2] pktgen: Cannot create thread for cpu 0 (-4) [ 100.438217] pktgen: kernel_thread() failed for cpu 1 [ 100.477167] pktgen: Cannot create thread for cpu 1 (-4) [ 100.490499] pktgen: Initialization failed for all threads [ 100.676911] pktgen: kernel_thread() failed for cpu 1 07:13:05 executing program 6: fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000001c0)={0x5, 0x11, 0xfaa, 0x9, "cbcb9501fcff1e2f894393d13f349ba8ef63128f8b8d3071ecb1dfa37293b49f"}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000640)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4, 0x6}}, 0x30) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, r2}, 0xc) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000200)={0x8001, 0x7ff, 0x9f9, 0x0, 0x5, 0x8000}) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000400)=""/188, &(0x7f00000004c0)=0xbc) unshare(0x40000000) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) connect$netlink(0xffffffffffffffff, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x40020}, 0xc) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) mkdir(&(0x7f0000000980)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) lseek(r4, 0x0, 0x1) close(r3) 07:13:05 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x28, 0x1a, 0x201, 0x0, 0x0, {0x2}, [@typed={0x14, 0x0, @ipv6=@mcast2}]}, 0x28}}, 0x0) [ 100.701245] pktgen: Cannot create thread for cpu 1 (-4) [ 100.724009] IPVS: Creating netns size=2552 id=11 07:13:05 executing program 1: fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000001c0)={0x5, 0x11, 0xfaa, 0x9, "cbcb9501fcff1e2f894393d13f349ba8ef63128f8b8d3071ecb1dfa37293b49f"}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000640)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4, 0x6}}, 0x30) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, r2}, 0xc) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000200)={0x8001, 0x7ff, 0x9f9, 0x0, 0x5, 0x8000}) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000400)=""/188, &(0x7f00000004c0)=0xbc) unshare(0x40000000) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) connect$netlink(0xffffffffffffffff, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x40020}, 0xc) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) mkdir(&(0x7f0000000980)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) lseek(r4, 0x0, 0x1) close(r3) 07:13:05 executing program 0: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x12, @time={0x0, 0x989680}}) 07:13:05 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x108200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 07:13:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = epoll_create(0x7) epoll_wait(r3, &(0x7f0000000180)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0x66) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000fddfff)) r4 = syz_open_pts(r2, 0x0) dup3(r0, r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) 07:13:05 executing program 5: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x28, 0x1e, 0x601, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 07:13:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000140)="74086e750000000000000000008c00", 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000580)={0x973, 0x7948, 0x0, 'queue1\x00', 0x1}) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) sync() pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) [ 100.987755] loop: Write error at byte offset 0, length 4096. [ 100.993722] loop: Write error at byte offset 4096, length 4096. [ 100.999800] loop: Write error at byte offset 8192, length 4096. [ 101.006872] loop: Write error at byte offset 12288, length 4096. [ 101.018526] loop: Write error at byte offset 16384, length 4096. [ 101.024770] loop: Write error at byte offset 20480, length 4096. [ 101.031407] loop: Write error at byte offset 24576, length 4096. [ 101.039046] loop: Write error at byte offset 28672, length 4096. [ 101.045258] loop: Write error at byte offset 32768, length 4096. [ 101.053930] loop: Write error at byte offset 36864, length 4096. [ 102.537308] pktgen: kernel_thread() failed for cpu 0 [ 102.542733] pktgen: Cannot create thread for cpu 0 (-4) [ 102.548125] pktgen: kernel_thread() failed for cpu 1 [ 102.553396] pktgen: Cannot create thread for cpu 1 (-4) [ 102.558773] pktgen: Initialization failed for all threads 07:13:07 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x108200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 07:13:07 executing program 4: fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000001c0)={0x5, 0x11, 0xfaa, 0x9, "cbcb9501fcff1e2f894393d13f349ba8ef63128f8b8d3071ecb1dfa37293b49f"}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000640)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4, 0x6}}, 0x30) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, r2}, 0xc) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000200)={0x8001, 0x7ff, 0x9f9, 0x0, 0x5, 0x8000}) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000400)=""/188, &(0x7f00000004c0)=0xbc) unshare(0x40000000) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) connect$netlink(0xffffffffffffffff, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x40020}, 0xc) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) mkdir(&(0x7f0000000980)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) lseek(r4, 0x0, 0x1) close(r3) 07:13:07 executing program 0: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x12, @time={0x0, 0x989680}}) 07:13:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = epoll_create(0x7) epoll_wait(r3, &(0x7f0000000180)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0x66) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000fddfff)) r4 = syz_open_pts(r2, 0x0) dup3(r0, r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) 07:13:07 executing program 7: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$unix(0x1, 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) 07:13:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000140)="74086e750000000000000000008c00", 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000580)={0x973, 0x7948, 0x0, 'queue1\x00', 0x1}) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) sync() pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) [ 102.663431] pktgen: kernel_thread() failed for cpu 0 [ 102.668558] pktgen: Cannot create thread for cpu 0 (-4) [ 102.674993] pktgen: kernel_thread() failed for cpu 1 [ 102.691245] pktgen: Cannot create thread for cpu 1 (-4) [ 102.706736] pktgen: Initialization failed for all threads 07:13:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000140)="74086e750000000000000000008c00", 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000580)={0x973, 0x7948, 0x0, 'queue1\x00', 0x1}) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) sync() pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) [ 102.772928] blk_update_request: 4607 callbacks suppressed [ 102.778555] blk_update_request: I/O error, dev loop0, sector 0 [ 102.784574] blk_update_request: I/O error, dev loop0, sector 4 [ 102.790610] blk_update_request: I/O error, dev loop0, sector 8 [ 102.796633] blk_update_request: I/O error, dev loop0, sector 12 [ 102.807715] blk_update_request: I/O error, dev loop0, sector 16 [ 102.814025] blk_update_request: I/O error, dev loop0, sector 20 [ 102.820128] blk_update_request: I/O error, dev loop0, sector 24 [ 102.827055] blk_update_request: I/O error, dev loop0, sector 28 [ 102.833381] blk_update_request: I/O error, dev loop0, sector 32 [ 102.839868] blk_update_request: I/O error, dev loop0, sector 36 07:13:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000140)="74086e750000000000000000008c00", 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000580)={0x973, 0x7948, 0x0, 'queue1\x00', 0x1}) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) sync() pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) 07:13:07 executing program 6: fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000001c0)={0x5, 0x11, 0xfaa, 0x9, "cbcb9501fcff1e2f894393d13f349ba8ef63128f8b8d3071ecb1dfa37293b49f"}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000640)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4, 0x6}}, 0x30) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, r2}, 0xc) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000200)={0x8001, 0x7ff, 0x9f9, 0x0, 0x5, 0x8000}) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000400)=""/188, &(0x7f00000004c0)=0xbc) unshare(0x40000000) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) connect$netlink(0xffffffffffffffff, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x40020}, 0xc) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) mkdir(&(0x7f0000000980)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) lseek(r4, 0x0, 0x1) close(r3) 07:13:07 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$unix(0x1, 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) [ 102.973438] pktgen: kernel_thread() failed for cpu 0 [ 103.038143] pktgen: Cannot create thread for cpu 0 (-4) [ 103.062153] buffer_io_error: 5258 callbacks suppressed [ 103.067646] Buffer I/O error on dev loop0, logical block 909, lost async page write [ 103.075584] Buffer I/O error on dev loop0, logical block 910, lost async page write [ 103.083942] Buffer I/O error on dev loop0, logical block 911, lost async page write [ 103.091830] Buffer I/O error on dev loop0, logical block 912, lost async page write [ 103.099648] Buffer I/O error on dev loop0, logical block 913, lost async page write [ 103.108794] Buffer I/O error on dev loop0, logical block 914, lost async page write [ 103.116656] Buffer I/O error on dev loop0, logical block 915, lost async page write [ 103.124540] Buffer I/O error on dev loop0, logical block 916, lost async page write [ 103.132818] Buffer I/O error on dev loop0, logical block 917, lost async page write [ 103.140726] Buffer I/O error on dev loop0, logical block 918, lost async page write [ 103.181548] pktgen: kernel_thread() failed for cpu 1 [ 103.207038] pktgen: Cannot create thread for cpu 1 (-4) [ 103.213383] pktgen: Initialization failed for all threads 07:13:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000140)="74086e750000000000000000008c00", 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000580)={0x973, 0x7948, 0x0, 'queue1\x00', 0x1}) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) sync() pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) 07:13:07 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$unix(0x1, 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) 07:13:07 executing program 2: msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 07:13:07 executing program 1: fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000001c0)={0x5, 0x11, 0xfaa, 0x9, "cbcb9501fcff1e2f894393d13f349ba8ef63128f8b8d3071ecb1dfa37293b49f"}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000640)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4, 0x6}}, 0x30) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, r2}, 0xc) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000200)={0x8001, 0x7ff, 0x9f9, 0x0, 0x5, 0x8000}) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000400)=""/188, &(0x7f00000004c0)=0xbc) unshare(0x40000000) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) connect$netlink(0xffffffffffffffff, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x40020}, 0xc) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) mkdir(&(0x7f0000000980)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) lseek(r4, 0x0, 0x1) close(r3) 07:13:07 executing program 7: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$unix(0x1, 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) 07:13:08 executing program 2: msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 07:13:08 executing program 2: msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) [ 105.059009] pktgen: kernel_thread() failed for cpu 0 [ 105.064347] pktgen: Cannot create thread for cpu 0 (-4) [ 105.069875] pktgen: kernel_thread() failed for cpu 1 [ 105.074999] pktgen: Cannot create thread for cpu 1 (-4) [ 105.080377] pktgen: Initialization failed for all threads 07:13:09 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$unix(0x1, 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) 07:13:09 executing program 2: msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 07:13:09 executing program 7: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$unix(0x1, 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) 07:13:09 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x7530}}, 0x18) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) readv(r1, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1) 07:13:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000140)="74086e750000000000000000008c00", 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000580)={0x973, 0x7948, 0x0, 'queue1\x00', 0x1}) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) sync() pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) 07:13:09 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) close(r1) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 105.204194] pktgen: kernel_thread() failed for cpu 0 [ 105.209392] pktgen: Cannot create thread for cpu 0 (-4) [ 105.232540] pktgen: kernel_thread() failed for cpu 1 [ 105.266665] pktgen: Cannot create thread for cpu 1 (-4) 07:13:09 executing program 0: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x201, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) rt_sigsuspend(&(0x7f00000001c0), 0x8) [ 105.307804] pktgen: Initialization failed for all threads [ 105.402660] FAULT_FLAG_ALLOW_RETRY missing 30 [ 105.408157] CPU: 1 PID: 7160 Comm: syz-executor0 Not tainted 4.4.151-ge917467 #84 [ 105.415775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 105.425134] 0000000000000000 704c37dae21717d2 ffff8800a3d57a68 ffffffff81e15eed [ 105.433217] ffff8801cb5ed080 ffff8800a3d57bf0 1ffff100147aaf5a 0000000000000002 [ 105.441290] 0000000000000000 ffff8800a3d57c18 ffffffff81c18fd4 ffffffff841ec9e8 [ 105.449367] Call Trace: [ 105.451948] [] dump_stack+0xc1/0x124 [ 105.457305] [] handle_userfault.cold.18+0x22/0x27 [ 105.463792] [] ? debug_check_no_locks_freed+0x210/0x210 [ 105.470802] [] ? userfaultfd_ioctl+0x2090/0x2090 [ 105.477203] [] ? handle_mm_fault+0xc18/0x3450 [ 105.483339] [] ? handle_mm_fault+0x294b/0x3450 [ 105.489562] [] handle_mm_fault+0x2965/0x3450 [ 105.495624] [] ? __lock_acquire+0xa86/0x5270 [ 105.501716] [] ? vm_insert_mixed+0x220/0x220 [ 105.507769] [] ? __do_page_fault+0x78a/0xa10 [ 105.513820] [] ? vmacache_find+0x57/0x290 [ 105.519622] [] __do_page_fault+0x365/0xa10 [ 105.525516] [] do_page_fault+0x27/0x30 [ 105.531048] [] page_fault+0x28/0x30 [ 105.536318] [] ? do_sigaltstack+0x170/0x5a0 [ 105.542286] [] ? do_sigaltstack+0x177/0x5a0 [ 105.548259] [] ? security_file_ioctl+0x8f/0xc0 [ 105.554494] [] SyS_sigaltstack+0x6c/0x90 [ 105.560210] [] entry_SYSCALL_64_fastpath+0x22/0x9e 07:13:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 07:13:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00') sendfile(r1, r2, &(0x7f0000000040), 0xcb49) [ 105.633004] pktgen: kernel_thread() failed for cpu 0 [ 105.675444] pktgen: Cannot create thread for cpu 0 (-4) [ 105.689969] pktgen: kernel_thread() failed for cpu 1 [ 105.697795] pktgen: Cannot create thread for cpu 1 (-4) [ 105.706181] pktgen: Initialization failed for all threads 07:13:10 executing program 1: mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000001ffb)) 07:13:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x2b9) 07:13:10 executing program 6: mq_open(&(0x7f0000000040)='.\x00', 0x0, 0x0, &(0x7f0000000080)) 07:13:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x4, 0x7, @loopback}]}}}]}, 0x4c}}, 0x0) 07:13:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280), &(0x7f00000000c0), 0xffffffffffffffff) [ 105.990550] lo_write_bvec: 11112 callbacks suppressed [ 105.995825] loop: Write error at byte offset 5464064, length 4096. [ 106.002807] loop: Write error at byte offset 5468160, length 4096. [ 106.009178] loop: Write error at byte offset 5472256, length 4096. [ 106.027539] loop: Write error at byte offset 5476352, length 4096. [ 106.034287] loop: Write error at byte offset 5480448, length 4096. 07:13:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000400)="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") fgetxattr(r0, &(0x7f0000000040)=@random={'security.', '\x00'}, &(0x7f0000000200)=""/133, 0x85) 07:13:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000001000)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f000052bff0)={0x0, 0x0}) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000088e000)={0x0, r1}, &(0x7f0000e98ffc), 0x0) futex(&(0x7f000000cffc), 0x5, 0x80, &(0x7f0000049ff0)={0x0, 0x989680}, &(0x7f0000a2a000), 0x5000000) 07:13:10 executing program 2: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000240)) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', @ifru_data=&(0x7f0000000000)="4235de2c9debde5375cbec7a302c8463252ae47692e5034ace890b4471c1bc49"}) 07:13:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x80000000, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0xff, 0x4) [ 106.040698] loop: Write error at byte offset 5484544, length 4096. [ 106.047042] loop: Write error at byte offset 5488640, length 4096. [ 106.055380] loop: Write error at byte offset 5492736, length 4096. [ 106.061835] loop: Write error at byte offset 5496832, length 4096. [ 106.068664] loop: Write error at byte offset 5500928, length 4096. 07:13:10 executing program 6: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 07:13:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "2b02df2fd0846bc0964f4ffde3d917e30f"}], 0x28}}], 0x1, 0x0) [ 106.449206] VFS: Dirty inode writeback failed for block device loop0 (err=-5). 07:13:10 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000140)="74086e750000000000000000008c00", 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000580)={0x973, 0x7948, 0x0, 'queue1\x00', 0x1}) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) sync() pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) 07:13:10 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) unshare(0x400) pread64(r0, &(0x7f00000001c0)=""/113, 0x71, 0x0) 07:13:10 executing program 0: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000001080)={0x0, 0x0, 0x36f0dd90}) 07:13:10 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 07:13:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x80000000, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0xff, 0x4) 07:13:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00') fcntl$notify(r1, 0x402, 0x31) exit(0x0) getdents64(r1, &(0x7f0000000340)=""/57, 0x6) 07:13:10 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 07:13:10 executing program 6: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 07:13:10 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x1) 07:13:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x80000000, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0xff, 0x4) 07:13:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8132, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x132, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x100000e, 0x32, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000740), 0x28d, 0x0) 07:13:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x38}}, 0x0) 07:13:11 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 07:13:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x80000000, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0xff, 0x4) 07:13:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x38}}, 0x0) 07:13:11 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 07:13:11 executing program 2: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="02000000010000feff0000000200f30000000400", 0x14, 0x0) 07:13:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xc, 0x2, @local}]}, 0x28}}, 0x0) 07:13:11 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0xc, &(0x7f0000000080)={&(0x7f0000000500)=@migrate={0xac, 0x21, 0x21, 0x0, 0x0, {{@in=@local}}, [@migrate={0x5c, 0x11, [{@in6=@loopback, @in=@local}, {@in=@broadcast, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}]}, 0xac}}, 0x0) 07:13:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x38}}, 0x0) 07:13:11 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 107.221880] VFS: Dirty inode writeback failed for block device loop0 (err=-5). [ 107.285807] PF_BRIDGE: RTM_NEWNEIGH with invalid address 07:13:11 executing program 1: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) open(&(0x7f00000000c0)='./file0\x00', 0x418002, 0x30) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='gfs2meta\x00', 0x5010, &(0x7f0000000200)="9d355dbda1e3ab52e991389cfc9dc76110933bc7be6c15b7") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 07:13:11 executing program 6: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 07:13:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045439, 0x706ffc) 07:13:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x200000002, 0x10000000000) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0x5, @mcast2, 0x5}}}, 0x3a) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendmmsg(r2, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5933ba7ee7255dc6e85a0e15141b0dbb66cafa13039dd6e01ca5d2bd880a2f4db831535a9ec0ab26a986545297c50a6584097103a45ed7311e3547a1bd8040c7dbebf54cf46a0073b99fe2dc952a15b95db7293201e77c0e6e0428aa44a224f8472db4d962d34e22f576e25a8322057b9fbd99ce182ceff9edfdaf5c", 0x7c}], 0x1, &(0x7f0000000180), 0x0, 0x4000}, 0x1}, {{&(0x7f0000000900)=@generic={0x8, "8d93bd4f41bfb662d6dc8964c70d63603393dbc5f7374bbf7e99961d110d7661eda6bb77f178a0278a2d652c4e9b31dc341c448750cbaf5ed25afff2465abeb52dbaba08923585c7d9fcb665db7cba5f039730d746da94acd41c80499abc3e66c3187a7db7ad141dc7fe7826075a0e87ace445d5c93c4d97448c557acd3e"}, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000002d00), 0x0, 0x40000}, 0x1}, {{&(0x7f0000004040)=@nl=@unspec, 0x80, &(0x7f0000004400)=[{&(0x7f00000040c0)="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", 0xfd}], 0x1, &(0x7f0000004480), 0x0, 0x20040000}, 0x9}, {{0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f00000068c0)="4c112163c093c96650efad4b7abb0dc6abc76f42386d58878a478134d464340a482543f80e275f5d25bccd9b7d936373bce7c645783e0296d3d2c000fb3a8734f55da3e279b5d6fabeb7963fc86d1ba79669cac47869d203c60d5b55c8fbe5986d6460be2357c60b058e689106fe7b0c37", 0x71}], 0x1, &(0x7f0000006f40)=[{0xe0, 0x10b, 0x7, "119f54c07e2b97a8a011ade4566000551ad5dcb99fe1bfafd115f2964c3e5fbdde1a3823601b5e6f3e8ca92bdde676a49263e4ce48e4a995619969f38412d8d348eea652037b3c2a212de2ec93e1c3b7ca9f32229721c273c9196d8e80b326ffb3cc84d4b9a7adc29abfd922947014e2db5d9019d8985c95bb40c24a9338883ada83a33fe9566a2d3769812092fc7dc9348ddd6c24c0a976db1b8d9c8730cd99b26e6dc359f84d158b8c0d8a2a0177af3acdb8e4a86e9b06712a05b118d35b65ab81ed42dc702b1b498aa5"}], 0xe0, 0x4004051}, 0xfffffffffffffff8}], 0x4, 0x80) r4 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r4, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r4, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r4, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000280)=[{r4}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) 07:13:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x38}}, 0x0) 07:13:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x8000, 0x4) connect$unix(r1, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) accept4$unix(r2, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 07:13:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000300)='./control\x00', 0x0) mkdir(&(0x7f0000000100)='./control/file1\x00', 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000580), &(0x7f00000001c0)) lgetxattr(&(0x7f00000001c0)='./control/file1\x00', &(0x7f0000000240)=@known='security.selinux\x00', &(0x7f0000000340)=""/230, 0xe6) 07:13:11 executing program 3: r0 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228336e88319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe919e21cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f56091c38cbab", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x3, 0x100000000}) write$sndseq(r0, &(0x7f000000a000)=[{0x21, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) 07:13:11 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 07:13:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x1d, 0x80000001, 0x4000000000401}, {0x60}, {0x6}]}, 0x10) 07:13:11 executing program 4: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) r3 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r3, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000002c0)) 07:13:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f6578650000000000049b840572137291be10eebf000ee9a90f798058439ed5e901d2da758d5d02acc7edbcd7a071fb35331ce3e8f5eb845f06c2b4833f0f84b356f039192806008f7ce66c728841041afe57059503eb5a7819e56e5180b49acad4596489f4455f2cba58ee6d298147dfab3256c742c1b69f67793dfd6a9b4db888e646223be7fb2717202ea956118f193fb84166c236fdaf9716ed51bd15d81d43b89e1cecabcba5d2e62f5b3ec8afedae871218ff070000000000001db98e5856f17a930fe864295da8aebc0f7f7f5680e4d3f7ade20a2d3e420b35456180b109549e4ef0e1b55691030039ce36a24837297a9b9f7a674b065f6f33f00100f484f04d8bba268991d364ec5ac1383d9ab7460d2a89938fb7600936d99b6a7926ddfb27e09600c5030b051d15119f710af109000000000000000000000000") fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x2) [ 107.485477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8242 sclass=netlink_route_socket 07:13:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 07:13:11 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 107.556367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13361 sclass=netlink_route_socket [ 107.571254] ALSA: seq fatal error: cannot create timer (-22) 07:13:12 executing program 4: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000080)=0x28) 07:13:12 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 107.619657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11383 sclass=netlink_route_socket 07:13:12 executing program 1: r0 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228336e88319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe919e21cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f56091c38cbab", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x3, 0x100000000}) write$sndseq(r0, &(0x7f000000a000)=[{0x21, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) 07:13:12 executing program 6: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 07:13:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) ioprio_get$pid(0x1, r2) 07:13:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x200000002, 0x10000000000) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0x5, @mcast2, 0x5}}}, 0x3a) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendmmsg(r2, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5933ba7ee7255dc6e85a0e15141b0dbb66cafa13039dd6e01ca5d2bd880a2f4db831535a9ec0ab26a986545297c50a6584097103a45ed7311e3547a1bd8040c7dbebf54cf46a0073b99fe2dc952a15b95db7293201e77c0e6e0428aa44a224f8472db4d962d34e22f576e25a8322057b9fbd99ce182ceff9edfdaf5c", 0x7c}], 0x1, &(0x7f0000000180), 0x0, 0x4000}, 0x1}, {{&(0x7f0000000900)=@generic={0x8, "8d93bd4f41bfb662d6dc8964c70d63603393dbc5f7374bbf7e99961d110d7661eda6bb77f178a0278a2d652c4e9b31dc341c448750cbaf5ed25afff2465abeb52dbaba08923585c7d9fcb665db7cba5f039730d746da94acd41c80499abc3e66c3187a7db7ad141dc7fe7826075a0e87ace445d5c93c4d97448c557acd3e"}, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000002d00), 0x0, 0x40000}, 0x1}, {{&(0x7f0000004040)=@nl=@unspec, 0x80, &(0x7f0000004400)=[{&(0x7f00000040c0)="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", 0xfd}], 0x1, &(0x7f0000004480), 0x0, 0x20040000}, 0x9}, {{0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f00000068c0)="4c112163c093c96650efad4b7abb0dc6abc76f42386d58878a478134d464340a482543f80e275f5d25bccd9b7d936373bce7c645783e0296d3d2c000fb3a8734f55da3e279b5d6fabeb7963fc86d1ba79669cac47869d203c60d5b55c8fbe5986d6460be2357c60b058e689106fe7b0c37", 0x71}], 0x1, &(0x7f0000006f40)=[{0xe0, 0x10b, 0x7, "119f54c07e2b97a8a011ade4566000551ad5dcb99fe1bfafd115f2964c3e5fbdde1a3823601b5e6f3e8ca92bdde676a49263e4ce48e4a995619969f38412d8d348eea652037b3c2a212de2ec93e1c3b7ca9f32229721c273c9196d8e80b326ffb3cc84d4b9a7adc29abfd922947014e2db5d9019d8985c95bb40c24a9338883ada83a33fe9566a2d3769812092fc7dc9348ddd6c24c0a976db1b8d9c8730cd99b26e6dc359f84d158b8c0d8a2a0177af3acdb8e4a86e9b06712a05b118d35b65ab81ed42dc702b1b498aa5"}], 0xe0, 0x4004051}, 0xfffffffffffffff8}], 0x4, 0x80) r4 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r4, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r4, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r4, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000280)=[{r4}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) 07:13:12 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 07:13:12 executing program 4: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000180)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f00000001c0)='./control\x00') umount2(&(0x7f0000000080)='./control/file1\x00', 0x0) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) close(r0) 07:13:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 07:13:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, &(0x7f0000000180)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046306}], 0x0, 0x0, &(0x7f0000008f37)}) 07:13:12 executing program 3: r0 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228336e88319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe919e21cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f56091c38cbab", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x3, 0x100000000}) write$sndseq(r0, &(0x7f000000a000)=[{0x21, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) 07:13:12 executing program 6: write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000140)={0xfffffffffffffe3a, 0x67, 0x0, {0x0, 0x10000, 0x7}}, 0x14) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001300)='/dev/uhid\x00', 0x1000000002802, 0x0) write$UHID_INPUT(r0, &(0x7f0000000040)={0x8, "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", 0x1000}, 0x1006) 07:13:12 executing program 1: r0 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228336e88319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe919e21cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f56091c38cbab", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x3, 0x100000000}) write$sndseq(r0, &(0x7f000000a000)=[{0x21, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) 07:13:12 executing program 3: r0 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228336e88319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe919e21cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f56091c38cbab", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x3, 0x100000000}) write$sndseq(r0, &(0x7f000000a000)=[{0x21, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) 07:13:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x200000002, 0x10000000000) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0x5, @mcast2, 0x5}}}, 0x3a) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendmmsg(r2, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5933ba7ee7255dc6e85a0e15141b0dbb66cafa13039dd6e01ca5d2bd880a2f4db831535a9ec0ab26a986545297c50a6584097103a45ed7311e3547a1bd8040c7dbebf54cf46a0073b99fe2dc952a15b95db7293201e77c0e6e0428aa44a224f8472db4d962d34e22f576e25a8322057b9fbd99ce182ceff9edfdaf5c", 0x7c}], 0x1, &(0x7f0000000180), 0x0, 0x4000}, 0x1}, {{&(0x7f0000000900)=@generic={0x8, "8d93bd4f41bfb662d6dc8964c70d63603393dbc5f7374bbf7e99961d110d7661eda6bb77f178a0278a2d652c4e9b31dc341c448750cbaf5ed25afff2465abeb52dbaba08923585c7d9fcb665db7cba5f039730d746da94acd41c80499abc3e66c3187a7db7ad141dc7fe7826075a0e87ace445d5c93c4d97448c557acd3e"}, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000002d00), 0x0, 0x40000}, 0x1}, {{&(0x7f0000004040)=@nl=@unspec, 0x80, &(0x7f0000004400)=[{&(0x7f00000040c0)="beb13faed8d979f5d341f2acfb69b871cae700bdf322077d0d912f8fe39ac24a115ba8ab44bf41ba44fb94dac4a0176cb02d329af8ca4f47ecd66b0900a35df64e3af9df7fbc9b4f144902e078c1536cbb7b34106152823c887f0ee3457d53bf6fe36a893fb04c6978be653e45a3415f48de6c332baff31ea71cfad0e49b734ea3f911053f582bf3d9f18ddfcf29dd54a189fb48b273bef0d6b0ae3a17e52bdcd20a5dde1dac5380b6e21a6a73fd9e9531f6cb19b72b2ebaba4c3ccd015cafd01e6b131b209a9b20f5a6ad06e55ed215fb251c01e3d8a9d5ee68e7c7590465082d02fb7f0a35942cd4e367ae04b425695c4a25f5172cf0af4bfd3e401c", 0xfd}], 0x1, &(0x7f0000004480), 0x0, 0x20040000}, 0x9}, {{0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f00000068c0)="4c112163c093c96650efad4b7abb0dc6abc76f42386d58878a478134d464340a482543f80e275f5d25bccd9b7d936373bce7c645783e0296d3d2c000fb3a8734f55da3e279b5d6fabeb7963fc86d1ba79669cac47869d203c60d5b55c8fbe5986d6460be2357c60b058e689106fe7b0c37", 0x71}], 0x1, &(0x7f0000006f40)=[{0xe0, 0x10b, 0x7, "119f54c07e2b97a8a011ade4566000551ad5dcb99fe1bfafd115f2964c3e5fbdde1a3823601b5e6f3e8ca92bdde676a49263e4ce48e4a995619969f38412d8d348eea652037b3c2a212de2ec93e1c3b7ca9f32229721c273c9196d8e80b326ffb3cc84d4b9a7adc29abfd922947014e2db5d9019d8985c95bb40c24a9338883ada83a33fe9566a2d3769812092fc7dc9348ddd6c24c0a976db1b8d9c8730cd99b26e6dc359f84d158b8c0d8a2a0177af3acdb8e4a86e9b06712a05b118d35b65ab81ed42dc702b1b498aa5"}], 0xe0, 0x4004051}, 0xfffffffffffffff8}], 0x4, 0x80) r4 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r4, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r4, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r4, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000280)=[{r4}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) 07:13:12 executing program 2: socketpair$unix(0x1, 0x4000000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x40002cc, 0x0, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/156) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x0, 0x4) 07:13:12 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000140)=""/168) 07:13:12 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x400032, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5401, &(0x7f0000000080)) 07:13:13 executing program 3: r0 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228336e88319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe919e21cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f56091c38cbab", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x3, 0x100000000}) write$sndseq(r0, &(0x7f000000a000)=[{0x21, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) 07:13:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x969, 0x8005}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 07:13:13 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) dup2(r0, r0) 07:13:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x200000002, 0x10000000000) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0x5, @mcast2, 0x5}}}, 0x3a) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendmmsg(r2, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5933ba7ee7255dc6e85a0e15141b0dbb66cafa13039dd6e01ca5d2bd880a2f4db831535a9ec0ab26a986545297c50a6584097103a45ed7311e3547a1bd8040c7dbebf54cf46a0073b99fe2dc952a15b95db7293201e77c0e6e0428aa44a224f8472db4d962d34e22f576e25a8322057b9fbd99ce182ceff9edfdaf5c", 0x7c}], 0x1, &(0x7f0000000180), 0x0, 0x4000}, 0x1}, {{&(0x7f0000000900)=@generic={0x8, "8d93bd4f41bfb662d6dc8964c70d63603393dbc5f7374bbf7e99961d110d7661eda6bb77f178a0278a2d652c4e9b31dc341c448750cbaf5ed25afff2465abeb52dbaba08923585c7d9fcb665db7cba5f039730d746da94acd41c80499abc3e66c3187a7db7ad141dc7fe7826075a0e87ace445d5c93c4d97448c557acd3e"}, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000002d00), 0x0, 0x40000}, 0x1}, {{&(0x7f0000004040)=@nl=@unspec, 0x80, &(0x7f0000004400)=[{&(0x7f00000040c0)="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", 0xfd}], 0x1, &(0x7f0000004480), 0x0, 0x20040000}, 0x9}, {{0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f00000068c0)="4c112163c093c96650efad4b7abb0dc6abc76f42386d58878a478134d464340a482543f80e275f5d25bccd9b7d936373bce7c645783e0296d3d2c000fb3a8734f55da3e279b5d6fabeb7963fc86d1ba79669cac47869d203c60d5b55c8fbe5986d6460be2357c60b058e689106fe7b0c37", 0x71}], 0x1, &(0x7f0000006f40)=[{0xe0, 0x10b, 0x7, "119f54c07e2b97a8a011ade4566000551ad5dcb99fe1bfafd115f2964c3e5fbdde1a3823601b5e6f3e8ca92bdde676a49263e4ce48e4a995619969f38412d8d348eea652037b3c2a212de2ec93e1c3b7ca9f32229721c273c9196d8e80b326ffb3cc84d4b9a7adc29abfd922947014e2db5d9019d8985c95bb40c24a9338883ada83a33fe9566a2d3769812092fc7dc9348ddd6c24c0a976db1b8d9c8730cd99b26e6dc359f84d158b8c0d8a2a0177af3acdb8e4a86e9b06712a05b118d35b65ab81ed42dc702b1b498aa5"}], 0xe0, 0x4004051}, 0xfffffffffffffff8}], 0x4, 0x80) r4 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r4, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r4, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r4, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000280)=[{r4}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) 07:13:13 executing program 1: r0 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228336e88319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe919e21cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f56091c38cbab", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x3, 0x100000000}) write$sndseq(r0, &(0x7f000000a000)=[{0x21, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) 07:13:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800000004800) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) 07:13:13 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000600)="240000001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030023020000", 0x24) read(r0, &(0x7f0000000200)=""/80, 0x50) 07:13:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000280)={0x7, 0x3, 0x6, 0x0, 0x2, 0x100, 0xffffffffffffffff, 0x80000001, 0x1, 0x0, 0x0, 0x9}) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control\x00', 0x8900, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'bcsh0\x00', 0x7fff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x5e4, 0x5}, 0x10) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f00000000c0), 0x4) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000180)) 07:13:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 07:13:13 executing program 4: munmap(&(0x7f0000000000/0x600000)=nil, 0x600000) mprotect(&(0x7f000055c000/0x3000)=nil, 0x3000, 0x1000000) 07:13:13 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000600)="240000001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030023020000", 0x24) read(r0, &(0x7f0000000200)=""/80, 0x50) 07:13:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x200000002, 0x10000000000) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0x5, @mcast2, 0x5}}}, 0x3a) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendmmsg(r2, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5933ba7ee7255dc6e85a0e15141b0dbb66cafa13039dd6e01ca5d2bd880a2f4db831535a9ec0ab26a986545297c50a6584097103a45ed7311e3547a1bd8040c7dbebf54cf46a0073b99fe2dc952a15b95db7293201e77c0e6e0428aa44a224f8472db4d962d34e22f576e25a8322057b9fbd99ce182ceff9edfdaf5c", 0x7c}], 0x1, &(0x7f0000000180), 0x0, 0x4000}, 0x1}, {{&(0x7f0000000900)=@generic={0x8, "8d93bd4f41bfb662d6dc8964c70d63603393dbc5f7374bbf7e99961d110d7661eda6bb77f178a0278a2d652c4e9b31dc341c448750cbaf5ed25afff2465abeb52dbaba08923585c7d9fcb665db7cba5f039730d746da94acd41c80499abc3e66c3187a7db7ad141dc7fe7826075a0e87ace445d5c93c4d97448c557acd3e"}, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000002d00), 0x0, 0x40000}, 0x1}, {{&(0x7f0000004040)=@nl=@unspec, 0x80, &(0x7f0000004400)=[{&(0x7f00000040c0)="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", 0xfd}], 0x1, &(0x7f0000004480), 0x0, 0x20040000}, 0x9}, {{0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f00000068c0)="4c112163c093c96650efad4b7abb0dc6abc76f42386d58878a478134d464340a482543f80e275f5d25bccd9b7d936373bce7c645783e0296d3d2c000fb3a8734f55da3e279b5d6fabeb7963fc86d1ba79669cac47869d203c60d5b55c8fbe5986d6460be2357c60b058e689106fe7b0c37", 0x71}], 0x1, &(0x7f0000006f40)=[{0xe0, 0x10b, 0x7, "119f54c07e2b97a8a011ade4566000551ad5dcb99fe1bfafd115f2964c3e5fbdde1a3823601b5e6f3e8ca92bdde676a49263e4ce48e4a995619969f38412d8d348eea652037b3c2a212de2ec93e1c3b7ca9f32229721c273c9196d8e80b326ffb3cc84d4b9a7adc29abfd922947014e2db5d9019d8985c95bb40c24a9338883ada83a33fe9566a2d3769812092fc7dc9348ddd6c24c0a976db1b8d9c8730cd99b26e6dc359f84d158b8c0d8a2a0177af3acdb8e4a86e9b06712a05b118d35b65ab81ed42dc702b1b498aa5"}], 0xe0, 0x4004051}, 0xfffffffffffffff8}], 0x4, 0x80) r4 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r4, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r4, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r4, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000280)=[{r4}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) 07:13:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg(r0, &(0x7f0000000a40)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000480)=""/10, 0xa}], 0x2, &(0x7f0000000a00)=""/3, 0x3}, 0xacbdbebfad933dbd) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={@mcast2, @dev, @mcast1}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'yam0\x00'}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) writev(r0, &(0x7f0000001600), 0x0) 07:13:13 executing program 4: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket(0x10, 0x2, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 07:13:13 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000600)="240000001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030023020000", 0x24) read(r0, &(0x7f0000000200)=""/80, 0x50) 07:13:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 07:13:13 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000600)="240000001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030023020000", 0x24) read(r0, &(0x7f0000000200)=""/80, 0x50) 07:13:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) sendmsg$unix(r3, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r2) dup3(r3, r1, 0x0) close(r0) 07:13:13 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 07:13:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x3000004, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x1a, &(0x7f0000abaff9)={0x3, 0xfff}, 0x10) 07:13:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4, 0x2}]}, 0x18}}, 0x0) 07:13:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x200000002, 0x10000000000) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0x5, @mcast2, 0x5}}}, 0x3a) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendmmsg(r2, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5933ba7ee7255dc6e85a0e15141b0dbb66cafa13039dd6e01ca5d2bd880a2f4db831535a9ec0ab26a986545297c50a6584097103a45ed7311e3547a1bd8040c7dbebf54cf46a0073b99fe2dc952a15b95db7293201e77c0e6e0428aa44a224f8472db4d962d34e22f576e25a8322057b9fbd99ce182ceff9edfdaf5c", 0x7c}], 0x1, &(0x7f0000000180), 0x0, 0x4000}, 