[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[   20.763049] random: sshd: uninitialized urandom read (32 bytes read, 33 bits of entropy available)
[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   24.984162] random: sshd: uninitialized urandom read (32 bytes read, 38 bits of entropy available)
[   25.459515] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available)
[   26.691744] random: nonblocking pool is initialized
Warning: Permanently added '10.128.10.5' (ECDSA) to the list of known hosts.
2018/07/07 07:33:49 fuzzer started
2018/07/07 07:33:52 dialing manager at 10.128.0.26:41019
2018/07/07 07:33:53 syscalls: 1119
2018/07/07 07:33:53 code coverage: enabled
2018/07/07 07:33:53 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524
2018/07/07 07:33:53 setuid sandbox: enabled
2018/07/07 07:33:53 namespace sandbox: enabled
2018/07/07 07:33:53 fault injection: CONFIG_FAULT_INJECTION is not enabled
2018/07/07 07:33:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2018/07/07 07:33:53 net packed injection: enabled
07:34:17 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
rmdir(&(0x7f0000000240)='./file0//ile0\x00')
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, &(0x7f00000000c0))

07:34:17 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x40000000011, r2, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0)
mlock(&(0x7f0000000000/0x3000)=nil, 0x3000)
sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140))
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

07:34:17 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa}}, 0x1c}, 0x1}, 0x0)

07:34:17 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000040)="120345", 0x3}], 0x1, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000300)=""/246)
ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174)

07:34:17 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
setrlimit(0x7, &(0x7f0000000040)={0x1f, 0x4})

07:34:17 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/fscreate\x00')
write$eventfd(r0, &(0x7f0000000040), 0x8)

07:34:17 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", <r2=>0x0})
r3 = gettid()
sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_XDP={0x4, 0x2b}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x2c}, 0x1}, 0x0)

07:34:17 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
keyctl$instantiate(0xc, 0x0, &(0x7f0000000140)="7d55eb55814441708845a88bd45610f6000c5fb533334d5606ba50896dcfb7f0def18e1d39d22afaca96cab418b34fe491648b92f896e2eb82f5de7d799338", 0x3f, 0x0)

[   60.451051] IPVS: Creating netns size=2552 id=1
[   60.566845] IPVS: Creating netns size=2552 id=2
[   60.620756] IPVS: Creating netns size=2552 id=3
[   60.689148] IPVS: Creating netns size=2552 id=4
[   60.806711] IPVS: Creating netns size=2552 id=5
[   60.913286] IPVS: Creating netns size=2552 id=6
[   61.040717] IPVS: Creating netns size=2552 id=7
[   61.309889] IPVS: Creating netns size=2552 id=8
[   61.369193] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   61.481813] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   61.786701] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   61.883884] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   61.952495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   62.018663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   62.029167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   62.123852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   62.274047] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   62.286975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   62.369266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   62.380197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   62.393799] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   62.477548] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   62.595382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   62.608757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   62.625558] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   62.738657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   62.747809] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   62.771298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   62.803433] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   62.881086] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   62.910952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   62.941352] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   62.986898] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   63.047984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   63.090899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.136356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   63.146731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   63.197909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   63.206118] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   63.227534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.245346] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   63.292459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   63.304518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   63.407588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   63.415707] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   63.430932] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   63.551730] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   63.571493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.596795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.616292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.627878] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   63.646900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   63.684327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.699681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   63.721715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   63.734279] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   63.864814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.873502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   63.926435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   63.945549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.070954] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   64.090850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   64.152368] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   64.167200] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   64.252932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.285443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.319635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.348857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   64.380195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.418538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   64.503354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.578560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.876773] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   67.160556] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   67.193697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.409282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.516801] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   67.650132] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   67.749911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.784584] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   67.933569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.036488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.325708] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   68.381059] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   68.397068] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   68.596708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.622683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.670302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
07:34:26 executing program 0:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/119, 0x77}], 0x1, 0x0)

07:34:26 executing program 1:

07:34:26 executing program 1:

07:34:26 executing program 0:

07:34:26 executing program 1:

07:34:26 executing program 1:

07:34:26 executing program 0:

07:34:26 executing program 0:

