe9f7e4904c3d2c6d626df5b7f3cb704f9b63e30b24986ac1aec340f2c6209f0383e4b10d2dc6e844b9d1b87aaf94c36571d6bf41bbda0930dbb1fadc9e09f55a4a91fa199b537e5afacf173e3258d7f0e209bf50f5baceec9f82a28ec2084431814eb4c85765f92d7b95b7fce3e53deb526201cd7631136fd5ab3a9983a1e2a131680f7cd0d24b05645d4163b265f5d4f6315479d8de014b9ab32c9fc8c16f7f4a956311143269772a548d5d1e2f6fbb254c7bc171faf0dad87718943055a3ef70ffd35acae129e2b757a4c05dfc0d0dae3be443d15ee35fae2a1a1553c6ad93cdd2a764576d707b32980b1947b6adf7da542232cb96e07d2a7152d972598b45e05539844e602b8b1ae1c9ed15330442e432971a6648b72ffa89f9fe2991a35316f0e58aafe679c7b149ffc41bbb96db80267a5869d0da3e813622918be20ee4370c12dc68f114f7a6fa4deba5a637c8c99be4b48589666aec2d4ede8ae5b2d61b31256c923c0795ff3778414b4f3980307e18c87b52cb40bd26f40e60d7431dbfec420baf09d29ad2dcc5574da244ce80bcc029f6687e880ee60bb8c91508e9087569c55e98c501ae9e8e1e641bc186b5c3ed1c44ba9c923ef42997fb39966f0f6cd676d7a6c9eeb52bab5f53c8185d473febbfe25a4390c2f98ae5321195222f590c1c9f56b29f326f88bee1dad8049af101f4ca1ecdd55d23bca7834155459e89cde0e1655321f333901366ef7a6f43ca96c937b8f14197c199067ff96ca36b8765a197b9f69e47f7fc7b4e6d954d291d0ba88cd9dfa36032e8994d3fcc68f0b7a5b5db79b2db8012a9fa8e83627e76ea5de6f44b78850f4252e3e52fd611b0be3c30e1a1e6d8c8e1e53299fb355e3a0e4c4a050d0db669302a4e71da42bd74e18b468f5397752265a1a3a3343cb4f46f3e0de5a83abe4cddb9536132fc9f607ac65b7d64b3794726144e019105faf2c7c66f801d855494511d4026a85d42d57a8c34823de80827f6e11d8d3924f8d1112a4cb7eb16af99ffb53ef1466949b556bcbc822d5fa7fe045d4d5b37e69b6383d2e4eaa0a25d425f0f4180414a129a0e0216272385e829ea70dad6e2fc7a921a4b4fdbd2402ba90bd7d0690acefb5f272551ba619ba8a94c91f7028d071aef4fdb47007b1994b8620d5031ebf1632fd0816305fd45024b7b5c204ffb3796bd22ea615cbbe6dd4ce2ec1c4409c942d3a07eac571fc69376d93f7816e962ca5457c89279a8c1e152b2d00ec43d5e4c5f1f88ec207ec4cef0690435fa08b5c2e3ef39e517598228bb45073d85a21873c1074b970f0aafe1b89ab95f09990bc62b452f4bd4e3dfafa685f4af23c467212c1824589b87b3748c1c92688f50388dc0fe32f7974d8e953f2c0551e4c056d4e5232cc9468a85e97c6f4702d14614e", @generic="6afedda10ecf6430bce791d1d6a79b65558616e550fdfbf61839cde51c9f9605c603709d94f2e1e7c698a77595ac815c6001234f1e8f25175b671a68a8995055eca25123b553f85b0e8109f5e2efe4fd2878faf341b7e9e7eefbacc74577610fdcbbc98818bc89e9a5922912f68622965a93e2cb4a65b1442c20dad6f5c34b24b2ec2a10ad0cfa88611754b34132102718148d2c725c2b835ddd57564ccd10e17d87a0c84a257dea7685f13b6c72cd94f02f4469209109"]}, 0x10c8}, {&(0x7f0000000640)={0x10, 0x23, 0x200, 0x70bd25, 0x25dfdbff}, 0x10}, {&(0x7f0000003ec0)={0xc0, 0x10, 0x0, 0x70bd2b, 0x25dfdbff, "", [@nested={0x10, 0x96, [@typed={0x4, 0x36}, @typed={0x8, 0x6d, @pid=r8}, @generic]}, @typed={0x94, 0x95, @binary="710cc4be914de52e2bbef89c6cb7d03727c737aee379b54e58fb521ea4e75c2d14afc629e201098683f1ecc25d7767487c1d4bae4c34f59205f570652a94a02a48eef900150a0db21996781cb31e4454bac9733f3480853ea2a05e1d80c93f82caedbdfe74ae16fe0ba6e39a558f5b8669676eb729e57d87b52d4034d2497ae6a8f95239fcca68e69984b91f06"}, @generic="c9d8eb3893c115bb82"]}, 0xc0}, {&(0x7f00000067c0)={0x1c8, 0x34, 0x20, 0x70bd28, 0x25dfdbfc, "", [@typed={0xc, 0x8c, @u64=0xfffffffffffff383}, @generic, @nested={0x148, 0x5f, [@generic, @typed={0xc, 0x63, @u64=0xffffffff00000000}, @generic="86da5c98daa278d7e9c0d8180b5e2051ccff98daff12c57c3d8a4453041e085c721161b47a7ffa377d9f1645ad7ab647503e28fbbd1227de69f5cb19e723f212a1329050e14b709ce67532687fb669a335f9bab48689869d734d0b8f01b1c9f37f4216e406fa9d5bd39769d4f5bb67517afecfd4d304a1a2f987549f90acb33c0f3431ca06ebe852889eae482f46d18074ee826f37e083cf3160a73875d879786cfa396008079e8591f0726a35f8644184356cf84ce8ff305bd5c939e4a3fc41947b9b74d81efb64e25a246994", @typed={0x8, 0x3a, @uid=r6}, @generic="6b2e57714d39d66f6c02181ad674f05837d7231c786a8d2967464e2ed3b7311d45381cb487989ec96f738812ce793d7f6dbd067aef0f86e4ec352bfeff954c26ea9cf69eceb02a994b1dc49a7ae0a6310e96517fb991fed0f8f3a44f623616476e", @generic]}, @generic="8cb6a4fc5c0b18d1f626a4304ccb23fd1a4c9fed14d5cfbeecd7afbe9cb1c34b95b10e25930ec4698a0dcf679663b3081383285023cf66377db6d7e53fcaab2b5dd640e130e524a2690d734b36150d2e384cd9e80a7acc6b0a0dba31530e084730c03f"]}, 