0x1}, {{&(0x7f0000000900)=@generic={0x8, "8d93bd4f41bfb662d6dc8964c70d63603393dbc5f7374bbf7e99961d110d7661eda6bb77f178a0278a2d652c4e9b31dc341c448750cbaf5ed25afff2465abeb52dbaba08923585c7d9fcb665db7cba5f039730d746da94acd41c80499abc3e66c3187a7db7ad141dc7fe7826075a0e87ace445d5c93c4d97448c557acd3e"}, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000002d00), 0x0, 0x40000}, 0x1}, {{&(0x7f0000004040)=@nl=@unspec, 0x80, &(0x7f0000004400)=[{&(0x7f00000040c0)="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", 0xfd}], 0x1, &(0x7f0000004480), 0x0, 0x20040000}, 0x9}, {{0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f00000068c0)="4c112163c093c96650efad4b7abb0dc6abc76f42386d58878a478134d464340a482543f80e275f5d25bccd9b7d936373bce7c645783e0296d3d2c000fb3a8734f55da3e279b5d6fabeb7963fc86d1ba79669cac47869d203c60d5b55c8fbe5986d6460be2357c60b058e689106fe7b0c37", 0x71}], 0x1, &(0x7f0000006f40)=[{0xe0, 0x10b, 0x7, "119f54c07e2b97a8a011ade4566000551ad5dcb99fe1bfafd115f2964c3e5fbdde1a3823601b5e6f3e8ca92bdde676a49263e4ce48e4a995619969f38412d8d348eea652037b3c2a212de2ec93e1c3b7ca9f32229721c273c9196d8e80b326ffb3cc84d4b9a7adc29abfd922947014e2db5d9019d8985c95bb40c24a9338883ada83a33fe9566a2d3769812092fc7dc9348ddd6c24c0a976db1b8d9c8730cd99b26e6dc359f84d158b8c0d8a2a0177af3acdb8e4a86e9b06712a05b118d35b65ab81ed42dc702b1b498aa5"}], 0xe0, 0x4004051}, 0xfffffffffffffff8}], 0x4, 0x80) r4 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r4, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r4, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r4, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000280)=[{r4}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) 07:13:14 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000000f000/0x4000)=nil, 0x4000}, 0x1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00') close(r0) 07:13:14 executing program 4: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket(0x10, 0x2, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 07:13:14 executing program 6: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x407ffffffd}]}) setpgid(0x0, 0x0) 07:13:14 executing program 1: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f0000000140)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000000c0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, &(0x7f0000000100)="3a93f3b706a5fdf993c2f20ff226714a12c503da6f04de22") 07:13:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg(r0, &(0x7f0000000a40)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000480)=""/10, 0xa}], 0x2, &(0x7f0000000a00)=""/3, 0x3}, 0xacbdbebfad933dbd) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={@mcast2, @dev, @mcast1}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'yam0\x00'}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) writev(r0, &(0x7f0000001600), 0x0) 07:13:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x200000002, 0x10000000000) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0x5, @mcast2, 0x5}}}, 0x3a) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendmmsg(r2, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5933ba7ee7255dc6e85a0e15141b0dbb66cafa13039dd6e01ca5d2bd880a2f4db831535a9ec0ab26a986545297c50a6584097103a45ed7311e3547a1bd8040c7dbebf54cf46a0073b99fe2dc952a15b95db7293201e77c0e6e0428aa44a224f8472db4d962d34e22f576e25a8322057b9fbd99ce182ceff9edfdaf5c", 0x7c}], 0x1, &(0x7f0000000180), 0x0, 0x4000}, 0x1}, {{&(0x7f0000000900)=@generic={0x8, "8d93bd4f41bfb662d6dc8964c70d63603393dbc5f7374bbf7e99961d110d7661eda6bb77f178a0278a2d652c4e9b31dc341c448750cbaf5ed25afff2465abeb52dbaba08923585c7d9fcb665db7cba5f039730d746da94acd41c80499abc3e66c3187a7db7ad141dc7fe7826075a0e87ace445d5c93c4d97448c557acd3e"}, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000002d00), 0x0, 0x40000}, 0x1}, {{&(0x7f0000004040)=@nl=@unspec, 0x80, &(0x7f0000004400)=[{&(0x7f00000040c0)="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", 0xfd}], 0x1, &(0x7f0000004480), 0x0, 0x20040000}, 0x9}, {{0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f00000068c0)="4c112163c093c96650efad4b7abb0dc6abc76f42386d58878a478134d464340a482543f80e275f5d25bccd9b7d936373bce7c645783e0296d3d2c000fb3a8734f55da3e279b5d6fabeb7963fc86d1ba79669cac47869d203c60d5b55c8fbe5986d6460be2357c60b058e689106fe7b0c37", 0x71}], 0x1, &(0x7f0000006f40)=[{0xe0, 0x10b, 0x7, "119f54c07e2b97a8a011ade4566000551ad5dcb99fe1bfafd115f2964c3e5fbdde1a3823601b5e6f3e8ca92bdde676a49263e4ce48e4a995619969f38412d8d348eea652037b3c2a212de2ec93e1c3b7ca9f32229721c273c9196d8e80b326ffb3cc84d4b9a7adc29abfd922947014e2db5d9019d8985c95bb40c24a9338883ada83a33fe9566a2d3769812092fc7dc9348ddd6c24c0a976db1b8d9c8730cd99b26e6dc359f84d158b8c0d8a2a0177af3acdb8e4a86e9b06712a05b118d35b65ab81ed42dc702b1b498aa5"}], 0xe0, 0x4004051}, 0xfffffffffffffff8}], 0x4, 0x80) r4 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r4, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r4, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r4, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000280)=[{r4}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) 07:13:14 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x100000001}, 0x1c) 07:13:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x7, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @loopback}, 0x10) 07:13:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="8a44440700316585715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @rand_addr}}, 0x0, 0x40, 0x0, "9b6de229a0c640dff31897f4532d13f2376c226509d8e7b3979eb1bfaa85e6aa8407b902f2f493db114340d44bb25438b7e055402887cf4407df5fbdde0611bdc64f27a84654c316cefece484a4a7c1a"}, 0xd8) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x2, 0x0, "e3548ef5dc4214757200680d2d81615d67a920bb27bcd9ea275aa387385fa795b6659767cc154cdf940e00007f2233d33d3a583ee334efa5f77a93f3f85ac7636e7452e627216f12535aa99900"}, 0xd8) close(r3) dup3(r1, r2, 0x0) 07:13:14 executing program 6: unshare(0x8020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname(r0, &(0x7f00000006c0)=@xdp, &(0x7f0000000740)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000005a00)={{{@in6=@loopback, @in=@multicast1}}, {{@in6=@ipv4={[], [], @loopback}}}}, &(0x7f0000005b00)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000005cc0)={'gre0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x0, 0x0, &(0x7f0000008980)) getsockname$packet(0xffffffffffffffff, &(0x7f0000008b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008b40)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008b80)={'irlan0\x00'}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000008c40)={@multicast1, @rand_addr}, &(0x7f0000008c80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000009500)={'team0\x00'}) 07:13:14 executing program 4: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket(0x10, 0x2, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 07:13:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x0, @multicast1}, 0x10) listen(r0, 0x0) 07:13:14 executing program 0: open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='9'], 0x1) sendto$inet(r0, &(0x7f0000000080)='Y', 0x1, 0x81, &(0x7f00000000c0)={0x2, 0x0, @rand_addr}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000006c0)=""/196) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000340)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000007c0)={{0x2, 0x0, @broadcast}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz1'}, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'lo\x00', 0x101}) read(r0, &(0x7f00000001c0)=""/244, 0xf4) readv(r0, &(0x7f00000017c0)=[{&(0x7f0000001640)=""/94, 0x5e}], 0x1) 07:13:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000740)={0x0, 0x5dd8, 0x3e, &(0x7f00000006c0)="e6276ef44e7ec3f216f693bcf41d731f32272ec6a4223241075ab607e18ce5c4df7a111351f9f504e7981c9d58a581224a7ef5eed1f9d189716d17f1b761"}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x16) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e23}, 0x10) [ 110.566737] device lo entered promiscuous mode 07:13:15 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r1, &(0x7f00000000c0)='j', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x8, @dev}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000080)=0x5, 0x4) recvmsg(r1, &(0x7f0000000000)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000100)}, 0x0) 07:13:15 executing program 4: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket(0x10, 0x2, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 07:13:15 executing program 3: mmap(&(0x7f0000008000/0x14000)=nil, 0x14000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 07:13:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg(r0, &(0x7f0000000a40)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000480)=""/10, 0xa}], 0x2, &(0x7f0000000a00)=""/3, 0x3}, 0xacbdbebfad933dbd) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={@mcast2, @dev, @mcast1}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'yam0\x00'}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) writev(r0, &(0x7f0000001600), 0x0) 07:13:15 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x7) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) 07:13:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000beb000)=@abs, 0x6e, &(0x7f00000016c0), 0x0, &(0x7f000053c000), 0x4}, 0x0) 07:13:15 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) write(r0, &(0x7f0000000200), 0x0) 07:13:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) unlink(&(0x7f0000001700)='./file0\x00') fcntl$setlease(r2, 0x400, 0x1) 07:13:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4b, &(0x7f0000000080)={@loopback}, 0x20) [ 111.058410] input: syz0 as /devices/virtual/input/input4 07:13:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4b, &(0x7f0000000080)={@loopback}, 0x20) [ 111.127537] input: syz0 as /devices/virtual/input/input5 07:13:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"00ac730000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'ip6_vti0\x00', 0x400}) close(r1) 07:13:15 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x7) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) 07:13:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4b, &(0x7f0000000080)={@loopback}, 0x20) 07:13:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4b, &(0x7f0000000080)={@loopback}, 0x20) 07:13:15 executing program 0: open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='9'], 0x1) sendto$inet(r0, &(0x7f0000000080)='Y', 0x1, 0x81, &(0x7f00000000c0)={0x2, 0x0, @rand_addr}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000006c0)=""/196) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000340)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000007c0)={{0x2, 0x0, @broadcast}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz1'}, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'lo\x00', 0x101}) read(r0, &(0x7f00000001c0)=""/244, 0xf4) readv(r0, &(0x7f00000017c0)=[{&(0x7f0000001640)=""/94, 0x5e}], 0x1) [ 111.289466] input: syz0 as /devices/virtual/input/input6 [ 111.409652] device lo left promiscuous mode [ 111.485187] device lo entered promiscuous mode 07:13:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000740)={0x0, 0x5dd8, 0x3e, &(0x7f00000006c0)="e6276ef44e7ec3f216f693bcf41d731f32272ec6a4223241075ab607e18ce5c4df7a111351f9f504e7981c9d58a581224a7ef5eed1f9d189716d17f1b761"}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x16) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e23}, 0x10) 07:13:16 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x7) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) 07:13:16 executing program 5: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x7, &(0x7f0000044000)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00000000c0)={0x27fffffff}, &(0x7f0000000000), &(0x7f0000000100)={0x77359400}, 0x8) 07:13:16 executing program 4: r0 = memfd_create(&(0x7f0000041000)="b8c0a9b7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000041ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000e50)=[{0x9, 0x100000001, 0x0, 0x0, @tick=0x5da36b38, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xda}) 07:13:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg(r0, &(0x7f0000000a40)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000480)=""/10, 0xa}], 0x2, &(0x7f0000000a00)=""/3, 0x3}, 0xacbdbebfad933dbd) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={@mcast2, @dev, @mcast1}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'yam0\x00'}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) writev(r0, &(0x7f0000001600), 0x0) 07:13:16 executing program 3: futimesat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x77359400}}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{0x0, 0x7}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getpgid(0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:13:16 executing program 4: clock_gettime(0xfffffffffffffff7, &(0x7f0000000000)) [ 111.866298] input: syz0 as /devices/virtual/input/input7 07:13:16 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) write(r0, &(0x7f0000000200), 0x0) 07:13:16 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00') 07:13:16 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x7) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) 07:13:16 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="02ff00001100000026bd7000fcdbdf25"], 0x10}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 07:13:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0xd803}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @rand_addr=0x80}}) dup3(r0, r1, 0x0) [ 112.002196] input: syz0 as /devices/virtual/input/input8 07:13:16 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000001200)=@dstopts, 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000200)=""/4096, &(0x7f0000000000)=0x1000) 07:13:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000534000), &(0x7f0000000040)=0x4) 07:13:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@newspdinfo={0x14, 0x24, 0x703}, 0x14}}, 0x0) 07:13:16 executing program 0: open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='9'], 0x1) sendto$inet(r0, &(0x7f0000000080)='Y', 0x1, 0x81, &(0x7f00000000c0)={0x2, 0x0, @rand_addr}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000006c0)=""/196) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000340)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000007c0)={{0x2, 0x0, @broadcast}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz1'}, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'lo\x00', 0x101}) read(r0, &(0x7f00000001c0)=""/244, 0xf4) readv(r0, &(0x7f00000017c0)=[{&(0x7f0000001640)=""/94, 0x5e}], 0x1) [ 112.244479] device lo left promiscuous mode [ 112.318131] device lo entered promiscuous mode 07:13:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000740)={0x0, 0x5dd8, 0x3e, &(0x7f00000006c0)="e6276ef44e7ec3f216f693bcf41d731f32272ec6a4223241075ab607e18ce5c4df7a111351f9f504e7981c9d58a581224a7ef5eed1f9d189716d17f1b761"}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x16) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e23}, 0x10) 07:13:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r1, 0x8000000000000001, 0x9, &(0x7f0000479000)="890528e4", 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 07:13:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') dup2(r0, r1) 07:13:17 executing program 3: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x71a}) mq_timedsend(r0, &(0x7f0000000380)="b8", 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0}) mq_timedsend(r0, &(0x7f00000000c0)="157ba93d38891d945318064a57618ecfcdd0614399ae5ca49d004f26c5025a87be6f8702fb48aed77563c09bf5166ed7b3eaa00e07159fef80f45d9b001ddae618d489aa64e8fd6ddc84cca33c9c87ae48103b7910c284ac", 0x58, 0x4, &(0x7f00000001c0)={r2}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d") mq_timedreceive(r0, &(0x7f00000011c0)=""/4096, 0x93b1643f93b0cb3a, 0x0, &(0x7f0000000080)) 07:13:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0xd803}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @rand_addr=0x80}}) dup3(r0, r1, 0x0) 07:13:17 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0801200303010000b3020000f20e0000030100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4ba) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r1, 0x0, 0x0, 0x4003ff) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r1, 0x3, 0x8000, 0x8005) fallocate(r1, 0x3, 0x5e89, 0xfff9) 07:13:17 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x0, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {0x0, 0x7530}}) 07:13:17 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) write(r0, &(0x7f0000000200), 0x0) [ 112.783312] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 07:13:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r1, 0x8000000000000001, 0x9, &(0x7f0000479000)="890528e4", 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 07:13:17 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0801200303010000b3020000f20e0000030100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4ba) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r1, 0x0, 0x0, 0x4003ff) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r1, 0x3, 0x8000, 0x8005) fallocate(r1, 0x3, 0x5e89, 0xfff9) 07:13:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0xd803}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @rand_addr=0x80}}) dup3(r0, r1, 0x0) 07:13:17 executing program 3: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x71a}) mq_timedsend(r0, &(0x7f0000000380)="b8", 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0}) mq_timedsend(r0, &(0x7f00000000c0)="157ba93d38891d945318064a57618ecfcdd0614399ae5ca49d004f26c5025a87be6f8702fb48aed77563c09bf5166ed7b3eaa00e07159fef80f45d9b001ddae618d489aa64e8fd6ddc84cca33c9c87ae48103b7910c284ac", 0x58, 0x4, &(0x7f00000001c0)={r2}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d") mq_timedreceive(r0, &(0x7f00000011c0)=""/4096, 0x93b1643f93b0cb3a, 0x0, &(0x7f0000000080)) 07:13:17 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x0, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {0x0, 0x7530}}) [ 112.909542] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 07:13:17 executing program 3: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x71a}) mq_timedsend(r0, &(0x7f0000000380)="b8", 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0}) mq_timedsend(r0, &(0x7f00000000c0)="157ba93d38891d945318064a57618ecfcdd0614399ae5ca49d004f26c5025a87be6f8702fb48aed77563c09bf5166ed7b3eaa00e07159fef80f45d9b001ddae618d489aa64e8fd6ddc84cca33c9c87ae48103b7910c284ac", 0x58, 0x4, &(0x7f00000001c0)={r2}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d") mq_timedreceive(r0, &(0x7f00000011c0)=""/4096, 0x93b1643f93b0cb3a, 0x0, &(0x7f0000000080)) 07:13:17 executing program 0: open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='9'], 0x1) sendto$inet(r0, &(0x7f0000000080)='Y', 0x1, 0x81, &(0x7f00000000c0)={0x2, 0x0, @rand_addr}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000006c0)=""/196) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000340)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000007c0)={{0x2, 0x0, @broadcast}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz1'}, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'lo\x00', 0x101}) read(r0, &(0x7f00000001c0)=""/244, 0xf4) readv(r0, &(0x7f00000017c0)=[{&(0x7f0000001640)=""/94, 0x5e}], 0x1) 07:13:17 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0801200303010000b3020000f20e0000030100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4ba) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r1, 0x0, 0x0, 0x4003ff) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r1, 0x3, 0x8000, 0x8005) fallocate(r1, 0x3, 0x5e89, 0xfff9) [ 113.107859] device lo left promiscuous mode [ 113.183375] device lo entered promiscuous mode 07:13:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000740)={0x0, 0x5dd8, 0x3e, &(0x7f00000006c0)="e6276ef44e7ec3f216f693bcf41d731f32272ec6a4223241075ab607e18ce5c4df7a111351f9f504e7981c9d58a581224a7ef5eed1f9d189716d17f1b761"}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x16) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e23}, 0x10) 07:13:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r1, 0x8000000000000001, 0x9, &(0x7f0000479000)="890528e4", 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 07:13:18 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x0, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {0x0, 0x7530}}) 07:13:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0xd803}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @rand_addr=0x80}}) dup3(r0, r1, 0x0) 07:13:18 executing program 3: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x71a}) mq_timedsend(r0, &(0x7f0000000380)="b8", 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0}) mq_timedsend(r0, &(0x7f00000000c0)="157ba93d38891d945318064a57618ecfcdd0614399ae5ca49d004f26c5025a87be6f8702fb48aed77563c09bf5166ed7b3eaa00e07159fef80f45d9b001ddae618d489aa64e8fd6ddc84cca33c9c87ae48103b7910c284ac", 0x58, 0x4, &(0x7f00000001c0)={r2}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d") mq_timedreceive(r0, &(0x7f00000011c0)=""/4096, 0x93b1643f93b0cb3a, 0x0, &(0x7f0000000080)) 07:13:18 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0801200303010000b3020000f20e0000030100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4ba) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r1, 0x0, 0x0, 0x4003ff) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r1, 0x3, 0x8000, 0x8005) fallocate(r1, 0x3, 0x5e89, 0xfff9) 07:13:18 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) write(r0, &(0x7f0000000200), 0x0) [ 113.700819] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 07:13:18 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x0, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {0x0, 0x7530}}) 07:13:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00007d9fc8)={&(0x7f000087fff4), 0xc, &(0x7f0000a40000)={&(0x7f0000b9e000)=@migrate={0xe4, 0x21, 0x411, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast1}}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in6=@ipv4={[], [], @rand_addr}}}, @migrate={0x5c, 0x11, [{@in6=@loopback, @in=@multicast2}, {@in6=@mcast1, @in6=@mcast1}]}, @policy_type={0xc, 0x10, {0xffffffffffffffff}}]}, 0xe4}}, 0x0) 07:13:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000680)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000534000), &(0x7f0000000040)=0x4) 07:13:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r1, 0x8000000000000001, 0x9, &(0x7f0000479000)="890528e4", 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 07:13:18 executing program 3: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000002c0)=0x6, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 07:13:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000080)='syz1\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r3, &(0x7f00000000c0)="040400000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035060f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046afd77fc7ae664f65bfc370ad30c2750684a7a4938b4b677081c14445c06232055397880d89abad699af485f036c70bbb8a78410e617e9be77", 0xa4, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)=@can, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/50, 0x32}, 0x0) bind$inet(r0, &(0x7f0000001100)={0x2, 0x4e23, @remote}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f00000004c0)=0xfffffc98) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{}, {{@in=@multicast2}, 0x0, @in=@remote}}, 0xe8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0xa44, 0x4) write(r0, &(0x7f0000000200)="f7d7317b1dc5f950f52d23e0786e4d329fc089b931aa8588fdc4f1ecba84b963618d21b85d49eea46ccc2874c2ef4eacef893059ec57bd8f35fe8101dd54566b2660919f84b02e624b3e3212e9bc887eb2c9a0956607a67787ef6f515c85734777a04f08bf43240edf83dfec4913b49777a35a39b975c04e137a8432689f64306c5e", 0x82) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/158, 0x9e}], 0x1) dup2(r4, r0) 07:13:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000003200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 07:13:18 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000140)={0xffffffffffffffff}) 07:13:18 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) [ 113.923042] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 113.995963] tc_dump_action: action bad kind 07:13:18 executing program 6: inotify_init() unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 07:13:18 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 07:13:18 executing program 3: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) clone(0x0, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f00000001c0)) 07:13:18 executing program 0: syslog(0x3, &(0x7f00000000c0)=""/7, 0x7) 07:13:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000000000), 0xc, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}}, 0xf0}}, 0x0) 07:13:18 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000000082002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x2dd, [0x0, 0x200004c0, 0x200004f0, 0x20000eb8], 0x0, &(0x7f0000000100), &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000626f6e645f736c6176655f310000000069703667726530000000000000000000736974300000000000000000000000006e723000000000000000000000000000aaaaaaaaaaaa00000000000000000000000000000000000000005808000058080000880800007533320000000000000000000000000000000000000000000000000000000000c00700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000ae0900000000000000000000000000000000000000000000000000000100000040000000ffffffff00000000000100000000000000000000000000000000000001060000000000000000000000000000000000007f040000010000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005"]}, 0x355) write$binfmt_aout(r0, &(0x7f0000000000), 0xff8f) 07:13:18 executing program 7: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7, 0x200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 07:13:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchownat(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 07:13:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000007000)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f0000009000)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in=@rand_addr}, {@in6=@loopback, 0x0, 0x32}, @in6, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 07:13:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x35, &(0x7f0000000440)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) 07:13:19 executing program 0: syslog(0x3, &(0x7f00000000c0)=""/7, 0x7) 07:13:19 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000000082002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x2dd, [0x0, 0x200004c0, 0x200004f0, 0x20000eb8], 0x0, &(0x7f0000000100), &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000626f6e645f736c6176655f310000000069703667726530000000000000000000736974300000000000000000000000006e723000000000000000000000000000aaaaaaaaaaaa00000000000000000000000000000000000000005808000058080000880800007533320000000000000000000000000000000000000000000000000000000000c00700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000ae0900000000000000000000000000000000000000000000000000000100000040000000ffffffff00000000000100000000000000000000000000000000000001060000000000000000000000000000000000007f040000010000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005"]}, 0x355) write$binfmt_aout(r0, &(0x7f0000000000), 0xff8f) 07:13:19 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r2, r1) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r1, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote}, 0x1c) 07:13:19 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x4000000024080, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 07:13:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") recvmmsg(0xffffffffffffff9c, &(0x7f0000005200)=[{{&(0x7f0000002700)=@can, 0x80, &(0x7f0000004b80)=[{&(0x7f0000002780)=""/152, 0x98}, {&(0x7f0000002840)=""/49, 0x31}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/34, 0x22}, {&(0x7f00000048c0)=""/150, 0x96}, {&(0x7f0000004980)=""/21, 0x15}], 0x7, &(0x7f0000004c40)=""/65, 0x41}}], 0x1, 0x0, &(0x7f0000005440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x12b, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) 07:13:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x35, &(0x7f0000000440)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) 07:13:19 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r2, r1) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r1, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote}, 0x1c) 07:13:20 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 07:13:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) accept$inet6(r1, &(0x7f00000004c0), &(0x7f0000000440)=0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 07:13:20 executing program 0: syslog(0x3, &(0x7f00000000c0)=""/7, 0x7) 07:13:20 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r2, r1) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r1, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote}, 0x1c) 07:13:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x35, &(0x7f0000000440)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) 07:13:20 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000000082002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x2dd, [0x0, 0x200004c0, 0x200004f0, 0x20000eb8], 0x0, &(0x7f0000000100), &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000626f6e645f736c6176655f310000000069703667726530000000000000000000736974300000000000000000000000006e723000000000000000000000000000aaaaaaaaaaaa00000000000000000000000000000000000000005808000058080000880800007533320000000000000000000000000000000000000000000000000000000000c00700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000ae0900000000000000000000000000000000000000000000000000000100000040000000ffffffff00000000000100000000000000000000000000000000000001060000000000000000000000000000000000007f040000010000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005"]}, 0x355) write$binfmt_aout(r0, &(0x7f0000000000), 0xff8f) 07:13:20 executing program 3: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) write$selinux_create(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='s'], 0x1) sendfile(r0, r1, 0x0, 0x623) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:13:20 executing program 7: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000040)=""/1, &(0x7f0000000100)=0x1) 07:13:20 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r2, r1) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r1, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote}, 0x1c) 07:13:20 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[], 0x34c) 07:13:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x35, &(0x7f0000000440)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) 07:13:20 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$intptr(0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)="6664696e666f00c8a4c8bb765af325021bd6f5ac360f132e7d15c806b9064b5e4f62901e90a879102d3e3fb1e4ccac3570ee38670c6d3b743d1eba885655d444d7932ea6d9922348cd313954fbb2f2787d0197f177f505888473c217679ef86ad664e696f15b800f9ecbeb6064adc87e3c8aef34122afd789614b925624441aa776eed6d4d9977c5733981fe5526") getdents(r1, &(0x7f0000000180)=""/143, 0xb50acccd68e65758) 07:13:20 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000000082002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x2dd, [0x0, 0x200004c0, 0x200004f0, 0x20000eb8], 0x0, &(0x7f0000000100), &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000626f6e645f736c6176655f310000000069703667726530000000000000000000736974300000000000000000000000006e723000000000000000000000000000aaaaaaaaaaaa00000000000000000000000000000000000000005808000058080000880800007533320000000000000000000000000000000000000000000000000000000000c00700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000ae0900000000000000000000000000000000000000000000000000000100000040000000ffffffff00000000000100000000000000000000000000000000000001060000000000000000000000000000000000007f040000010000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005"]}, 0x355) write$binfmt_aout(r0, &(0x7f0000000000), 0xff8f) 07:13:20 executing program 0: syslog(0x3, &(0x7f00000000c0)=""/7, 0x7) 07:13:20 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') sendfile(r1, r2, &(0x7f0000000000), 0x80000002) 07:13:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f00000000c0)={0x14, 0x14, 0x301}, 0x14}}, 0x0) [ 115.902231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13616 sclass=netlink_route_socket [ 116.003961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12343 sclass=netlink_route_socket 07:13:20 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 07:13:20 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 07:13:20 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fafb7a41cb22da280000206000000a843096c37234a39000900210008004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de440700d42c44e82afc5349fddd4ab94e7162", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 07:13:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000000c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 07:13:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f00000000c0)={0x14, 0x14, 0x301}, 0x14}}, 0x0) 07:13:20 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x202, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000005f40)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) getcwd(&(0x7f00000001c0)=""/70, 0x46) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0x4a9e280) perf_event_open(&(0x7f0000000780)={0x3, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x80080) pwrite64(r1, &(0x7f0000005ec0)="0dfcd3155acf15cff3154cee9e9ccd85c04a3d3e150399d761536ee9eb9b24012c96eaa864354b9b5886aa93e530fc96b49d6ca473dd89", 0x37, 0x0) poll(&(0x7f00000019c0)=[{r0, 0x9010}, {r3, 0x1000}], 0x2, 0xd58) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 07:13:20 executing program 7: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020f00001000000000000000000000000800120000000100000000000000000006000000000000000000000000000000e00000010000000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b820000000000000"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 07:13:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f00000003c0)="1b0000004a001f00ff07f4f9002304000a04f51108000100020100", 0x1b) 07:13:20 executing program 1: ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000013c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a']) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a8, 0x10400003) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x800, 0x0) 07:13:20 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x101) close(r0) 07:13:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f00000000c0)={0x14, 0x14, 0x301}, 0x14}}, 0x0) 07:13:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc7bb9650b5de56946c568f95d22467190ba3b6d59a5958d6fa9259c8a2ac4677b00000000000000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) 07:13:20 executing program 7: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) clone(0x0, &(0x7f0000623000), &(0x7f00002cfffc), &(0x7f0000000080), &(0x7f0000553000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f00000000c0)) ioprio_set$pid(0x1, r1, 0x7fff) ioprio_get$uid(0x2, 0x0) 07:13:21 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f00000004c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/current\x00') pwrite64(r0, &(0x7f0000000180), 0x0, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) open$dir(&(0x7f0000000140)='./file0\x00', 0x202, 0x0) 07:13:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f00000000c0)={0x14, 0x14, 0x301}, 0x14}}, 0x0) 07:13:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc7bb9650b5de56946c568f95d22467190ba3b6d59a5958d6fa9259c8a2ac4677b00000000000000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) 07:13:21 executing program 6: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd8000), &(0x7f0000000000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 07:13:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS(r0, 0x80045438, &(0x7f0000000040)) 07:13:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000380)="6b657972696e676c6f00f9e33210d477f0fbca82bfc24b1c95aa5076be6e8bd7af0c6eddf0182722feff2b9a00cef0fb6984e56060deb090815d9ef9fbc9febcd2657d98065f630f14bce0d32e2c81a5bf34f60344d5d17455fd1b7f26602b74c3463c13bfbdc263e8e6c0e4fdb0b353d96e05f4afdaa5e9a2311e0b0437b3d7794fd33ecc811f6db806da54ef2b3ac66cdb41bdb6422d389ef53b016cb127cbae7c676758e1997524ea6f57fe8e3158a0b89339f54d6d86b3f1d5eb4e932e4a22b6da0d1d3eaff939d9312019fc9882c37b64cc3ff3e001281c7623c89116a7dd8aef6a2110b5c822717d7f9d03016128ea6e95a66f6bb417583bf0dd54d1cd015b30f296d8f6e5ee438b267cf4039a905f6a8309927696e6dcfba61b16107585a2a188ba10ea576bd699bc9078d3edeccfbdbfc55f43dd89399ed35844e77bf95ba79f17bb93bf85e16cf62a13b52c25c252b7e4514f011c9da6b2cb7f1908fe58ce657216b2a5190e0a727099ab0d83ccdddbaa6792f2bebf9a8b716b3dd88d1590c1d4fcc1e818dc823246d6d59e449fcff4970ff888ef63c1277d76c859f6eba08c013d2bba0d79187403bfe45d22a2b8dcb5ff679e748156c57b3265256f7397f6c18c9122db5bdfb67076ee1a04dccfd32699aad47199bde505", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc7bb9650b5de56946c568f95d22467190ba3b6d59a5958d6fa9259c8a2ac4677b00000000000000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) 07:13:21 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f00000004c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/current\x00') pwrite64(r0, &(0x7f0000000180), 0x0, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) open$dir(&(0x7f0000000140)='./file0\x00', 0x202, 0x0) 07:13:21 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x202, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000005f40)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) getcwd(&(0x7f00000001c0)=""/70, 0x46) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0x4a9e280) perf_event_open(&(0x7f0000000780)={0x3, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x80080) pwrite64(r1, &(0x7f0000005ec0)="0dfcd3155acf15cff3154cee9e9ccd85c04a3d3e150399d761536ee9eb9b24012c96eaa864354b9b5886aa93e530fc96b49d6ca473dd89", 0x37, 0x0) poll(&(0x7f00000019c0)=[{r0, 0x9010}, {r3, 0x1000}], 0x2, 0xd58) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 07:13:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(r3) dup3(r1, r2, 0x0) 07:13:21 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 07:13:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0), &(0x7f0000000200)=""/208, 0x0, 0x16, 0x0, &(0x7f0000000380)}) 07:13:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc7bb9650b5de56946c568f95d22467190ba3b6d59a5958d6fa9259c8a2ac4677b00000000000000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) 07:13:21 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000009c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='.', &(0x7f00000002c0)='mslos\x00', 0x3002480, &(0x7f0000000700)) pivot_root(&(0x7f0000000400)='./file0\x00', &(0x7f0000000080)='./file0\x00') 07:13:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') write$P9_RLOCK(r0, &(0x7f0000000140)={0x8}, 0x8) 07:13:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0xd803}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @local}}) r2 = dup3(r0, r1, 0x0) ioctl(r2, 0x0, &(0x7f0000000140)="a118e8eaef32e91d68e5d37f100c3227caa67add62861e9855e59774ceb3df9a9ce36dd453d24db24da3f123bbb5cb41bae828eb56cb3dca3ce41fc0dce4f25eb207f8ccc1cffd5f13547c47589e2d01e1f505078af0252fd0ca2c3170301f183ceeb3a5ffc78c34860fbf1f16e093da91ae3e4b2c0f7abcd58f0e8bd68ab24c9c5b1b9e722f36904de4aa3690c05e6153278261ef5c43f215446f1c3639666b3fda679b312611b80b3d66666259efdaf0dfb17021a31352631a345bc3c908d088f494a0ef9d") 07:13:21 executing program 7: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "441005f4ffef000097"}], 0x20}, 0x0) 07:13:21 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x202, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000005f40)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) getcwd(&(0x7f00000001c0)=""/70, 0x46) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0x4a9e280) perf_event_open(&(0x7f0000000780)={0x3, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x80080) pwrite64(r1, &(0x7f0000005ec0)="0dfcd3155acf15cff3154cee9e9ccd85c04a3d3e150399d761536ee9eb9b24012c96eaa864354b9b5886aa93e530fc96b49d6ca473dd89", 0x37, 0x0) poll(&(0x7f00000019c0)=[{r0, 0x9010}, {r3, 0x1000}], 0x2, 0xd58) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 07:13:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="8eecab35b33a"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r3, 0x1, 0x6, @remote}, 0x10) 07:13:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x800) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) [ 117.601253] device veth0_to_bridge entered promiscuous mode [ 117.660924] device veth0_to_bridge left promiscuous mode 07:13:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02032000100000000000000000000000010014000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000001001600000000000200010000000000000000000000000005000500000000000a00000000000000fe8800000000000000000000000000ff0000000000000000"], 0x80}}, 0x0) 07:13:22 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000080)=0xfffffffffffffffc, 0x4) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 07:13:22 executing program 7: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "441005f4ffef000097"}], 0x20}, 0x0) 07:13:22 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) waitid(0x2, r1, &(0x7f0000000c00), 0x1, &(0x7f0000000c40)) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="0209000000000299c95c698d5dc0b879773d7f7120868719c17d9d445de2f74993b691c50bd5fc6832b4c77ca700000000000000000000000000"], 0x3a}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x100, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'tunl0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@local, @in=@multicast1}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@mcast1, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@local, @in=@loopback}}, {{@in6=@ipv4}, 0x0, @in=@rand_addr}}, &(0x7f00000006c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000700)={{{@in, @in6=@mcast1}}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, &(0x7f0000000800)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000900)={@loopback, @multicast2}, &(0x7f0000000940)=0xc) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000980)={@ipv4={[], [], @multicast2}}, &(0x7f00000009c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000ac0)=0x14, 0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b00)={@remote}, &(0x7f0000000b40)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000b80)={@loopback}, &(0x7f0000000bc0)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000dc0)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000e00)={{{@in6, @in=@dev}}, {{@in=@dev}}}, &(0x7f0000000f00)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000f80)={@remote}, &(0x7f0000000fc0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001000)={{{@in=@rand_addr, @in6=@local}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000001100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001200)={{{@in6=@mcast2, @in6=@remote}}, {{@in=@local}}}, &(0x7f0000001300)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001740)={{{@in6=@local, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000001840)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001880)={0x0, @dev, @multicast1}, &(0x7f00000018c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001900)={'team0\x00'}) 