07:34:26 executing program 1:

07:34:27 executing program 0:

07:34:27 executing program 2:

07:34:27 executing program 3:

07:34:27 executing program 7:
r0 = gettid()
r1 = epoll_create1(0x0)
epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0xffffffffffffffc0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000200))
tkill(r0, 0x1004000000016)

07:34:27 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000003, 0x7)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[]}, 0x1}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

07:34:27 executing program 1:

07:34:27 executing program 0:

07:34:27 executing program 2:

07:34:27 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x243, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
dup2(r0, r1)

07:34:27 executing program 6:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x2b}, 0x0, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000780)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}}], 0x1, 0x0)

07:34:27 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)="2f6465762f6e65742f74756eff", 0x401, 0x0)
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x20000089)

07:34:27 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}})
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
setregid(0x0, r3)
rmdir(&(0x7f0000000240)='./file0//ile0\x00')
syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00')
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@ipv4={[], [], @remote}, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@loopback=0x7f000001, 0x4e22, 0x0, 0x4e22, 0xe000000000000000, 0x0, 0x80, 0x80, 0xff, r4, r2}, {0xa, 0x7, 0x4, 0xde, 0x9, 0x6, 0x40000000000000, 0xc1f}, {0x100000001, 0x9, 0xff, 0x8001}, 0x2, 0x6e6bbd, 0x1}, {{@in6=@local={0xfe, 0x80, [], 0xaa}, 0x4d3, 0xff}, 0xa, @in=@multicast2=0xe0000002, 0x3501, 0x2, 0x3, 0x1ff, 0x3ff, 0x8, 0x3}}, 0xe8)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)={@dev, @multicast2}, &(0x7f0000000840)=0xc)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000005900)={@mcast1}, &(0x7f0000005940)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xffffff26)
r5 = gettid()
perf_event_open(&(0x7f0000000480)={0x3, 0x70, 0x2, 0x6, 0x2, 0x9, 0x0, 0x4, 0x200, 0x9, 0x0, 0x10, 0xe63b, 0x2, 0x3, 0x0, 0x2, 0x2, 0x80000001, 0xffffffffffffff6f, 0x100000001, 0x8000, 0xffffffff, 0x100000000, 0x6b3800000000, 0xa79b, 0x1ff, 0x9e1e, 0xe47b, 0x0, 0x9, 0x81, 0x7, 0x3, 0x3, 0xfffffffffffffffa, 0x9, 0x6, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f0000000200), 0xd}, 0x208, 0x5, 0x8000, 0x0, 0x6a86, 0x6, 0x2}, r5, 0x9, r1, 0xb)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'})
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280))
getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640))
socketpair$inet6(0xa, 0x3, 0x0, &(0x7f00000002c0))
mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0)

07:34:27 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="00050000000000000726bbbb3fffbb1d8ff6f57a68607feb46c97f65c0fa12139d41d4c2daff4bbe6eeeff391268255918e3ff"], 0x1)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x0)

07:34:27 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20001, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0xc)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl(r1, 0x800000000008982, &(0x7f0000000100))

07:34:27 executing program 6:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x2b}, 0x0, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000780)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}}], 0x1, 0x0)

07:34:27 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001d00050300000000000000001d089500ab5f6c46a5f5bf0a00000014b486c30ec48f960efe690161483a35e98dddb4bd041f3bc48c392c8b5cfb5aee207b4294adb600f70ec1bf8b950b7aed8bb7f85eb6b79161977eb5d6c823858de620425a4326b600c584880c4ce2adbab89442af86228a0ed60067c8e7", @ANYRES32=0x0, @ANYBLOB="00000000080001007f000001"], 0x24}, 0x1}, 0x0)

07:34:27 executing program 0:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x3, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0))
splice(r0, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000080), 0x100000001, 0x0)

07:34:27 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0)
write$evdev(r1, &(0x7f0000037fe8)=[{}], 0x18)
sendfile(r1, r1, &(0x7f0000000200), 0x80003ffd)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000080))
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x4010, r1, 0x0)
clock_adjtime(0x0, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x7c7, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000, 0x0, 0x80000000, 0x101, 0x0, 0x3, 0x0, 0x0, 0x3, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x2})