0x1c8}], 0x4, &(0x7f0000000900)=[@rights={0x18, 0x1, 0x1, [r3]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r7, r1, r7, r1, r5, r0]}, @cred={0x20, 0x1, 0x2, 0x0, r6, r9}, @cred={0x20, 0x1, 0x2, 0x0, r6, r10}], 0x98, 0x40000}, 0x4000) lgetxattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@random={'system.', 'net/route\x00'}, &(0x7f0000000340)=""/63, 0x3f) [ 623.458415] IPVS: Creating netns size=2536 id=172 [ 623.488855] IPVS: Creating netns size=2536 id=173 [ 623.521412] IPVS: Creating netns size=2536 id=174 [ 623.536319] device lo entered promiscuous mode 17:25:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0xfffffd64) syz_emit_ethernet(0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="aebf79a42184b958451f7e1e9443bd8c916569f8fe41e39eee972fd2b925d9ff1f0186013ea90f6e1b996feb775446bb592e3416be814edc"], &(0x7f00000000c0)) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 17:25:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={@remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x0, 0x84f2}) 17:25:44 executing program 7: r0 = socket(0x18, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000480)=""/234, 0xea}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000680)=""/49, 0x31}, {&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/5, 0x5}, {&(0x7f0000001780)=""/151, 0x97}, {&(0x7f0000001840)=""/136, 0x88}], 0xa, &(0x7f00000019c0)=""/252, 0xfc}}], 0x1, 0x0, &(0x7f0000004dc0)) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000045, 0x0) 17:25:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)={0x2, 0xd, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1=0xe0000001}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_x_sec_ctx={0x1, 0x18}]}, 0x88}, 0x1}, 0x0) 17:25:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x40000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 17:25:44 executing program 2: unshare(0x40000000) 17:25:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x6e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f00000001c0)="580000001400add427323b470c458c5602067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 17:25:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x80000000000000) 17:25:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000000)=""/95, &(0x7f00000000c0)=0x5f) dup2(r1, r0) recvmmsg(r0, &(0x7f0000004100)=[{{&(0x7f0000001600)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/4096}, {&(0x7f0000001340)=""/203}, {&(0x7f0000000140)=""/119}, {&(0x7f0000001440)=""/133}, {&(0x7f0000000080)=""/47}, {&(0x7f0000001500)=""/79}], 0x0, 0x0, 0x365}}], 0x2a37, 0x0, 0x0) 17:25:44 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f0000000240)=""/244, 0xf4, 0xfffffffffffffffb, 0x0) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) 17:25:44 executing program 6: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340), 0x8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 17:25:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000000)=""/95, &(0x7f00000000c0)=0x5f) dup2(r1, r0) recvmmsg(r0, &(0x7f0000004100)=[{{&(0x7f0000001600)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/4096}, {&(0x7f0000001340)=""/203}, {&(0x7f0000000140)=""/119}, {&(0x7f0000001440)=""/133}, {&(0x7f0000000080)=""/47}, {&(0x7f0000001500)=""/79}], 0x0, 0x0, 0x365}}], 0x2a37, 0x0, 0x0) 17:25:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000000)=""/95, &(0x7f00000000c0)=0x5f) dup2(r1, r0) recvmmsg(r0, &(0x7f0000004100)=[{{&(0x7f0000001600)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/4096}, {&(0x7f0000001340)=""/203}, {&(0x7f0000000140)=""/119}, {&(0x7f0000001440)=""/133}, {&(0x7f0000000080)=""/47}, {&(0x7f0000001500)=""/79}], 0x0, 0x0, 0x365}}], 0x2a37, 0x0, 0x0) 17:25:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f760070") mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x2}) [ 625.090626] pktgen: kernel_thread() failed for cpu 0 [ 625.095774] pktgen: Cannot create thread