07:13:22 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280), 0x4) r1 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x202, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000005f40)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) getcwd(&(0x7f00000001c0)=""/70, 0x46) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0x4a9e280) perf_event_open(&(0x7f0000000780)={0x3, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x80080) pwrite64(r1, &(0x7f0000005ec0)="0dfcd3155acf15cff3154cee9e9ccd85c04a3d3e150399d761536ee9eb9b24012c96eaa864354b9b5886aa93e530fc96b49d6ca473dd89", 0x37, 0x0) poll(&(0x7f00000019c0)=[{r0, 0x9010}, {r3, 0x1000}], 0x2, 0xd58) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 07:13:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r2, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r1) 07:13:22 executing program 2: inotify_init() pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 07:13:22 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f00000004c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/current\x00') pwrite64(r0, &(0x7f0000000180), 0x0, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) open$dir(&(0x7f0000000140)='./file0\x00', 0x202, 0x0) 07:13:22 executing program 7: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "441005f4ffef000097"}], 0x20}, 0x0) 07:13:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x6, 0x0, @buffer={0x0, 0x1b, &(0x7f0000000200)=""/27}, &(0x7f0000000440)="ea571ee726b1", &(0x7f00000003c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) clone(0x0, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000480)) read(r0, &(0x7f00000000c0)=""/42, 0x15e) 07:13:22 executing program 7: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "441005f4ffef000097"}], 0x20}, 0x0) 07:13:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x6, 0x0, @buffer={0x0, 0x1b, &(0x7f0000000200)=""/27}, &(0x7f0000000440)="ea571ee726b1", &(0x7f00000003c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) clone(0x0, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000480)) read(r0, &(0x7f00000000c0)=""/42, 0x15e) 07:13:22 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local, @remote}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000000000000b5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') preadv(r1, &(0x7f0000000600), 0x1000000000000134, 0x10400002) 07:13:22 executing program 4: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f0, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x7}) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}) 07:13:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 07:13:22 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x400) 07:13:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x6, 0x0, @buffer={0x0, 0x1b, &(0x7f0000000200)=""/27}, &(0x7f0000000440)="ea571ee726b1", &(0x7f00000003c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) clone(0x0, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000480)) read(r0, &(0x7f00000000c0)=""/42, 0x15e) 07:13:22 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f00000004c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/current\x00') pwrite64(r0, &(0x7f0000000180), 0x0, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) open$dir(&(0x7f0000000140)='./file0\x00', 0x202, 0x0) 07:13:22 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0xfffffffffffffffa) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x60000001}) 07:13:22 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080), &(0x7f00000000c0)='H', 0x1, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x81, 0x0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/227) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\a\x00', 0xc1fd}) write$binfmt_aout(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x12b) keyctl$invalidate(0x15, r0) 07:13:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000140), 0x4) 07:13:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffffffffffff008}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000006e00)=[{{&(0x7f0000000540)=@hci, 0x80, &(0x7f00000006c0)}}, {{&(0x7f00000058c0)=@can, 0x80, &(0x7f0000005a40), 0x0, &(0x7f0000005a80)}}], 0x3d5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:13:22 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x0, 0x4}], 0xfea4) 07:13:22 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local, @remote}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000000000000b5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') preadv(r1, &(0x7f0000000600), 0x1000000000000134, 0x10400002) 07:13:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x6, 0x0, @buffer={0x0, 0x1b, &(0x7f0000000200)=""/27}, &(0x7f0000000440)="ea571ee726b1", &(0x7f00000003c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) clone(0x0, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000480)) read(r0, &(0x7f00000000c0)=""/42, 0x15e) 07:13:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000000), 0xc, &(0x7f00000007c0)={&(0x7f0000000400)=@migrate={0xb8, 0x21, 0x9, 0x0, 0x0, {{@in=@broadcast, @in=@remote}}, [@migrate={0x5c, 0x11, [{@in=@local, @in6=@mcast1}, {@in=@local, @in6}]}, @policy_type={0xc}]}, 0xb8}}, 0x0) 07:13:22 executing program 6: r0 = gettid() setpgid(0x0, r0) 07:13:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000001c0)=0xa7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4) sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000080)=""/49, 0x31, 0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x709000) 07:13:22 executing program 2: writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f0000000040)="1f00000002031900000007000000068100023b050900010036922bf49576da", 0x1f}], 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0), 0x36a) 07:13:23 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xe, 0x0, 0x0, 0x2, 0x0, 0x70bd2a}, 0x10}}, 0x40000) 07:13:23 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000680)) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/136}, {&(0x7f00000001c0)=""/205}, {&(0x7f00000002c0)=""/127}, {&(0x7f0000000340)=""/183}, {&(0x7f0000000080)=""/52}, {&(0x7f0000000400)=""/210}, {&(0x7f0000000500)=""/204}], 0x1000000000000360, 0x10400003) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000040)='uid_map\x00') sendfile(r0, r0, &(0x7f0000000740), 0x204) 07:13:23 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local, @remote}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000000000000b5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') preadv(r1, &(0x7f0000000600), 0x1000000000000134, 0x10400002) 07:13:23 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x1, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') getdents64(r0, &(0x7f0000001300)=""/4096, 0x817) clone(0x0, &(0x7f00000003c0), &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) getdents64(r0, &(0x7f0000002300)=""/4096, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r2, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f0000000000)='#system\x00', 0x0, 0x0) 07:13:23 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x48, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x4, 0x7}}, @IFA_LOCAL={0x8}, @IFA_LABEL={0x14, 0x3, 'veth1\x00'}]}, 0x48}}, 0x0) 07:13:23 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) 07:13:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) write(r2, &(0x7f0000000300), 0x0) 07:13:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x100000) vmsplice(r1, &(0x7f0000001340)=[{&(0x7f00000013c0)='6', 0x1}], 0x1, 0x0) 07:13:23 executing program 5: r0 = eventfd2(0x6, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0x7}], 0x2) 07:13:23 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) 07:13:23 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local, @remote}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000000000000b5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') preadv(r1, &(0x7f0000000600), 0x1000000000000134, 0x10400002) 07:13:23 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) 07:13:23 executing program 2: r0 = socket(0x10, 0x2, 0xc) perf_event_open(&(0x7f0000000280)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000136000)="1f0000000104ff00fd43544007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000257fe1)="1f0000000104ff00fd43544007110000f3050100080005000000ff07ffdf00", 0x1f) 07:13:23 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)) 07:13:23 executing program 5: r0 = eventfd2(0x6, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0x7}], 0x2) 07:13:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x28) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) sendmmsg(r0, &(0x7f0000007e00), 0x30b, 0x0) [ 119.062868] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 119.111953] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 119.178171] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 07:13:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000000400)}, 0x0) bind$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r0, &(0x7f00003d6fc8)={&(0x7f0000698000)=@generic, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000f9fff8)=""/90, 0x5a}, 0x0) 07:13:24 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) 07:13:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x4, &(0x7f0000000040)=0x1, 0x4) close(r3) dup3(r1, r2, 0x0) 07:13:24 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) 07:13:24 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000680)) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/136}, {&(0x7f00000001c0)=""/205}, {&(0x7f00000002c0)=""/127}, {&(0x7f0000000340)=""/183}, {&(0x7f0000000080)=""/52}, {&(0x7f0000000400)=""/210}, {&(0x7f0000000500)=""/204}], 0x1000000000000360, 0x10400003) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000040)='uid_map\x00') sendfile(r0, r0, &(0x7f0000000740), 0x204) 07:13:24 executing program 2: r0 = socket(0x10, 0x2, 0xc) perf_event_open(&(0x7f0000000280)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000136000)="1f0000000104ff00fd43544007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000257fe1)="1f0000000104ff00fd43544007110000f3050100080005000000ff07ffdf00", 0x1f) 07:13:24 executing program 5: r0 = eventfd2(0x6, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0x7}], 0x2) 07:13:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') pread64(r0, &(0x7f0000000580)=""/107, 0x6b, 0x0) 07:13:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000000400)}, 0x0) bind$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r0, &(0x7f00003d6fc8)={&(0x7f0000698000)=@generic, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000f9fff8)=""/90, 0x5a}, 0x0) 07:13:24 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) 07:13:24 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) 07:13:24 executing program 5: r0 = eventfd2(0x6, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0x7}], 0x2) 07:13:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000000400)}, 0x0) bind$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r0, &(0x7f00003d6fc8)={&(0x7f0000698000)=@generic, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000f9fff8)=""/90, 0x5a}, 0x0) [ 119.997348] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 07:13:24 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x6800) 07:13:24 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) [ 120.050360] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 07:13:24 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000009b00)=[{{&(0x7f0000003f00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000043c0), 0x0, &(0x7f0000004440)=""/58, 0x3a}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x22, 0x0) 07:13:24 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000040)) ptrace$cont(0x21, r1, 0x0, 0x0) 07:13:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000000400)}, 0x0) bind$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r0, &(0x7f00003d6fc8)={&(0x7f0000698000)=@generic, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000f9fff8)=""/90, 0x5a}, 0x0) 07:13:24 executing program 1: r0 = inotify_init() unshare(0x400) fchmod(r0, 0x0) 07:13:24 executing program 2: r0 = socket(0x10, 0x2, 0xc) perf_event_open(&(0x7f0000000280)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000136000)="1f0000000104ff00fd43544007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000257fe1)="1f0000000104ff00fd43544007110000f3050100080005000000ff07ffdf00", 0x1f) [ 120.250744] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 120.300130] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 07:13:25 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000680)) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/136}, {&(0x7f00000001c0)=""/205}, {&(0x7f00000002c0)=""/127}, {&(0x7f0000000340)=""/183}, {&(0x7f0000000080)=""/52}, {&(0x7f0000000400)=""/210}, {&(0x7f0000000500)=""/204}], 0x1000000000000360, 0x10400003) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000040)='uid_map\x00') sendfile(r0, r0, &(0x7f0000000740), 0x204) 07:13:25 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)) 07:13:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000140)=""/240) 07:13:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x6800) 07:13:25 executing program 4: keyctl$reject(0xc, 0x0, 0xfffffffffffffff7, 0x969, 0x0) 07:13:25 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) bind(r0, &(0x7f0000000040)=@generic={0x11, "8a87c823d5a62d85372deb5a0b555fa76d884b1b6f8db73292f888cd8226e3078d2ccb44bb9361b62e5462ad592bbc035bce6ecfd25ebe88c7493f52c5c7cb7c9ac41b95d6356c710e35c4b974c26610fdaa75bdb0e9ec65dd43a1d5adbd17897e0bc187e59e84280233d9f5604d07ed0b591663d8a56ada3655ac7ae009"}, 0x80) 07:13:25 executing program 2: r0 = socket(0x10, 0x2, 0xc) perf_event_open(&(0x7f0000000280)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000136000)="1f0000000104ff00fd43544007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000257fe1)="1f0000000104ff00fd43544007110000f3050100080005000000ff07ffdf00", 0x1f) 07:13:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x721, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}, @IFLA_NET_NS_FD={0x8}]}, 0x50}}, 0x0) 07:13:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4801, 0x0) 07:13:25 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000000100)}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) [ 120.807878] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 120.831797] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 07:13:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r1, 0x6612, &(0x7f0000000180)) 07:13:25 executing program 0: prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) setreuid(0x0, 0x0) 07:13:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x6800) 07:13:25 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000000100)}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) 07:13:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000200)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) add_key(&(0x7f0000000600)='cifs.idmap\x00', &(0x7f0000000640), &(0x7f0000000680)="5d37f36f9c43360d668138db47f947cf0a8029fbc74e1806a550a3ba443e84f69e94f0c4c244319a20983e0055e489bf22c0e30d3a8b86da9fffe399f9e40c6362162072d80ca7eba7ce688522bf5e88b72b2bee5d1fedbcf741e3aa7e974445da9a262c335660b5803e5766926e87ecb8027546ee47f96fe0f1aa99adf120cffde6320e2cc224b0dc95f45d71b23765eea8cbc6b29a12fe3fbc26e3a5c22061049b53c0c980ef13e4a0a28302d25f8588c1f771f93c888905ac14812efb060bdeb1307f9e", 0xc5, 0xffffffffffffffff) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) getuid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000480)='ifb0\x00', 0x10) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESDEC]) fcntl$getown(r1, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001ff) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) setpriority(0x2, 0x0, 0x40010000) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)=""/126) write$P9_RREAD(r1, &(0x7f00000004c0)={0xb, 0x75, 0x2}, 0xb) 07:13:25 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000000100)}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) 07:13:25 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000680)) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/136}, {&(0x7f00000001c0)=""/205}, {&(0x7f00000002c0)=""/127}, {&(0x7f0000000340)=""/183}, {&(0x7f0000000080)=""/52}, {&(0x7f0000000400)=""/210}, {&(0x7f0000000500)=""/204}], 0x1000000000000360, 0x10400003) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000040)='uid_map\x00') sendfile(r0, r0, &(0x7f0000000740), 0x204) 07:13:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000d40)) 07:13:25 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setopts(0x420b, r1, 0x0, 0x0) 07:13:25 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000180), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$unix(r1, &(0x7f0000002580), 0x0, 0x20000084, &(0x7f00000017c0)=@file={0x1, './file0\x00'}, 0x6e) 07:13:25 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000000100)}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) 07:13:25 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "b441d632cdbbcb211363807aec73d3883762a61dc02d349bfa3ac974b987aa7fb97eb324d594fbbb77bab759418aa8d451d921e8f5d2cf2b08292111701192e97cac366dd3eb2e0fb039e58314ef4709c5f3556db6a1ab6b4fb2bdd83cdc26e8395ec4984ec3faf71a611d1569545d654cded93be827a85188b803c19c1b56aab522862a718b81e512b49690994d3425e33bd93f0e744c66a083c1f9f1bd7bb8f9e123c08f3f041ed3fdc058136cf0071a47cc0e38720a12e11e842a7b5b26dff07f578fdb9a7b14662a625c1ee76c41ccb2b1fc6376aa718e1067b9e4af511ef5b360dbfad326108bb033db193dab27974eb8c462739eaee51d87f31c516e7e391073770da3202e02c41a7277c847df24bd5b0a7ab6e252f3c8ebf00688cc55311d887e8bfd95a7f4c6a126af3fe26714ddb869c66d18f870631bbd497e8a06881b754ecdcdd0dcffc51cd52a6b560f8d64b63a1674745edc5f53b18a8ffcc5c2fbc4d2bbcc2faf3c189d9b36c0655d1394f5c127ec86b8a764a87b546c2b6ac37d0a8ec3edd7cda6f930570763dbdc0640d219749bd57c7c89eaadfdae41d654a46b17be069a32a7d94d29b612fbe61b8bd11a2d10ba5d4ac7014fc0465c3f144598bd1f913343e7293711040eee0ae8df1e49f04ed1037d4b742aed0e932116060aaf6b985238d2e10fb5b11d19d7801befed4833287d96a85a7cdd9e211a672760335655576fc0fa0336621c2b2b1018ef71bb5077c67ee5fa8d479d6776013363e98b1f1213712be7e47549b6035459008c509f0f983130a451531381ee3c1ab9e1cbb8e558b56ca1a70939389addc5f9632b37ff3f634abb504bb0be0a51649683f6e29588c15cda40255e173328681884ffef6729e9058c5623e1401fdcc7b8cb5623a8fd725fbeea05fc417c44e46500619218dff7c70aa068994c58883cada505a2aa85b6620dfe9c45b707c9aa1222b86972eae564b28a05ddfa3545df231fde2707d4bf67dc6ba41daba91dee8081e5c7e2bcfbebebd42d5ab8a32d6e098fd57233e3b813dc0d772134775def451823b7fef2bc93da01722cd613b9a3db7e2d4c51fb7b56006ee9cea53b62343599a56167388d45247f9289fb1cab67a7cb0c3665ddf1e1411875b4de3428b32fc6603691a023d8e4cb93c667acb7b535fb5f77af9a49640cbe8ffe3a193cf4df1b556a67cb753c60bdf978b871aa513c07074c6602037ebc32199290e3c7ac6f103ad9358951ad4de0c8f1b34951b0e6a48295975cf08b2c3c95064855fc95317e386f1c18608d1d08699003c998b93332cd316f17a5139d350cbfa9dabc3f77c4197a0186e50913978e980a7a028e7ccdeee718af028200e94a6b3a0ec93ba14b0c64dfaf3967e230d8cf876f26287d436ebc9588b52b43f2380836bfe3"}}}}}, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000000100)}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) 07:13:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_vs\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x6800) 07:13:25 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000000100)}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) 07:13:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCFLSH(r0, 0x5413, 0x701000) 07:13:26 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000000100)}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) 07:13:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)="00000000000000007b12f5a91c15d12e1fe94ff7b51a2aee29f4a28ce819a11b4889d9654d4dba1d86cde0486440da02a126c80f22635b16581dcaec89add0d9a12975") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r3, 0x2) r4 = accept4(r2, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) dup2(r1, r4) 07:13:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_team\x00', &(0x7f0000000100)=@ethtool_eeprom={0x19}}) 07:13:26 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setopts(0x4204, r1, 0x0, 0x800000000000b) [ 121.717055] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes [ 123.279818] IPVS: Creating netns size=2552 id=12 [ 123.569639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 123.587571] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 123.672398] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 123.689394] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.773649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 123.792216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 123.809832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.828639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.447270] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 124.497278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 07:13:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) 07:13:29 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f0000000340)) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x1, 0xffffffffffffffff) execve(&(0x7f0000000400)='./file0/file0\x00', &(0x7f00000003c0), &(0x7f0000000500)) 07:13:29 executing program 1: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80000000}) 07:13:29 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f00000000c0)="863b239ba2740a88f9f48da0", 0xc) 07:13:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)="00000000000000007b12f5a91c15d12e1fe94ff7b51a2aee29f4a28ce819a11b4889d9654d4dba1d86cde0486440da02a126c80f22635b16581dcaec89add0d9a12975") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r3, 0x2) r4 = accept4(r2, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) dup2(r1, r4) 07:13:29 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x8001}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 07:13:29 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="025c") unshare(0x20020400) poll(&(0x7f0000000000)=[{}, {}], 0xac, 0x0) 07:13:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000791000), 0xc, &(0x7f0000dd0ff0)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x1}, 0x14}}, 0x0) 07:13:29 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f00000000c0)="863b239ba2740a88f9f48da0", 0xc) 07:13:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 125.271030] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:13:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000800)=0x7, 0xf0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x20000801, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:13:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)="00000000000000007b12f5a91c15d12e1fe94ff7b51a2aee29f4a28ce819a11b4889d9654d4dba1d86cde0486440da02a126c80f22635b16581dcaec89add0d9a12975") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r3, 0x2) r4 = accept4(r2, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) dup2(r1, r4) 07:13:29 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f00000000c0)="863b239ba2740a88f9f48da0", 0xc) 07:13:29 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000080)=""/19, 0x1000000b4) 07:13:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") dup3(r0, r1, 0x0) 07:13:29 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f00000000c0)="863b239ba2740a88f9f48da0", 0xc) [ 125.415643] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:13:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x7ff80000) ftruncate(r1, 0x1000) unshare(0x400) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x8000, 0x6, 0x2, 0xfffffffffffff800}, 0x14) sendfile(0xffffffffffffffff, r2, &(0x7f0000000140), 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0xffffffffffffffff, 0x3, 0x5, 0x2, 0x20004000000}}) 07:13:29 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f00000014c0)=""/4096, 0xffffffb6}], 0x2, 0x0) 07:13:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 #! \n'], 0xf) close(r1) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) 07:13:29 executing program 0: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000100)="f0252cf29e87c852f26894faef724e63aecb73e83c9a78b57b0a66e4a9657cce6d61cfb6aa7e17aa2d9d2b94ddaa013148cceafcfa6e16f774cdbba905c29cc09a7c75956f50dae4be9dc66c556f1c52896df51e06115f2031cf2b", 0x5b, 0x0) 07:13:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") dup3(r0, r1, 0x0) 07:13:29 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x40247007, &(0x7f0000000040)) 07:13:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)="00000000000000007b12f5a91c15d12e1fe94ff7b51a2aee29f4a28ce819a11b4889d9654d4dba1d86cde0486440da02a126c80f22635b16581dcaec89add0d9a12975") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r3, 0x2) r4 = accept4(r2, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) dup2(r1, r4) 07:13:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 #! \n'], 0xf) close(r1) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) 07:13:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") dup3(r0, r1, 0x0) 07:13:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 #! \n'], 0xf) close(r1) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) 07:13:30 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x40247007, &(0x7f0000000040)) [ 125.596694] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:13:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") dup3(r0, r1, 0x0) 07:13:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xc0}}, 0x0) 07:13:30 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f00000014c0)=""/4096, 0xffffffb6}], 0x2, 0x0) 07:13:30 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x40247007, &(0x7f0000000040)) 07:13:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 #! \n'], 0xf) close(r1) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) 07:13:31 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc0046d00, &(0x7f0000000000)={0x1}) 07:13:31 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)="617474722f63757272656e740099871411d7432e4cd1d0c3679f15b8cb27b7fcfedaffdfb67899fd7611a29de5a2a9897cbc43db1add207e2395f8e43a285a5487f4d39a3f4160448ebe8e43b67448ec2d6ebc0522cdcfc53ec697") r1 = syz_open_procfs(0x0, &(0x7f0000000700)='net/arp\x00') sendfile(r0, r1, &(0x7f0000000280)=0x38, 0x2000000000000001) 07:13:31 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4206, r1) 07:13:31 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0xffffffffffffffff, 0x1, {0x0, 0x4}}, 0x20) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0xf, 0x10000, {0x0, 0x10001, 0x0, {0x7}, {0x6, 0x2}, @rumble={0x4, 0x2}}, {0x57, 0x8, 0x0, {0x48f, 0x10001}, {0x6, 0xffff00}, @cond=[{0x4, 0x9, 0xd85, 0x45, 0x4, 0x100000000}, {0x30, 0x7, 0x8, 0x4, 0xfffffffffffffffa}]}}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x3) 07:13:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f00000014c0)=""/4096, 0xffffffb6}], 0x2, 0x0) 07:13:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') pread64(r1, &(0x7f00000013c0)=""/221, 0xdd, 0x4) 07:13:31 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x40247007, &(0x7f0000000040)) 07:13:31 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f00000014c0)=""/4096, 0xffffffb6}], 0x2, 0x0) 07:13:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000000)=[{0x1c}, {0x6}]}) mkdir(&(0x7f0000dda000)='./file0\x00', 0x0) 07:13:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 07:13:31 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7f) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) sendfile(r0, r2, 0x0, 0x7f3) 07:13:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a26c8079a613c6e715070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f85000)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}]}, 0x60}}, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 126.808407] audit: type=1326 audit(1534922011.207:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=8919 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 07:13:31 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7f) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) sendfile(r0, r2, 0x0, 0x7f3) 07:13:31 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x0, 0xffffffffffffffff) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="240000000d0a07031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d8060000000060000000029ec2400020cd308000000730ec279b2fcbf4042d1", 0x4c}], 0x1}, 0x0) 07:13:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 07:13:31 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7f) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) sendfile(r0, r2, 0x0, 0x7f3) [ 126.993989] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. [ 127.059794] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 07:13:31 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc0046d00, &(0x7f0000000000)={0x1}) 07:13:31 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7f) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) sendfile(r0, r2, 0x0, 0x7f3) 07:13:31 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000001c0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 127.224006] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 127.232827] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 07:13:32 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0xffffffffffffffff, 0x1, {0x0, 0x4}}, 0x20) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0xf, 0x10000, {0x0, 0x10001, 0x0, {0x7}, {0x6, 0x2}, @rumble={0x4, 0x2}}, {0x57, 0x8, 0x0, {0x48f, 0x10001}, {0x6, 0xffff00}, @cond=[{0x4, 0x9, 0xd85, 0x45, 0x4, 0x100000000}, {0x30, 0x7, 0x8, 0x4, 0xfffffffffffffffa}]}}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x3) 07:13:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f00000014c0)=""/4096, 0xffffffb6}], 0x2, 0x0) 07:13:32 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 07:13:32 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f00000014c0)=""/4096, 0xffffffb6}], 0x2, 0x0) 07:13:32 executing program 1: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = creat(&(0x7f0000000700)='./bus\x00', 0xc1) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x8a200, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f00000000c0)='bdev\x00') r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000380)) getpeername$unix(r3, &(0x7f00000004c0), &(0x7f0000000200)=0x6e) mq_timedsend(r2, &(0x7f00000e6000), 0x0, 0x3, &(0x7f0000000540)) r4 = getpid() mq_notify(r2, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r4}) syncfs(r0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000009c0)={'dummy0\x00', {0x2, 0x4e24, @multicast1}}) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x547000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000240)) getegid() ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000580)="d2ea908ab7f56672d98bde685176c832f95ace843adb528113a091dce791937e2c7eb64f8319") ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000a40)=0x4) mq_timedsend(r2, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000fbc000)) close(r3) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000005c0)='tls\x00', 0x4) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000800)) preadv(r7, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x4, 0x0, 0x2}, 0xc) [ 127.611415] audit: type=1326 audit(1534922012.017:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=8919 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 07:13:32 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="1b", 0x1}], 0x1, &(0x7f0000000140)}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000002200)=@hci, 0x80, &(0x7f0000002440), 0x0, &(0x7f0000002480)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0xd8, &(0x7f00000028c0)=""/87, 0x57}}], 0x2, 0x0, &(0x7f0000002a80)={0x0, 0x989680}) 07:13:32 executing program 0: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f00000002c0), 0x40002cd, 0x0) 07:13:32 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc0046d00, &(0x7f0000000000)={0x1}) 07:13:32 executing program 1: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = creat(&(0x7f0000000700)='./bus\x00', 0xc1) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x8a200, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f00000000c0)='bdev\x00') r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000380)) getpeername$unix(r3, &(0x7f00000004c0), &(0x7f0000000200)=0x6e) mq_timedsend(r2, &(0x7f00000e6000), 0x0, 0x3, &(0x7f0000000540)) r4 = getpid() mq_notify(r2, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r4}) syncfs(r0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000009c0)={'dummy0\x00', {0x2, 0x4e24, @multicast1}}) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x547000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000240)) getegid() ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000580)="d2ea908ab7f56672d98bde685176c832f95ace843adb528113a091dce791937e2c7eb64f8319") ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000a40)=0x4) mq_timedsend(r2, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000fbc000)) close(r3) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000005c0)='tls\x00', 0x4) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000800)) preadv(r7, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x4, 0x0, 0x2}, 0xc) 07:13:32 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 07:13:32 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0xffffffffffffffff, 0x1, {0x0, 0x4}}, 0x20) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0xf, 0x10000, {0x0, 0x10001, 0x0, {0x7}, {0x6, 0x2}, @rumble={0x4, 0x2}}, {0x57, 0x8, 0x0, {0x48f, 0x10001}, {0x6, 0xffff00}, @cond=[{0x4, 0x9, 0xd85, 0x45, 0x4, 0x100000000}, {0x30, 0x7, 0x8, 0x4, 0xfffffffffffffffa}]}}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x3) 07:13:32 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000040)={'system_u:object_r:var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x59) 07:13:32 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_access\x00') 07:13:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xc81, 0x0) r1 = socket$inet6(0xa, 0x2001000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") ioctl$TCSETA(r0, 0x5402, &(0x7f000032cfec)) write$sndseq(r0, &(0x7f0000000100)=[{0x40081, 0x5, 0x0, 0x0, @time={0x77359400}, {}, {}, @time}], 0x1c) 07:13:32 executing program 1: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = creat(&(0x7f0000000700)='./bus\x00', 0xc1) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x8a200, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f00000000c0)='bdev\x00') r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000380)) getpeername$unix(r3, &(0x7f00000004c0), &(0x7f0000000200)=0x6e) mq_timedsend(r2, &(0x7f00000e6000), 0x0, 0x3, &(0x7f0000000540)) r4 = getpid() mq_notify(r2, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r4}) syncfs(r0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000009c0)={'dummy0\x00', {0x2, 0x4e24, @multicast1}}) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x547000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000240)) getegid() ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000580)="d2ea908ab7f56672d98bde685176c832f95ace843adb528113a091dce791937e2c7eb64f8319") ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000a40)=0x4) mq_timedsend(r2, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000fbc000)) close(r3) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000005c0)='tls\x00', 0x4) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000800)) preadv(r7, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x4, 0x0, 0x2}, 0xc) 07:13:32 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r0, 0x0) 07:13:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f00000014c0)=""/4096, 0xffffffb6}], 0x2, 0x0) 07:13:32 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000440)) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r1) sendmmsg$unix(r2, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') setns(r5, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={0x7ff}, 0x8, 0x800) 07:13:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = memfd_create(&(0x7f000003e000)='\'', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 07:13:32 executing program 1: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = creat(&(0x7f0000000700)='./bus\x00', 0xc1) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x8a200, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f00000000c0)='bdev\x00') r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000380)) getpeername$unix(r3, &(0x7f00000004c0), &(0x7f0000000200)=0x6e) mq_timedsend(r2, &(0x7f00000e6000), 0x0, 0x3, &(0x7f0000000540)) r4 = getpid() mq_notify(r2, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r4}) syncfs(r0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000009c0)={'dummy0\x00', {0x2, 0x4e24, @multicast1}}) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x547000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000240)) getegid() ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000580)="d2ea908ab7f56672d98bde685176c832f95ace843adb528113a091dce791937e2c7eb64f8319") ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000a40)=0x4) mq_timedsend(r2, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000fbc000)) close(r3) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000005c0)='tls\x00', 0x4) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000800)) preadv(r7, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x4, 0x0, 0x2}, 0xc) 07:13:32 executing program 7: mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ad4000)='./control\x00', 0xa4000960) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r2, &(0x7f0000000100), 0x80000001) [ 128.252971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket 07:13:32 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000900)=@ipv6_delroute={0x28, 0x19, 0x701, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xb}]}, 0x28}}, 0x0) 07:13:33 executing program 0: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f00000002c0), 0x40002cd, 0x0) 07:13:33 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r0, 0x0) 07:13:33 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000dac000)={0x77359400}, &(0x7f00000001c0), 0x0) 07:13:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@random={'user.', '-\x00'}, &(0x7f00000002c0)="2f0409004bddd9de91be10eebf000ee9a90f798058439ed554af1f02acc7edbcd7a071fb35331ce39c5a0000000000000000080000000000000000000aaad955a3c93f9d248b46a7c99eb35b406bf918ff01739e56187b2db8f1074424745271062042fb3808186e0a837132f9108c583073a4ca94b3e4e58717fe2b659fa3903c7b73bd66b83f5ecc0a7361257896883f1b43ff4ec0a1e336b92f705461af0b60825a7834ffd0a7339d85c51b8db7b4c0e4f40953dd2d9f2110f04c9fdf8489eaa996", 0xc3, 0x0) 07:13:33 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x14, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 07:13:33 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000440)) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r1) sendmmsg$unix(r2, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') setns(r5, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={0x7ff}, 0x8, 0x800) 07:13:33 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0xffffffffffffffff, 0x1, {0x0, 0x4}}, 0x20) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0xf, 0x10000, {0x0, 0x10001, 0x0, {0x7}, {0x6, 0x2}, @rumble={0x4, 0x2}}, {0x57, 0x8, 0x0, {0x48f, 0x10001}, {0x6, 0xffff00}, @cond=[{0x4, 0x9, 0xd85, 0x45, 0x4, 0x100000000}, {0x30, 0x7, 0x8, 0x4, 0xfffffffffffffffa}]}}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x3) 07:13:33 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc0046d00, &(0x7f0000000000)={0x1}) 07:13:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@random={'user.', '-\x00'}, &(0x7f00000002c0)="2f0409004bddd9de91be10eebf000ee9a90f798058439ed554af1f02acc7edbcd7a071fb35331ce39c5a0000000000000000080000000000000000000aaad955a3c93f9d248b46a7c99eb35b406bf918ff01739e56187b2db8f1074424745271062042fb3808186e0a837132f9108c583073a4ca94b3e4e58717fe2b659fa3903c7b73bd66b83f5ecc0a7361257896883f1b43ff4ec0a1e336b92f705461af0b60825a7834ffd0a7339d85c51b8db7b4c0e4f40953dd2d9f2110f04c9fdf8489eaa996", 0xc3, 0x0) 07:13:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@random={'user.', '-\x00'}, &(0x7f00000002c0)="2f0409004bddd9de91be10eebf000ee9a90f798058439ed554af1f02acc7edbcd7a071fb35331ce39c5a0000000000000000080000000000000000000aaad955a3c93f9d248b46a7c99eb35b406bf918ff01739e56187b2db8f1074424745271062042fb3808186e0a837132f9108c583073a4ca94b3e4e58717fe2b659fa3903c7b73bd66b83f5ecc0a7361257896883f1b43ff4ec0a1e336b92f705461af0b60825a7834ffd0a7339d85c51b8db7b4c0e4f40953dd2d9f2110f04c9fdf8489eaa996", 0xc3, 0x0) 07:13:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@random={'user.', '-\x00'}, &(0x7f00000002c0)="2f0409004bddd9de91be10eebf000ee9a90f798058439ed554af1f02acc7edbcd7a071fb35331ce39c5a0000000000000000080000000000000000000aaad955a3c93f9d248b46a7c99eb35b406bf918ff01739e56187b2db8f1074424745271062042fb3808186e0a837132f9108c583073a4ca94b3e4e58717fe2b659fa3903c7b73bd66b83f5ecc0a7361257896883f1b43ff4ec0a1e336b92f705461af0b60825a7834ffd0a7339d85c51b8db7b4c0e4f40953dd2d9f2110f04c9fdf8489eaa996", 0xc3, 0x0) 07:13:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@random={'user.', '-\x00'}, &(0x7f00000002c0)="2f0409004bddd9de91be10eebf000ee9a90f798058439ed554af1f02acc7edbcd7a071fb35331ce39c5a0000000000000000080000000000000000000aaad955a3c93f9d248b46a7c99eb35b406bf918ff01739e56187b2db8f1074424745271062042fb3808186e0a837132f9108c583073a4ca94b3e4e58717fe2b659fa3903c7b73bd66b83f5ecc0a7361257896883f1b43ff4ec0a1e336b92f705461af0b60825a7834ffd0a7339d85c51b8db7b4c0e4f40953dd2d9f2110f04c9fdf8489eaa996", 0xc3, 0x0) 07:13:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@random={'user.', '-\x00'}, &(0x7f00000002c0)="2f0409004bddd9de91be10eebf000ee9a90f798058439ed554af1f02acc7edbcd7a071fb35331ce39c5a0000000000000000080000000000000000000aaad955a3c93f9d248b46a7c99eb35b406bf918ff01739e56187b2db8f1074424745271062042fb3808186e0a837132f9108c583073a4ca94b3e4e58717fe2b659fa3903c7b73bd66b83f5ecc0a7361257896883f1b43ff4ec0a1e336b92f705461af0b60825a7834ffd0a7339d85c51b8db7b4c0e4f40953dd2d9f2110f04c9fdf8489eaa996", 0xc3, 0x0) 07:13:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@random={'user.', '-\x00'}, &(0x7f00000002c0)="2f0409004bddd9de91be10eebf000ee9a90f798058439ed554af1f02acc7edbcd7a071fb35331ce39c5a0000000000000000080000000000000000000aaad955a3c93f9d248b46a7c99eb35b406bf918ff01739e56187b2db8f1074424745271062042fb3808186e0a837132f9108c583073a4ca94b3e4e58717fe2b659fa3903c7b73bd66b83f5ecc0a7361257896883f1b43ff4ec0a1e336b92f705461af0b60825a7834ffd0a7339d85c51b8db7b4c0e4f40953dd2d9f2110f04c9fdf8489eaa996", 