07:34:27 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x48, &(0x7f0000000000)="4aa41625", 0x4)
socket$inet6(0xa, 0x80807, 0x6)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x40)
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xf)

07:34:28 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)=0x1)
munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0)="de62b74988e2", &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)})
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000080))

07:34:28 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0)
flock(r1, 0x0)
socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x8010, r1, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000100)={0x0, 0x0, 0x3ff, 0x3ff})
ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x86}, {r0, 0x4}, {r0, 0x8}, {r1, 0x1410}], 0x4, &(0x7f0000000180), &(0x7f0000000380)={0xf167}, 0x8)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x4000, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
flock(r0, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x9}, 0x1c)
getsockopt$inet6_int(r3, 0x29, 0x50, &(0x7f00000000c0), &(0x7f0000000000)=0x319)
signalfd4(r0, &(0x7f0000000280)={0xfffffffffffffff8}, 0x243, 0x800)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000040)=""/31, &(0x7f00000000c0)=0x1f)
lchown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
sync()

07:34:28 executing program 6:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000000040)})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="00a12d0086ee6291"], 0x0, 0x0, &(0x7f0000002000)})

07:34:28 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040))
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x20000, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xfffffffffffffffd, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0))
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000180)={0x5, 0x0, 0x7fff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xff00000000000001, 0x0, 0x3, 0x100000001})
ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000100)=""/96)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000240)=""/101)
ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0))
sync_file_range(r1, 0x80000001, 0xffffffffffff8000, 0x6)

07:34:28 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x1c)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x2102, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x40000, 0x0)
dup2(r2, r2)
r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='t\x00', 0x0, 0x0)
connect$unix(r4, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
setsockopt$sock_void(r0, 0x29, 0x1, 0x0, 0x300)

07:34:28 executing program 2:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x83e, 0x0)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002)
ppoll(&(0x7f0000000040)=[{r0, 0x2}, {r0, 0x1001}, {r0, 0x2120}, {r0, 0x8218}, {r0, 0x80}, {r0, 0x20}], 0x6, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={0x5}, 0x8)
write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[], 0x0)

07:34:28 executing program 3:
r0 = socket(0xa, 0x80809, 0x3)
ioctl(r0, 0x8946, &(0x7f0000000000))

07:34:28 executing program 0:
r0 = socket(0x1001000000010, 0x802, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000080)={0x7, 0x10000})
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e21, 0x3e, @loopback={0x0, 0x1}, 0x4}, {0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, [], 0xa}}, 0x3, [0x8, 0x1f, 0x3, 0x6, 0x8, 0x7ff, 0x5, 0x1]}, 0x5c)
sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xda76b36b65dcf5df, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, [@IFLA_INFO_KIND={0x14, 0x1, "697036677265000000000000000600"}]}, @IFLA_NET_NS_FD={0x8, 0xc001}]}, 0x40}, 0x1}, 0x0)

07:34:28 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x2, 0x0)
tee(r0, r1, 0x7, 0x0)
r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000100)={0x0, 0xbfa, 0x8001})

07:34:28 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c)
sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c)
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000))
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

07:34:28 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)=0x1)
munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0)="de62b74988e2", &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)})
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000080))

[   70.914211] binder: BINDER_SET_CONTEXT_MGR already set
[   70.945153] binder: 6109:6129 ioctl 40046207 0 returned -16
07:34:28 executing program 6:
r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x1100082)
rt_sigsuspend(&(0x7f00000000c0), 0x8)
r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0)
r2 = memfd_create(&(0x7f0000000000)='),*\x00', 0x1)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$RTC_PIE_OFF(r2, 0x7006)
getpeername(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, &(0x7f0000000200)=0x80)
rt_sigsuspend(&(0x7f0000000040)={0x26}, 0x8)
sendfile(r0, r0, &(0x7f0000000240), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

07:34:28 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0)
ioctl(r0, 0x440000000000530e, &(0x7f0000000140))
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)

07:34:28 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sco\x00')
read(r0, &(0x7f00000002c0)=""/184, 0xffffff4d)
read(r0, &(0x7f0000000400)=""/117, 0xffffffdf)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000))