for cpu 0 (-4) [ 625.101227] pktgen: kernel_thread() failed for cpu 1 [ 625.106338] pktgen: Cannot create thread for cpu 1 (-4) [ 625.111740] pktgen: Initialization failed for all threads 17:25:46 executing program 3: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340), 0x8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 17:25:46 executing program 7: r0 = socket(0x18, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000480)=""/234, 0xea}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000680)=""/49, 0x31}, {&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/5, 0x5}, {&(0x7f0000001780)=""/151, 0x97}, {&(0x7f0000001840)=""/136, 0x88}], 0xa, &(0x7f00000019c0)=""/252, 0xfc}}], 0x1, 0x0, &(0x7f0000004dc0)) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000045, 0x0) 17:25:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000000)=""/95, &(0x7f00000000c0)=0x5f) dup2(r1, r0) recvmmsg(r0, &(0x7f0000004100)=[{{&(0x7f0000001600)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/4096}, {&(0x7f0000001340)=""/203}, {&(0x7f0000000140)=""/119}, {&(0x7f0000001440)=""/133}, {&(0x7f0000000080)=""/47}, {&(0x7f0000001500)=""/79}], 0x0, 0x0, 0x365}}], 0x2a37, 0x0, 0x0) 17:25:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) 17:25:46 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8008700b, &(0x7f00000000c0)) 17:25:46 executing program 6: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340), 0x8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 625.209233] pktgen: kernel_thread() failed for cpu 0 [ 625.214419] pktgen: Cannot create thread for cpu 0 (-4) [ 625.228658] pktgen: kernel_thread() failed for cpu 1 [ 625.240627] pktgen: Cannot create thread for cpu 1 (-4) [ 625.251767] pktgen: Initialization failed for all threads 17:25:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x40000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 625.439766] pktgen: kernel_thread() failed for cpu 0 [ 625.446972] pktgen: Cannot create thread for cpu 0 (-4) [ 625.456737] pktgen: kernel_thread() failed for cpu 1 [ 625.464409] pktgen: Cannot create thread for cpu 1 (-4) [ 625.469900] pktgen: Initialization failed for all threads 17:25:46 executing program 2: unshare(0x40000000) 17:25:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fchown(r0, 0x0, 0x0) 17:25:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) 17:25:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_getres(0x5, &(0x7f0000000180)) 17:25:46 executing program 7: r0 = socket(0x18, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000480)=""/234, 0xea}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000680)=""/49, 0x31}, {&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/5, 0x5}, {&(0x7f0000001780)=""/151, 0x97}, {&(0x7f0000001840)=""/136, 0x88}], 0xa, &(0x7f00000019c0)=""/252, 0xfc}}], 0x1, 0x0, &(0x7f0000004dc0)) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000045, 0x0) 17:25:46 executing program 4: r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') sendfile(r0, r1, &(0x7f0000000300), 0x8000) 17:25:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) 17:25:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000380)="626c090000003a000000dc48227884f4922504b53a9b6988e29455bfb462a40c18cfc8889001f4b7488c7056932f93db500a0eeb6c35ce7de3828006aef6d01a7a40be56485f52c59f97", 0x20000, &(0x7f0000000300)) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, &(0x7f0000000140)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 17:25:46 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) fchown(r0, 0x0, r1) 17:25:47 executing program 3: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340), 0x8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 17:25:47 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000003c0)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) dup(0xffffffffffffffff) 17:25:47 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000500)={'nat\x00'}, &(0x7f0000000080)=0x54) 