0xc3, 0x0) 07:13:33 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000440)) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r1) sendmmsg$unix(r2, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') setns(r5, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={0x7ff}, 0x8, 0x800) 07:13:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000b97000)=[{&(0x7f0000962000)='1', 0x1}], 0x1) 07:13:34 executing program 0: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f00000002c0), 0x40002cd, 0x0) 07:13:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x273, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x1a) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x1ab, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/110, 0x6e}}, {{&(0x7f0000001d80)=@sco, 0x80, &(0x7f0000002280), 0x97, &(0x7f0000002340)=""/114, 0x223}}], 0x2, 0x0, &(0x7f0000002840)={0x0, r1+10000000}) 07:13:34 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r0, 0x0) 07:13:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r1, &(0x7f0000000080)="a8588115", 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) sendfile(r1, r1, &(0x7f0000317000), 0xff8) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, "64f97200"}, 0x2c) 07:13:34 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000440)) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r1) sendmmsg$unix(r2, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') setns(r5, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={0x7ff}, 0x8, 0x800) 07:13:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000461000)={0x10, 0x0, 0x2}, 0xc) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x2}, 0xc) 07:13:34 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000440)) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r1) sendmmsg$unix(r2, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') setns(r5, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={0x7ff}, 0x8, 0x800) 07:13:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x19) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r2, 0x1000000000016) 07:13:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x273, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x1a) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x1ab, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/110, 0x6e}}, {{&(0x7f0000001d80)=@sco, 0x80, &(0x7f0000002280), 0x97, &(0x7f0000002340)=""/114, 0x223}}], 0x2, 0x0, &(0x7f0000002840)={0x0, r1+10000000}) 07:13:34 executing program 1: keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000e0f000)='logon\x00', &(0x7f0000ab3ffb), &(0x7f0000000380)='\x00', 0x0) 07:13:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x273, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x1a) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x1ab, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/110, 0x6e}}, {{&(0x7f0000001d80)=@sco, 0x80, &(0x7f0000002280), 0x97, &(0x7f0000002340)=""/114, 0x223}}], 0x2, 0x0, &(0x7f0000002840)={0x0, r1+10000000}) 07:13:34 executing program 1: keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000e0f000)='logon\x00', &(0x7f0000ab3ffb), &(0x7f0000000380)='\x00', 0x0) 07:13:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x273, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x1a) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x1ab, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/110, 0x6e}}, {{&(0x7f0000001d80)=@sco, 0x80, &(0x7f0000002280), 0x97, &(0x7f0000002340)=""/114, 0x223}}], 0x2, 0x0, &(0x7f0000002840)={0x0, r1+10000000}) 07:13:34 executing program 1: keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000e0f000)='logon\x00', &(0x7f0000ab3ffb), &(0x7f0000000380)='\x00', 0x0) 07:13:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r1, &(0x7f0000000080)="a8588115", 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) sendfile(r1, r1, &(0x7f0000317000), 0xff8) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, "64f97200"}, 0x2c) 07:13:34 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r0, 0x0) 07:13:35 executing program 0: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f00000002c0), 0x40002cd, 0x0) 07:13:35 executing program 1: keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000e0f000)='logon\x00', &(0x7f0000ab3ffb), &(0x7f0000000380)='\x00', 0x0) 07:13:35 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) clone(0x0, &(0x7f0000000240), &(0x7f00000014c0), &(0x7f0000000180), &(0x7f0000000380)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 07:13:35 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000440)) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r1) sendmmsg$unix(r2, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') setns(r5, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={0x7ff}, 0x8, 0x800) 07:13:35 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000440)) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r1) sendmmsg$unix(r2, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') setns(r5, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={0x7ff}, 0x8, 0x800) 07:13:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r1, &(0x7f0000000080)="a8588115", 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) sendfile(r1, r1, &(0x7f0000317000), 0xff8) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, "64f97200"}, 0x2c) 07:13:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0a5cc80700315f85715070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x3) sendto$inet6(r2, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000040), 0x113, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r1) 07:13:35 executing program 5: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000005000)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) read(r0, &(0x7f0000000000)=""/234, 0xea) 07:13:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'Q\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x2029}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20000000308) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 131.018130] FAULT_FLAG_ALLOW_RETRY missing 30 [ 131.024013] CPU: 0 PID: 9188 Comm: syz-executor2 Not tainted 4.4.151-ge917467 #84 [ 131.031637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.041018] 0000000000000000 cd02e3a98a17ce79 ffff8800aeb07768 ffffffff81e15eed [ 131.049132] ffff8801d4271b00 ffff8800aeb078f0 1ffff10015d60efa 0000000000000002 [ 131.057197] 0000000000000000 ffff8800aeb07918 ffffffff81c18fd4 ffffffff841ec9e8 [ 131.065318] Call Trace: [ 131.067903] [] dump_stack+0xc1/0x124 [ 131.073262] [] handle_userfault.cold.18+0x22/0x27 [ 131.079755] [] ? debug_check_no_locks_freed+0x210/0x210 [ 131.086772] [] ? userfaultfd_ioctl+0x2090/0x2090 [ 131.093173] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 131.099486] [] ? handle_mm_fault+0xc18/0x3450 [ 131.106355] [] ? handle_mm_fault+0x294b/0x3450 [ 131.112611] [] handle_mm_fault+0x2965/0x3450 [ 131.118675] [] ? vm_insert_mixed+0x220/0x220 [ 131.124743] [] ? __do_page_fault+0x78a/0xa10 [ 131.130796] [] ? vmacache_find+0x57/0x290 [ 131.136603] [] __do_page_fault+0x365/0xa10 [ 131.142481] [] do_page_fault+0x27/0x30 [ 131.148025] [] page_fault+0x28/0x30 [ 131.153300] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 131.160136] [] ? evdev_ioctl_handler+0xace/0x17b0 [ 131.166630] [] ? do_futex+0x12d/0x17f0 [ 131.172213] [] ? evdev_event+0xc0/0xc0 [ 131.177753] [] ? debug_check_no_locks_freed+0x210/0x210 [ 131.184785] [] ? quarantine_put+0xda/0x180 [ 131.190665] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 131.197511] [] ? check_preemption_disabled+0x3b/0x170 [ 131.204355] [] evdev_ioctl+0x27/0x30 [ 131.209735] [] ? evdev_ioctl_compat+0x30/0x30 07:13:35 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x24) 07:13:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r1, &(0x7f0000000080)="a8588115", 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) sendfile(r1, r1, &(0x7f0000317000), 0xff8) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, "64f97200"}, 0x2c) [ 131.215873] [] do_vfs_ioctl+0x63f/0xf40 [ 131.221495] [] ? ioctl_preallocate+0x1f0/0x1f0 [ 131.227724] [] ? inode_init_always+0x690/0x8a0 [ 131.233966] [] ? __fget+0x16f/0x3b0 [ 131.239238] [] ? __fget+0x47/0x3b0 [ 131.244427] [] ? security_file_ioctl+0x8f/0xc0 [ 131.250659] [] SyS_ioctl+0x8f/0xc0 [ 131.255868] [] entry_SYSCALL_64_fastpath+0x22/0x9e 07:13:35 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) [ 131.346038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.375387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 07:13:35 executing program 7: r0 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xffffffffffffffff, 0x102012, r1, 0x0) [ 131.401980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.411025] input: syz1 as /devices/virtual/input/input9 [ 131.433327] input: failed to attach handler leds to device input9, error: -6 07:13:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001b00)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000001980)}, &(0x7f0000000100)="fb1234a2dd9519398bacc89f8edc3595724bc0f06b8b2ffb62d96c9a06668942ab", &(0x7f0000001a00)=""/200, 0x800, 0x2, 0xffffffffffffffff, &(0x7f0000000180)}) [ 131.451508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.502121] input: syz1 as /devices/virtual/input/input10 [ 131.523348] input: failed to attach handler leds to device input10, error: -6 07:13:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'Q\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x2029}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20000000308) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 131.552313] sd 0:0:1:0: [sg0] tag#360 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 131.563289] sd 0:0:1:0: [sg0] tag#360 CDB: opcode=0xfb (vendor) [ 131.569368] sd 0:0:1:0: [sg0] tag#360 CDB[00]: fb 12 34 a2 dd 95 19 39 8b ac c8 9f 8e dc 35 95 [ 131.579074] sd 0:0:1:0: [sg0] tag#360 CDB[10]: 72 4b c0 f0 6b 8b 2f fb 62 d9 6c 9a 06 66 89 42 [ 131.587883] sd 0:0:1:0: [sg0] tag#360 CDB[20]: ab 07:13:36 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000740)="77b2770dbfdb54f4", 0x8}], 0x1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000300)={0x80000000000009}) socket$inet(0x2, 0x1, 0x0) clock_gettime(0x2, &(0x7f0000000000)) open(&(0x7f0000000000)='.\x00', 0x8400, 0x0) personality(0xc) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = epoll_create1(0x80006) r4 = socket(0x1d, 0x0, 0x1116) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0xfffffffe8000201f}) setsockopt$inet_udp_int(r4, 0x11, 0x6f, &(0x7f0000000100)=0x7, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$BLKSECDISCARD(r5, 0x127d, &(0x7f0000000500)=0x6) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r6, 0x9) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_notify(r7, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x101000, 0x0) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r7, 0x8000}, {r8, 0x420}], 0x2, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={0x9}, 0x8) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0xe7, &(0x7f0000e0b000)) r9 = getpid() syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') syz_open_procfs(r9, &(0x7f0000000040)='net/rt6_stats\x00') 07:13:36 executing program 4: socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x400000, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x16}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) 07:13:36 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mq_open(&(0x7f0000000080)="2ee12b5c70726f632362646576707070314000", 0x0, 0x0, &(0x7f00000000c0)) 07:13:38 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) clone(0x0, &(0x7f0000000240), &(0x7f00000014c0), &(0x7f0000000180), &(0x7f0000000380)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 07:13:38 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 07:13:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0x40045566, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) 07:13:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'Q\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x2029}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20000000308) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 07:13:38 executing program 7: syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 07:13:38 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000003c00)) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 07:13:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000107031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 07:13:38 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000740)="77b2770dbfdb54f4", 0x8}], 0x1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000300)={0x80000000000009}) socket$inet(0x2, 0x1, 0x0) clock_gettime(0x2, &(0x7f0000000000)) open(&(0x7f0000000000)='.\x00', 0x8400, 0x0) personality(0xc) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = epoll_create1(0x80006) r4 = socket(0x1d, 0x0, 0x1116) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0xfffffffe8000201f}) setsockopt$inet_udp_int(r4, 0x11, 0x6f, &(0x7f0000000100)=0x7, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$BLKSECDISCARD(r5, 0x127d, &(0x7f0000000500)=0x6) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r6, 0x9) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_notify(r7, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x101000, 0x0) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r7, 0x8000}, {r8, 0x420}], 0x2, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={0x9}, 0x8) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0xe7, &(0x7f0000e0b000)) r9 = getpid() syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') syz_open_procfs(r9, &(0x7f0000000040)='net/rt6_stats\x00') [ 133.988835] netlink: 5 bytes leftover after parsing attributes in process `syz-executor4'. [ 134.015616] input: syz1 as /devices/virtual/input/input11 07:13:38 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000003c00)) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 07:13:38 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') [ 134.033797] input: failed to attach handler leds to device input11, error: -6 07:13:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = eventfd2(0x0, 0x0) r2 = dup(r1) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0xfffffffdfffffffe, 0x8, '9P2000.u'}, 0x13) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000040)=""/10, 0xa) 07:13:38 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) [ 134.100191] FAULT_FLAG_ALLOW_RETRY missing 30 [ 134.105245] CPU: 0 PID: 9285 Comm: syz-executor2 Not tainted 4.4.151-ge917467 #84 [ 134.112868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.122211] 0000000000000000 2e46dfb264bced03 ffff8800a4a4f768 ffffffff81e15eed [ 134.130253] ffff8801d4270300 ffff8800a4a4f8f0 1ffff10014949efa 0000000000000002 [ 134.138285] 0000000000000000 ffff8800a4a4f918 ffffffff81c18fd4 ffffffff841ec9e8 [ 134.146311] Call Trace: [ 134.148897] [] dump_stack+0xc1/0x124 [ 134.154260] [] handle_userfault.cold.18+0x22/0x27 [ 134.160752] [] ? debug_check_no_locks_freed+0x210/0x210 [ 134.167768] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 134.174077] [] ? userfaultfd_ioctl+0x2090/0x2090 [ 134.180482] [] ? _raw_spin_unlock_irq+0x38/0x50 [ 134.186782] [] ? handle_mm_fault+0xc18/0x3450 [ 134.192928] [] ? handle_mm_fault+0x294b/0x3450 [ 134.199168] [] handle_mm_fault+0x2965/0x3450 [ 134.205213] [] ? rwsem_down_read_failed+0x1ba/0x2f0 [ 134.211867] [] ? rt_mutex_futex_unlock+0x10/0x10 [ 134.218257] [] ? vm_insert_mixed+0x220/0x220 [ 134.224306] [] ? vmacache_find+0x57/0x290 [ 134.230090] [] __do_page_fault+0x365/0xa10 [ 134.235961] [] do_page_fault+0x27/0x30 [ 134.241481] [] page_fault+0x28/0x30 [ 134.246744] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 134.253570] [] ? evdev_ioctl_handler+0xace/0x17b0 [ 134.260050] [] ? do_futex+0x12d/0x17f0 [ 134.265571] [] ? evdev_event+0xc0/0xc0 [ 134.271106] [] ? debug_check_no_locks_freed+0x210/0x210 [ 134.278107] [] ? quarantine_put+0xda/0x180 [ 134.283976] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 134.290799] [] ? check_preemption_disabled+0x3b/0x170 [ 134.297623] [] evdev_ioctl+0x27/0x30 [ 134.302970] [] ? evdev_ioctl_compat+0x30/0x30 [ 134.309152] [] do_vfs_ioctl+0x63f/0xf40 [ 134.314764] [] ? ioctl_preallocate+0x1f0/0x1f0 [ 134.320977] [] ? inode_init_always+0x690/0x8a0 [ 134.327280] [] ? __fget+0x16f/0x3b0 [ 134.332540] [] ? __fget+0x47/0x3b0 [ 134.337714] [] ? security_file_ioctl+0x8f/0xc0 [ 134.343927] [] SyS_ioctl+0x8f/0xc0 07:13:38 executing program 7: mlock2(&(0x7f0000585000/0x2000)=nil, 0x2000, 0x40001) 07:13:38 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000003c00)) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 134.349125] [] entry_SYSCALL_64_fastpath+0x22/0x9e 07:13:38 executing program 7: socket(0x18, 0x0, 0x3) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x8}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000540)={&(0x7f0000000500), 0x8}) 07:13:38 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f0000000a40)='ramfs\x00', 0x0, &(0x7f0000000b80)) chroot(&(0x7f0000000280)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='qnx6\x00', 0x1000, &(0x7f0000000500)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') [ 134.416709] input: syz1 as /devices/virtual/input/input13 [ 134.427119] input: failed to attach handler leds to device input13, error: -6 07:13:39 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 07:13:39 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) clone(0x0, &(0x7f0000000240), &(0x7f00000014c0), &(0x7f0000000180), &(0x7f0000000380)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 07:13:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000100)=[{0x18, 0x0, 0x7, "8612"}], 0x18}}], 0x1, 0x0) 07:13:39 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f0000000a40)='ramfs\x00', 0x0, &(0x7f0000000b80)) chroot(&(0x7f0000000280)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='qnx6\x00', 0x1000, &(0x7f0000000500)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 07:13:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'Q\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x2029}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20000000308) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 07:13:39 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000740)="77b2770dbfdb54f4", 0x8}], 0x1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000300)={0x80000000000009}) socket$inet(0x2, 0x1, 0x0) clock_gettime(0x2, &(0x7f0000000000)) open(&(0x7f0000000000)='.\x00', 0x8400, 0x0) personality(0xc) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = epoll_create1(0x80006) r4 = socket(0x1d, 0x0, 0x1116) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0xfffffffe8000201f}) setsockopt$inet_udp_int(r4, 0x11, 0x6f, &(0x7f0000000100)=0x7, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$BLKSECDISCARD(r5, 0x127d, &(0x7f0000000500)=0x6) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r6, 0x9) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_notify(r7, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x101000, 0x0) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r7, 0x8000}, {r8, 0x420}], 0x2, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={0x9}, 0x8) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0xe7, &(0x7f0000e0b000)) r9 = getpid() syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') syz_open_procfs(r9, &(0x7f0000000040)='net/rt6_stats\x00') 07:13:39 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000003c00)) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 07:13:39 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000fc3ff6)='./control\x00', 0x0) getdents64(r0, &(0x7f0000fc4fbe)=""/80, 0x50) 07:13:39 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f0000000a40)='ramfs\x00', 0x0, &(0x7f0000000b80)) chroot(&(0x7f0000000280)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='qnx6\x00', 0x1000, &(0x7f0000000500)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 07:13:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000001c0)=0x400, 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x0) bind$inet(r0, &(0x7f000000f000)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x9, 0x4) sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000)={0x2, 0x3}, 0x10) [ 134.947631] input: syz1 as /devices/virtual/input/input14 [ 134.963276] input: failed to attach handler leds to device input14, error: -6 07:13:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="400000001f1619f4671071") [ 134.990750] FAULT_FLAG_ALLOW_RETRY missing 30 [ 134.995384] CPU: 0 PID: 9336 Comm: syz-executor2 Not tainted 4.4.151-ge917467 #84 [ 135.003002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.012350] 0000000000000000 b0a20cee71c610a3 ffff8801d3a0f768 ffffffff81e15eed [ 135.020456] ffff8801d4271380 ffff8801d3a0f8f0 1ffff1003a741efa 0000000000000002 [ 135.028517] 0000000000000000 ffff8801d3a0f918 ffffffff81c18fd4 ffffffff841ec9e8 [ 135.036599] Call Trace: [ 135.039180] [] dump_stack+0xc1/0x124 [ 135.044539] [] handle_userfault.cold.18+0x22/0x27 [ 135.051025] [] ? debug_check_no_locks_freed+0x210/0x210 [ 135.058050] [] ? userfaultfd_ioctl+0x2090/0x2090 [ 135.064465] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 135.070782] [] ? handle_mm_fault+0xc18/0x3450 [ 135.076921] [] ? handle_mm_fault+0x294b/0x3450 [ 135.083164] [] handle_mm_fault+0x2965/0x3450 07:13:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000001c0)=0x400, 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x0) bind$inet(r0, &(0x7f000000f000)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x9, 0x4) sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000)={0x2, 0x3}, 0x10) [ 135.089209] [] ? vm_insert_mixed+0x220/0x220 [ 135.095251] [] ? __do_page_fault+0x78a/0xa10 [ 135.101307] [] ? vmacache_find+0x57/0x290 [ 135.107111] [] __do_page_fault+0x365/0xa10 [ 135.112991] [] do_page_fault+0x27/0x30 [ 135.118523] [] page_fault+0x28/0x30 [ 135.123799] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 135.130642] [] ? evdev_ioctl_handler+0xace/0x17b0 07:13:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000001c0)=0x400, 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x0) bind$inet(r0, &(0x7f000000f000)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x9, 0x4) sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000)={0x2, 0x3}, 0x10) [ 135.137112] [] ? do_futex+0x12d/0x17f0 [ 135.142625] [] ? evdev_event+0xc0/0xc0 [ 135.148161] [] ? debug_check_no_locks_freed+0x210/0x210 [ 135.155168] [] ? quarantine_put+0xda/0x180 [ 135.161043] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 135.167873] [] ? check_preemption_disabled+0x3b/0x170 [ 135.174708] [] evdev_ioctl+0x27/0x30 [ 135.180066] [] ? evdev_ioctl_compat+0x30/0x30 [ 135.186202] [] do_vfs_ioctl+0x63f/0xf40 07:13:39 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r0, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr}, 0x6) setsockopt$inet6_opts(r0, 0x29, 0x6, &(0x7f0000000040)=@dstopts, 0x8) close(r0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") dup3(r0, r1, 0x0) 07:13:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000001c0)=0x400, 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x0) bind$inet(r0, &(0x7f000000f000)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x9, 0x4) sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000)={0x2, 0x3}, 0x10) [ 135.191821] [] ? ioctl_preallocate+0x1f0/0x1f0 [ 135.198044] [] ? inode_init_always+0x690/0x8a0 [ 135.204277] [] ? __fget+0x16f/0x3b0 [ 135.209542] [] ? __fget+0x47/0x3b0 [ 135.214710] [] ? security_file_ioctl+0x8f/0xc0 [ 135.220916] [] SyS_ioctl+0x8f/0xc0 [ 135.226084] [] entry_SYSCALL_64_fastpath+0x22/0x9e 07:13:39 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f0000000a40)='ramfs\x00', 0x0, &(0x7f0000000b80)) chroot(&(0x7f0000000280)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='qnx6\x00', 0x1000, &(0x7f0000000500)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 07:13:39 executing program 6: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) close(r0) 07:13:40 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) clone(0x0, &(0x7f0000000240), &(0x7f00000014c0), &(0x7f0000000180), &(0x7f0000000380)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 07:13:40 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000000080)=ANY=[]}, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) 07:13:40 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 07:13:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000340)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 07:13:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d0734438f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(r2, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 07:13:40 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f000074fffc)=0x3, 0x4) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x60000008000006, &(0x7f00000004c0)=0x81, 0x3) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) sendto$inet6(r1, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007b0000003603be67d7296692d350b88434a4f1981e1e88e13b21f36b7c5e6547658e6704df107a14ed074dc3387f4a97c51f58661be2d44add1c7c40af2c803b3acf56b8bfaafd1e2534c59b7be173daefd1623e1e2e79bcb49809019a19f0c479b18239a7bbfe1104f36bcc465181a077d080bb3510de338ccc813374f419"], &(0x7f00000001c0)=0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000580)=ANY=[@ANYBLOB="020000000200000000000000000000009646cf5f31"], 0x15}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) keyctl$session_to_parent(0x12) pivot_root(&(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='./bus\x00') init_module(&(0x7f0000000500)='ppp1\x00', 0x5, &(0x7f0000000540)='^\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[]}}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socket$key(0xf, 0x3, 0x2) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 07:13:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) pipe2(&(0x7f0000000000), 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) sysinfo(&(0x7f00000000c0)=""/91) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x0, 0x210000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={"6272ce6467653000"}) 07:13:40 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000740)="77b2770dbfdb54f4", 0x8}], 0x1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000300)={0x80000000000009}) socket$inet(0x2, 0x1, 0x0) clock_gettime(0x2, &(0x7f0000000000)) open(&(0x7f0000000000)='.\x00', 0x8400, 0x0) personality(0xc) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = epoll_create1(0x80006) r4 = socket(0x1d, 0x0, 0x1116) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0xfffffffe8000201f}) setsockopt$inet_udp_int(r4, 0x11, 0x6f, &(0x7f0000000100)=0x7, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$BLKSECDISCARD(r5, 0x127d, &(0x7f0000000500)=0x6) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r6, 0x9) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_notify(r7, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x101000, 0x0) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r7, 0x8000}, {r8, 0x420}], 0x2, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={0x9}, 0x8) mq_timedsend(r7, &(0x7f00000e6000), 0x0, 0xe7, &(0x7f0000e0b000)) r9 = getpid() syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') syz_open_procfs(r9, &(0x7f0000000040)='net/rt6_stats\x00') 07:13:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_ivalue=0x704000}) [ 135.848065] binder: undelivered death notification, 0000000000000000 [ 135.876783] binder: BINDER_SET_CONTEXT_MGR already set [ 135.883314] binder: 9395:9398 ioctl 40046207 0 returned -16 07:13:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000b18000)={{0xffffff93}, {0xffffffa0}}) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) close(r1) [ 135.897957] binder: undelivered death notification, 0000000000000000 [ 135.908911] FAULT_FLAG_ALLOW_RETRY missing 30 [ 135.914129] CPU: 0 PID: 9408 Comm: syz-executor2 Not tainted 4.4.151-ge917467 #84 [ 135.921756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.931106] 0000000000000000 087e4f89baf127bd ffff8801d365f768 ffffffff81e15eed [ 135.939176] ffff8801d4271680 ffff8801d365f8f0 1ffff1003a6cbefa 0000000000000002 [ 135.947281] 0000000000000000 ffff8801d365f918 ffffffff81c18fd4 ffffffff841ec9e8 [ 135.955365] Call Trace: [ 135.958196] [] dump_stack+0xc1/0x124 [ 135.963589] [] handle_userfault.cold.18+0x22/0x27 [ 135.970080] [] ? debug_check_no_locks_freed+0x210/0x210 [ 135.977105] [] ? userfaultfd_ioctl+0x2090/0x2090 [ 135.983520] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 135.989835] [] ? handle_mm_fault+0xc18/0x3450 [ 135.995991] [] ? handle_mm_fault+0x294b/0x3450 [ 136.002233] [] handle_mm_fault+0x2965/0x3450 [ 136.008284] [] ? vm_insert_mixed+0x220/0x220 [ 136.014332] [] ? __do_page_fault+0x78a/0xa10 [ 136.020396] [] ? vmacache_find+0x57/0x290 [ 136.026189] [] __do_page_fault+0x365/0xa10 [ 136.032062] [] do_page_fault+0x27/0x30 [ 136.037590] [] page_fault+0x28/0x30 [ 136.042861] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 136.049697] [] ? evdev_ioctl_handler+0xace/0x17b0 [ 136.056185] [] ? do_futex+0x12d/0x17f0 [ 136.061739] [] ? evdev_event+0xc0/0xc0 [ 136.067444] [] ? debug_check_no_locks_freed+0x210/0x210 [ 136.074454] [] ? quarantine_put+0xda/0x180 [ 136.080330] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 136.087172] [] ? check_preemption_disabled+0x3b/0x170 [ 136.094001] [] evdev_ioctl+0x27/0x30 [ 136.099352] [] ? evdev_ioctl_compat+0x30/0x30 [ 136.105629] [] do_vfs_ioctl+0x63f/0xf40 [ 136.111256] [] ? ioctl_preallocate+0x1f0/0x1f0 [ 136.117484] [] ? inode_init_always+0x690/0x8a0 [ 136.123712] [] ? __fget+0x16f/0x3b0 [ 136.129015] [] ? __fget+0x47/0x3b0 [ 136.134203] [] ? security_file_ioctl+0x8f/0xc0 [ 136.140429] [] SyS_ioctl+0x8f/0xc0 07:13:40 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 07:13:40 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) [ 136.145647] [] entry_SYSCALL_64_fastpath+0x22/0x9e 07:13:40 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x1000, &(0x7f0000000180)) 07:13:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="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") fgetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f) 07:13:40 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 07:13:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="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") fgetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f) 07:13:41 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f000074fffc)=0x3, 0x4) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x60000008000006, &(0x7f00000004c0)=0x81, 0x3) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) sendto$inet6(r1, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007b0000003603be67d7296692d350b88434a4f1981e1e88e13b21f36b7c5e6547658e6704df107a14ed074dc3387f4a97c51f58661be2d44add1c7c40af2c803b3acf56b8bfaafd1e2534c59b7be173daefd1623e1e2e79bcb49809019a19f0c479b18239a7bbfe1104f36bcc465181a077d080bb3510de338ccc813374f419"], &(0x7f00000001c0)=0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000580)=ANY=[@ANYBLOB="020000000200000000000000000000009646cf5f31"], 0x15}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) keyctl$session_to_parent(0x12) pivot_root(&(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='./bus\x00') init_module(&(0x7f0000000500)='ppp1\x00', 0x5, &(0x7f0000000540)='^\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[]}}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socket$key(0xf, 0x3, 0x2) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 07:13:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="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") fgetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f) 07:13:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="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") fgetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f) 07:13:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d0734438f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(r2, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 07:13:41 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 07:13:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) pipe2(&(0x7f0000000000), 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) sysinfo(&(0x7f00000000c0)=""/91) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x0, 0x210000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={"6272ce6467653000"}) 07:13:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) pipe2(&(0x7f0000000000), 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) sysinfo(&(0x7f00000000c0)=""/91) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x0, 0x210000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={"6272ce6467653000"}) 07:13:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f6578650000000000049b840572137291be10eebf000ee9a90f798058439ed5e901d2da758d5d02acc7edbcd7a071fb35331ce3e8f5eb845f06c2b4833f0f84b356f039192806008f7ce66c728841041afe57059503eb5a7819e56e5180b49acad4596489f4455f2cba58ee6d298147dfab3256c742c1b69f67793dfd6a9b4db888e646223be7fb2717202ea956118f193fb84166c236fdaf9716ed51bd15d81d43b89e1cecabcba5d2e62f5b3ec8afedae871218ff070000000000001db98e5856f17a930fe864295da8aebc0f7f7f5680e4d3f7ade20a2d3e420b35456180b109549e4ef0e1b55691030039ce36a24837297a9b9f7a674b065f6f33f00100f484f04d8bba268991d364ec5ac1383d9ab7460d2a89938fb7600936d99b6a7926ddfb27e09600c5030b051d15119f710af109000000000000000000000000") fgetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f) 07:13:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d0734438f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(r2, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 07:13:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="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") fgetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f) 07:13:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r3 = socket$inet6(0xa, 0x801, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14) dup2(r4, r1) 07:13:41 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, &(0x7f00000010c0), 0x14) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000001200)=0x9b5, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000001900)={'bpq0\x00'}) 07:13:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="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") fgetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f) 07:13:41 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x0, @multicast2}}}, 0x149) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000001c0)=0x2, 0x6d) 07:13:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000040)={&(0x7f0000000500)=@getroute={0x14, 0x1a, 0x501}, 0x14}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000004240), 0x400000000000358, 0x2, &(0x7f0000004340)={0x0, 0x1c9c380}) 07:13:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d0734438f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(r2, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 07:13:41 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f000074fffc)=0x3, 0x4) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x60000008000006, &(0x7f00000004c0)=0x81, 0x3) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) sendto$inet6(r1, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007b0000003603be67d7296692d350b88434a4f1981e1e88e13b21f36b7c5e6547658e6704df107a14ed074dc3387f4a97c51f58661be2d44add1c7c40af2c803b3acf56b8bfaafd1e2534c59b7be173daefd1623e1e2e79bcb49809019a19f0c479b18239a7bbfe1104f36bcc465181a077d080bb3510de338ccc813374f419"], &(0x7f00000001c0)=0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000580)=ANY=[@ANYBLOB="020000000200000000000000000000009646cf5f31"], 0x15}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) keyctl$session_to_parent(0x12) pivot_root(&(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='./bus\x00') init_module(&(0x7f0000000500)='ppp1\x00', 0x5, &(0x7f0000000540)='^\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[]}}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socket$key(0xf, 0x3, 0x2) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 07:13:41 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x0, @multicast2}}}, 0x149) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000001c0)=0x2, 0x6d) 07:13:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000040)={&(0x7f0000000500)=@getroute={0x14, 0x1a, 0x501}, 0x14}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000004240), 0x400000000000358, 0x2, &(0x7f0000004340)={0x0, 0x1c9c380}) 07:13:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d0734438f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(r2, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 07:13:42 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x0, @multicast2}}}, 0x149) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000001c0)=0x2, 0x6d) 07:13:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, &(0x7f00000010c0), 0x14) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000001200)=0x9b5, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000001900)={'bpq0\x00'}) 07:13:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000040)={&(0x7f0000000500)=@getroute={0x14, 0x1a, 0x501}, 0x14}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000004240), 0x400000000000358, 0x2, &(0x7f0000004340)={0x0, 0x1c9c380}) 07:13:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d0734438f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(r2, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 07:13:42 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f000074fffc)=0x3, 0x4) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x60000008000006, &(0x7f00000004c0)=0x81, 0x3) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) sendto$inet6(r1, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007b0000003603be67d7296692d350b88434a4f1981e1e88e13b21f36b7c5e6547658e6704df107a14ed074dc3387f4a97c51f58661be2d44add1c7c40af2c803b3acf56b8bfaafd1e2534c59b7be173daefd1623e1e2e79bcb49809019a19f0c479b18239a7bbfe1104f36bcc465181a077d080bb3510de338ccc813374f419"], &(0x7f00000001c0)=0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000580)=ANY=[@ANYBLOB="020000000200000000000000000000009646cf5f31"], 0x15}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) keyctl$session_to_parent(0x12) pivot_root(&(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='./bus\x00') init_module(&(0x7f0000000500)='ppp1\x00', 0x5, &(0x7f0000000540)='^\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[]}}, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socket$key(0xf, 0x3, 0x2) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 07:13:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) pipe2(&(0x7f0000000000), 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) sysinfo(&(0x7f00000000c0)=""/91) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x0, 0x210000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={"6272ce6467653000"}) 07:13:42 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) pipe2(&(0x7f0000000000), 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) sysinfo(&(0x7f00000000c0)=""/91) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x0, 0x210000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={"6272ce6467653000"}) 07:13:42 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x0, @multicast2}}}, 0x149) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000001c0)=0x2, 0x6d) 07:13:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000040)={&(0x7f0000000500)=@getroute={0x14, 0x1a, 0x501}, 0x14}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000004240), 0x400000000000358, 0x2, &(0x7f0000004340)={0x0, 0x1c9c380}) 07:13:42 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, &(0x7f00000010c0), 0x14) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000001200)=0x9b5, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000001900)={'bpq0\x00'}) 07:13:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 07:13:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, &(0x7f00000010c0), 0x14) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000001200)=0x9b5, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000001900)={'bpq0\x00'}) 07:13:42 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x410800, 0x0) [ 137.914347] input: syz1 as /devices/virtual/input/input15 07:13:42 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, &(0x7f00000010c0), 0x14) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000001200)=0x9b5, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000001900)={'bpq0\x00'}) 07:13:42 executing program 7: getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000014c0)={'nat\x00', 0x0, 0x0, 0x7c, [], 0x0, &(0x7f0000000000), &(0x7f0000000040)=""/124}, &(0x7f00000000c0)=0x78) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) [ 138.036763] input: syz1 as /devices/virtual/input/input16 07:13:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d0734438f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(r2, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 07:13:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, &(0x7f00000010c0), 0x14) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000001200)=0x9b5, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000001900)={'bpq0\x00'}) 07:13:42 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000580), &(0x7f0000000080)) pwrite64(r0, &(0x7f0000000180), 0x0, 0x0) 07:13:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 07:13:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) connect$l2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x4, 0x1, {0xa, 0x4e20, 0x3f, @mcast2, 0x33510000000000}}}, 0x32) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sw_sync\x00', 0x20000, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x91b5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r5 = getpgrp(0x0) setpgid(r3, r5) 07:13:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) pipe2(&(0x7f0000000000), 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) sysinfo(&(0x7f00000000c0)=""/91) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x0, 0x210000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={"6272ce6467653000"}) 07:13:42 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) pipe2(&(0x7f0000000000), 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) sysinfo(&(0x7f00000000c0)=""/91) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x0, 0x210000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={"6272ce6467653000"}) 07:13:42 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, &(0x7f00000010c0), 0x14) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000001200)=0x9b5, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000001900)={'bpq0\x00'}) 07:13:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2(&(0x7f0000989000), 