[   71.050304] binder: send failed reply for transaction 2 to 6109:6120
[   71.115075] binder: undelivered TRANSACTION_COMPLETE
[   71.127944] binder: undelivered TRANSACTION_ERROR: 29189
07:34:28 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0)
write$evdev(r1, &(0x7f0000037fe8)=[{}], 0x18)
sendfile(r1, r1, &(0x7f0000000200), 0x80003ffd)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000080))
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x4010, r1, 0x0)
clock_adjtime(0x0, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x7c7, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000, 0x0, 0x80000000, 0x101, 0x0, 0x3, 0x0, 0x0, 0x3, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x2})

07:34:28 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x40, 0x0)
ioctl$TCSETSF(r0, 0xc004510e, &(0x7f0000000000)={0xffffffffffff6cff})
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x3, 0x63, [], 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/99}, &(0x7f0000000200)=0x50)
epoll_create(0x80)

07:34:28 executing program 7:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
keyctl$join(0x1, &(0x7f00000001c0)={0x73, 0x79, 0x7a})
r0 = inotify_init()
write$binfmt_aout(r0, &(0x7f0000000200)={{0x108, 0xa711, 0x0, 0x30a, 0x3e0, 0x3, 0x12b, 0x7f}, "42fbac72ce9f83c4f3715fdf24e3f41bcd151a475ff738e9142486e108c7ac57488e6fe8b0635d936d962d0d79d152ef8e2678f3c8d00317c95149ac6990900c7024b841ea7643058f69540e4fa60efd23fa93317e7f67f9574c57d35f2b4593ec12a08ad4312c9e66b98bea886618a9836853ada9e6401ccf098f9bb4f8206334e32bda4ffaf3b221cb243a4f0a26afb1cf847639b479ddb3f86c8ea5d6e0bf96f2", [[], []]}, 0x2c2)
signalfd4(r0, &(0x7f0000000000)={0x18000000000}, 0x8, 0x80800)

07:34:29 executing program 4:
r0 = inotify_init1(0x0)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000))
fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, <r1=>0x0})
rt_sigqueueinfo(r1, 0x40, &(0x7f0000000080)={0x28, 0xfffffffffffffffa, 0x2, 0x7})

07:34:29 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000000, 0x0, 0x0, 0x1})
r1 = syz_open_pts(r0, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040))
ioctl$KDADDIO(r1, 0x4b34, 0x8)

07:34:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
keyctl$session_to_parent(0x12)
r1 = socket(0x1000000000000a, 0x8000080000000001, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x3}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0xf0ffffff, 0xf0ffffffffffff}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x422200, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)

07:34:29 executing program 7:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0xffffffffffffff7c)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000180)=0x4)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8)
sendto$inet(r0, &(0x7f0000000180), 0x65, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000300)={'filter\x00', 0x0, 0x4, 0xe1, [], 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000200)=""/225}, &(0x7f0000000380)=0x50)

07:34:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x9)
write(r0, &(0x7f0000000040)="2400000024007ffff7ff9e0000007701000000ff0100000000000000f1ffffff0100ff10", 0x12f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x3)
ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000080)=""/19)

07:34:29 executing program 7:
r0 = socket(0x18, 0x0, 0x1)
setsockopt(r0, 0x111, 0xffffffeffffffff6, &(0x7f0000000000)="17bee8818cbba3d9ccccdb2a3c99e7f52a09d9d844cdb6b2a4216618bd9c4b7699a78db23b68c378580c471a0937b41aeda56eba0ff868ce895a6e9976467d97573471d71bf6ac7bfe48cda5b696cd9725ded58f01b1b0ccf5951ef1df0b4e4c990db7fca7216169a042ec7929e452357ba3", 0x72)