17:25:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000040)={{0x0, @multicast2=0xe0000002, 0x0, 0x0, 'fo\x00'}, {@multicast2=0xe0000002}}, 0x44) 17:25:47 executing program 7: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$BLKPBSZGET(r0, 0x127c, &(0x7f0000000100)) 17:25:47 executing program 6: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340), 0x8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 626.205054] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 626.692991] pktgen: kernel_thread() failed for cpu 0 [ 626.698186] pktgen: Cannot create thread for cpu 0 (-4) [ 626.703581] pktgen: kernel_thread() failed for cpu 1 [ 626.708859] pktgen: Cannot create thread for cpu 1 (-4) [ 626.714224] pktgen: Initialization failed for all threads 17:25:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x388, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x4}], 0x1, &(0x7f0000000100)={0x0, r2+10000000}, &(0x7f0000000140), 0x8) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) [ 626.849836] pktgen: kernel_thread() failed for cpu 0 [ 626.854982] pktgen: Cannot create thread for cpu 0 (-4) [ 626.865192] pktgen: kernel_thread() failed for cpu 1 [ 626.873251] pktgen: Cannot create thread for cpu 1 (-4) [ 626.880676] pktgen: Initialization failed for all threads 17:25:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000000440)=[{&(0x7f0000001640)="c3", 0x1}], 0x1) sendmmsg(r0, &(0x7f000000aa40)=[{{&(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001600)="c9", 0x1}], 0x1, &(0x7f0000002600)}}], 0x1, 0x0) sendto(r0, &(0x7f0000000200)='d', 0x1, 0x0, &(0x7f0000000480)=@l2={0x1f}, 0x80) 17:25:48 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [0xff, 0xff], @rand_addr}}, 0x20) 17:25:48 executing program 1: r0 = socket$packet(0x11, 0x200000002, 0x300) getpeername$packet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x14) getpeername(r0, &(0x7f00000009c0)=@hci, &(0x7f0000000a40)=0x80) 17:25:48 executing program 7: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x3, &(0x7f0000000140)={{0x77359400}, {0x0, r0+10000000}}, &(0x7f00000000c0)) timer_gettime(0x0, &(0x7f0000000040)) [ 627.033528] IPVS: Creating netns size=2536 id=175 17:25:48 executing program 1: r0 = socket$packet(0x11, 0x200000002, 0x300) getpeername$packet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x14) getpeername(r0, &(0x7f00000009c0)=@hci, &(0x7f0000000a40)=0x80) 17:25:48 executing program 7: clone(0x101f00, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)='I') 17:25:48 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)='\n', 0x1}], 0x1, 0x0) 17:25:48 executing program 7: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) pselect6(0x0, &(0x7f00001d8fc0), &(0x7f0000b50fc0), &(0x7f0000fdafc0), &(0x7f00002c6ff0)={0x77359400}, &(0x7f0000785ff4)={&(0x7f0000000000), 0x8}) 17:25:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x7, &(0x7f0000000180)={@rand_addr, @dev={0xac, 0x14, 0x14}}, 0x10) 17:25:48 executing program 3: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340), 0x8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 17:25:48 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xcf, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x28) [ 627.784156] pktgen: kernel_thread() failed for cpu 0 [ 627.789353] pktgen: Cannot create thread for cpu 0 (-4) [ 627.794735] pktgen: kernel_thread() failed for cpu 1 [ 627.800155] pktgen: Cannot create thread for cpu 1 (-4) [ 627.805522] pktgen: Initialization failed for all threads 17:25:49 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000500)={'nat\x00'}, &(0x7f0000000080)=0x54) 17:25:49 executing program 1: r0 = socket$packet(0x11, 0x200000002, 0x300) getpeername$packet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x14) getpeername(r0, &(0x7f00000009c0)=@hci, &(0x7f0000000a40)=0x80) 17:25:49 executing program 6: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340), 0x8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 