0x0) 07:13:42 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000580), &(0x7f0000000080)) pwrite64(r0, &(0x7f0000000180), 0x0, 0x0) [ 138.328161] input: syz1 as /devices/virtual/input/input17 07:13:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 07:13:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 07:13:42 executing program 6: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000000c0)="000000800000800000") 07:13:43 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f00000de000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 07:13:43 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000580), &(0x7f0000000080)) pwrite64(r0, &(0x7f0000000180), 0x0, 0x0) [ 138.562229] input: syz1 as /devices/virtual/input/input18 07:13:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r1, 0x0, 0x200000000000000a, &(0x7f0000013ff4)={@remote, @rand_addr}, 0xc) close(r1) socket$inet6(0xa, 0x1000000000002, 0x0) dup3(r1, r2, 0x0) 07:13:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 07:13:43 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x3fe0000}) 07:13:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@increfs_done], 0x0, 0x0, &(0x7f0000000180)}) 07:13:43 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000580), &(0x7f0000000080)) pwrite64(r0, &(0x7f0000000180), 0x0, 0x0) 07:13:43 executing program 0: timer_create(0xfffffffffffffffd, &(0x7f0000044000)={0x0, 0x1a}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, &(0x7f0000046000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) [ 139.114553] input: syz1 as /devices/virtual/input/input19 07:13:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local}, 0xfdf7) 07:13:43 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) read(r0, &(0x7f0000000100)=""/234, 0xea) ioctl$TIOCSBRK(r1, 0x40044591) 07:13:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 07:13:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fcntl$setlease(r2, 0x400, 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='./file0\x00') 07:13:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) 07:13:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") mremap(&(0x7f0000712000/0x4000)=nil, 0x4000, 0xf000, 0x3, &(0x7f00007a3000/0xf000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) mlock(&(0x7f00005ff000/0x4000)=nil, 0x4000) 07:13:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000240, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7}, [{}]}, 0x78) shutdown(r0, 0x1) 07:13:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 07:13:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pause() r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) [ 139.398661] binder: BINDER_SET_CONTEXT_MGR already set [ 139.434581] binder: 9705:9709 ioctl 40046207 0 returned -16 [ 139.451089] binder_alloc: 9670: binder_alloc_buf size 12288 failed, no address space [ 139.477125] binder_alloc: allocated: 32 (num: 1 largest: 32), free: 12256 (num: 1 largest: 12256) [ 139.487064] binder: 9705:9716 transaction failed 29201/-28, size 0-12288 line 3137 [ 139.497713] binder_alloc: binder_alloc_mmap_handler: 9705 20002000-20006000 already mapped failed -16 [ 139.507481] binder: BINDER_SET_CONTEXT_MGR already set [ 139.513343] binder: 9705:9709 ioctl 40046207 0 returned -16 [ 139.519401] binder_alloc: 9670: binder_alloc_buf size 12288 failed, no address space [ 139.527753] binder_alloc: allocated: 32 (num: 1 largest: 32), free: 12256 (num: 1 largest: 12256) 07:13:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") mremap(&(0x7f0000712000/0x4000)=nil, 0x4000, 0xf000, 0x3, &(0x7f00007a3000/0xf000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) mlock(&(0x7f00005ff000/0x4000)=nil, 0x4000) 07:13:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 139.545581] binder: 9705:9716 transaction failed 29201/-28, size 0-12288 line 3137 [ 139.562220] binder: undelivered TRANSACTION_ERROR: 29201 [ 139.569259] binder: undelivered TRANSACTION_ERROR: 29201 07:13:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) read(r0, &(0x7f0000000100)=""/234, 0xea) ioctl$TIOCSBRK(r1, 0x40044591) [ 139.615245] binder: BINDER_SET_CONTEXT_MGR already set [ 139.621196] binder: 9722:9723 ioctl 40046207 0 returned -16 [ 139.629915] binder_alloc: 9670: binder_alloc_buf size 12288 failed, no address space [ 139.638034] binder_alloc: allocated: 32 (num: 1 largest: 32), free: 12256 (num: 1 largest: 12256) [ 139.647748] binder: 9722:9723 transaction failed 29201/-28, size 0-12288 line 3137 [ 139.667585] binder: undelivered TRANSACTION_ERROR: 29201 [ 139.897217] binder_alloc: binder_alloc_mmap_handler: 9670 20001000-20004000 already mapped failed -16 [ 139.919659] binder: BINDER_SET_CONTEXT_MGR already set [ 139.919715] binder_alloc: 9670: binder_alloc_buf, no vma [ 139.919757] binder: 9670:9733 transaction failed 29189/-3, size 24-8 line 3137 [ 139.938135] binder: 9670:9733 Release 1 refcount change on invalid ref 1 ret -22 07:13:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 07:13:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") r1 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000180)=@srh, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)}, 0x0) 07:13:44 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xffffffffffffffe1) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000100)='(', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) vmsplice(0xffffffffffffffff, &(0x7f0000002640), 0x0, 0x0) close(r1) 07:13:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") mremap(&(0x7f0000712000/0x4000)=nil, 0x4000, 0xf000, 0x3, &(0x7f00007a3000/0xf000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) mlock(&(0x7f00005ff000/0x4000)=nil, 0x4000) [ 139.942757] binder: 9670:9735 BC_INCREFS_DONE u0000000000000000 no match [ 139.945811] binder: 9670:9681 ioctl 40046207 0 returned -16 [ 139.959459] binder: send failed reply for transaction 12 to 9670:9681 [ 139.972191] binder: undelivered TRANSACTION_ERROR: 29189 07:13:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 139.994241] binder: 9736:9738 got transaction with invalid offsets ptr [ 140.010523] binder: 9736:9738 transaction failed 29201/-14, size 0-12288 line 3165 [ 140.025535] binder: undelivered TRANSACTION_ERROR: 29201 07:13:44 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f0000000440)) fallocate(r2, 0x3, 0x0, 0xfffe) dup2(r1, r2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[]}}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x0, 0x0, 0x0, 0x8, 0x1000, 0xbf7, 0xd4}, &(0x7f00000002c0)=0x20) [ 140.059218] binder: 9748:9749 got transaction with invalid offsets ptr [ 140.077939] binder: 9748:9749 transaction failed 29201/-14, size 0-12288 line 3165 07:13:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 07:13:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000280)) fgetxattr(r0, &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000180)=""/174, 0xae) [ 140.127452] binder: undelivered TRANSACTION_ERROR: 29201 07:13:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) 07:13:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) read(r0, &(0x7f0000000100)=""/234, 0xea) ioctl$TIOCSBRK(r1, 0x40044591) 07:13:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x108) 07:13:44 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x27) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 07:13:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x7, 0x4000001, 0x1000000000000001}, 0x14}}, 0x0) 07:13:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") mremap(&(0x7f0000712000/0x4000)=nil, 0x4000, 0xf000, 0x3, &(0x7f00007a3000/0xf000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) mlock(&(0x7f00005ff000/0x4000)=nil, 0x4000) 07:13:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) 07:13:45 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 07:13:45 executing program 6: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000000c0), 0xc, &(0x7f0000001640)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="1000007f0ad21853315b6402b153"], 0x1}], 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) [ 140.639587] sg_write: data in/out 262108/9 bytes for SCSI command 0x0-- guessing data in; [ 140.639587] program syz-executor6 not setting count and/or reply_len properly 07:13:45 executing program 6: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000020c0)=[{{&(0x7f0000000140)=@vsock, 0x80, &(0x7f0000000800)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/239, 0xef}, {&(0x7f0000000400)=""/126, 0x7e}, {&(0x7f0000000540)=""/126, 0x7e}, {&(0x7f00000005c0)=""/198, 0xc6}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f00000006c0)=""/127, 0x443}], 0x7, &(0x7f00000008c0)=""/18, 0x12}}], 0x1, 0x0, &(0x7f0000003700)) 07:13:45 executing program 6: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000020c0)=[{{&(0x7f0000000140)=@vsock, 0x80, &(0x7f0000000800)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/239, 0xef}, {&(0x7f0000000400)=""/126, 0x7e}, {&(0x7f0000000540)=""/126, 0x7e}, {&(0x7f00000005c0)=""/198, 0xc6}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f00000006c0)=""/127, 0x443}], 0x7, &(0x7f00000008c0)=""/18, 0x12}}], 0x1, 0x0, &(0x7f0000003700)) 07:13:45 executing program 6: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000020c0)=[{{&(0x7f0000000140)=@vsock, 0x80, &(0x7f0000000800)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/239, 0xef}, {&(0x7f0000000400)=""/126, 0x7e}, {&(0x7f0000000540)=""/126, 0x7e}, {&(0x7f00000005c0)=""/198, 0xc6}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f00000006c0)=""/127, 0x443}], 0x7, &(0x7f00000008c0)=""/18, 0x12}}], 0x1, 0x0, &(0x7f0000003700)) 07:13:45 executing program 6: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000020c0)=[{{&(0x7f0000000140)=@vsock, 0x80, &(0x7f0000000800)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/239, 0xef}, {&(0x7f0000000400)=""/126, 0x7e}, {&(0x7f0000000540)=""/126, 0x7e}, {&(0x7f00000005c0)=""/198, 0xc6}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f00000006c0)=""/127, 0x443}], 0x7, &(0x7f00000008c0)=""/18, 0x12}}], 0x1, 0x0, &(0x7f0000003700)) 07:13:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 07:13:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0xfffffffffffffceb, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/36, 0x24}, 0x2000) 07:13:45 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uinput\x00', 0x0, 0x0) write$selinux_create(r3, &(0x7f0000000b80)=ANY=[], 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r8 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r8, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) fallocate(r7, 0x3, 0x0, 0xfffe) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) dup2(r5, r7) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 07:13:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) 07:13:46 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) read(r0, &(0x7f0000000100)=""/234, 0xea) ioctl$TIOCSBRK(r1, 0x40044591) 07:13:46 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000100), 0x16e) 07:13:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) waitid(0x1, r2, &(0x7f0000000000), 0x1000008, &(0x7f0000000180)) 07:13:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) 07:13:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 07:13:46 executing program 6: getrandom(&(0x7f0000000040)=""/44, 0xfffffebe, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x470, 0x118, 0x258, 0x258, 0x38c, 0x38c, 0x38c, 0x4, &(0x7f00000002c0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @local}}}, {{@arp={@loopback, @dev, 0x0, 0x0, @empty, {}, @mac, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'ip6_vti0\x00'}, 0xf0, 0x134}, @unspec=@LED={0x44, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0xc0, 0xe4}, {0x24}}}}, 0x4bc) 07:13:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0xbf99) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fallocate(r1, 0x0, 0x0, 0xcd55) 07:13:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 07:13:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) 07:13:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0xbf99) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fallocate(r1, 0x0, 0x0, 0xcd55) 07:13:47 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0xbf99) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fallocate(r1, 0x0, 0x0, 0xcd55) 07:13:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0xbf99) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fallocate(r1, 0x0, 0x0, 0xcd55) 07:13:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0xbf99) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fallocate(r1, 0x0, 0x0, 0xcd55) 07:13:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) 07:13:47 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0xbf99) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fallocate(r1, 0x0, 0x0, 0xcd55) 07:13:47 executing program 6: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0xffffffffffffffe8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)=""/143, &(0x7f00000000c0)=0x465) sendto$inet6(r0, &(0x7f00000000c0), 0xfffffffffffffe66, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x100000002, @mcast2}, 0x1c) 07:13:47 executing program 0: mlock2(&(0x7f0000b30000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000b2d000/0x4000)=nil, 0x4000, 0x1) 07:13:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000000)={"7369743000000000b5c7b9026c7fc5e5", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 07:13:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 07:13:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 07:13:47 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0xbf99) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fallocate(r1, 0x0, 0x0, 0xcd55) 07:13:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x19, &(0x7f0000000100), &(0x7f0000000140)=0xc) 07:13:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1000000000000205, 0x0) 07:13:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 07:13:47 executing program 0: r0 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40000000000cb, &(0x7f0000000000), 0x3) 07:13:47 executing program 3: r0 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228332e86baa97788319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe91cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f5609", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000001500000000000000000000000000000000000000000000000400"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x23, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 07:13:47 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2f0000001c000302ffffff000d0000000200000001000000000002c91300010023000000000000005867000000050b", 0x2f}], 0x1}, 0x0) 07:13:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28021) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x10000}) write$evdev(r1, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}], 0xff3e) 07:13:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 07:13:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) ftruncate(r2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xffffff45) modify_ldt$read(0x0, &(0x7f0000000640)=""/168, 0xa8) quotactl(0x0, &(0x7f0000000100)='./bus\x00', r4, &(0x7f00000003c0)='G') r5 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) tkill(0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f00000000c0)={@loopback, r3}, 0x14) 07:13:48 executing program 7: r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 07:13:48 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') 07:13:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 07:13:48 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) timer_create(0x7, &(0x7f0000000440)={0x0, 0x400000000016, 0x7, @tid=r0}, &(0x7f0000000100)=0x0) timer_create(0x7, &(0x7f0000000340)={0x0, 0x3, 0x0, @thr={&(0x7f00000001c0)="7d8031ae58ad7db67cfa10930f6fc6705e58e007d52d063a5a5109b45693c9ed365f2d4d7475fd69db8d201be9e435ef0a47f19d3f6a2142954f929de29649d4b64151efefd991ccb0c01ce936874b257467b798fc474d7318a07553657dd6df319b9c70fdaae12613aef9df83a0bc6adf318c780f74618c2b638e4e3ded85fbbc80406de929e61ff6da13", &(0x7f0000000280)="65ee303e07cde9324309926bcd08ead768b2183c013bdd6d59382f38f1883e1f1ad71ce9d32c73c4a6025cd53cdb26ea66bccf199552a5615007c670e773d6930efc4a51670e15128481a37fee3386a56e4aefaa85902f78c83b2b1329bcbd7377ff240d8b128ff567bbc8d60de022b5d673714109a432fa002f16d0eb7b1f377c9d239c49be96136d82a944594dd14cecc5427ce50cef04fde0c2ab"}}, &(0x7f0000000380)) timer_getoverrun(r1) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) tkill(r3, 0x2f) setpriority(0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xcc, @local}, 0x1c) sendmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000200a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 143.819092] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 143.845537] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 143.857059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 143.867002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 07:13:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 07:13:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300090468fe000081000000c9ffff3f03000000450001070000003719001a001200020007e91ee400538a274d69a26cdf12f24006", 0x39}], 0x1) 07:13:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000b2f000)={&(0x7f000000f000), 0xc, &(0x7f0000beeff0)={&(0x7f0000131000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@rand_addr}, {@in6=@ipv4, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cts(xts-serpent-avx2)\x00'}, 0xfffffffffffffdec}}]}, 0x138}}, 0x0) 07:13:48 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000300)='personality\x00') sendfile(r1, r0, &(0x7f0000001740), 0x79ffffffffffff) 07:13:48 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)=0x81) 07:13:48 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="025cc83d6d345f8f660070") r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) ioctl(r0, 0x3, &(0x7f0000000180)="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") openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x1) rt_sigaction(0x11, &(0x7f0000000140), &(0x7f0000001780), 0x8, &(0x7f00000017c0)) 07:13:48 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) timer_create(0x7, &(0x7f0000000440)={0x0, 0x400000000016, 0x7, @tid=r0}, &(0x7f0000000100)=0x0) timer_create(0x7, &(0x7f0000000340)={0x0, 0x3, 0x0, @thr={&(0x7f00000001c0)="7d8031ae58ad7db67cfa10930f6fc6705e58e007d52d063a5a5109b45693c9ed365f2d4d7475fd69db8d201be9e435ef0a47f19d3f6a2142954f929de29649d4b64151efefd991ccb0c01ce936874b257467b798fc474d7318a07553657dd6df319b9c70fdaae12613aef9df83a0bc6adf318c780f74618c2b638e4e3ded85fbbc80406de929e61ff6da13", &(0x7f0000000280)="65ee303e07cde9324309926bcd08ead768b2183c013bdd6d59382f38f1883e1f1ad71ce9d32c73c4a6025cd53cdb26ea66bccf199552a5615007c670e773d6930efc4a51670e15128481a37fee3386a56e4aefaa85902f78c83b2b1329bcbd7377ff240d8b128ff567bbc8d60de022b5d673714109a432fa002f16d0eb7b1f377c9d239c49be96136d82a944594dd14cecc5427ce50cef04fde0c2ab"}}, &(0x7f0000000380)) timer_getoverrun(r1) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) tkill(r3, 0x2f) setpriority(0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xcc, @local}, 0x1c) sendmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000200a3a20404ff7e", 0x24}], 0x1}, 0x0) 07:13:48 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) timer_create(0x7, &(0x7f0000000440)={0x0, 0x400000000016, 0x7, @tid=r0}, &(0x7f0000000100)=0x0) timer_create(0x7, &(0x7f0000000340)={0x0, 0x3, 0x0, @thr={&(0x7f00000001c0)="7d8031ae58ad7db67cfa10930f6fc6705e58e007d52d063a5a5109b45693c9ed365f2d4d7475fd69db8d201be9e435ef0a47f19d3f6a2142954f929de29649d4b64151efefd991ccb0c01ce936874b257467b798fc474d7318a07553657dd6df319b9c70fdaae12613aef9df83a0bc6adf318c780f74618c2b638e4e3ded85fbbc80406de929e61ff6da13", &(0x7f0000000280)="65ee303e07cde9324309926bcd08ead768b2183c013bdd6d59382f38f1883e1f1ad71ce9d32c73c4a6025cd53cdb26ea66bccf199552a5615007c670e773d6930efc4a51670e15128481a37fee3386a56e4aefaa85902f78c83b2b1329bcbd7377ff240d8b128ff567bbc8d60de022b5d673714109a432fa002f16d0eb7b1f377c9d239c49be96136d82a944594dd14cecc5427ce50cef04fde0c2ab"}}, &(0x7f0000000380)) timer_getoverrun(r1) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) tkill(r3, 0x2f) setpriority(0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xcc, @local}, 0x1c) sendmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000200a3a20404ff7e", 0x24}], 0x1}, 0x0) 07:13:48 executing program 6: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) timer_create(0x7, &(0x7f0000000440)={0x0, 0x400000000016, 0x7, @tid=r0}, &(0x7f0000000100)=0x0) timer_create(0x7, &(0x7f0000000340)={0x0, 0x3, 0x0, @thr={&(0x7f00000001c0)="7d8031ae58ad7db67cfa10930f6fc6705e58e007d52d063a5a5109b45693c9ed365f2d4d7475fd69db8d201be9e435ef0a47f19d3f6a2142954f929de29649d4b64151efefd991ccb0c01ce936874b257467b798fc474d7318a07553657dd6df319b9c70fdaae12613aef9df83a0bc6adf318c780f74618c2b638e4e3ded85fbbc80406de929e61ff6da13", &(0x7f0000000280)="65ee303e07cde9324309926bcd08ead768b2183c013bdd6d59382f38f1883e1f1ad71ce9d32c73c4a6025cd53cdb26ea66bccf199552a5615007c670e773d6930efc4a51670e15128481a37fee3386a56e4aefaa85902f78c83b2b1329bcbd7377ff240d8b128ff567bbc8d60de022b5d673714109a432fa002f16d0eb7b1f377c9d239c49be96136d82a944594dd14cecc5427ce50cef04fde0c2ab"}}, &(0x7f0000000380)) timer_getoverrun(r1) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) tkill(r3, 0x2f) setpriority(0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xcc, @local}, 0x1c) sendmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000200a3a20404ff7e", 0x24}], 0x1}, 0x0) 07:13:48 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 144.129905] netlink: 14 bytes leftover after parsing attributes in process `syz-executor4'. 07:13:48 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r0, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x5000}}], 0x3e8, 0x0) [ 144.181986] netlink: 14 bytes leftover after parsing attributes in process `syz-executor4'. [ 144.191855] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 144.203759] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 144.248975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 07:13:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) ftruncate(r2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xffffff45) modify_ldt$read(0x0, &(0x7f0000000640)=""/168, 0xa8) quotactl(0x0, &(0x7f0000000100)='./bus\x00', r4, &(0x7f00000003c0)='G') r5 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) tkill(0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f00000000c0)={@loopback, r3}, 0x14) 07:13:48 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000067d000)=0x19, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r1, 0x0) r2 = dup(r0) connect$unix(r2, &(0x7f0000000040)=@abs={0x1}, 0x6e) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 07:13:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000000040)=@proc, 0xc, &(0x7f0000000080)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2000000000000000000000200000fbed2d6fe922b7ac3cb64d"], 0x1}], 0x1, &(0x7f0000002c00)}, 0x0) ioctl$sock_ifreq(r0, 0x890b, &(0x7f0000000140)={"69666230020000000200", @ifru_map}) 07:13:48 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) timer_create(0x7, &(0x7f0000000440)={0x0, 0x400000000016, 0x7, @tid=r0}, &(0x7f0000000100)=0x0) timer_create(0x7, &(0x7f0000000340)={0x0, 0x3, 0x0, @thr={&(0x7f00000001c0)="7d8031ae58ad7db67cfa10930f6fc6705e58e007d52d063a5a5109b45693c9ed365f2d4d7475fd69db8d201be9e435ef0a47f19d3f6a2142954f929de29649d4b64151efefd991ccb0c01ce936874b257467b798fc474d7318a07553657dd6df319b9c70fdaae12613aef9df83a0bc6adf318c780f74618c2b638e4e3ded85fbbc80406de929e61ff6da13", &(0x7f0000000280)="65ee303e07cde9324309926bcd08ead768b2183c013bdd6d59382f38f1883e1f1ad71ce9d32c73c4a6025cd53cdb26ea66bccf199552a5615007c670e773d6930efc4a51670e15128481a37fee3386a56e4aefaa85902f78c83b2b1329bcbd7377ff240d8b128ff567bbc8d60de022b5d673714109a432fa002f16d0eb7b1f377c9d239c49be96136d82a944594dd14cecc5427ce50cef04fde0c2ab"}}, &(0x7f0000000380)) timer_getoverrun(r1) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) tkill(r3, 0x2f) setpriority(0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xcc, @local}, 0x1c) sendmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000200a3a20404ff7e", 0x24}], 0x1}, 0x0) 07:13:48 executing program 6: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) timer_create(0x7, &(0x7f0000000440)={0x0, 0x400000000016, 0x7, @tid=r0}, &(0x7f0000000100)=0x0) timer_create(0x7, &(0x7f0000000340)={0x0, 0x3, 0x0, @thr={&(0x7f00000001c0)="7d8031ae58ad7db67cfa10930f6fc6705e58e007d52d063a5a5109b45693c9ed365f2d4d7475fd69db8d201be9e435ef0a47f19d3f6a2142954f929de29649d4b64151efefd991ccb0c01ce936874b257467b798fc474d7318a07553657dd6df319b9c70fdaae12613aef9df83a0bc6adf318c780f74618c2b638e4e3ded85fbbc80406de929e61ff6da13", &(0x7f0000000280)="65ee303e07cde9324309926bcd08ead768b2183c013bdd6d59382f38f1883e1f1ad71ce9d32c73c4a6025cd53cdb26ea66bccf199552a5615007c670e773d6930efc4a51670e15128481a37fee3386a56e4aefaa85902f78c83b2b1329bcbd7377ff240d8b128ff567bbc8d60de022b5d673714109a432fa002f16d0eb7b1f377c9d239c49be96136d82a944594dd14cecc5427ce50cef04fde0c2ab"}}, &(0x7f0000000380)) timer_getoverrun(r1) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) tkill(r3, 0x2f) setpriority(0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xcc, @local}, 0x1c) sendmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000200a3a20404ff7e", 0x24}], 0x1}, 0x0) 07:13:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000440)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 07:13:49 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)) 07:13:49 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) timer_create(0x7, &(0x7f0000000440)={0x0, 0x400000000016, 0x7, @tid=r0}, &(0x7f0000000100)=0x0) timer_create(0x7, &(0x7f0000000340)={0x0, 0x3, 0x0, @thr={&(0x7f00000001c0)="7d8031ae58ad7db67cfa10930f6fc6705e58e007d52d063a5a5109b45693c9ed365f2d4d7475fd69db8d201be9e435ef0a47f19d3f6a2142954f929de29649d4b64151efefd991ccb0c01ce936874b257467b798fc474d7318a07553657dd6df319b9c70fdaae12613aef9df83a0bc6adf318c780f74618c2b638e4e3ded85fbbc80406de929e61ff6da13", &(0x7f0000000280)="65ee303e07cde9324309926bcd08ead768b2183c013bdd6d59382f38f1883e1f1ad71ce9d32c73c4a6025cd53cdb26ea66bccf199552a5615007c670e773d6930efc4a51670e15128481a37fee3386a56e4aefaa85902f78c83b2b1329bcbd7377ff240d8b128ff567bbc8d60de022b5d673714109a432fa002f16d0eb7b1f377c9d239c49be96136d82a944594dd14cecc5427ce50cef04fde0c2ab"}}, &(0x7f0000000380)) timer_getoverrun(r1) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) tkill(r3, 0x2f) setpriority(0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xcc, @local}, 0x1c) sendmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000200a3a20404ff7e", 0x24}], 0x1}, 0x0) 07:13:49 executing program 6: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) timer_create(0x7, &(0x7f0000000440)={0x0, 0x400000000016, 0x7, @tid=r0}, &(0x7f0000000100)=0x0) timer_create(0x7, &(0x7f0000000340)={0x0, 0x3, 0x0, @thr={&(0x7f00000001c0)="7d8031ae58ad7db67cfa10930f6fc6705e58e007d52d063a5a5109b45693c9ed365f2d4d7475fd69db8d201be9e435ef0a47f19d3f6a2142954f929de29649d4b64151efefd991ccb0c01ce936874b257467b798fc474d7318a07553657dd6df319b9c70fdaae12613aef9df83a0bc6adf318c780f74618c2b638e4e3ded85fbbc80406de929e61ff6da13", &(0x7f0000000280)="65ee303e07cde9324309926bcd08ead768b2183c013bdd6d59382f38f1883e1f1ad71ce9d32c73c4a6025cd53cdb26ea66bccf199552a5615007c670e773d6930efc4a51670e15128481a37fee3386a56e4aefaa85902f78c83b2b1329bcbd7377ff240d8b128ff567bbc8d60de022b5d673714109a432fa002f16d0eb7b1f377c9d239c49be96136d82a944594dd14cecc5427ce50cef04fde0c2ab"}}, &(0x7f0000000380)) timer_getoverrun(r1) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) tkill(r3, 0x2f) setpriority(0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xcc, @local}, 0x1c) sendmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000200a3a20404ff7e", 0x24}], 0x1}, 0x0) 07:13:49 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) timer_create(0x7, &(0x7f0000000440)={0x0, 0x400000000016, 0x7, @tid=r0}, &(0x7f0000000100)=0x0) timer_create(0x7, &(0x7f0000000340)={0x0, 0x3, 0x0, @thr={&(0x7f00000001c0)="7d8031ae58ad7db67cfa10930f6fc6705e58e007d52d063a5a5109b45693c9ed365f2d4d7475fd69db8d201be9e435ef0a47f19d3f6a2142954f929de29649d4b64151efefd991ccb0c01ce936874b257467b798fc474d7318a07553657dd6df319b9c70fdaae12613aef9df83a0bc6adf318c780f74618c2b638e4e3ded85fbbc80406de929e61ff6da13", &(0x7f0000000280)="65ee303e07cde9324309926bcd08ead768b2183c013bdd6d59382f38f1883e1f1ad71ce9d32c73c4a6025cd53cdb26ea66bccf199552a5615007c670e773d6930efc4a51670e15128481a37fee3386a56e4aefaa85902f78c83b2b1329bcbd7377ff240d8b128ff567bbc8d60de022b5d673714109a432fa002f16d0eb7b1f377c9d239c49be96136d82a944594dd14cecc5427ce50cef04fde0c2ab"}}, &(0x7f0000000380)) timer_getoverrun(r1) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) tkill(r3, 0x2f) setpriority(0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xcc, @local}, 0x1c) sendmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000200a3a20404ff7e", 0x24}], 0x1}, 0x0) 07:13:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'ip6gre0\x00', 0x400}) 07:13:49 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000080)) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 07:13:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0xa, 0x1, 0x0) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x48000015, 0x0, 0x0, 0xfffffffffffffffc}, {0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 07:13:49 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 07:13:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000540)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in6=@local}, {}, {}, 0x0, 0x6e6bba}}}, 0xc0}, 0x8}, 0x0) 07:13:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0xfffffffb, &(0x7f00008feff0)={&(0x7f0000da9000)=ANY=[@ANYBLOB="020300091000000000000000000000000200130002000000000000000004000005000600000000000a0000000000000000000000000000000000000000000000000000feffffff000200010000000000000000020000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x80}}, 0x0) 07:13:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) ftruncate(r2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xffffff45) modify_ldt$read(0x0, &(0x7f0000000640)=""/168, 0xa8) quotactl(0x0, &(0x7f0000000100)='./bus\x00', r4, &(0x7f00000003c0)='G') r5 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) tkill(0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f00000000c0)={@loopback, r3}, 0x14) 07:13:49 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "f31607ec"}, &(0x7f00000001c0)=0x28) close(r3) dup3(r0, r1, 0x0) 07:13:49 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000080)) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 07:13:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ab9b3f8683ecf89dee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca9fcf03cbf82bd13534737339245d3c70641be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf3ad8882947ffa1fb4c050727beb12c57e06ff590000000000000000000000000000008924578ad49ea1144c7448d640aa88a66a71b77d73a924ff027fdcb550161653d4cb57088385248286f5be9d8766c70c29e6f5063dfe74a1b0b52079159048210b4d271ac94c889b063ca34a09579af03631f128e6dd2c966daecd7c6f7e0f4ebcaf80250cfab07184838078c71d809d06dc0bac75db814525d1d1acaf4cb6f4890f397382ae636697f688094e38db5c22770f53076c630df9bb4c149189ffa975f52087311c5baafc11c90bdc25fc803b71153ddc3995b2df49cdd784bc5bea40861070dadb395e85c93cdfa08e") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x40086610, &(0x7f0000000000)) 07:13:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl(r0, 0x8000100008912, &(0x7f0000000100)="025cc80700145f8f764070") getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[]) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x74, 0x316) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) 07:13:49 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) timer_create(0x7, &(0x7f0000000440)={0x0, 0x400000000016, 0x7, @tid=r0}, &(0x7f0000000100)=0x0) timer_create(0x7, &(0x7f0000000340)={0x0, 0x3, 0x0, @thr={&(0x7f00000001c0)="7d8031ae58ad7db67cfa10930f6fc6705e58e007d52d063a5a5109b45693c9ed365f2d4d7475fd69db8d201be9e435ef0a47f19d3f6a2142954f929de29649d4b64151efefd991ccb0c01ce936874b257467b798fc474d7318a07553657dd6df319b9c70fdaae12613aef9df83a0bc6adf318c780f74618c2b638e4e3ded85fbbc80406de929e61ff6da13", &(0x7f0000000280)="65ee303e07cde9324309926bcd08ead768b2183c013bdd6d59382f38f1883e1f1ad71ce9d32c73c4a6025cd53cdb26ea66bccf199552a5615007c670e773d6930efc4a51670e15128481a37fee3386a56e4aefaa85902f78c83b2b1329bcbd7377ff240d8b128ff567bbc8d60de022b5d673714109a432fa002f16d0eb7b1f377c9d239c49be96136d82a944594dd14cecc5427ce50cef04fde0c2ab"}}, &(0x7f0000000380)) timer_getoverrun(r1) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) tkill(r3, 0x2f) setpriority(0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xcc, @local}, 0x1c) sendmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000200a3a20404ff7e", 0x24}], 0x1}, 0x0) 07:13:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 07:13:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0xfffffffb, &(0x7f00008feff0)={&(0x7f0000da9000)=ANY=[@ANYBLOB="020300091000000000000000000000000200130002000000000000000004000005000600000000000a0000000000000000000000000000000000000000000000000000feffffff000200010000000000000000020000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x80}}, 0x0) 07:13:49 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000080)) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 07:13:49 executing program 4: seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x48000015}, {0x6, 0x0, 0x0, 0xfffffffffffffffa}]}) socket$inet6(0xa, 0x1000000000002, 0x0) 07:13:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0xc) 07:13:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0xfffffffb, &(0x7f00008feff0)={&(0x7f0000da9000)=ANY=[@ANYBLOB="020300091000000000000000000000000200130002000000000000000004000005000600000000000a0000000000000000000000000000000000000000000000000000feffffff000200010000000000000000020000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x80}}, 0x0) 07:13:49 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000fe3)="440b08010000000002", 0x9) 07:13:49 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000080)) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 07:13:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) listen(r0, 0x0) 07:13:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0xfffffffb, &(0x7f00008feff0)={&(0x7f0000da9000)=ANY=[@ANYBLOB="020300091000000000000000000000000200130002000000000000000004000005000600000000000a0000000000000000000000000000000000000000000000000000feffffff000200010000000000000000020000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x80}}, 0x0) 07:13:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) ftruncate(r2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xffffff45) modify_ldt$read(0x0, &(0x7f0000000640)=""/168, 0xa8) quotactl(0x0, &(0x7f0000000100)='./bus\x00', r4, &(0x7f00000003c0)='G') r5 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) tkill(0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f00000000c0)={@loopback, r3}, 0x14) 07:13:50 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000126, 0x0) 07:13:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000046e000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'bcsh0\x00', 0x1}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 07:13:50 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00') ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 07:13:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl(r0, 0x8000100008912, &(0x7f0000000100)="025cc80700145f8f764070") getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[]) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x74, 0x316) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) 07:13:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000180)="3fb10300f7080000ffffa8", 0xb, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x4, @remote}, 0x1c) 07:13:50 executing program 5: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)) unshare(0x400) fcntl$lock(r0, 0x5, &(0x7f0000000180)={0x1}) 07:13:50 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x4001, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000266ffc)=0x4, 0x42) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffffc4, 0x3fffffd, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) 07:13:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfffffcfd) recvfrom$unix(r2, &(0x7f0000000040)=""/58, 0x80aad7f0, 0x0, 0x0, 0xffffffffffffff56) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0x8, @local, 0x800000000000000}}, 0x1, 0x7, 0x4b3, "03b364600149bc3fbcf570c09e7aa831efc51fb698b1b703da84d845afa5d12e9eb117d720f3f2e79458ceb6b41743445c6b48ffe6d66f7e64fdb23ec6fee63aec74974e2c0b75fe9f9575c8cfc3a83f"}, 0xd8) sync() ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 07:13:50 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00') ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 07:13:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x29, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @multicast2}}}, 0x90) 07:13:50 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x4001, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000266ffc)=0x4, 0x42) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffffc4, 0x3fffffd, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) 07:13:50 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00') ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 07:13:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x29, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @multicast2}}}, 0x90) 07:13:50 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000126, 0x0) 07:13:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x29, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @multicast2}}}, 0x90) 07:13:51 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00') ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 07:13:51 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x4001, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000266ffc)=0x4, 0x42) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffffc4, 0x3fffffd, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) 07:13:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x29, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @multicast2}}}, 0x90) 07:13:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfffffcfd) recvfrom$unix(r2, &(0x7f0000000040)=""/58, 0x80aad7f0, 0x0, 0x0, 0xffffffffffffff56) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0x8, @local, 0x800000000000000}}, 0x1, 0x7, 0x4b3, "03b364600149bc3fbcf570c09e7aa831efc51fb698b1b703da84d845afa5d12e9eb117d720f3f2e79458ceb6b41743445c6b48ffe6d66f7e64fdb23ec6fee63aec74974e2c0b75fe9f9575c8cfc3a83f"}, 0xd8) sync() ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 07:13:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl(r0, 0x8000100008912, &(0x7f0000000100)="025cc80700145f8f764070") getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[]) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x74, 0x316) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) 07:13:51 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000126, 0x0) 07:13:51 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x4001, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000266ffc)=0x4, 0x42) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffffc4, 0x3fffffd, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) 07:13:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f00000000c0)=""/98, 0x62}], 0x3, 0x0) 07:13:51 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', @ifru_settings={0x70400f, 0x0, @te1=&(0x7f0000000180)}}) 07:13:51 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x4001, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000266ffc)=0x4, 0x42) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffffc4, 0x3fffffd, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) 07:13:51 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd000000e0000000000c0900fcff0000040e05a5", 0x58}], 0x1) 07:13:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x800000000000000d) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) fcntl$notify(r1, 0x402, 0x1) fcntl$notify(r0, 0x402, 0x0) 07:13:51 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd000000e0000000000c0900fcff0000040e05a5", 0x58}], 0x1) 07:13:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="187d6acf46ffc57e6102bf49483f298f035ae70438e91e71") setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000180)=@dstopts, 0x7) 07:13:51 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd000000e0000000000c0900fcff0000040e05a5", 0x58}], 0x1) 07:13:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) 07:13:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r0, 0xc0185879, &(0x7f0000000000)) 07:13:51 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd000000e0000000000c0900fcff0000040e05a5", 0x58}], 0x1) 07:13:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="187d6acf46ffc57e6102bf49483f298f035ae70438e91e71") setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000180)=@dstopts, 0x7) 07:13:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfffffcfd) recvfrom$unix(r2, &(0x7f0000000040)=""/58, 0x80aad7f0, 0x0, 0x0, 0xffffffffffffff56) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0x8, @local, 0x800000000000000}}, 0x1, 0x7, 0x4b3, "03b364600149bc3fbcf570c09e7aa831efc51fb698b1b703da84d845afa5d12e9eb117d720f3f2e79458ceb6b41743445c6b48ffe6d66f7e64fdb23ec6fee63aec74974e2c0b75fe9f9575c8cfc3a83f"}, 0xd8) sync() ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 07:13:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl(r0, 0x8000100008912, &(0x7f0000000100)="025cc80700145f8f764070") getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[]) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x74, 0x316) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) 07:13:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") preadv(0xffffffffffffffff, &(0x7f0000002a80)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000003200)="617474722f7072657600ef2251012afd29264aff3878c42d52775998d72ed2bad8fea183584d82a0c2be3ad53563fd863021e55b9236d59af3fa1049fead10929deefee7282a3ea812bc2162022e9fdb3e5a71081dcc471b4db45d17fcd3fbf6def152d97cb7ec80ffffffa5047795b04e6591e37dfdc4766b51e11a5b8147d35909960e11244ea7cde418e022423779d8") preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 07:13:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r0, 0xc0185879, &(0x7f0000000000)) 07:13:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="187d6acf46ffc57e6102bf49483f298f035ae70438e91e71") setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000180)=@dstopts, 0x7) 07:13:52 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x2b9, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 07:13:52 