[   71.990730] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket
[   72.004241] device bridge_slave_0 entered promiscuous mode
07:34:29 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc)
socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, &(0x7f0000000100)={[{@mode={'mode', 0x3d, [0x30, 0x34]}, 0x2c}, {@mode={'mode', 0x3d, [0x32, 0x32]}, 0x2c}, {@mode={'mode', 0x3d, [0x36]}, 0x2c}, {@mode={'mode', 0x3d, [0x37, 0x35, 0x36, 0x35, 0x31, 0x35, 0x32, 0x36, 0x33]}, 0x2c}, {@mode={'mode', 0x3d, [0x37, 0x33, 0x34]}, 0x2c}]})
write(r2, &(0x7f00000001c0), 0x0)
write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[], 0xfffffca0)
recvmmsg(r1, &(0x7f0000007500)=[{{&(0x7f0000003f00)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000005180)=""/4096, 0x1000}}, {{&(0x7f0000006180)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000007480)=""/100, 0x64}}], 0x2, 0x42, 0x0)

07:34:29 executing program 0:
r0 = epoll_create1(0x0)
lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'security.', 'wlc\x00'}, &(0x7f0000000200)='\x00', 0x1, 0x2)
r1 = getpid()
fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1})
r2 = socket$l2tp(0x18, 0x1, 0x1)
fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x20000})
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x84440, 0x0)
openat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
tgkill(r1, r1, 0x19)
clock_gettime(0x4, &(0x7f0000000100))
getpid()
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x21, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e22, 0x0, 'wlc\x00', 0x4, 0x0, 0x33}, 0x2c)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)

[   72.044168] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket
07:34:29 executing program 1:
r0 = socket(0x2, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x18}}, 0x10)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f00000000c0)=""/125, &(0x7f0000000140)=0x7d)

07:34:29 executing program 7:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"09c1db5815950000b4d571eb00", 0x1})