17:25:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x7, &(0x7f0000000180)={@rand_addr, @dev={0xac, 0x14, 0x14}}, 0x10) 17:25:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x7, &(0x7f0000000180)={@rand_addr, @dev={0xac, 0x14, 0x14}}, 0x10) 17:25:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:25:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x388, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x4}], 0x1, &(0x7f0000000100)={0x0, r2+10000000}, &(0x7f0000000140), 0x8) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) 17:25:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x7, &(0x7f0000000180)={@rand_addr, @dev={0xac, 0x14, 0x14}}, 0x10) 17:25:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x7, &(0x7f0000000180)={@rand_addr, @dev={0xac, 0x14, 0x14}}, 0x10) 17:25:49 executing program 1: r0 = socket$packet(0x11, 0x200000002, 0x300) getpeername$packet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x14) getpeername(r0, &(0x7f00000009c0)=@hci, &(0x7f0000000a40)=0x80) 17:25:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x7, &(0x7f0000000180)={@rand_addr, @dev={0xac, 0x14, 0x14}}, 0x10) 17:25:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x7, &(0x7f0000000180)={@rand_addr, @dev={0xac, 0x14, 0x14}}, 0x10) 17:25:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8"], 0x1) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, &(0x7f0000000140), 0x8000ffffffff) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000180)={0x0, 0x10000000000005, 0x5, 0x0, 0x3, [{0x3a25987a, 0x3, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x40, 0x2, 0x0, 0x0, 0x388c}, {0x8, 0x100000000, 0x9830, 0x0, 0x0, 0x2}]}) 17:25:49 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, &(0x7f0000000140)) 17:25:49 executing program 7: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000005fe0)) timerfd_gettime(r0, &(0x7f0000003fe0)) 17:25:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x1, 0x1400000000000000, &(0x7f0000000480)="e9"}) [ 628.197417] binder: 7282:7284 ioctl c0306201 20000440 returned -14 [ 628.209775] binder_alloc: binder_alloc_mmap_handler: 7282 20001000-20004000 already mapped failed -16 [ 628.220765] binder: BINDER_SET_CONTEXT_MGR already set [ 628.226270] binder: 7282:7284 ioctl 40046207 0 returned -16 [ 628.226377] binder_alloc: 7282: binder_alloc_buf, no vma [ 628.226396] binder: 7282:7286 transaction failed 29189/-3, size 24-8 line 3141 [ 628.226415] binder: 7282:7286 ioctl c0306201 20000440 returned -14 [ 628.257194] binder: send failed reply for transaction 508 to 7282:7284 [ 628.264316] binder: undelivered TRANSACTION_COMPLETE [ 628.269493] binder: undelivered TRANSACTION_ERROR: 29189 17:25:49 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000500)={'nat\x00'}, &(0x7f0000000080)=0x54) 17:25:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") open(&(0x7f0000000000)='./file1\x00', 0x3fd, 0x0) [ 628.665377] IPVS: Creating netns size=2536 id=176 17:25:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x388, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x4}], 0x1, &(0x7f0000000100)={0x0, r2+10000000}, &(0x7f0000000140), 0x8) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) 17:25:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000bfcffc), &(0x7f00000000c0)=0x4) 17:25:49 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x18032, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="c1", 0x1) 17:25:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x1, 0x1400000000000000, &(0x7f0000000480)="e9"}) 17:25:49 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) lseek(r2, 0x40000, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r4, 0x401004000000016) 17:25:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8"], 0x1) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, &(0x7f0000000140), 0x8000ffffffff) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000180)={0x0, 0x10000000000005, 0x5, 0x0, 0x3, [{0x3a25987a, 0x3, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x40, 0x2, 0x0, 0x0, 0x388c}, {0x8, 