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x4001, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000266ffc)=0x4, 0x42) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffffc4, 0x3fffffd, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) 07:13:52 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000126, 0x0) 07:13:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r0, 0xc0185879, &(0x7f0000000000)) 07:13:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="187d6acf46ffc57e6102bf49483f298f035ae70438e91e71") setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000180)=@dstopts, 0x7) 07:13:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r0, 0xc0185879, &(0x7f0000000000)) 07:13:52 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f00000000c0)={0x0, 0x1}) 07:13:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000080)='ns\x00') fchdir(r2) exit(0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 07:13:52 executing program 3: timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 07:13:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x200000000004e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x9}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739fef, 0x120, 0x0, 0x4f) 07:13:52 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r0, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr}, 0x6) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x1) close(r0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") dup3(r0, r1, 0x0) 07:13:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfffffcfd) recvfrom$unix(r2, &(0x7f0000000040)=""/58, 0x80aad7f0, 0x0, 0x0, 0xffffffffffffff56) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0x8, @local, 0x800000000000000}}, 0x1, 0x7, 0x4b3, "03b364600149bc3fbcf570c09e7aa831efc51fb698b1b703da84d845afa5d12e9eb117d720f3f2e79458ceb6b41743445c6b48ffe6d66f7e64fdb23ec6fee63aec74974e2c0b75fe9f9575c8cfc3a83f"}, 0xd8) sync() ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 07:13:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x200000000004e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x9}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739fef, 0x120, 0x0, 0x4f) 07:13:53 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x75, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x0, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0xfca9}, 0x100) 07:13:53 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x2b9, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 07:13:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x200000000004e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x9}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739fef, 0x120, 0x0, 0x4f) 07:13:53 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x4001, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000266ffc)=0x4, 0x42) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffffc4, 0x3fffffd, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) 07:13:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x200000000004e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x9}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739fef, 0x120, 0x0, 0x4f) 07:13:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x2b9, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 07:13:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) recvmmsg(r0, &(0x7f000000f9c0)=[{{&(0x7f0000000240)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000000c0)=[{&(0x7f000000f880)=""/96, 0x60}], 0x1}}], 0x1, 0x40000021, &(0x7f000000fac0)) 07:13:53 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x2b9, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 07:13:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 07:13:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x2b9, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 07:13:53 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000480)='./file0\x00') symlink(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file1\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) 07:13:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x200000000004e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x9}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739fef, 0x120, 0x0, 0x4f) 07:13:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x200000000004e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x9}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739fef, 0x120, 0x0, 0x4f) 07:13:53 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 07:13:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x200000000004e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x9}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739fef, 0x120, 0x0, 0x4f) 07:13:53 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x2b9, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 149.323295] IPVS: __ip_vs_del_service: enter [ 149.330915] IPVS: __ip_vs_del_service: enter 07:13:54 executing program 6: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x41, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0xfffff, &(0x7f00000002c0)) 07:13:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00000000000000000000000000", 0x58}], 0x1) 07:13:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x2b9, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 07:13:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x200000000004e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x9}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739fef, 0x120, 0x0, 0x4f) 07:13:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x200000000004e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x9}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739fef, 0x120, 0x0, 0x4f) 07:13:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x200000000004e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x9}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739fef, 0x120, 0x0, 0x4f) 07:13:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect(r1, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r4 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r4, 0x1000000000013) listen(r2, 0x5) 07:13:54 executing program 7: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000140), 0x4) 07:13:54 executing program 6: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100020423dcffdf00", 0x1f) 07:13:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000003080)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14, &(0x7f0000000480), 0x2f8, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000002940), 0x0, &(0x7f0000000040)}}], 0x2, 0x0) 07:13:54 executing program 0: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) tee(r0, r0, 0x8, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$TCGETS(r0, 0x5401, &(0x7f0000000200)) epoll_create(0x4) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0xfffffffffffffffe) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000280)) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x23, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14}]}, 0x30}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'eql\x00', 0xfffffffffffffffa}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x4000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x7, @loopback, 0x2}, 0x1c) connect$l2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) 07:13:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000080)={'veth1_to_bond\x00', @ifru_settings={0x0, 0x0, @te1}}) 07:13:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e) listen(r0, 0x0) 07:13:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f00001a3000)='./file1\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f000000a000)='./file1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000500)) poll(&(0x7f0000000400), 0x0, 0x400007f) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') [ 149.996676] nla_parse: 23 callbacks suppressed 07:13:54 executing program 7: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) futex(&(0x7f000000cffc)=0x2, 0x9, 0x0, &(0x7f0000edfff0)={0x0, 0x989680}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000000), 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000180)) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000001c0)) 07:13:54 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000ffbf47)=""/185, 0xfffffffffffffeba, 0x0, 0x0, 0xfffffffffffffde6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0x38a, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) 07:13:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0xe) ioctl$PIO_FONTX(r1, 0x80047456, &(0x7f00000002c0)) gettid() timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) [ 150.017980] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 150.057803] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 07:13:54 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000100)='smaps\x00') sendfile(r0, r3, &(0x7f00000000c0), 0x100000080000000) [ 150.098396] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 150.107117] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 07:13:54 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x1000002) fcntl$dupfd(r1, 0x0, r1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x0, 0x3}) dup3(r2, r1, 0x0) write(r1, &(0x7f00000003c0)="180a", 0x2) 07:13:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f0000000000), 0x0) 07:13:54 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000004000)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000008000)={{&(0x7f0000cf7000/0x4000)=nil, 0x4000}, 0x7fffdf308000, 0xffff8000}) 07:13:54 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x6b65a878, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x4, @loopback}, 0x1c) 07:13:54 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000100)='smaps\x00') sendfile(r0, r3, &(0x7f00000000c0), 0x100000080000000) 07:13:54 executing program 1: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000001580)=[{&(0x7f00000014c0)='F', 0x1}], 0x1, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)) 07:13:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x33c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r1, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 07:13:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f00000000c0)='fd\x00', 0x0) write(r1, &(0x7f0000000180)="6963e6424304006da3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba406d59a5958def156c9c8a2ac4677afffffffc800000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}}, 0x0) 07:13:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x8, 0x4) bind$inet6(r1, &(0x7f0000ff1000)={0xa, 0x4e20}, 0x1c) 07:13:54 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="24000000100001000000fd946fa2830020200a0009000300001c85680c1ba3a20400ff5e28000000050affffba16a0aa1c0009c001da5a80d1090000000000000029090000000cd37eaa0e9e", 0x4c}], 0x1}, 0x8) 07:13:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85714070") add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x200000000004) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080), &(0x7f00000000c0)='/dev/uinput\x00', 0x0) [ 150.533363] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 07:13:55 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000001c0), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140020"], 0x1}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="886c70fe5200b498166059e2be615b5ff918caa906b5c64e49d104f9778bc7ea"}) 07:13:55 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 07:13:55 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000100)='smaps\x00') sendfile(r0, r3, &(0x7f00000000c0), 0x100000080000000) 07:13:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000003c0)=0x1fc, 0x9a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) 07:13:55 executing program 6: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x3}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000800), 0x8) 07:13:55 executing program 2: r0 = socket$inet(0x2, 0x80002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="070380", 0x3) 07:13:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x33c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r1, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 07:13:55 executing program 1: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000102ff05fd4354c007f37ffff20501000800010004000100ffdf00", 0x1f) 07:13:55 executing program 4: syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) memfd_create(&(0x7f0000000300)='\x00', 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) memfd_create(&(0x7f0000000740)='system,eth1\x00', 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/member\x00', 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/uhid\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000800)='/dev/keychord\x00', 0x0, 0x0) inotify_init() openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/status\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/urandom\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002580)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002600)='/selinux/enforce\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000002640)='/dev/urandom\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002680)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000d40)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000007440)='/dev/keychord\x00', 0x0, 0x0) eventfd(0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000074c0)='/selinux/checkreqprot\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/rtc0\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000007580)='/dev/autofs\x00', 0x0, 0x0) socket$inet(0x2, 0x8080a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000007600)='/dev/snapshot\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x0) syz_open_dev$loop(&(0x7f00000077c0)='/dev/loop#\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007800)='/dev/rfkill\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007840)='/dev/rfkill\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000007c80)='/selinux/load\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000007cc0), 0x0) creat(&(0x7f0000007d00)='./file0\x00', 0x0) pipe2(&(0x7f0000007d40), 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) openat$pfkey(0xffffffffffffff9c, &(0x7f0000007fc0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000008000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) memfd_create(&(0x7f0000008040)='cgroup\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000008080)='/dev/snd/seq\x00', 0x0, 0x101003) openat$dir(0xffffffffffffff9c, &(0x7f0000009840)='./file0\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000009880)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000098c0)='/selinux/relabel\x00', 0x2, 0x0) pipe2(&(0x7f0000009900), 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000099c0)='/selinux/checkreqprot\x00', 0x200000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000009c40)='/selinux/status\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000009c80)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000009cc0)='/selinux/enforce\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f000000a000)='/dev/fuse\x00', 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$null(0xffffffffffffff9c, &(0x7f000000b580)='/dev/null\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") dup3(r1, r0, 0x0) 07:13:55 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xc, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)) 07:13:55 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000100fc000000"], 0xb) sendfile(r2, r2, &(0x7f00000000c0), 0xfff) [ 150.894508] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 150.900285] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 150.923562] syz-executor4 uses obsolete (PF_INET,SOCK_PACKET) 07:13:55 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000100)='smaps\x00') sendfile(r0, r3, &(0x7f00000000c0), 0x100000080000000) 07:13:55 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f0000000640)='./file0\x00') 07:13:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 07:13:55 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20000000) [ 151.054324] binder_alloc: binder_alloc_mmap_handler: 10565 20001000-20005000 already mapped failed -16 07:13:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r1, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) lseek(r1, 0x0, 0x3) 07:13:55 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 151.112503] binder_alloc: binder_alloc_mmap_handler: 10565 20001000-20005000 already mapped failed -16 07:13:55 executing program 1: unshare(0x40000000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000001df2100000290000000b000000"], 0x10}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00'}) socket$inet(0x2, 0x4000000000000001, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x83, 0x0) 07:13:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r1, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) lseek(r1, 0x0, 0x3) [ 151.298219] IPVS: Creating netns size=2552 id=13 [ 151.445622] IPVS: Creating netns size=2552 id=14 07:13:56 executing program 0: syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) memfd_create(&(0x7f0000000300)='\x00', 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) memfd_create(&(0x7f0000000740)='system,eth1\x00', 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/member\x00', 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/uhid\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000800)='/dev/keychord\x00', 0x0, 0x0) inotify_init() openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/status\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/urandom\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002580)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002600)='/selinux/enforce\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000002640)='/dev/urandom\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002680)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000d40)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000007440)='/dev/keychord\x00', 0x0, 0x0) eventfd(0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000074c0)='/selinux/checkreqprot\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/rtc0\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000007580)='/dev/autofs\x00', 0x0, 0x0) socket$inet(0x2, 0x8080a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000007600)='/dev/snapshot\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x0) syz_open_dev$loop(&(0x7f00000077c0)='/dev/loop#\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007800)='/dev/rfkill\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007840)='/dev/rfkill\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000007c80)='/selinux/load\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000007cc0), 0x0) creat(&(0x7f0000007d00)='./file0\x00', 0x0) pipe2(&(0x7f0000007d40), 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) openat$pfkey(0xffffffffffffff9c, &(0x7f0000007fc0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000008000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) memfd_create(&(0x7f0000008040)='cgroup\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000008080)='/dev/snd/seq\x00', 0x0, 0x101003) openat$dir(0xffffffffffffff9c, &(0x7f0000009840)='./file0\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000009880)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000098c0)='/selinux/relabel\x00', 0x2, 0x0) pipe2(&(0x7f0000009900), 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000099c0)='/selinux/checkreqprot\x00', 0x200000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000009c40)='/selinux/status\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000009c80)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000009cc0)='/selinux/enforce\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f000000a000)='/dev/fuse\x00', 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$null(0xffffffffffffff9c, &(0x7f000000b580)='/dev/null\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") dup3(r1, r0, 0x0) 07:13:56 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20000000) 07:13:56 executing program 4: syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) memfd_create(&(0x7f0000000300)='\x00', 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) memfd_create(&(0x7f0000000740)='system,eth1\x00', 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/member\x00', 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/uhid\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000800)='/dev/keychord\x00', 0x0, 0x0) inotify_init() openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/status\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/urandom\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002580)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002600)='/selinux/enforce\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000002640)='/dev/urandom\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002680)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000d40)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000007440)='/dev/keychord\x00', 0x0, 0x0) eventfd(0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000074c0)='/selinux/checkreqprot\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/rtc0\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000007580)='/dev/autofs\x00', 0x0, 0x0) socket$inet(0x2, 0x8080a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000007600)='/dev/snapshot\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x0) syz_open_dev$loop(&(0x7f00000077c0)='/dev/loop#\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007800)='/dev/rfkill\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007840)='/dev/rfkill\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000007c80)='/selinux/load\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000007cc0), 0x0) creat(&(0x7f0000007d00)='./file0\x00', 0x0) pipe2(&(0x7f0000007d40), 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) openat$pfkey(0xffffffffffffff9c, &(0x7f0000007fc0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000008000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) memfd_create(&(0x7f0000008040)='cgroup\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000008080)='/dev/snd/seq\x00', 0x0, 0x101003) openat$dir(0xffffffffffffff9c, &(0x7f0000009840)='./file0\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000009880)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000098c0)='/selinux/relabel\x00', 0x2, 0x0) pipe2(&(0x7f0000009900), 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000099c0)='/selinux/checkreqprot\x00', 0x200000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000009c40)='/selinux/status\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000009c80)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000009cc0)='/selinux/enforce\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f000000a000)='/dev/fuse\x00', 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$null(0xffffffffffffff9c, &(0x7f000000b580)='/dev/null\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") dup3(r1, r0, 0x0) 07:13:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r1, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) lseek(r1, 0x0, 0x3) 07:13:56 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 07:13:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x33c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r1, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 07:13:56 executing program 1: unshare(0x40000000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000001df2100000290000000b000000"], 0x10}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00'}) socket$inet(0x2, 0x4000000000000001, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x83, 0x0) 07:13:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) unlink(&(0x7f0000000180)='./control/file0\x00') write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) ftruncate(r2, 0x3eb) dup2(r3, r2) close(r1) 07:13:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r1, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) lseek(r1, 0x0, 0x3) 07:13:56 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20000000) 07:13:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040), 0x8) close(r3) dup3(r1, r2, 0x0) 07:13:56 executing program 0: syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) memfd_create(&(0x7f0000000300)='\x00', 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) memfd_create(&(0x7f0000000740)='system,eth1\x00', 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/member\x00', 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/uhid\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000800)='/dev/keychord\x00', 0x0, 0x0) inotify_init() openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/status\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/urandom\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002580)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002600)='/selinux/enforce\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000002640)='/dev/urandom\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002680)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000d40)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000007440)='/dev/keychord\x00', 0x0, 0x0) eventfd(0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000074c0)='/selinux/checkreqprot\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/rtc0\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000007580)='/dev/autofs\x00', 0x0, 0x0) socket$inet(0x2, 0x8080a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000007600)='/dev/snapshot\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x0) syz_open_dev$loop(&(0x7f00000077c0)='/dev/loop#\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007800)='/dev/rfkill\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007840)='/dev/rfkill\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000007c80)='/selinux/load\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000007cc0), 0x0) creat(&(0x7f0000007d00)='./file0\x00', 0x0) pipe2(&(0x7f0000007d40), 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) openat$pfkey(0xffffffffffffff9c, &(0x7f0000007fc0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000008000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) memfd_create(&(0x7f0000008040)='cgroup\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000008080)='/dev/snd/seq\x00', 0x0, 0x101003) openat$dir(0xffffffffffffff9c, &(0x7f0000009840)='./file0\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000009880)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000098c0)='/selinux/relabel\x00', 0x2, 0x0) pipe2(&(0x7f0000009900), 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000099c0)='/selinux/checkreqprot\x00', 0x200000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000009c40)='/selinux/status\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000009c80)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000009cc0)='/selinux/enforce\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f000000a000)='/dev/fuse\x00', 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$null(0xffffffffffffff9c, &(0x7f000000b580)='/dev/null\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") dup3(r1, r0, 0x0) 07:13:56 executing program 4: syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) memfd_create(&(0x7f0000000300)='\x00', 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) memfd_create(&(0x7f0000000740)='system,eth1\x00', 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/member\x00', 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/uhid\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000800)='/dev/keychord\x00', 0x0, 0x0) inotify_init() openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/status\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/urandom\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002580)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002600)='/selinux/enforce\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000002640)='/dev/urandom\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002680)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000d40)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000007440)='/dev/keychord\x00', 0x0, 0x0) eventfd(0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000074c0)='/selinux/checkreqprot\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/rtc0\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000007580)='/dev/autofs\x00', 0x0, 0x0) socket$inet(0x2, 0x8080a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000007600)='/dev/snapshot\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x0) syz_open_dev$loop(&(0x7f00000077c0)='/dev/loop#\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007800)='/dev/rfkill\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007840)='/dev/rfkill\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000007c80)='/selinux/load\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000007cc0), 0x0) creat(&(0x7f0000007d00)='./file0\x00', 0x0) pipe2(&(0x7f0000007d40), 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) openat$pfkey(0xffffffffffffff9c, &(0x7f0000007fc0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000008000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) memfd_create(&(0x7f0000008040)='cgroup\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000008080)='/dev/snd/seq\x00', 0x0, 0x101003) openat$dir(0xffffffffffffff9c, &(0x7f0000009840)='./file0\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000009880)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000098c0)='/selinux/relabel\x00', 0x2, 0x0) pipe2(&(0x7f0000009900), 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000099c0)='/selinux/checkreqprot\x00', 0x200000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000009c40)='/selinux/status\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000009c80)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000009cc0)='/selinux/enforce\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f000000a000)='/dev/fuse\x00', 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$null(0xffffffffffffff9c, &(0x7f000000b580)='/dev/null\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") dup3(r1, r0, 0x0) 07:13:56 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 07:13:56 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20000000) 07:13:56 executing program 0: syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) memfd_create(&(0x7f0000000300)='\x00', 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) memfd_create(&(0x7f0000000740)='system,eth1\x00', 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/member\x00', 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/uhid\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000800)='/dev/keychord\x00', 0x0, 0x0) inotify_init() openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/status\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/urandom\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002580)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002600)='/selinux/enforce\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000002640)='/dev/urandom\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002680)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000d40)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000007440)='/dev/keychord\x00', 0x0, 0x0) eventfd(0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000074c0)='/selinux/checkreqprot\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/rtc0\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000007580)='/dev/autofs\x00', 0x0, 0x0) socket$inet(0x2, 0x8080a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000007600)='/dev/snapshot\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x0) syz_open_dev$loop(&(0x7f00000077c0)='/dev/loop#\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007800)='/dev/rfkill\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007840)='/dev/rfkill\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000007c80)='/selinux/load\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000007cc0), 0x0) creat(&(0x7f0000007d00)='./file0\x00', 0x0) pipe2(&(0x7f0000007d40), 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) openat$pfkey(0xffffffffffffff9c, &(0x7f0000007fc0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000008000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) memfd_create(&(0x7f0000008040)='cgroup\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000008080)='/dev/snd/seq\x00', 0x0, 0x101003) openat$dir(0xffffffffffffff9c, &(0x7f0000009840)='./file0\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000009880)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000098c0)='/selinux/relabel\x00', 0x2, 0x0) pipe2(&(0x7f0000009900), 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000099c0)='/selinux/checkreqprot\x00', 0x200000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000009c40)='/selinux/status\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000009c80)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000009cc0)='/selinux/enforce\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f000000a000)='/dev/fuse\x00', 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$null(0xffffffffffffff9c, &(0x7f000000b580)='/dev/null\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") dup3(r1, r0, 0x0) 07:13:56 executing program 6: bind(0xffffffffffffffff, &(0x7f0000557130)=@generic={0x0, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a53a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151314a8ef1f1622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) 07:13:56 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x41, &(0x7f0000000080), 0x4) 07:13:56 executing program 4: syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) memfd_create(&(0x7f0000000300)='\x00', 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) memfd_create(&(0x7f0000000740)='system,eth1\x00', 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/member\x00', 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/uhid\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000800)='/dev/keychord\x00', 0x0, 0x0) inotify_init() openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/status\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/urandom\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002580)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002600)='/selinux/enforce\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000002640)='/dev/urandom\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002680)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000d40)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000007440)='/dev/keychord\x00', 0x0, 0x0) eventfd(0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000074c0)='/selinux/checkreqprot\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/rtc0\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000007580)='/dev/autofs\x00', 0x0, 0x0) socket$inet(0x2, 0x8080a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000007600)='/dev/snapshot\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x0) syz_open_dev$loop(&(0x7f00000077c0)='/dev/loop#\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007800)='/dev/rfkill\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007840)='/dev/rfkill\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000007c80)='/selinux/load\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000007cc0), 0x0) creat(&(0x7f0000007d00)='./file0\x00', 0x0) pipe2(&(0x7f0000007d40), 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) openat$pfkey(0xffffffffffffff9c, &(0x7f0000007fc0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000008000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) memfd_create(&(0x7f0000008040)='cgroup\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000008080)='/dev/snd/seq\x00', 0x0, 0x101003) openat$dir(0xffffffffffffff9c, &(0x7f0000009840)='./file0\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000009880)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000098c0)='/selinux/relabel\x00', 0x2, 0x0) pipe2(&(0x7f0000009900), 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000099c0)='/selinux/checkreqprot\x00', 0x200000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000009c40)='/selinux/status\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000009c80)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000009cc0)='/selinux/enforce\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f000000a000)='/dev/fuse\x00', 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$null(0xffffffffffffff9c, &(0x7f000000b580)='/dev/null\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") dup3(r1, r0, 0x0) 07:13:56 executing program 3: prctl$seccomp(0x2f, 0x0, &(0x7f0000000ff0)={0x223, &(0x7f00005d0000)}) 07:13:56 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140), 0x3) 07:13:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x33c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r1, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 153.244776] pktgen: kernel_thread() failed for cpu 0 [ 153.249920] pktgen: Cannot create thread for cpu 0 (-4) [ 153.255367] pktgen: kernel_thread() failed for cpu 1 [ 153.260634] pktgen: Cannot create thread for cpu 1 (-4) [ 153.265977] pktgen: Initialization failed for all threads 07:13:57 executing program 1: unshare(0x40000000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000001df2100000290000000b000000"], 0x10}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00'}) socket$inet(0x2, 0x4000000000000001, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x83, 0x0) 07:13:57 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0xfff) 07:13:57 executing program 3: r0 = socket(0x10, 0x2, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000900)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x14, 0x24, 0x217}, 0x14}}, 0x0) 07:13:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000008f000/0x1000)=nil, 0x1000, 0x0, 0xa132, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') 07:13:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x22b, 0x0, 0x0, {}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0) 07:13:57 executing program 7: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="0001705f66696c657300") getdents(r0, &(0x7f0000000080)=""/162, 0xa2) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 07:13:57 executing program 4: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000000), 0xfffffffffffffef2) 07:13:57 executing program 5: r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="a85883156f794c05e0b02a03983b5addde9e46e1145c5c3fcb185a36d20d52d097399fd156", 0x25) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="eaff45b0ab9656", 0x7) sendfile(r0, r0, &(0x7f00000000c0), 0xff8) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') 07:13:57 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000008000/0x2000)=nil) mlock(&(0x7f000000a000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 07:13:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x27, &(0x7f000059dffc), &(0x7f0000000000)=0x1) 07:13:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) socket$inet6(0xa, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0004a0000000000000000000000400000000000000000000de19e11a7a120fcabbdc4390763e933f24408698d0997c0f6f3d3d4cfed0b7181316d90d522ae12e3c615a2b0535a927f1d3db06d86f0ad1f17412b0f5a5624928d8da376291a2904c7763e6337267609edb2df9142b797d371dc1b23da8fff5b60d426882d71ddbda5865f0e6800908d67fdc811c801c9fec190605bb13f7d2adc705f5a12f0a2690ed42dadb4722d83f72"], 0xaa) 07:13:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/sockcreate\x00') sendfile(r0, r1, &(0x7f0000000040), 0x1f) 07:13:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") lseek(r0, 0xffffffffffffffff, 0x3) 07:13:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc30592", 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@local}, {@in=@broadcast, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x7472}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000100), 0x0) 07:13:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r2}, {r0, 0x183}], 0x2, 0x0) 07:13:57 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x343000, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x173, 0xa, 0x4, 0x0, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x7}, [@typed={0x0, 0x42, @ipv6=@remote}]}, 0x18}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, &(0x7f0000000140), 0x10000) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x5, 0x0, 0x6}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x2e, 0x2000, 0x5, 0x8}, 0x10) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) clock_gettime(0x0, &(0x7f00000000c0)) [ 153.627746] PM: Image mismatch: architecture specific data [ 154.705063] pktgen: kernel_thread() failed for cpu 0 [ 154.710355] pktgen: Cannot create thread for cpu 0 (-4) [ 154.715740] pktgen: kernel_thread() failed for cpu 1 [ 154.720943] pktgen: Cannot create thread for cpu 1 (-4) [ 154.726318] pktgen: Initialization failed for all threads 07:13:59 executing program 1: unshare(0x40000000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000001df2100000290000000b000000"], 0x10}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00'}) socket$inet(0x2, 0x4000000000000001, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x83, 0x0) 07:13:59 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) readv(r0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/83, 0x53}], 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000013000/0x2000)=nil, 0x2000}) 07:13:59 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000008000/0x2000)=nil) mlock(&(0x7f000000a000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 07:13:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="2400000052001f0014f9f407000904000a00071008000100040000000800000000000000", 0x24) 07:13:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc30592", 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@local}, {@in=@broadcast, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x7472}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000100), 0x0) 07:13:59 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x343000, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x173, 0xa, 0x4, 0x0, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x7}, [@typed={0x0, 0x42, @ipv6=@remote}]}, 0x18}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, &(0x7f0000000140), 0x10000) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x5, 0x0, 0x6}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x2e, 0x2000, 0x5, 0x8}, 0x10) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) clock_gettime(0x0, &(0x7f00000000c0)) 07:13:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x19) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r2, 