[   72.183826] syz-executor2 (6144) used greatest stack depth: 22992 bytes left

INIT: Id "5" respawning too fast: disabled for 5 minutes

INIT: Id "6" respawning too fast: disabled for 5 minutes

INIT: Id "4" respawning too fast: disabled for 5 minutes

INIT: Id "1" respawning too fast: disabled for 5 minutes

INIT: Id "3" respawning too fast: disabled for 5 minutes

INIT: Id "2" respawning too fast: disabled for 5 minutes
[  282.284938] INFO: task syz-executor6:6187 blocked for more than 140 seconds.
[  282.292169]       Not tainted 4.4.139-g7ba5557 #2
[  282.297251] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  282.305226] syz-executor6   D ffff8801bce2f460 25552  6187   3889 0x20020004
[  282.312696]  ffff8801bce2f460 0000000000000044 0000000000000000 ca7edd993f614aec
[  282.320728]  ffff8801bce2f600 ffff8801db21fdb8 ffff8801db21fde0 ffff8801db21f4d8
[  282.328752]  ffff8801db21f4c0 ffffffff84417840 ffff8801bdb93000 0000000000000000
[  282.337036] Call Trace:
[  282.339708]  [<ffffffff838b381a>] schedule+0x7a/0x1b0
[  282.344925]  [<ffffffff838bec31>] schedule_timeout+0x481/0x8b0
[  282.350868]  [<ffffffff838be7b0>] ? usleep_range+0x140/0x140
[  282.356719]  [<ffffffff810cbeb3>] ? kvm_clock_read+0x23/0x40
[  282.362496]  [<ffffffff810cbed9>] ? kvm_clock_get_cycles+0x9/0x10
[  282.368747]  [<ffffffff812b00b1>] ? ktime_get+0x171/0x1e0
[  282.374282]  [<ffffffff81363dd1>] ? __delayacct_blkio_start+0x41/0x80
[  282.380882]  [<ffffffff838b16da>] io_schedule_timeout+0x1ba/0x390
[  282.387111]  [<ffffffff838b4a6b>] bit_wait_io+0x1b/0xd0
[  282.392462]  [<ffffffff838b45d2>] __wait_on_bit_lock.part.4+0x92/0x140
[  282.399152]  [<ffffffff838b4a50>] ? bit_wait+0xc0/0xc0
[  282.404406]  [<ffffffff838b4689>] __wait_on_bit_lock+0x9/0x10
[  282.410346]  [<ffffffff8141cdfd>] __lock_page+0x17d/0x1f0
[  282.415901]  [<ffffffff8141cc80>] ? add_page_wait_queue+0x150/0x150
[  282.422313]  [<ffffffff8121b620>] ? wake_atomic_t_function+0x220/0x220
[  282.429074]  [<ffffffff811a4760>] ? __might_sleep+0x90/0x1a0
[  282.434959]  [<ffffffff815b9b0b>] __generic_file_splice_read+0x7eb/0xbb0
[  282.441776]  [<ffffffff815b9320>] ? splice_grow_spd+0x1c0/0x1c0
[  282.447850]  [<ffffffff815b5440>] ? page_cache_pipe_buf_release+0x70/0x70
[  282.454815]  [<ffffffff81033e46>] ? save_stack_trace+0x26/0x50
[  282.460803]  [<ffffffff814f88d3>] ? save_stack+0x43/0xd0
[  282.466256]  [<ffffffff814f8bb7>] ? kasan_kmalloc+0xc7/0xe0
[  282.471944]  [<ffffffff814f52d4>] ? __kmalloc+0x124/0x310
[  282.477518]  [<ffffffff81537f1d>] ? alloc_pipe_info+0x1ad/0x420
[  282.483563]  [<ffffffff815b67b1>] ? splice_direct_to_actor+0x661/0x830
[  282.490296]  [<ffffffff815ec116>] ? fsnotify+0x866/0x10c0
[  282.495866]  [<ffffffff81c536a1>] ? avc_has_extended_perms+0xe1/0xf10
[  282.502423]  [<ffffffff815eb8b0>] ? __fsnotify_update_child_dentry_flags.part.2+0x300/0x300
[  282.510940]  [<ffffffff815ec970>] ? fsnotify+0x10c0/0x10c0
[  282.516565]  [<ffffffff81c55319>] ? avc_policy_seqno+0x9/0x20
[  282.522427]  [<ffffffff81c66dd2>] ? selinux_file_permission+0x2f2/0x450
[  282.529187]  [<ffffffff815b9fb2>] generic_file_splice_read+0xe2/0x1c0
[  282.535755]  [<ffffffff815b9ed0>] ? __generic_file_splice_read+0xbb0/0xbb0
[  282.542742]  [<ffffffff815b6107>] do_splice_to+0xf7/0x140
[  282.548281]  [<ffffffff815b6392>] splice_direct_to_actor+0x242/0x830
[  282.554773]  [<ffffffff815b5240>] ? pipe_to_sendpage+0x330/0x330
[  282.560890]  [<ffffffff815b6150>] ? do_splice_to+0x140/0x140
[  282.566744]  [<ffffffff81c4c17f>] ? security_file_permission+0x8f/0x1e0
[  282.573479]  [<ffffffff8151e300>] ? rw_verify_area+0x100/0x300
[  282.579460]  [<ffffffff815b6b23>] do_splice_direct+0x1a3/0x270