0x100000000, 0x9830, 0x0, 0x0, 0x2}]}) 17:25:49 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$selinux_user(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8"], 0x1) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, &(0x7f0000000140), 0x8000ffffffff) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000180)={0x0, 0x10000000000005, 0x5, 0x0, 0x3, [{0x3a25987a, 0x3, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x40, 0x2, 0x0, 0x0, 0x388c}, {0x8, 0x100000000, 0x9830, 0x0, 0x0, 0x2}]}) 17:25:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) r2 = getgid() syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x2, r1, r2, 0x1, 0x0) fchdir(r0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) r6 = creat(&(0x7f0000000500)='./file0\x00', 0x0) write$cgroup_type(r6, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) fallocate(r5, 0x3, 0x0, 0x7) 17:25:50 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000100)="6c6f00966fd651b159a9c84a2c60d29800000020") [ 628.919270] binder: 7302:7315 ioctl c0306201 20000440 returned -14 17:25:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x1, 0x1400000000000000, &(0x7f0000000480)="e9"}) 17:25:50 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4004000008912, &(0x7f0000000140)="295ee1311f16f477671070") mknod(&(0x7f0000000200)='./file0\x00', 0x200000000001, 0x9dbd) open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) r1 = socket$inet6(0xa, 0x1, 0x40) r2 = getpgrp(0x0) getpgrp(r2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), 0x8) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") fcntl$setlease(r1, 0x400, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmmsg(r4, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco={0x1f}, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2={0x1f}, 0x80, &(0x7f0000005c40), 0x0, &(0x7f0000005c80)}}], 0x2, 0x0) [ 628.971737] binder: send failed reply for transaction 513 to 7302:7315 [ 628.989515] binder: undelivered TRANSACTION_COMPLETE 17:25:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x1, 0x1400000000000000, &(0x7f0000000480)="e9"}) [ 629.012830] binder: undelivered TRANSACTION_ERROR: 29189 [ 629.016634] binder: 7322:7325 ioctl c0306201 20000440 returned -14 [ 629.082122] binder: send failed reply for transaction 517 to 7322:7325 [ 629.100029] binder: 7328:7329 ioctl c0306201 20000440 returned -14 [ 629.109778] binder: undelivered TRANSACTION_COMPLETE 17:25:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x340, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="6a725a5f62d02a6be55afd02d999", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x8, @dev={0xfe, 0x80}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x5, 0x4) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000240)}, 0x2000) 17:25:50 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4004000008912, &(0x7f0000000140)="295ee1311f16f477671070") mknod(&(0x7f0000000200)='./file0\x00', 0x200000000001, 0x9dbd) open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) r1 = socket$inet6(0xa, 0x1, 0x40) r2 = getpgrp(0x0) getpgrp(r2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), 0x8) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") fcntl$setlease(r1, 0x400, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmmsg(r4, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco={0x1f}, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2={0x1f}, 0x80, &(0x7f0000005c40), 0x0, &(0x7f0000005c80)}}], 0x2, 0x0) [ 629.109787] binder: undelivered TRANSACTION_ERROR: 29189 [ 629.152050] binder: send failed reply for transaction 521 to 7328:7329 [ 629.167096] binder: undelivered TRANSACTION_COMPLETE [ 629.176880] binder: undelivered TRANSACTION_ERROR: 29189 [ 629.237978] [ 629.239724] =============================== [ 629.244079] [ INFO: suspicious RCU usage. ] [ 629.248496] 4.9.111-g03c70fe #58 Not tainted [ 629.252982] ------------------------------- [ 629.257365] kernel/rcu/tree_plugin.h:678 Illegal synchronize_rcu() in RCU read-side critical section! [ 629.266784] [ 629.266784] other info that might help us debug this: [ 629.266784] [ 629.275018] [ 629.275018] rcu_scheduler_active = 2, debug_locks = 0 [ 629.281849] 3 locks held by syz-executor6/7312: [ 629.286568] #0: (sb_writers#3){.