0x1000000000016) 07:13:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) socket$inet6(0xa, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0004a0000000000000000000000400000000000000000000de19e11a7a120fcabbdc4390763e933f24408698d0997c0f6f3d3d4cfed0b7181316d90d522ae12e3c615a2b0535a927f1d3db06d86f0ad1f17412b0f5a5624928d8da376291a2904c7763e6337267609edb2df9142b797d371dc1b23da8fff5b60d426882d71ddbda5865f0e6800908d67fdc811c801c9fec190605bb13f7d2adc705f5a12f0a2690ed42dadb4722d83f72"], 0xaa) 07:13:59 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000008000/0x2000)=nil) mlock(&(0x7f000000a000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 07:13:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) socket$inet6(0xa, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0004a0000000000000000000000400000000000000000000de19e11a7a120fcabbdc4390763e933f24408698d0997c0f6f3d3d4cfed0b7181316d90d522ae12e3c615a2b0535a927f1d3db06d86f0ad1f17412b0f5a5624928d8da376291a2904c7763e6337267609edb2df9142b797d371dc1b23da8fff5b60d426882d71ddbda5865f0e6800908d67fdc811c801c9fec190605bb13f7d2adc705f5a12f0a2690ed42dadb4722d83f72"], 0xaa) [ 154.866483] IPVS: Creating netns size=2552 id=15 07:13:59 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000008000/0x2000)=nil) mlock(&(0x7f000000a000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 07:13:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc30592", 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@local}, {@in=@broadcast, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x7472}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000100), 0x0) [ 154.998143] FAULT_FLAG_ALLOW_RETRY missing 30 [ 155.002977] CPU: 0 PID: 10766 Comm: syz-executor6 Not tainted 4.4.151-ge917467 #84 [ 155.010692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.020060] 0000000000000000 5377c7ae7295f18b ffff8801bb847768 ffffffff81e15eed [ 155.028179] ffff8801d4270600 ffff8801bb8478f0 [ 155.032723] 1ffff10037708efa 0000000000000002 [ 155.037849] 0000000000000000 [ 155.040771] ffff8801bb847918 ffffffff81c18fd4 ffffffff841ec9e8 [ 155.047539] Call Trace: [ 155.050133] [] dump_stack+0xc1/0x124 [ 155.055498] [] handle_userfault.cold.18+0x22/0x27 [ 155.061987] [] ? debug_check_no_locks_freed+0x210/0x210 [ 155.068997] [] ? userfaultfd_ioctl+0x2090/0x2090 [ 155.075395] [] ? _raw_spin_unlock_irq+0x38/0x50 [ 155.081693] [] ? handle_mm_fault+0xc18/0x3450 [ 155.087814] [] ? handle_mm_fault+0x294b/0x3450 [ 155.094041] [] handle_mm_fault+0x2965/0x3450 [ 155.100095] [] ? vm_insert_mixed+0x220/0x220 [ 155.106144] [] ? __do_page_fault+0x78a/0xa10 [ 155.112180] [] ? vmacache_find+0x57/0x290 [ 155.117963] [] __do_page_fault+0x365/0xa10 [ 155.123824] [] do_page_fault+0x27/0x30 [ 155.129358] [] page_fault+0x28/0x30 [ 155.134627] [] ? __might_fault+0x18e/0x1d0 [ 155.140500] [] ? __get_user_4+0x25/0x30 [ 155.146102] [] ? evdev_ioctl_handler+0x123e/0x17b0 [ 155.152673] [] ? do_futex+0x12d/0x17f0 [ 155.158236] [] ? evdev_event+0xc0/0xc0 [ 155.163753] [] ? debug_check_no_locks_freed+0x210/0x210 [ 155.170748] [] ? quarantine_put+0xda/0x180 [ 155.176621] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 155.183446] [] ? check_preemption_disabled+0x3b/0x170 [ 155.190286] [] evdev_ioctl+0x27/0x30 07:13:59 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x343000, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x173, 0xa, 0x4, 0x0, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x7}, [@typed={0x0, 0x42, @ipv6=@remote}]}, 0x18}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, &(0x7f0000000140), 0x10000) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x5, 0x0, 0x6}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x2e, 0x2000, 0x5, 0x8}, 0x10) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) clock_gettime(0x0, &(0x7f00000000c0)) 07:13:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc30592", 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@local}, {@in=@broadcast, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x7472}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000100), 0x0) [ 155.195624] [] ? evdev_ioctl_compat+0x30/0x30 [ 155.201744] [] do_vfs_ioctl+0x63f/0xf40 [ 155.207344] [] ? ioctl_preallocate+0x1f0/0x1f0 [ 155.213561] [] ? inode_init_always+0x5fa/0x8a0 [ 155.219777] [] ? __fget+0x16f/0x3b0 [ 155.225231] [] ? __fget+0x47/0x3b0 [ 155.230406] [] ? security_file_ioctl+0x8f/0xc0 [ 155.236625] [] SyS_ioctl+0x8f/0xc0 [ 155.241906] [] entry_SYSCALL_64_fastpath+0x22/0x9e 07:13:59 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") fchdir(r0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8200003) 07:13:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) socket$inet6(0xa, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0004a0000000000000000000000400000000000000000000de19e11a7a120fcabbdc4390763e933f24408698d0997c0f6f3d3d4cfed0b7181316d90d522ae12e3c615a2b0535a927f1d3db06d86f0ad1f17412b0f5a5624928d8da376291a2904c7763e6337267609edb2df9142b797d371dc1b23da8fff5b60d426882d71ddbda5865f0e6800908d67fdc811c801c9fec190605bb13f7d2adc705f5a12f0a2690ed42dadb4722d83f72"], 0xaa) 07:13:59 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) readv(r0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/83, 0x53}], 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000013000/0x2000)=nil, 0x2000}) 07:13:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) socket$inet6(0xa, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0004a0000000000000000000000400000000000000000000de19e11a7a120fcabbdc4390763e933f24408698d0997c0f6f3d3d4cfed0b7181316d90d522ae12e3c615a2b0535a927f1d3db06d86f0ad1f17412b0f5a5624928d8da376291a2904c7763e6337267609edb2df9142b797d371dc1b23da8fff5b60d426882d71ddbda5865f0e6800908d67fdc811c801c9fec190605bb13f7d2adc705f5a12f0a2690ed42dadb4722d83f72"], 0xaa) 07:13:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000002, 0x4) sendto$inet(r0, &(0x7f0000000240), 0xfffffee5, 0xfffffffffffffffe, 0x0, 0x0) 07:13:59 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x343000, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x173, 0xa, 0x4, 0x0, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x7}, [@typed={0x0, 0x42, @ipv6=@remote}]}, 0x18}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, &(0x7f0000000140), 0x10000) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x5, 0x0, 0x6}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x2e, 0x2000, 0x5, 0x8}, 0x10) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) clock_gettime(0x0, &(0x7f00000000c0)) 07:13:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000002, 0x4) sendto$inet(r0, &(0x7f0000000240), 0xfffffee5, 0xfffffffffffffffe, 0x0, 0x0) 07:13:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000002, 0x4) sendto$inet(r0, &(0x7f0000000240), 0xfffffee5, 0xfffffffffffffffe, 0x0, 0x0) [ 155.562803] FAULT_FLAG_ALLOW_RETRY missing 30 [ 155.567553] CPU: 0 PID: 10821 Comm: syz-executor6 Not tainted 4.4.151-ge917467 #84 [ 155.575295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.584648] 0000000000000000 a2bf300aee47bea2 ffff8801ca26f768 ffffffff81e15eed [ 155.592714] ffff8801cb5ed800 ffff8801ca26f8f0 1ffff1003944defa 0000000000000002 [ 155.600796] 0000000000000000 ffff8801ca26f918 ffffffff81c18fd4 ffffffff841ec9e8 [ 155.608853] Call Trace: [ 155.611424] [] dump_stack+0xc1/0x124 [ 155.616787] [] handle_userfault.cold.18+0x22/0x27 [ 155.623256] [] ? debug_check_no_locks_freed+0x210/0x210 [ 155.630246] [] ? userfaultfd_ioctl+0x2090/0x2090 [ 155.636635] [] ? _raw_spin_unlock_irq+0x38/0x50 [ 155.642931] [] ? handle_mm_fault+0xc18/0x3450 [ 155.649055] [] ? handle_mm_fault+0x294b/0x3450 [ 155.655261] [] handle_mm_fault+0x2965/0x3450 [ 155.661294] [] ? vm_insert_mixed+0x220/0x220 [ 155.667328] [] ? __do_page_fault+0x78a/0xa10 [ 155.673363] [] ? vmacache_find+0x57/0x290 [ 155.679155] [] __do_page_fault+0x365/0xa10 [ 155.685014] [] do_page_fault+0x27/0x30 [ 155.690531] [] page_fault+0x28/0x30 [ 155.695788] [] ? __might_fault+0x18e/0x1d0 [ 155.701650] [] ? __get_user_4+0x25/0x30 [ 155.707269] [] ? evdev_ioctl_handler+0x123e/0x17b0 [ 155.713826] [] ? do_futex+0x12d/0x17f0 [ 155.719339] [] ? evdev_event+0xc0/0xc0 [ 155.724854] [] ? debug_check_no_locks_freed+0x210/0x210 [ 155.731841] [] ? quarantine_put+0xda/0x180 [ 155.737700] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 155.744513] [] ? check_preemption_disabled+0x3b/0x170 [ 155.751324] [] evdev_ioctl+0x27/0x30 [ 155.756662] [] ? evdev_ioctl_compat+0x30/0x30 07:14:00 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)) 07:14:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000002, 0x4) sendto$inet(r0, &(0x7f0000000240), 0xfffffee5, 0xfffffffffffffffe, 0x0, 0x0) 07:14:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) ioctl$TCFLSH(r1, 0x541b, 0x709000) 07:14:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000002, 0x4) sendto$inet(r0, &(0x7f0000000240), 0xfffffee5, 0xfffffffffffffffe, 0x0, 0x0) 07:14:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) socket$inet6(0xa, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0004a0000000000000000000000400000000000000000000de19e11a7a120fcabbdc4390763e933f24408698d0997c0f6f3d3d4cfed0b7181316d90d522ae12e3c615a2b0535a927f1d3db06d86f0ad1f17412b0f5a5624928d8da376291a2904c7763e6337267609edb2df9142b797d371dc1b23da8fff5b60d426882d71ddbda5865f0e6800908d67fdc811c801c9fec190605bb13f7d2adc705f5a12f0a2690ed42dadb4722d83f72"], 0xaa) [ 155.762783] [] do_vfs_ioctl+0x63f/0xf40 [ 155.768401] [] ? ioctl_preallocate+0x1f0/0x1f0 [ 155.774632] [] ? inode_init_always+0x5fa/0x8a0 [ 155.780855] [] ? __fget+0x16f/0x3b0 [ 155.786118] [] ? __fget+0x47/0x3b0 [ 155.791285] [] ? security_file_ioctl+0x8f/0xc0 [ 155.797490] [] SyS_ioctl+0x8f/0xc0 [ 155.802658] [] entry_SYSCALL_64_fastpath+0x22/0x9e 07:14:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000002, 0x4) sendto$inet(r0, &(0x7f0000000240), 0xfffffee5, 0xfffffffffffffffe, 0x0, 0x0) 07:14:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) socket$inet6(0xa, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0004a0000000000000000000000400000000000000000000de19e11a7a120fcabbdc4390763e933f24408698d0997c0f6f3d3d4cfed0b7181316d90d522ae12e3c615a2b0535a927f1d3db06d86f0ad1f17412b0f5a5624928d8da376291a2904c7763e6337267609edb2df9142b797d371dc1b23da8fff5b60d426882d71ddbda5865f0e6800908d67fdc811c801c9fec190605bb13f7d2adc705f5a12f0a2690ed42dadb4722d83f72"], 0xaa) 07:14:00 executing program 0: r0 = gettid() waitid(0x2, r0, &(0x7f0000000040), 0xa, &(0x7f0000000080)) 07:14:00 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 07:14:00 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) clone(0x0, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000200)) ptrace$getregs(0xc, r1, 0x72fffd, &(0x7f00000000c0)=""/38) 07:14:00 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) readv(r0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/83, 0x53}], 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000013000/0x2000)=nil, 0x2000}) 07:14:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000002, 0x4) sendto$inet(r0, &(0x7f0000000240), 0xfffffee5, 0xfffffffffffffffe, 0x0, 0x0) 07:14:00 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = inotify_init() r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x2000000) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x4) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x2a) 07:14:00 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = epoll_create(0x1000000000004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) connect$inet6(r0, &(0x7f0000001180)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendto(r0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0) 07:14:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x7ff}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) 07:14:00 executing program 4: prctl$intptr(0x26, 0x1) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) [ 156.119056] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 156.138103] FAULT_FLAG_ALLOW_RETRY missing 30 [ 156.150176] CPU: 0 PID: 10877 Comm: syz-executor6 Not tainted 4.4.151-ge917467 #84 [ 156.157905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.167255] 0000000000000000 15ad98453b76c19c ffff8801bb777768 ffffffff81e15eed [ 156.175332] ffff8801cb5ede00 ffff8801bb7778f0 1ffff100376eeefa 0000000000000002 [ 156.183416] 0000000000000000 ffff8801bb777918 ffffffff81c18fd4 ffffffff841ec9e8 [ 156.191516] Call Trace: [ 156.194100] [] dump_stack+0xc1/0x124 [ 156.199459] [] handle_userfault.cold.18+0x22/0x27 [ 156.205960] [] ? debug_check_no_locks_freed+0x210/0x210 [ 156.213013] [] ? userfaultfd_ioctl+0x2090/0x2090 [ 156.219415] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 156.225744] [] ? handle_mm_fault+0xc18/0x3450 [ 156.231881] [] ? handle_mm_fault+0x294b/0x3450 [ 156.238118] [] handle_mm_fault+0x2965/0x3450 [ 156.244214] [] ? vm_insert_mixed+0x220/0x220 [ 156.250269] [] ? __do_page_fault+0x78a/0xa10 [ 156.256324] [] ? vmacache_find+0x57/0x290 [ 156.262118] [] __do_page_fault+0x365/0xa10 [ 156.268003] [] do_page_fault+0x27/0x30 [ 156.273535] [] page_fault+0x28/0x30 [ 156.278861] [] ? __might_fault+0x18e/0x1d0 [ 156.282385] sd 0:0:1:0: [sg0] tag#484 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 156.282397] sd 0:0:1:0: [sg0] tag#484 CDB: Xpwrite, Read disk info [ 156.282409] sd 0:0:1:0: [sg0] tag#484 CDB[00]: 51 1b a5 64 db b2 c5 ce 09 66 8d 0b cb 3f e1 97 [ 156.282421] sd 0:0:1:0: [sg0] tag#484 CDB[10]: a6 45 c6 a9 47 0c 6c 16 36 54 96 a3 ac 4b 20 59 [ 156.282444] sd 0:0:1:0: [sg0] tag#484 CDB[20]: cf [ 156.321912] [] ? __get_user_4+0x25/0x30 [ 156.327530] [] ? evdev_ioctl_handler+0x123e/0x17b0 [ 156.334103] [] ? do_futex+0x12d/0x17f0 [ 156.339635] [] ? evdev_event+0xc0/0xc0 [ 156.345171] [] ? debug_check_no_locks_freed+0x210/0x210 [ 156.352179] [] ? quarantine_put+0xda/0x180 [ 156.358055] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 156.364905] [] ? check_preemption_disabled+0x3b/0x170 [ 156.367524] sd 0:0:1:0: [sg0] tag#485 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 156.367537] sd 0:0:1:0: [sg0] tag#485 CDB: Xpwrite, Read disk info [ 156.367549] sd 0:0:1:0: [sg0] tag#485 CDB[00]: 51 1b a5 64 db b2 c5 ce 09 66 8d 0b cb 3f e1 97 [ 156.367561] sd 0:0:1:0: [sg0] tag#485 CDB[10]: a6 45 c6 a9 47 0c 6c 16 36 54 96 a3 ac 4b 20 59 [ 156.367571] sd 0:0:1:0: [sg0] tag#485 CDB[20]: cf [ 156.408913] [] evdev_ioctl+0x27/0x30 [ 156.414306] [] ? evdev_ioctl_compat+0x30/0x30 [ 156.420277] sd 0:0:1:0: [sg0] tag#485 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 156.420289] sd 0:0:1:0: [sg0] tag#485 CDB: Xpwrite, Read disk info [ 156.420301] sd 0:0:1:0: [sg0] tag#485 CDB[00]: 51 1b a5 64 db b2 c5 ce 09 66 8d 0b cb 3f e1 97 [ 156.420313] sd 0:0:1:0: [sg0] tag#485 CDB[10]: a6 45 c6 a9 47 0c 6c 16 36 54 96 a3 ac 4b 20 59 [ 156.420323] sd 0:0:1:0: [sg0] tag#485 CDB[20]: cf [ 156.457587] [] do_vfs_ioctl+0x63f/0xf40 [ 156.463205] [] ? ioctl_preallocate+0x1f0/0x1f0 07:14:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000280)=""/113) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x401004000000016) 07:14:00 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x1, 0x0) epoll_wait(r1, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x6, 0xab46) r2 = open(&(0x7f0000000140)='./bus/file0\x00', 0x800, 0x10) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000001c0)) fchdir(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000480)=0xc) stat(&(0x7f00000003c0)='./bus/file0\x00', &(0x7f0000000400)) 07:14:00 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdE\x00', 0x0) 07:14:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/relabel\x00', 0x2, 0x0) close(r1) 07:14:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000048c0)={{}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 07:14:00 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0x21, 0x0, @buffer={0x0, 0xd3, &(0x7f00000001c0)=""/211}, &(0x7f00000002c0)="511ba564dbb2c5ce09668d0bcb3fe197a645c6a9470c6c16365496a3ac4b2059cf", &(0x7f0000000080)=""/33, 0x0, 0x0, 0x0, &(0x7f0000000380)}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 07:14:00 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0x21, 0x0, @buffer={0x0, 0xd3, &(0x7f00000001c0)=""/211}, &(0x7f00000002c0)="511ba564dbb2c5ce09668d0bcb3fe197a645c6a9470c6c16365496a3ac4b2059cf", &(0x7f0000000080)=""/33, 0x0, 0x0, 0x0, &(0x7f0000000380)}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 07:14:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") munmap(&(0x7f0000000000/0x600000)=nil, 0x600000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000000c0)={{}, 'port1\x00'}) 07:14:00 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0x21, 0x0, @buffer={0x0, 0xd3, &(0x7f00000001c0)=""/211}, &(0x7f00000002c0)="511ba564dbb2c5ce09668d0bcb3fe197a645c6a9470c6c16365496a3ac4b2059cf", &(0x7f0000000080)=""/33, 0x0, 0x0, 0x0, &(0x7f0000000380)}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 07:14:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6gretap0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 156.469430] [] ? inode_init_always+0x5fa/0x8a0 [ 156.475663] [] ? __fget+0x16f/0x3b0 [ 156.480955] [] ? __fget+0x47/0x3b0 [ 156.486174] [] ? security_file_ioctl+0x8f/0xc0 [ 156.492401] [] SyS_ioctl+0x8f/0xc0 [ 156.497588] [] entry_SYSCALL_64_fastpath+0x22/0x9e [ 156.523498] input input21: cannot allocate more than FF_MAX_EFFECTS effects 07:14:01 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) readv(r0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/83, 0x53}], 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000013000/0x2000)=nil, 0x2000}) 07:14:01 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0x21, 0x0, @buffer={0x0, 0xd3, &(0x7f00000001c0)=""/211}, &(0x7f00000002c0)="511ba564dbb2c5ce09668d0bcb3fe197a645c6a9470c6c16365496a3ac4b2059cf", &(0x7f0000000080)=""/33, 0x0, 0x0, 0x0, &(0x7f0000000380)}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 07:14:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000002c0)={@empty, @local}, 0xc) 07:14:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000048c0)={{}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 07:14:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) 07:14:01 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x72fffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b63000012634840"], 0x1, 0x0, &(0x7f0000000180)="0e"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=ANY=[]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x24, 0x0, &(0x7f0000000400)=[@request_death={0x400c630e, 0x4, 0x2}, @acquire_done={0x40106309, 0x0, 0x2}], 0x5d, 0x0, &(0x7f0000000540)="3515cc2013d450ad834aafa53b888969de972a88ebc206e0a10802ee0c3d8e4d552323735e4c528bf18f884b81e7b6bcd9eed952ccb5fce2d90375a65544fd0d3501b5052719b4a6539d065327a6b15316b94cab919f53c40d1b1d6bd1"}) [ 156.659620] sd 0:0:1:0: [sg0] tag#484 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 156.668487] sd 0:0:1:0: [sg0] tag#484 CDB: Xpwrite, Read disk info [ 156.674851] sd 0:0:1:0: [sg0] tag#484 CDB[00]: 51 1b a5 64 db b2 c5 ce 09 66 8d 0b cb 3f e1 97 [ 156.683630] sd 0:0:1:0: [sg0] tag#484 CDB[10]: a6 45 c6 a9 47 0c 6c 16 36 54 96 a3 ac 4b 20 59 [ 156.692971] sd 0:0:1:0: [sg0] tag#484 CDB[20]: cf [ 156.706464] binder: 10928:10936 ERROR: BC_REGISTER_LOOPER called without request [ 156.731476] binder: 10928:10936 got reply transaction with no transaction stack [ 156.749165] binder: 10928:10936 transaction failed 29201/-71, size 0-0 line 2922 [ 156.760548] binder: 10928:10940 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 156.769296] binder: 10928:10940 BC_ACQUIRE_DONE u0000000000000000 no match [ 156.865375] binder: 10928:10936 ERROR: BC_REGISTER_LOOPER called without request [ 156.883006] binder: 10928:10936 got reply transaction with no transaction stack [ 156.898702] binder: 10928:10936 transaction failed 29201/-71, size 0-0 line 2922 07:14:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000280)=""/113) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x401004000000016) 07:14:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6gretap0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 07:14:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) 07:14:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000002c0)={@empty, @local}, 0xc) 07:14:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000048c0)={{}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 07:14:02 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x1000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x2) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x200) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) dup3(r1, r0, 0x0) write(r0, &(0x7f0000000040)='\x00', 0x1) 07:14:02 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x72fffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b63000012634840"], 0x1, 0x0, &(0x7f0000000180)="0e"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=ANY=[]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x24, 0x0, &(0x7f0000000400)=[@request_death={0x400c630e, 0x4, 0x2}, @acquire_done={0x40106309, 0x0, 0x2}], 0x5d, 0x0, &(0x7f0000000540)="3515cc2013d450ad834aafa53b888969de972a88ebc206e0a10802ee0c3d8e4d552323735e4c528bf18f884b81e7b6bcd9eed952ccb5fce2d90375a65544fd0d3501b5052719b4a6539d065327a6b15316b94cab919f53c40d1b1d6bd1"}) 07:14:02 executing program 6: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x72fffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b63000012634840"], 0x1, 0x0, &(0x7f0000000180)="0e"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=ANY=[]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x24, 0x0, &(0x7f0000000400)=[@request_death={0x400c630e, 0x4, 0x2}, @acquire_done={0x40106309, 0x0, 0x2}], 0x5d, 0x0, &(0x7f0000000540)="3515cc2013d450ad834aafa53b888969de972a88ebc206e0a10802ee0c3d8e4d552323735e4c528bf18f884b81e7b6bcd9eed952ccb5fce2d90375a65544fd0d3501b5052719b4a6539d065327a6b15316b94cab919f53c40d1b1d6bd1"}) 07:14:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000002c0)={@empty, @local}, 0xc) 07:14:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) 07:14:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000048c0)={{}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) [ 158.272531] binder: 10964:10978 ERROR: BC_REGISTER_LOOPER called without request [ 158.290656] binder: 10963:10977 ERROR: BC_REGISTER_LOOPER called without request [ 158.298245] binder: 10963:10977 got reply transaction with no transaction stack 07:14:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000002c0)={@empty, @local}, 0xc) [ 158.318519] binder: 10964:10968 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 158.328409] binder: 10964:10978 got reply transaction with no transaction stack [ 158.342669] binder: 10964:10968 BC_ACQUIRE_DONE u0000000000000000 no match [ 158.343033] binder: 10963:10966 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 158.343054] binder: 10963:10966 BC_ACQUIRE_DONE u0000000000000000 no match [ 158.343757] binder: 10963:10977 transaction failed 29201/-71, size 0-0 line 2922 07:14:02 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x72fffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b63000012634840"], 0x1, 0x0, &(0x7f0000000180)="0e"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=ANY=[]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x24, 0x0, &(0x7f0000000400)=[@request_death={0x400c630e, 0x4, 0x2}, @acquire_done={0x40106309, 0x0, 0x2}], 0x5d, 0x0, &(0x7f0000000540)="3515cc2013d450ad834aafa53b888969de972a88ebc206e0a10802ee0c3d8e4d552323735e4c528bf18f884b81e7b6bcd9eed952ccb5fce2d90375a65544fd0d3501b5052719b4a6539d065327a6b15316b94cab919f53c40d1b1d6bd1"}) 07:14:02 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x1000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x2) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x200) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) dup3(r1, r0, 0x0) write(r0, &(0x7f0000000040)='\x00', 0x1) 07:14:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) [ 158.355060] binder: 10964:10978 transaction failed 29201/-71, size 0-0 line 2922 [ 158.470058] binder: 10994:11005 ERROR: BC_REGISTER_LOOPER called without request [ 158.505821] binder: 10994:11005 got reply transaction with no transaction stack 07:14:02 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) get_robust_list(r1, &(0x7f00000001c0)=&(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f0000000200)=0x18) [ 158.515334] binder: 10994:10997 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 158.525360] binder: 10994:10997 BC_ACQUIRE_DONE u0000000000000000 no match [ 158.535718] binder: 10994:11005 transaction failed 29201/-71, size 0-0 line 2922 07:14:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000280)=""/113) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x401004000000016) 07:14:03 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) 07:14:03 executing program 1: r0 = gettid() getpriority(0x1, r0) 07:14:03 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x72fffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b63000012634840"], 0x1, 0x0, &(0x7f0000000180)="0e"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=ANY=[]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x24, 0x0, &(0x7f0000000400)=[@request_death={0x400c630e, 0x4, 0x2}, @acquire_done={0x40106309, 0x0, 0x2}], 0x5d, 0x0, &(0x7f0000000540)="3515cc2013d450ad834aafa53b888969de972a88ebc206e0a10802ee0c3d8e4d552323735e4c528bf18f884b81e7b6bcd9eed952ccb5fce2d90375a65544fd0d3501b5052719b4a6539d065327a6b15316b94cab919f53c40d1b1d6bd1"}) 07:14:03 executing program 4: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000080)) write$P9_RMKDIR(r1, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x49, 0x0, 0x3}}, 0x14) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f00000002c0)=0x54) accept4$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000380)={@remote, r2}, 0x14) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x1, {0xa, 0x4e24, 0x0, @loopback, 0x1}}}, 0x32) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000500)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000540)={'ah\x00'}, &(0x7f0000000580)=0x1e) getrusage(0x1, &(0x7f00000000c0)) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000280)=0x2000000061) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000600)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)=ANY=[], 0x0) 07:14:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6gretap0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 07:14:03 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x1000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x2) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x200) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) dup3(r1, r0, 0x0) write(r0, &(0x7f0000000040)='\x00', 0x1) 07:14:03 executing program 6: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x72fffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b63000012634840"], 0x1, 0x0, &(0x7f0000000180)="0e"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=ANY=[]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x24, 0x0, &(0x7f0000000400)=[@request_death={0x400c630e, 0x4, 0x2}, @acquire_done={0x40106309, 0x0, 0x2}], 0x5d, 0x0, &(0x7f0000000540)="3515cc2013d450ad834aafa53b888969de972a88ebc206e0a10802ee0c3d8e4d552323735e4c528bf18f884b81e7b6bcd9eed952ccb5fce2d90375a65544fd0d3501b5052719b4a6539d065327a6b15316b94cab919f53c40d1b1d6bd1"}) 07:14:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000100)={'veth0\x00', @ifru_data=&(0x7f00000000c0)="2ea114cb04b0a6552bfc798ca933e067e6111f104bf6603ad2637a4f6d1c2d58"}) 07:14:03 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{}, 0x2000}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r2 = getpgid(0xffffffffffffffff) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000640)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4, 0x6}}, 0x30) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={r2, r3}, 0xc) socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000400)=""/188, &(0x7f00000004c0)=0xbc) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000680)=""/201) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x800, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) unshare(0x40000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) connect$netlink(r0, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x40020}, 0xc) getpriority(0x0, r2) ioctl$sock_ifreq(r5, 0x8923, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) [ 159.499361] binder: 11027:11034 ERROR: BC_REGISTER_LOOPER called without request [ 159.526039] binder: 11020:11045 ERROR: BC_REGISTER_LOOPER called without request [ 159.540468] IPVS: Creating netns size=2552 id=16 07:14:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) syncfs(0xffffffffffffffff) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x131) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000140)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) sendfile(r2, r3, 0x0, 0xa5cc550) [ 159.545485] binder: 11027:11034 got reply transaction with no transaction stack [ 159.550736] binder: 11027:11050 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 159.550759] binder: 11027:11050 BC_ACQUIRE_DONE u0000000000000000 no match [ 159.572333] binder: 11020:11030 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 159.579487] binder: 11020:11030 BC_ACQUIRE_DONE u0000000000000000 no match 07:14:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6gretap0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 159.603894] binder: 11027:11034 transaction failed 29201/-71, size 0-0 line 2922 07:14:04 executing program 6: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x72fffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b63000012634840"], 0x1, 0x0, &(0x7f0000000180)="0e"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=ANY=[]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x24, 0x0, &(0x7f0000000400)=[@request_death={0x400c630e, 0x4, 0x2}, @acquire_done={0x40106309, 0x0, 0x2}], 0x5d, 0x0, &(0x7f0000000540)="3515cc2013d450ad834aafa53b888969de972a88ebc206e0a10802ee0c3d8e4d552323735e4c528bf18f884b81e7b6bcd9eed952ccb5fce2d90375a65544fd0d3501b5052719b4a6539d065327a6b15316b94cab919f53c40d1b1d6bd1"}) [ 159.651493] binder: 11020:11045 got reply transaction with no transaction stack [ 159.686298] binder: 11020:11045 transaction failed 29201/-71, size 0-0 line 2922 07:14:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000080)}) [ 159.730763] binder: 11059:11061 ERROR: BC_REGISTER_LOOPER called without request [ 159.758263] binder: 11059:11061 got reply transaction with no transaction stack [ 159.775663] binder: release 11067:11068 transaction 32 out, still active [ 159.785132] binder: 11059:11061 transaction failed 29201/-71, size 0-0 line 2922 [ 159.785635] binder: 11059:11069 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 159.785659] binder: 11059:11069 BC_ACQUIRE_DONE u0000000000000000 no match [ 159.795922] binder: 11067:11068 transaction failed 29189/0, size 0-0 line 2946 [ 159.795953] binder: send failed reply for transaction 32, target dead [ 159.801321] binder_alloc: binder_alloc_mmap_handler: 11067 20001000-20004000 already mapped failed -16 07:14:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000080)}) [ 159.801579] binder: BINDER_SET_CONTEXT_MGR already set [ 159.801587] binder: 11067:11068 ioctl 40046207 0 returned -16 [ 159.801688] binder_alloc: 11067: binder_alloc_buf, no vma [ 159.801726] binder: 11067:11070 transaction failed 29189/-3, size 0-0 line 3137 [ 159.865153] binder: undelivered TRANSACTION_COMPLETE 07:14:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000080)}) [ 159.882386] binder: undelivered TRANSACTION_ERROR: 29189 [ 159.891475] binder: undelivered TRANSACTION_ERROR: 29190 [ 159.896750] binder_alloc: 11072: binder_alloc_buf, no vma [ 159.896792] binder: 11072:11073 transaction failed 29189/-3, size 0-0 line 3137 [ 159.896800] binder: send failed reply for transaction 36 to 11072:11073 [ 159.923866] binder: BINDER_SET_CONTEXT_MGR already set [ 159.938906] binder: 11075:11076 ioctl 40046207 0 returned -16 [ 159.938910] binder: undelivered TRANSACTION_ERROR: 29190 [ 159.944976] binder: undelivered TRANSACTION_COMPLETE [ 159.944991] binder: undelivered TRANSACTION_ERROR: 29189 [ 159.952084] IPVS: Creating netns size=2552 id=17 [ 159.985628] binder: 11075:11076 transaction failed 29189/-22, size 0-0 line 3014 [ 160.003399] binder: undelivered TRANSACTION_ERROR: 29189 [ 160.045646] pktgen: kernel_thread() failed for cpu 0 [ 160.051500] binder: 11075:11082 got reply transaction with no transaction stack [ 160.055175] pktgen: Cannot create thread for cpu 0 (-4) [ 160.055239] pktgen: kernel_thread() failed for cpu 1 [ 160.055253] pktgen: Cannot create thread for cpu 1 (-4) [ 160.055255] pktgen: Initialization failed for all threads [ 160.082372] binder: 11075:11082 transaction failed 29201/-71, size 0-0 line 2922 [ 160.262846] pktgen: kernel_thread() failed for cpu 0 [ 160.268016] pktgen: Cannot create thread for cpu 0 (-4) [ 160.290486] pktgen: kernel_thread() failed for cpu 1 [ 160.295641] pktgen: Cannot create thread for cpu 1 (-4) [ 160.303668] pktgen: Initialization failed for all threads [ 160.721174] binder: undelivered TRANSACTION_ERROR: 29201 07:14:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000280)=""/113) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x401004000000016) 07:14:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000080)}) 07:14:05 executing program 6: r0 = socket$inet6(0xa, 0x202000000802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='limits\x00') sendfile(r0, r1, &(0x7f0000000100)=0x2000000, 0x10000000000) 07:14:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 07:14:05 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x1000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x2) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x200) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) dup3(r1, r0, 0x0) write(r0, &(0x7f0000000040)='\x00', 0x1) 07:14:05 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{}, 0x2000}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r2 = getpgid(0xffffffffffffffff) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000640)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4, 0x6}}, 0x30) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={r2, r3}, 0xc) socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000400)=""/188, &(0x7f00000004c0)=0xbc) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000680)=""/201) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x800, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) unshare(0x40000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) connect$netlink(r0, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x40020}, 0xc) getpriority(0x0, r2) ioctl$sock_ifreq(r5, 0x8923, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) 07:14:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) syncfs(0xffffffffffffffff) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x131) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000140)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) sendfile(r2, r3, 0x0, 0xa5cc550) 07:14:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000080)}) 07:14:05 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) syncfs(0xffffffffffffffff) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x131) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000140)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) sendfile(r2, r3, 0x0, 0xa5cc550) 07:14:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback, 0x0, 0x3c}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x2, {{'deflate\x00'}}}]}, 0x138}}, 0x0) [ 161.409301] binder: release 11100:11102 transaction 41 out, still active [ 161.418280] binder: 11100:11102 transaction failed 29189/0, size 0-0 line 2946 [ 161.428427] binder: BINDER_SET_CONTEXT_MGR already set [ 161.435014] binder: undelivered TRANSACTION_COMPLETE [ 161.445925] binder: 11095:11108 ioctl 40046207 0 returned -16 07:14:05 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x8ad) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000000d100)=[{{&(0x7f0000000500)=@xdp={0x2c, 0x1, 0x0, 0x21}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000640)="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", 0x1000}], 0x1, &(0x7f0000002040), 0x0, 0x10}, 0x562bc5df}, {{&(0x7f0000009800)=@nfc, 0x80, &(0x7f000000bcc0), 0x0, &(0x7f0000000000)}}], 0x2, 0x20000004) [ 161.455549] binder: send failed reply for transaction 41, target dead [ 161.475312] binder: release 11095:11108 transaction 43 out, still active [ 161.487134] binder: undelivered TRANSACTION_COMPLETE 07:14:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000080)}) [ 161.513895] binder: undelivered TRANSACTION_ERROR: 29190 [ 161.536271] binder: 11095:11120 got reply transaction with no transaction stack [ 161.538854] binder: send failed reply for transaction 43, target dead 07:14:06 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone(0x0, &(0x7f0000000280), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) tgkill(r1, r1, 0x0) 07:14:06 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 07:14:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000001c0)=0x10000000000062) read(r1, &(0x7f0000000040)=""/11, 0xffffff3a) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000500)) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 161.593286] binder: 11095:11120 transaction failed 29201/-71, size 0-0 line 2922 [ 161.596708] binder_alloc: 11124: binder_alloc_buf, no vma [ 161.596748] binder: 11124:11126 transaction failed 29189/-3, size 0-0 line 3137 [ 161.596755] binder: send failed reply for transaction 46 to 11124:11126 [ 161.621421] binder: undelivered TRANSACTION_ERROR: 29190 [ 161.627520] binder: undelivered TRANSACTION_COMPLETE [ 161.650172] binder: undelivered TRANSACTION_ERROR: 29189 07:14:06 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone(0x0, &(0x7f0000000280), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) tgkill(r1, r1, 0x0) [ 162.195670] binder: undelivered TRANSACTION_ERROR: 29201 [ 162.793030] IPVS: Creating netns size=2552 id=18 07:14:07 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{}, 0x2000}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r2 = getpgid(0xffffffffffffffff) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000640)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4, 0x6}}, 0x30) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={r2, r3}, 0xc) socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000400)=""/188, &(0x7f00000004c0)=0xbc) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000680)=""/201) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x800, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) unshare(0x40000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) connect$netlink(r0, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x40020}, 0xc) getpriority(0x0, r2) ioctl$sock_ifreq(r5, 0x8923, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) 07:14:07 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone(0x0, &(0x7f0000000280), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) tgkill(r1, r1, 0x0) 07:14:07 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000056c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000014000300ae2328252aff5ff4000000000000000008001b0000000000"], 0x1}}, 0x0) 07:14:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180)}}], 0x0, 0x0, &(0x7f0000000080)}) 07:14:07 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 07:14:07 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) syncfs(0xffffffffffffffff) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x131) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000140)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) sendfile(r2, r3, 0x0, 0xa5cc550) 07:14:07 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) syncfs(0xffffffffffffffff) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x131) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000140)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) sendfile(r2, r3, 0x0, 0xa5cc550) 07:14:07 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0x0, 0x1, {0x0, 0x4}}, 0x20) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0xf, 0x10000, {0x0, 0x0, 0x0, {}, {0x6}, @rumble={0x4, 0x2}}, {0x0, 0x8, 0x0, {0x0, 0x10001}, {0x6}, @cond=[{0x0, 0x9, 0xd85, 0x45, 0x0, 0x100000000}, {0x30, 0x7, 0x0, 0x4, 0x0, 0x2}]}}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x3) 07:14:07 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) clone(0x0, &(0x7f0000000280), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) tgkill(r1, r1, 0x0) 07:14:07 executing program 4: r0 = memfd_create(&(0x7f000000e000)="000f", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c460808007102000000"], 0xc) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000040)="d230cdf8887871791b463e1d325d8c55f3b8ec379af07d5e31ec34ec715be08473718fc3") socket$inet6(0xa, 0x1000000000002, 0x0) 07:14:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc0a85320, &(0x7f0000000280)={0x80}) [ 163.510146] binder: release 11171:11176 transaction 49 out, still active [ 163.534356] binder: undelivered TRANSACTION_COMPLETE [ 163.537329] binder: 11171:11176 transaction failed 29189/0, size 0-0 line 2946 [ 163.537336] binder: send failed reply for transaction 49, target dead 07:14:08 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setrlimit(0x0, &(0x7f0000000080)) prlimit64(0x0, 0x0, &(0x7f0000000040), &(0x7f00009c4ff0)) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) 07:14:08 executing program 0: mq_open(&(0x7f0000e62ffb)='..