[  282.585440]  [<ffffffff815b6980>] ? splice_direct_to_actor+0x830/0x830
[  282.592082]  [<ffffffff8151e300>] ? rw_verify_area+0x100/0x300
[  282.598076]  [<ffffffff815206c4>] do_sendfile+0x4e4/0xb80
[  282.603600]  [<ffffffff815201e0>] ? __compat_sys_pwritev64+0x170/0x170
[  282.610324]  [<ffffffff814910c4>] ? __might_fault+0x114/0x1d0
[  282.616225]  [<ffffffff81522811>] compat_SyS_sendfile+0xd1/0x160
[  282.622349]  [<ffffffff81522740>] ? SyS_sendfile64+0x150/0x150
[  282.628335]  [<ffffffff81006b4b>] ? do_fast_syscall_32+0xdb/0x8b0
[  282.634546]  [<ffffffff81522740>] ? SyS_sendfile64+0x150/0x150
[  282.640545]  [<ffffffff81006d96>] do_fast_syscall_32+0x326/0x8b0
[  282.646796]  [<ffffffff838c31aa>] sysenter_flags_fixed+0xd/0x17
[  282.652915] no locks held by syz-executor6/6187.
[  282.657844] Sending NMI to all CPUs:
[  282.662853] NMI backtrace for cpu 0
[  282.666479] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.4.139-g7ba5557 #2
[  282.673375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  282.682733] task: ffffffff84417840 task.stack: ffffffff84400000
[  282.688791] RIP: 0010:[<ffffffff810cc306>]  [<ffffffff810cc306>] native_safe_halt+0x6/0x10
[  282.697194] RSP: 0018:ffffffff84407dc8  EFLAGS: 00000246
[  282.702618] RAX: 0000000000000007 RBX: ffffffff84a05d68 RCX: 0000000000000000
[  282.710277] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8441811c
[  282.717557] RBP: ffffffff84407dc8 R08: 0000000000000000 R09: 0000000000000000
[  282.724832] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  282.732076] R13: 0000000000000000 R14: fffffbfff07488e8 R15: ffffffff84a05d68
[  282.739347] FS:  0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
[  282.747565] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  282.753421] CR2: 00007f30096ff000 CR3: 00000001d2136000 CR4: 00000000001606f0
[  282.760734] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  282.768004] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  282.775268] Stack:
[  282.777391]  ffffffff84407e00 ffffffff81025cf5 ffffffff84408000 0000000000000000
[  282.784916]  0000000000000000 fffffbfff07488e8 ffffffff84a05d68 ffffffff84407e10
[  282.792423]  ffffffff81027240 ffffffff84407e28 ffffffff8121bc07 dffffc0000000000
[  282.799947] Call Trace:
[  282.802504]  [<ffffffff81025cf5>] default_idle+0x55/0x3c0
[  282.808044]  [<ffffffff81027240>] arch_cpu_idle+0x10/0x20
[  282.813550]  [<ffffffff8121bc07>] default_idle_call+0x57/0x70
[  282.819432]  [<ffffffff8121c3af>] cpu_startup_entry+0x6af/0x780
[  282.825478]  [<ffffffff8121bd00>] ? call_cpuidle+0xe0/0xe0
[  282.831070]  [<ffffffff838ae981>] rest_init+0x188/0x18e
[  282.836421]  [<ffffffff84a4b8a1>] start_kernel+0x6b3/0x6e7
[  282.842015]  [<ffffffff84a4b1ee>] ? thread_stack_cache_init+0xb/0xb
[  282.848429]  [<ffffffff84a4a120>] ? early_idt_handler_array+0x120/0x120
[  282.855171]  [<ffffffff84a4a120>] ? early_idt_handler_array+0x120/0x120
[  282.861893]  [<ffffffff84a4a30f>] x86_64_start_reservations+0x29/0x2b
[  282.868467]  [<ffffffff84a4a450>] x86_64_start_kernel+0x13f/0x162
[  282.874693] Code: 00 00 00 00 00 55 48 89 e5 fa 5d c3 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 fb 5d c3 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 66 0f 1f 84 
[  282.893679] NMI backtrace for cpu 1
[  282.897303] CPU: 1 PID: 491 Comm: khungtaskd Not tainted 4.4.139-g7ba5557 #2
[  282.904468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  282.913832] task: ffff8800bad1c800 task.stack: ffff8800bac58000
[  282.919877] RIP: 0010:[<ffffffff810bfb46>]  [<ffffffff810bfb46>] flat_send_IPI_mask+0xf6/0x1a0
[  282.928634] RSP: 0018:ffff8800bac5fcc8  EFLAGS: 00000046