+.+.+}, at: [] do_sendfile+0x918/0xc60 [ 629.295688] #1: (rcu_read_lock){......}, at: [] find_get_entry+0x0/0x540 [ 629.304840] #2: (rcu_callback){......}, at: [] rcu_process_callbacks+0x98e/0x12b0 [ 629.314763] [ 629.314763] stack backtrace: [ 629.319291] CPU: 1 PID: 7312 Comm: syz-executor6 Not tainted 4.9.111-g03c70fe #58 [ 629.326911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.336262] ffff8801db307d60 ffffffff81eb2729 ffff8801b9b64800 0000000000000000 [ 629.344298] 0000000000000002 ffffffff83c6df20 ffff8801c1d6f7d8 ffff8801db307d90 [ 629.352323] ffffffff81426090 ffff8801c1d6f680 ffff8801d69c8848 ffff8801d69c8048 [ 629.360342] Call Trace: [ 629.362909] [ 629.364961] [] dump_stack+0xc1/0x128 [ 629.370353] [] lockdep_rcu_suspicious.cold.48+0x110/0x141 [ 629.377530] [] synchronize_rcu+0x68/0x90 [ 629.383239] [] __l2tp_session_unhash+0x38a/0x520 [ 629.389628] [] ? __l2tp_session_unhash+0x1ac/0x520 [ 629.396200] [] ? l2tp_udp_encap_recv+0xbc0/0xbc0 [ 629.402597] [] l2tp_tunnel_closeall+0x1f7/0x350 [ 629.408909] [] l2tp_tunnel_destruct+0x2f2/0x590 [ 629.415207] [] ? l2tp_tunnel_destruct+0x1aa/0x590 [ 629.421681] [] ? l2tp_tunnel_del_work+0x470/0x470 [ 629.428154] [] __sk_destruct+0x55/0x590 [ 629.433759] [] rcu_process_callbacks+0x8ae/0x12b0 [ 629.440255] [] ? rcu_process_callbacks+0x98e/0x12b0 [ 629.446913] [] ? sock_set_timeout+0x210/0x210 [ 629.453046] [] __do_softirq+0x20b/0x937 [ 629.458653] [] irq_exit+0x147/0x190 [ 629.463920] [] smp_apic_timer_interrupt+0x81/0xa0 [ 629.470407] [] apic_timer_interrupt+0xa0/0xb0 [ 629.476530] [ 629.478580] [] ? find_get_entry+0xc7/0x540 [ 629.484461] [] ? find_get_entry+0x341/0x540 [ 629.490410] [] ? add_to_page_cache_lru+0x2a0/0x2a0 [ 629.496967] [] pagecache_get_page+0x4b/0x720 [ 629.503015] [] generic_file_read_iter+0x696/0x1a90 [ 629.509593] [] ? wait_on_page_bit_killable+0x140/0x140 [ 629.516510] [] ? fsnotify+0x114/0x1100 [ 629.522028] [] ? __lock_is_held+0xa2/0xf0 [ 629.527814] [] ? iov_iter_pipe+0x9f/0x2d0 [ 629.533607] [] generic_file_splice_read+0x2c9/0x4f0 [ 629.540254] [] ? __fsnotify_update_child_dentry_flags.part.1+0x300/0x300 [ 629.548733] [] ? pipe_to_user+0x160/0x160 [ 629.554529] [] ? avc_policy_seqno+0x9/0x20 [ 629.560584] [] ? selinux_file_permission+0x82/0x470 [ 629.567232] [] ? rw_verify_area+0xe5/0x2b0 [ 629.573097] [] ? pipe_to_user+0x160/0x160 [ 629.578885] [] do_splice_to+0x10c/0x170 [ 629.584501] [] splice_direct_to_actor+0x23f/0x7e0 [ 629.590989] [] ? pipe_to_sendpage+0x330/0x330 [ 629.597116] [] ? do_splice_to+0x170/0x170 [ 629.602892] [] ? security_file_permission+0x8f/0x1f0 [ 629.609637] [] ? rw_verify_area+0xe5/0x2b0 [ 629.615509] [] do_splice_direct+0x1a3/0x270 [ 629.621467] [] ? splice_direct_to_actor+0x7e0/0x7e0 [ 629.628121] [] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 629.634700] [] ? __sb_start_write+0x161/0x300 [ 629.640838] [] do_sendfile+0x4f0/0xc60 [ 629.646362] [] ? do_compat_pwritev64+0x180/0x180 [ 629.652837] [] ? __might_fault+0x114/0x1d0 [ 629.658715] [] SyS_sendfile64+0xd1/0x160 [ 629.664419] [] ? SyS_sendfile+0x160/0x160 [ 629.670198] [] ? do_syscall_64+0x48/0x490 [ 629.675996] [] ? SyS_sendfile+0x160/0x160 [ 629.681785] [] do_syscall_64+0x1a6/0x490 [ 629.687487] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 629.694533] ODEBUG: object ffff8801db307ce8 is NOT on stack ffff8801a93f0000, but annotated [ 629.703021] ------------[ cut here ]------------ [ 629.707796] WARNING: CPU: 1 PID: 7312 at lib/debugobjects.c:303 __debug_object_init.cold.10+0x6b/0x2b0 [ 629.717245] Kernel panic - not syncing: panic_on_warn set ... [ 629.717245] [ 629.724795] CPU: 1 PID: 7312 Comm: syz-executor6 Not tainted 4.9.111-g03c70fe #58 [ 