[  282.934055] RAX: 0000000003000000 RBX: 0000000000000c00 RCX: 0000000000000000
[  282.941329] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fb300
[  282.948607] RBP: ffff8800bac5fcf0 R08: 0000000000000001 R09: 0000000000000000
[  282.955902] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000246
[  282.965793] R13: 0000000000000003 R14: 0000000000000002 R15: ffffffff8446f6a0
[  282.973045] FS:  0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
[  282.981294] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  282.987191] CR2: 000000c424e1d010 CR3: 00000001d2136000 CR4: 00000000001606f0
[  282.994530] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  283.001811] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  283.009080] Stack:
[  283.011204]  ffffffff8446f6a0 ffffffff84a18ca0 0000000000000007 fffffbfff0942c44
[  283.018739]  0000000000000040 ffff8800bac5fd10 ffffffff810b5b01 ffffffff83c0b2a0
[  283.026262]  0000000000000003 ffff8800bac5fd68 ffffffff81e18603 ffff8801bdb93000
[  283.033766] Call Trace:
[  283.036358]  [<ffffffff810b5b01>] nmi_raise_cpu_backtrace+0x61/0x80
[  283.042740]  [<ffffffff81e18603>] nmi_trigger_all_cpu_backtrace.cold.4+0x70/0xad
[  283.050282]  [<ffffffff810b5aa0>] ? irq_force_complete_move+0x350/0x350
[  283.057031]  [<ffffffff810b5ba4>] arch_trigger_all_cpu_backtrace+0x14/0x20
[  283.064017]  [<ffffffff8141a459>] watchdog.cold.1+0xd3/0xee
[  283.069731]  [<ffffffff81358e40>] ? watchdog+0xb0/0x9a0
[  283.075088]  [<ffffffff81190958>] kthread+0x268/0x300
[  283.080246]  [<ffffffff81358d90>] ? reset_hung_task_detector+0x20/0x20
[  283.086912]  [<ffffffff811906f0>] ? kthread_create_on_node+0x400/0x400
[  283.093550]  [<ffffffff811906f0>] ? kthread_create_on_node+0x400/0x400
[  283.100217]  [<ffffffff838c1c95>] ret_from_fork+0x55/0x80
[  283.105758]  [<ffffffff811906f0>] ? kthread_create_on_node+0x400/0x400
[  283.112401] Code: b3 5f ff f6 c4 10 75 e2 44 89 e8 c1 e0 18 89 04 25 10 b3 5f ff 44 89 f2 09 da 80 cf 04 41 83 fe 02 0f 44 d3 89 14 25 00 b3 5f ff <41> f7 c4 00 02 00 00 75 1a 4c 89 e7 57 9d 0f 1f 44 00 00 e8 e2 
[  283.132519] Kernel panic - not syncing: hung_task: blocked tasks
[  283.138696] CPU: 0 PID: 491 Comm: khungtaskd Not tainted 4.4.139-g7ba5557 #2
[  283.145858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  283.155184]  0000000000000000 62453c5d19f97f38 ffff8800bac5fcb8 ffffffff81e0d58d
[  283.163166]  ffffffff83a836c0 0000000000000002 7fffffffffffffff 00000000003fff61
[  283.171137]  dffffc0000000000 ffff8800bac5fd78 ffffffff8140a184 0000000041b58ab3
[  283.179116] Call Trace:
[  283.181680]  [<ffffffff81e0d58d>] dump_stack+0xc1/0x124
[  283.187042]  [<ffffffff8140a184>] panic+0x19e/0x38d
[  283.192045]  [<ffffffff81409fe6>] ? add_taint.cold.4+0x16/0x16
[  283.197987]  [<ffffffff81e18486>] ? nmi_trigger_all_cpu_backtrace+0x3e6/0x488
[  283.205231]  [<ffffffff81e18435>] ? nmi_trigger_all_cpu_backtrace+0x395/0x488
[  283.212477]  [<ffffffff81e18435>] ? nmi_trigger_all_cpu_backtrace+0x395/0x488
[  283.219723]  [<ffffffff8141a46a>] watchdog.cold.1+0xe4/0xee
[  283.225409]  [<ffffffff81358e40>] ? watchdog+0xb0/0x9a0
[  283.230746]  [<ffffffff81190958>] kthread+0x268/0x300
[  283.235909]  [<ffffffff81358d90>] ? reset_hung_task_detector+0x20/0x20
[  283.242546]  [<ffffffff811906f0>] ? kthread_create_on_node+0x400/0x400
[  283.249195]  [<ffffffff811906f0>] ? kthread_create_on_node+0x400/0x400
[  283.255847]  [<ffffffff838c1c95>] ret_from_fork+0x55/0x80
[  283.261357]  [<ffffffff811906f0>] ? kthread_create_on_node+0x400/0x400
[  283.268504] Dumping ftrace buffer:
[  283.272049]    (ftrace buffer empty)
[  283.275733] Kernel Offset: disabled
[  283.279355] Rebooting in 86400 seconds..