629.732398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.741748] ffff8801db307a18 ffffffff81eb2729 ffffffff83c48980 00000000ffffffff [ 629.749822] 0000000000000000 0000000000000001 000000000000012f ffff8801db307ad8 [ 629.757906] ffffffff814219f5 0000000041b58ab3 ffffffff843ba8c0 ffffffff81421836 [ 629.765929] Call Trace: [ 629.768488] [ 629.770555] [] dump_stack+0xc1/0x128 [ 629.775940] [] panic+0x1bf/0x3bc [ 629.780956] [] ? add_taint.cold.6+0x16/0x16 [ 629.786913] [] ? vprintk_default+0x1d/0x30 [ 629.792797] [] ? __warn.cold.9+0xa6/0x17f [ 629.798579] [] ? __debug_object_init.cold.10+0x6b/0x2b0 [ 629.805570] [] __warn.cold.9+0xc1/0x17f [ 629.811174] [] ? __debug_object_init+0x3ff/0xa20 [ 629.817563] [] warn_slowpath_null+0x2c/0x40 [ 629.823525] [] __debug_object_init.cold.10+0x6b/0x2b0 [ 629.830349] [] ? _raw_spin_unlock+0x2c/0x50 [ 629.836308] [] ? debug_object_fixup+0x30/0x30 [ 629.842442] [] ? check_preemption_disabled+0x3b/0x170 [ 629.849264] [] debug_object_init_on_stack+0x19/0x20 [ 629.855927] [] __wait_rcu_gp+0x8a/0x1b0 [ 629.861539] [] synchronize_rcu.part.62+0xfa/0x110 [ 629.868014] [] ? rcu_pm_notify+0xc0/0xc0 [ 629.873707] [] ? __call_rcu.constprop.69+0x910/0x910 [ 629.880441] [] ? dump_stack+0xfb/0x128 [ 629.885958] [] ? dump_stack+0x105/0x128 [ 629.891565] [] ? dump_stack+0x10f/0x128 [ 629.897171] [] ? lockdep_rcu_suspicious.cold.48+0x110/0x141 [ 629.904518] [] synchronize_rcu+0x27/0x90 [ 629.910210] [] __l2tp_session_unhash+0x38a/0x520 [ 629.916598] [] ? __l2tp_session_unhash+0x1ac/0x520 [ 629.923171] [] ? l2tp_udp_encap_recv+0xbc0/0xbc0 [ 629.929558] [] l2tp_tunnel_closeall+0x1f7/0x350 [ 629.935951] [] l2tp_tunnel_destruct+0x2f2/0x590 [ 629.942250] [] ? l2tp_tunnel_destruct+0x1aa/0x590 [ 629.948725] [] ? l2tp_tunnel_del_work+0x470/0x470 [ 629.955197] [] __sk_destruct+0x55/0x590 [ 629.960799] [] rcu_process_callbacks+0x8ae/0x12b0 [ 629.967270] [] ? rcu_process_callbacks+0x98e/0x12b0 [ 629.973930] [] ? sock_set_timeout+0x210/0x210 [ 629.980056] [] __do_softirq+0x20b/0x937 [ 629.985658] [] irq_exit+0x147/0x190 [ 629.990910] [] smp_apic_timer_interrupt+0x81/0xa0 [ 629.997469] [] apic_timer_interrupt+0xa0/0xb0 [ 630.003587] [ 630.005629] [] ? find_get_entry+0xc7/0x540 [ 630.011512] [] ? find_get_entry+0x341/0x540 [ 630.017464] [] ? add_to_page_cache_lru+0x2a0/0x2a0 [ 630.024034] [] pagecache_get_page+0x4b/0x720 [ 630.030072] [] generic_file_read_iter+0x696/0x1a90 [ 630.036633] [] ? wait_on_page_bit_killable+0x140/0x140 [ 630.043544] [] ? fsnotify+0x114/0x1100 [ 630.049069] [] ? __lock_is_held+0xa2/0xf0 [ 630.055611] [] ? iov_iter_pipe+0x9f/0x2d0 [ 630.061394] [] generic_file_splice_read+0x2c9/0x4f0 [ 630.068040] [] ? __fsnotify_update_child_dentry_flags.part.1+0x300/0x300 [ 630.076506] [] ? pipe_to_user+0x160/0x160 [ 630.082284] [] ? avc_policy_seqno+0x9/0x20 [ 630.088144] [] ? selinux_file_permission+0x82/0x470 [ 630.094783] [] ? rw_verify_area+0xe5/0x2b0 [ 630.100645] [] ? pipe_to_user+0x160/0x160 [ 630.106421] [] do_splice_to+0x10c/0x170 [ 630.112022] [] splice_direct_to_actor+0x23f/0x7e0 [ 630.118490] [] ? pipe_to_sendpage+0x330/0x330 [ 630.124618] [] ? do_splice_to+0x170/0x170 [ 630.130405] [] ? security_file_permission+0x8f/0x1f0 [ 630.137140] [] ? rw_verify_area+0xe5/0x2b0 [ 630.143002] [] do_splice_direct+0x1a3/0x270 [ 630.148951] [] ? splice_direct_to_actor+0x7e0/0x7e0 [ 630.155598] [] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 630.162157] [] ? __sb_start_write+0x161/0x300 [ 630.168278] [] do_sendfile+0x4f0/0xc60 [ 630.173803] [] ? do_compat_pwritev64+0x180/0x180 [ 630.180188] [] ? __might_fault+0x114/0x1d0 [ 630.186060] [] SyS_sendfile64+0xd1/0x160 [ 630.191751] [] ? SyS_sendfile+0x160/0x160 [ 630.197543] [] ? do_syscall_64+0x48/0x490 [ 630.203325] [] ? SyS_sendfile+0x160/0x160 [ 630.209103] [] do_syscall_64+0x1a6/0x490 [ 630.214803] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 630.222379] Dumping ftrace buffer: [ 630.225931] (ftrace buffer empty) [ 630.229624] Kernel Offset: disabled [ 630.233243] Rebooting in 86400 seconds..