\x00', 0x0, 0x0, &(0x7f0000000000)) 07:14:08 executing program 7: r0 = socket(0xa, 0x806, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000180)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @dev}, 0x4, 0x0, 0x3, 0x6ec, 0x0, &(0x7f0000000000)='veth1_to_bridge\x00'}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x100, 0x0) write$P9_RSTAT(r3, &(0x7f00000001c0)={0x8b, 0x7d, 0x2, {0x0, 0x84, 0x4, 0x0, {0x2, 0x4, 0x5}, 0x7310000, 0x207, 0xecf6, 0xe1, 0x20, 'vmnet0ppp1trustedwlan1usercgroup', 0x1b, 'md5sum@)securitykeyringbdev', 0x6, '/ppp1\x00', 0x10, 'veth1_to_bridge\x00'}}, 0x8b) ioctl$TIOCSBRK(r3, 0x5427) ioctl$TCSBRK(r3, 0x5409, 0x878) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x337, 0x0) [ 163.662921] binder: undelivered TRANSACTION_ERROR: 29190 07:14:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) socket$inet6(0xa, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r2, &(0x7f0000000900)=[{&(0x7f00000009c0)="1f", 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) write$binfmt_misc(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="906a4cda75a8ad6f361b26f9e859fbce19037a4e3bd003961bdaf95c0f8565fbdcf99c4a05b6397c3d41285a8227dd96386433f323398932e587af7a271edbb1f06ea83eb9d0d5c48ca9d720c7eec7e1a4514b7fed1176b7c93b314aaf110547c6ce438b00c217bbc67cd020ba2270915022cdc0f89366d912df718399f4d9fcb3d09db37b6aaaef9255d9c8fb1f49a617fe09db2415b2401b29a971530e478e3a401bb55575c876c93b5a4a5e43067f30f9257541e33555e4748efc11b63df6dce501ef93cf4d35d793652168f0365ec83cb600b3627002767bc2744c742c4c322739f087aecf67b17217fc912529f41a8dc889ef"], 0xf5) sendfile(r1, r2, &(0x7f0000000200), 0x20000102000007) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") 07:14:08 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') preadv(r0, &(0x7f0000000240), 0x2000000000000308, 0x10400003) [ 165.275918] pktgen: kernel_thread() failed for cpu 0 [ 165.281193] pktgen: Cannot create thread for cpu 0 (-4) [ 165.286602] pktgen: kernel_thread() failed for cpu 1 [ 165.291908] pktgen: Cannot create thread for cpu 1 (-4) [ 165.297260] pktgen: Initialization failed for all threads 07:14:09 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{}, 0x2000}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r2 = getpgid(0xffffffffffffffff) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000640)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4, 0x6}}, 0x30) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={r2, r3}, 0xc) socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000400)=""/188, &(0x7f00000004c0)=0xbc) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000680)=""/201) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x800, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) unshare(0x40000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) connect$netlink(r0, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x40020}, 0xc) getpriority(0x0, r2) ioctl$sock_ifreq(r5, 0x8923, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) 07:14:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000080)) unshare(0x40000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa283008100000002000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 07:14:09 executing program 4: r0 = memfd_create(&(0x7f000000e000)="000f", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c460808007102000000"], 0xc) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000040)="d230cdf8887871791b463e1d325d8c55f3b8ec379af07d5e31ec34ec715be08473718fc3") socket$inet6(0xa, 0x1000000000002, 0x0) 07:14:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) syncfs(0xffffffffffffffff) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x131) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000140)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) sendfile(r2, r3, 0x0, 0xa5cc550) 07:14:09 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) syncfs(0xffffffffffffffff) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x131) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000140)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) sendfile(r2, r3, 0x0, 0xa5cc550) 07:14:09 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 07:14:09 executing program 7: r0 = socket(0xa, 0x806, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000180)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @dev}, 0x4, 0x0, 0x3, 0x6ec, 0x0, &(0x7f0000000000)='veth1_to_bridge\x00'}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x100, 0x0) write$P9_RSTAT(r3, &(0x7f00000001c0)={0x8b, 0x7d, 0x2, {0x0, 0x84, 0x4, 0x0, {0x2, 0x4, 0x5}, 0x7310000, 0x207, 0xecf6, 0xe1, 0x20, 'vmnet0ppp1trustedwlan1usercgroup', 0x1b, 'md5sum@)securitykeyringbdev', 0x6, '/ppp1\x00', 0x10, 'veth1_to_bridge\x00'}}, 0x8b) ioctl$TIOCSBRK(r3, 0x5427) ioctl$TCSBRK(r3, 0x5409, 0x878) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x337, 0x0) 07:14:09 executing program 5: r0 = socket(0xa, 0x806, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000180)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @dev}, 0x4, 0x0, 0x3, 0x6ec, 0x0, &(0x7f0000000000)='veth1_to_bridge\x00'}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x100, 0x0) write$P9_RSTAT(r3, &(0x7f00000001c0)={0x8b, 0x7d, 0x2, {0x0, 0x84, 0x4, 0x0, {0x2, 0x4, 0x5}, 0x7310000, 0x207, 0xecf6, 0xe1, 0x20, 'vmnet0ppp1trustedwlan1usercgroup', 0x1b, 'md5sum@)securitykeyringbdev', 0x6, '/ppp1\x00', 0x10, 'veth1_to_bridge\x00'}}, 0x8b) ioctl$TIOCSBRK(r3, 0x5427) ioctl$TCSBRK(r3, 0x5409, 0x878) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x337, 0x0) [ 165.712940] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 07:14:10 executing program 4: r0 = memfd_create(&(0x7f000000e000)="000f", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c460808007102000000"], 0xc) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000040)="d230cdf8887871791b463e1d325d8c55f3b8ec379af07d5e31ec34ec715be08473718fc3") socket$inet6(0xa, 0x1000000000002, 0x0) 07:14:10 executing program 7: r0 = socket(0xa, 0x806, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000180)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @dev}, 0x4, 0x0, 0x3, 0x6ec, 0x0, &(0x7f0000000000)='veth1_to_bridge\x00'}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x100, 0x0) write$P9_RSTAT(r3, &(0x7f00000001c0)={0x8b, 0x7d, 0x2, {0x0, 0x84, 0x4, 0x0, {0x2, 0x4, 0x5}, 0x7310000, 0x207, 0xecf6, 0xe1, 0x20, 'vmnet0ppp1trustedwlan1usercgroup', 0x1b, 'md5sum@)securitykeyringbdev', 0x6, '/ppp1\x00', 0x10, 'veth1_to_bridge\x00'}}, 0x8b) ioctl$TIOCSBRK(r3, 0x5427) ioctl$TCSBRK(r3, 0x5409, 0x878) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x337, 0x0) 07:14:10 executing program 4: r0 = memfd_create(&(0x7f000000e000)="000f", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c460808007102000000"], 0xc) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000040)="d230cdf8887871791b463e1d325d8c55f3b8ec379af07d5e31ec34ec715be08473718fc3") socket$inet6(0xa, 0x1000000000002, 0x0) 07:14:10 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 07:14:10 executing program 6: r0 = memfd_create(&(0x7f000000e000)="000f", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c460808007102000000"], 0xc) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000040)="d230cdf8887871791b463e1d325d8c55f3b8ec379af07d5e31ec34ec715be08473718fc3") socket$inet6(0xa, 0x1000000000002, 0x0) 07:14:10 executing program 1: r0 = memfd_create(&(0x7f000000e000)="000f", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c460808007102000000"], 0xc) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000040)="d230cdf8887871791b463e1d325d8c55f3b8ec379af07d5e31ec34ec715be08473718fc3") socket$inet6(0xa, 0x1000000000002, 0x0) 07:14:10 executing program 6: r0 = memfd_create(&(0x7f000000e000)="000f", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c460808007102000000"], 0xc) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000040)="d230cdf8887871791b463e1d325d8c55f3b8ec379af07d5e31ec34ec715be08473718fc3") socket$inet6(0xa, 0x1000000000002, 0x0) 07:14:10 executing program 6: r0 = memfd_create(&(0x7f000000e000)="000f", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c460808007102000000"], 0xc) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000040)="d230cdf8887871791b463e1d325d8c55f3b8ec379af07d5e31ec34ec715be08473718fc3") socket$inet6(0xa, 0x1000000000002, 0x0) [ 167.877648] pktgen: kernel_thread() failed for cpu 0 [ 167.883130] pktgen: Cannot create thread for cpu 0 (-4) [ 167.888875] pktgen: kernel_thread() failed for cpu 1 [ 167.894345] pktgen: Cannot create thread for cpu 1 (-4) [ 167.899706] pktgen: Initialization failed for all threads [ 168.004594] pktgen: kernel_thread() failed for cpu 0 [ 168.009766] pktgen: Cannot create thread for cpu 0 (-4) [ 168.015479] pktgen: kernel_thread() failed for cpu 1 [ 168.020644] pktgen: Cannot create thread for cpu 1 (-4) [ 168.026008] pktgen: Initialization failed for all threads 07:14:12 executing program 7: r0 = socket(0xa, 0x806, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000180)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @dev}, 0x4, 0x0, 0x3, 0x6ec, 0x0, &(0x7f0000000000)='veth1_to_bridge\x00'}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x100, 0x0) write$P9_RSTAT(r3, &(0x7f00000001c0)={0x8b, 0x7d, 0x2, {0x0, 0x84, 0x4, 0x0, {0x2, 0x4, 0x5}, 0x7310000, 0x207, 0xecf6, 0xe1, 0x20, 'vmnet0ppp1trustedwlan1usercgroup', 0x1b, 'md5sum@)securitykeyringbdev', 0x6, '/ppp1\x00', 0x10, 'veth1_to_bridge\x00'}}, 0x8b) ioctl$TIOCSBRK(r3, 0x5427) ioctl$TCSBRK(r3, 0x5409, 0x878) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x337, 0x0) [ 168.125831] pktgen: kernel_thread() failed for cpu 0 [ 168.131256] pktgen: Cannot create thread for cpu 0 (-4) [ 168.136830] pktgen: kernel_thread() failed for cpu 1 [ 168.142105] pktgen: Cannot create thread for cpu 1 (-4) [ 168.153990] pktgen: Initialization failed for all threads 07:14:12 executing program 0: syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) memfd_create(&(0x7f0000000300)='\x00', 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) memfd_create(&(0x7f0000000740)='system,eth1\x00', 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/member\x00', 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/uhid\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000800)='/dev/keychord\x00', 0x0, 0x0) inotify_init() openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/status\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/urandom\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002580)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002600)='/selinux/enforce\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000002640)='/dev/urandom\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002680)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000d40)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000007440)='/dev/keychord\x00', 0x0, 0x0) eventfd(0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000074c0)='/selinux/checkreqprot\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/rtc0\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000007580)='/dev/autofs\x00', 0x0, 0x0) socket$inet(0x2, 0x8080a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000007600)='/dev/snapshot\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x0) syz_open_dev$loop(&(0x7f00000077c0)='/dev/loop#\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007800)='/dev/rfkill\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007840)='/dev/rfkill\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000007c80)='/selinux/load\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000007cc0), 0x0) creat(&(0x7f0000007d00)='./file0\x00', 0x0) pipe2(&(0x7f0000007d40), 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) openat$pfkey(0xffffffffffffff9c, &(0x7f0000007fc0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000008000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) memfd_create(&(0x7f0000008040)='cgroup\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000008080)='/dev/snd/seq\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000009840)='./file0\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000009880)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000098c0)='/selinux/relabel\x00', 0x2, 0x0) pipe2(&(0x7f0000009900), 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000099c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000009c40)='/selinux/status\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000009c80)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000009cc0)='/selinux/enforce\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f000000a000)='/dev/fuse\x00', 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$null(0xffffffffffffff9c, &(0x7f000000b580)='/dev/null\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) dup3(r1, r0, 0x0) 07:14:12 executing program 1: r0 = memfd_create(&(0x7f000000e000)="000f", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c460808007102000000"], 0xc) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000040)="d230cdf8887871791b463e1d325d8c55f3b8ec379af07d5e31ec34ec715be08473718fc3") socket$inet6(0xa, 0x1000000000002, 0x0) 07:14:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='\x00\x00\x00\x00ip6_tables_targets\x00') getdents(r2, &(0x7f0000001100)=""/182, 0xffffffff00000018) 07:14:12 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) 07:14:12 executing program 5: r0 = socket(0xa, 0x806, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000180)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @dev}, 0x4, 0x0, 0x3, 0x6ec, 0x0, &(0x7f0000000000)='veth1_to_bridge\x00'}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x100, 0x0) write$P9_RSTAT(r3, &(0x7f00000001c0)={0x8b, 0x7d, 0x2, {0x0, 0x84, 0x4, 0x0, {0x2, 0x4, 0x5}, 0x7310000, 0x207, 0xecf6, 0xe1, 0x20, 'vmnet0ppp1trustedwlan1usercgroup', 0x1b, 'md5sum@)securitykeyringbdev', 0x6, '/ppp1\x00', 0x10, 'veth1_to_bridge\x00'}}, 0x8b) ioctl$TIOCSBRK(r3, 0x5427) ioctl$TCSBRK(r3, 0x5409, 0x878) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x337, 0x0) 07:14:12 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = memfd_create(&(0x7f0000000200)="646176f541b4a235d704c5e2a5ea43bee54769093bff29978456f352be914a7ff577de963bfc31b25f01e02696b8191ecbf77804bbb262db08a5818de05f832db21b0c0765b71b34e2a4b32d8cf34c334386ee169f1793b49722f703000020013f4d632a78cbe9ef966eb79d2f984c1058d33914b6f170aa39ac2ef74393ea37e96f4541858e7fdb12cff66cd35eb580a16341ce5ee07fe9a79bccfe2220bfba22e477af5c6aba493380d76cd15664d9ca10bc9ee5aa490315fd201625c873ed323ce17fadacdee6cd5ee6f3c5581bcb570e4b90a64ea2ba35cb1fe7fd4729c2de12df8f1a76359fbf6435411239ea0bf5900bf07040dd8f47b30053c64fd71d992a2d49f2e5fe167e78ee382c5c49e539b3a6428a4588b3b67378166cb560", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) sendfile(r0, r0, &(0x7f0000000000), 0xffffffff) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000003c0)) tkill(r1, 0x1000000000016) 07:14:12 executing program 2: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f00000000c0)={'tunl0\x00', @ifru_settings={0x400, 0x0, @raw_hdlc=&(0x7f0000000040)}}) r1 = dup(r0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 07:14:12 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x3}) 07:14:12 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x120, 0x36b) write(r0, &(0x7f0000000140), 0x0) 07:14:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='\x00\x00\x00\x00ip6_tables_targets\x00') getdents(r2, &(0x7f0000001100)=""/182, 0xffffffff00000018) [ 168.386524] IPVS: Creating netns size=2552 id=19 07:14:12 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x3}) 07:14:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='\x00\x00\x00\x00ip6_tables_targets\x00') getdents(r2, &(0x7f0000001100)=""/182, 0xffffffff00000018) 07:14:12 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES64=r0], 0xfed3) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffd}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 07:14:12 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = memfd_create(&(0x7f0000000200)="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", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) sendfile(r0, r0, &(0x7f0000000000), 0xffffffff) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000003c0)) tkill(r1, 0x1000000000016) 07:14:12 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x3}) 07:14:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='\x00\x00\x00\x00ip6_tables_targets\x00') getdents(r2, &(0x7f0000001100)=""/182, 0xffffffff00000018) 07:14:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000140)=@ethtool_cmd={0x22}}) 07:14:13 executing program 1: r0 = memfd_create(&(0x7f000000e000)="000f", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c460808007102000000"], 0xc) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000040)="d230cdf8887871791b463e1d325d8c55f3b8ec379af07d5e31ec34ec715be08473718fc3") socket$inet6(0xa, 0x1000000000002, 0x0) 07:14:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[{0x3}, {}, {}, {}, {}, {}, {}], 0x2000000000000181) 07:14:13 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x3}) [ 168.715259] IPVS: Creating netns size=2552 id=20 07:14:13 executing program 5: r0 = socket(0xa, 0x806, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000180)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @dev}, 0x4, 0x0, 0x3, 0x6ec, 0x0, &(0x7f0000000000)='veth1_to_bridge\x00'}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x100, 0x0) write$P9_RSTAT(r3, &(0x7f00000001c0)={0x8b, 0x7d, 0x2, {0x0, 0x84, 0x4, 0x0, {0x2, 0x4, 0x5}, 0x7310000, 0x207, 0xecf6, 0xe1, 0x20, 'vmnet0ppp1trustedwlan1usercgroup', 0x1b, 'md5sum@)securitykeyringbdev', 0x6, '/ppp1\x00', 0x10, 'veth1_to_bridge\x00'}}, 0x8b) ioctl$TIOCSBRK(r3, 0x5427) ioctl$TCSBRK(r3, 0x5409, 0x878) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x337, 0x0) 07:14:13 executing program 4: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x61}, {0x6}]}, 0x10) 07:14:13 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) close(r0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077a6df5ab82b4c4f8d", 0x0) 07:14:13 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = memfd_create(&(0x7f0000000200)="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", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) sendfile(r0, r0, &(0x7f0000000000), 0xffffffff) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000003c0)) tkill(r1, 0x1000000000016) 07:14:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[{0x3}, {}, {}, {}, {}, {}, {}], 0x2000000000000181) 07:14:13 executing program 6: r0 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x0) ppoll(&(0x7f00000016c0)=[{r0}], 0x1, &(0x7f0000001700)={0x77359400}, &(0x7f0000001740), 0x8) ioctl$TIOCSBRK(r0, 0x40044591) 07:14:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000240)=r3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"69726c61bd15000000001f0000000020", 0x1013}) 07:14:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001fc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000001f80)={&(0x7f00000001c0)={0x1c, 0x13, 0x909, 0x0, 0x0, {0x1}, [@nested={0x8, 0x3, [@generic='C']}]}, 0x1c}}, 0x0) 07:14:13 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x1}}, 0x32) r1 = dup(r0) getsockopt$packet_buf(r1, 0x111, 0x4, &(0x7f0000000480)=""/162, &(0x7f0000000040)=0xa2) 07:14:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[{0x3}, {}, {}, {}, {}, {}, {}], 0x2000000000000181) 07:14:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x2800) write(r2, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0xe) close(r1) 07:14:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000040)}, 0x0) 07:14:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[{0x3}, {}, {}, {}, {}, {}, {}], 0x2000000000000181) 07:14:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) dup2(r3, r2) 07:14:13 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = memfd_create(&(0x7f0000000200)="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", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) sendfile(r0, r0, &(0x7f0000000000), 0xffffffff) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000003c0)) tkill(r1, 0x1000000000016) 07:14:13 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 07:14:14 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 07:14:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) 07:14:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$netlink(r1, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000330000000000000000000000000000000100000000000000000000000036d5ad45000000000000000000000000000000cbcd4b85b2420ea6924a442c000000d600000000000000000000000000000000000000000000000000000000000000000000000000000000c50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0f0000d3f8601975f30ba65a0244b00bfc900dd2e0183d9eac329a5b45a789d8758fb093d703fba38b2acf88ce2339a9a0950c931179e0554a3a4d1b685da9decfa7e2f8ae0c95c5d19877b82fea1961628f2329ab606520e544bf905e5039874162d1ee93ac67ff98b5cbf995803904b4cbb28402c3dd6f4a9f5eb1d04b54d0cc8bb0893b42fa16"], 0x1}}, 0x0) 07:14:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 07:14:14 executing program 6: r0 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x0) ppoll(&(0x7f00000016c0)=[{r0}], 0x1, &(0x7f0000001700)={0x77359400}, &(0x7f0000001740), 0x8) ioctl$TIOCSBRK(r0, 0x40044591) 07:14:14 executing program 3: mprotect(&(0x7f0000450000/0x4000)=nil, 0x4000, 0x400000000) 07:14:14 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$eventfd(r1, &(0x7f0000000040), 0x19e) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9205, &(0x7f0000000080)) tkill(r0, 0x1000000000016) 07:14:14 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f00000000c0), 0x4) 07:14:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 07:14:14 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000), 0x10) 07:14:14 executing program 1: prctl$intptr(0x1c, 0x5) setresuid(0x0, 0x0, 0x0) 07:14:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) munmap(&(0x7f0000000000/0xd000)=nil, 0xd000) getsockopt$inet_buf(r1, 0x0, 0x41, &(0x7f0000000180)=""/144, &(0x7f000000effc)=0x90) 07:14:14 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$P9_ROPEN(r3, &(0x7f0000000180)={0x18}, 0x18) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) 07:14:14 executing program 6: r0 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x0) ppoll(&(0x7f00000016c0)=[{r0}], 0x1, &(0x7f0000001700)={0x77359400}, &(0x7f0000001740), 0x8) ioctl$TIOCSBRK(r0, 0x40044591) 07:14:14 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time}], 0x30) unlink(&(0x7f0000000200)='./control/file0\x00') r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) fchmodat(r2, &(0x7f00000001c0)='./control\x00', 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) close(r0) 07:14:14 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$eventfd(r1, &(0x7f0000000040), 0x19e) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9205, &(0x7f0000000080)) tkill(r0, 0x1000000000016) 07:14:14 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 07:14:14 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$eventfd(r1, &(0x7f0000000040), 0x19e) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9205, &(0x7f0000000080)) tkill(r0, 0x1000000000016) 07:14:14 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$eventfd(r1, &(0x7f0000000040), 0x19e) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9205, &(0x7f0000000080)) tkill(r0, 0x1000000000016) 07:14:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 07:14:15 executing program 6: r0 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x0) ppoll(&(0x7f00000016c0)=[{r0}], 0x1, &(0x7f0000001700)={0x77359400}, &(0x7f0000001740), 0x8) ioctl$TIOCSBRK(r0, 0x40044591) 07:14:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000140)={@remote}, 0x14) 07:14:15 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$eventfd(r1, &(0x7f0000000040), 0x19e) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9205, &(0x7f0000000080)) tkill(r0, 0x1000000000016) 07:14:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000180), 0x4) 07:14:15 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$eventfd(r1, &(0x7f0000000040), 0x19e) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9205, &(0x7f0000000080)) tkill(r0, 0x1000000000016) 07:14:15 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 07:14:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000c, 0x32, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000001080)=0x1e) 07:14:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={"00000000000000000000000005000207", 0x4203}) r1 = dup(r0) write$P9_RLERROR(r1, &(0x7f0000000200)={0x135, 0x7, 0x2, {0x2, '(*'}}, 0xfe05) 07:14:15 executing program 6: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x20000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084503, &(0x7f0000002ffc)) 07:14:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x30}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 07:14:15 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$P9_ROPEN(r3, &(0x7f0000000180)={0x18}, 0x18) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) 07:14:15 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$eventfd(r1, &(0x7f0000000040), 0x19e) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9205, &(0x7f0000000080)) tkill(r0, 0x1000000000016) [ 171.246004] input: syz1 as /devices/virtual/input/input24 07:14:15 executing program 6: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x201, 0x0, 0x0, {0xa, 0xc0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14}]}, 0x2c}}, 0x0) 07:14:15 executing program 0: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fremovexattr(r1, &(0x7f00000000c0)=@known='security.selinux\x00') clone(0x0, &(0x7f0000000440), &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) close(r0) 07:14:15 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e280000000b0affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 171.404114] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 171.485609] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 07:14:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 07:14:16 executing program 6: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc018620b, 0xfffffffffffff842) 07:14:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) fanotify_mark(0xffffffffffffffff, 0x1, 0x8000000, 0xffffffffffffffff, &(0x7f0000000440)='./file0/file0\x00') 07:14:16 executing program 3: mlock(&(0x7f00001ae000/0x3000)=nil, 0x3000) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) [ 171.911058] binder: 11569:11576 ioctl c018620b fffffffffffff842 returned -14 [ 171.942056] binder: 11569:11576 ioctl c018620b fffffffffffff842 returned -14 07:14:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, &(0x7f0000000080), &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000000080)) getgroups(0x3, &(0x7f0000000200)) 07:14:16 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fe, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000000)='8', 0x1}], 0x1) sendto$inet(r0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000400)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='ip6tnl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffde5, 0x0, &(0x7f00000000c0), 0x6) 07:14:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) fanotify_mark(0xffffffffffffffff, 0x1, 0x8000000, 0xffffffffffffffff, &(0x7f0000000440)='./file0/file0\x00') 07:14:16 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f00007a9000), 0xc, &(0x7f0000000000)={&(0x7f00006c1000)=@ipv6_newroute={0x20, 0x18, 0x501, 0x0, 0x0, {0xa, 0xfe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_METRICS={0x4}]}, 0x23f}}, 0x0) 07:14:16 executing program 3: mlock(&(0x7f00001ae000/0x3000)=nil, 0x3000) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 07:14:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "b441d632cdbbcb211363807aec73d3883762a61dc02d349bfa3ac974b987aa7fb97eb324d594fbbb77bab759418aa8d451d921e8f5d2cf2b08292111701192e97cac366dd3eb2e0fb039e58314ef4709c5f3556db6a1ab6b4fb2bdd83cdc26e8395ec4984ec3faf71a611d1569545d654cded93be827a85188b803c19c1b56aab522862a718b81e512b49690994d3425e33bd93f0e744c66a083c1f9f1bd7bb8f9e123c08f3f041ed3fdc058136cf0071a47cc0e38720a12e11e842a7b5b26dff07f578fdb9a7b14662a625c1ee76c41ccb2b1fc6376aa718e1067b9e4af511ef5b360dbfad326108bb033db193dab27974eb8c462739eaee51d87f31c516e7e391073770da3202e02c41a7277c847df24bd5b0a7ab6e252f3c8ebf00688cc55311d887e8bfd95a7f4c6a126af3fe26714ddb869c66d18f870631bbd497e8a06881b754ecdcdd0dcffc51cd52a6b560f8d64b63a1674745edc5f53b18a8ffcc5c2fbc4d2bbcc2faf3c189d9b36c0655d1394f5c127ec86b8a764a87b546c2b6ac37d0a8ec3edd7cda6f930570763dbdc0640d219749bd57c7c89eaadfdae41d654a46b17be069a32a7d94d29b612fbe61b8bd11a2d10ba5d4ac7014fc0465c3f144598bd1f913343e7293711040eee0ae8df1e49f04ed1037d4b742aed0e932116060aaf6b985238d2e10fb5b11d19d7801befed4833287d96a85a7cdd9e211a672760335655576fc0fa0336621c2b2b1018ef71bb5077c67ee5fa8d479d6776013363e98b1f1213712be7e47549b6035459008c509f0f983130a451531381ee3c1ab9e1cbb8e558b56ca1a70939389addc5f9632b37ff3f634abb504bb0be0a51649683f6e29588c15cda40255e173328681884ffef6729e9058c5623e1401fdcc7b8cb5623a8fd725fbeea05fc417c44e46500619218dff7c70aa068994c58883cada505a2aa85b6620dfe9c45b707c9aa1222b86972eae564b28a05ddfa3545df231fde2707d4bf67dc6ba41daba91dee8081e5c7e2bcfbebebd42d5ab8a32d6e098fd57233e3b813dc0d772134775def451823b7fef2bc93da01722cd613b9a3db7e2d4c51fb7b56006ee9cea53b62343599a56167388d45247f9289fb1cab67a7cb0c3665ddf1e1411875b4de3428b32fc6603691a023d8e4cb93c667acb7b535fb5f77af9a49640cbe8ffe3a193cf4df1b556a67cb753c60bdf978b871aa513c07074c6602037ebc32199290e3c7ac6f103ad9358951ad4de0c8f1b34951b0e6a48295975cf08b2c3c95064855fc95317e386f1c18608d1d08699003c998b93332cd316f17a5139d350cbfa9dabc3f77c4197a0186e50913978e980a7a028e7ccdeee718af028200e94a6b3a0ec93ba14b0c64dfaf3967e230d8cf876f26287d436ebc9588b52b43f2380836bfe3"}}}}}, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x200000000000004e, &(0x7f0000000000), &(0x7f0000000300), 0x8) 07:14:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', @ifru_addrs=@in={0x2, 0x0, @rand_addr}}) 07:14:16 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$P9_ROPEN(r3, &(0x7f0000000180)={0x18}, 0x18) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) 07:14:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) fanotify_mark(0xffffffffffffffff, 0x1, 0x8000000, 0xffffffffffffffff, &(0x7f0000000440)='./file0/file0\x00') 07:14:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000002c0), 0xc, &(0x7f0000000080)={&(0x7f0000000440)=@bridge_getneigh={0x28, 0x1e, 0x601, 0x0, 0x0, {}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0) 07:14:16 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000380)) 07:14:16 executing program 3: mlock(&(0x7f00001ae000/0x3000)=nil, 0x3000) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 07:14:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) fanotify_mark(0xffffffffffffffff, 0x1, 0x8000000, 0xffffffffffffffff, &(0x7f0000000440)='./file0/file0\x00') 07:14:17 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0x40045565, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil}) 07:14:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 07:14:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @local}}, 0x0, 0x20000000000007b}, 0x90) 07:14:17 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={"6c6f00000000000000000000000200"}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1, 0x0) readv(r0, &(0x7f00000001c0), 0xbf) 07:14:17 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0x40045565, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil}) 07:14:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000a0cff4)={0x4400000010, 0x0, 0x0, 0x70a0}, 0xc) 07:14:17 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 07:14:17 executing program 3: mlock(&(0x7f00001ae000/0x3000)=nil, 0x3000) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 07:14:17 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) clock_gettime(0x0, &(0x7f0000000200)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f00000001c0)={r3}, 0x373) 07:14:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, r0, 0x0) 07:14:18 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$P9_ROPEN(r3, &(0x7f0000000180)={0x18}, 0x18) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) 07:14:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 07:14:18 executing program 7: fstatfs(0xffffffffffffffff, &(0x7f0000000200)=""/97) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={&(0x7f00000001c0)="2e7df3e351ebe9b3d954f9aba6e4f6063c571c1f9de8", &(0x7f0000000080)}}, &(0x7f00000002c0)) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:18 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 07:14:18 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0x40045565, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil}) 07:14:18 executing program 3: socketpair(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000000)="6c6f00966fd651b15939f621a1c84a2c60d59800") 07:14:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, r0, 0x0) 07:14:18 executing program 5: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280), 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') sendfile(r0, r1, &(0x7f0000000000)=0x2f, 0x80000003) 07:14:18 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 07:14:18 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[{0x4}, {0x0, 0x7fffffff}], 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0x10000) 07:14:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_trie\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 07:14:18 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0x40045565, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil}) 07:14:18 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 07:14:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, r0, 0x0) 07:14:18 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, &(0x7f0000000040), &(0x7f000084effc), &(0x7f0000000000), &(0x7f00000000c0)) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000100)) ioprio_set$pid(0x2, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) 07:14:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') [ 174.420381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19521 sclass=netlink_route_socket [ 174.663272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19521 sclass=netlink_route_socket 07:14:19 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[{0x4}, {0x0, 0x7fffffff}], 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0x10000) 07:14:19 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, &(0x7f0000000040), &(0x7f000084effc), &(0x7f0000000000), &(0x7f00000000c0)) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000100)) ioprio_set$pid(0x2, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) 07:14:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x4004e23, @local}, 0x10) connect(r0, &(0x7f0000000140)=@nl=@unspec, 0x80) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000200), 0x73) 07:14:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 07:14:19 executing program 3: syz_emit_ethernet(0x1e, &(0x7f0000000000)={@remote, @broadcast, [], {@generic={0x88ca, "47c4858e3d63969d612baa3f6360119a"}}}, 0x0) 07:14:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, r0, 0x0) 07:14:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x4004e23, @local}, 0x10) connect(r0, &(0x7f0000000140)=@nl=@unspec, 0x80) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000200), 0x73) 07:14:19 executing program 5: clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) setitimer(0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 07:14:19 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[{0x4}, {0x0, 0x7fffffff}], 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0x10000) 07:14:19 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[{0x4}, {0x0, 0x7fffffff}], 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0x10000) 07:14:19 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, &(0x7f0000000040), &(0x7f000084effc), &(0x7f0000000000), &(0x7f00000000c0)) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000100)) ioprio_set$pid(0x2, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) 07:14:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x4004e23, @local}, 0x10) connect(r0, &(0x7f0000000140)=@nl=@unspec, 0x80) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000200), 0x73) 07:14:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 07:14:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) setgroups(0x0, &(0x7f0000000780)) 07:14:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x4004e23, @local}, 0x10) connect(r0, &(0x7f0000000140)=@nl=@unspec, 0x80) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000200), 0x73) 07:14:19 executing program 4: socket(0x18, 0x0, 0x3) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 07:14:20 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[{0x4}, {0x0, 0x7fffffff}], 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0x10000) 07:14:20 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, &(0x7f0000000040), &(0x7f000084effc), &(0x7f0000000000), &(0x7f00000000c0)) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000100)) ioprio_set$pid(0x2, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) 07:14:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)="c976701ba51f022a9899fd68ef8d83ff52db8a510a") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f0000000080)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 07:14:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 07:14:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000240)={{}, {0x0, r1/1000+30000}}, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getitimer(0x2, &(0x7f0000000000)) 07:14:20 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1}}, 0x2e) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x1}}, 0x2e) 07:14:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') write$cgroup_int(r0, &(0x7f0000000000)=0xfffffffffffffffb, 0x12) 07:14:20 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000080), 0x8000fffffffe) 07:14:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x323, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_PHYS_PORT_ID={0x4}]}, 0x38}}, 0x0) 07:14:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x800454d7, &(0x7f0000000100)) 07:14:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1f) sendto$inet6(r0, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000), 0x1c) 07:14:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') write$cgroup_int(r0, &(0x7f0000000000)=0xfffffffffffffffb, 0x12) 07:14:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[{0x4}, {0x0, 0x7fffffff}], 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0x10000) 07:14:20 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[{0x4}, {0x0, 0x7fffffff}], 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0x10000) 07:14:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x1, 0x0, &(0x7f0000002640)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/sockcreate\x00') pwritev(r1, &(0x7f0000001400), 0x2a6, 0x0) 07:14:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') write$cgroup_int(r0, &(0x7f0000000000)=0xfffffffffffffffb, 0x12) 07:14:20 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[{0x4}, {0x0, 0x7fffffff}], 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0x10000) 07:14:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x800454d7, &(0x7f0000000100)) 07:14:20 executing program 4: prctl$seccomp(0x2f, 0x4, &(0x7f0000000000)={0x0, &(0x7f0000a37000)}) 07:14:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') write$cgroup_int(r0, &(0x7f0000000000)=0xfffffffffffffffb, 0x12) 07:14:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000100)=0x7fff, 0x4) 07:14:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x800454d7, &(0x7f0000000100)) 07:14:20 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[{0x4}, {0x0, 0x7fffffff}], 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0x10000) 07:14:20 executing program 5: clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200)) setrlimit(0x0, &(0x7f0000000040)) 07:14:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000003c80)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000440)=@flushsa={0x14, 0x1c, 0x401}, 0x14}, 0x8}, 0x0) 07:14:20 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") fchdir(r0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket(0x18, 0x0, 0x1) connect(r4, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r4, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 07:14:20 executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 07:14:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[{0x4}, {0x0, 0x7fffffff}], 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0x10000) 07:14:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x800454d7, &(0x7f0000000100)) [ 176.597479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 07:14:21 executing program 4: r0 = socket$inet6(0xa, 0x8000000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000000)=""/56, &(0x7f00000000c0)=0x38) 07:14:21 executing program 4: r0 = socket$inet6(0xa, 0x8000000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000000)=""/56, &(0x7f00000000c0)=0x38) 07:14:21 executing program 4: r0 = socket$inet6(0xa, 0x8000000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000000)=""/56, &(0x7f00000000c0)=0x38) 07:14:21 executing program 4: r0 = socket$inet6(0xa, 0x8000000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000000)=""/56, &(0x7f00000000c0)=0x38) 07:14:21 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800001, &(0x7f0000000100)) chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) 07:14:21 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") fchdir(r0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket(0x18, 0x0, 0x1) connect(r4, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r4, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 07:14:21 executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 07:14:21 executing program 0: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_vif\x00') sendfile(r0, r1, &(0x7f0000000040), 0x1000000000043f) 07:14:21 executing program 4: r0 = socket(0x10, 0x400000003, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001740), 0x0, &(0x7f00000017c0)=""/91, 0x5b}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)=""/35, &(0x7f0000000040)=0x23) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', @ifru_flags}) 07:14:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x4) 07:14:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = epoll_create1(0x0) r2 = gettid() epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0xeb8c, &(0x7f00000001c0), 0x8) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 07:14:22 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@deltclass={0x24, 0x29, 0xb2675b17f04ae297, 0x0, 0x0, {0x0, r1, {}, {0x0, 0x7}}}, 0x24}}, 0x0) 07:14:22 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x2000000001, 0x0, 0x0, 0xfffffdfd}) 07:14:22 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x800100000000) 07:14:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000080)=0xb163bec70566be4b) ioctl$sock_inet_SIOCGARP(r3, 0x8955, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @link_local}, 0x0, {0x2, 0x0, @broadcast}, 'bridge_slave_0\x00'}) close(r3) dup3(r1, r2, 0x0) 07:14:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_settime(0x45d15bbf8a1cd1b3, &(0x7f0000000140)={0x77359400}) 07:14:22 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") fchdir(r0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket(0x18, 0x0, 0x1) connect(r4, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r4, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 07:14:22 executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 07:14:22 executing program 0: userfaultfd(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 07:14:22 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/28, 0x1c}], 0x1) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) 07:14:22 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r2, 0x0, 0x1) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000040)) tkill(r3, 0x1004000000016) close(r1) 07:14:22 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4209, r1, 0x20400004, &(0x7f00000000c0)={&(0x7f0000000200)}) [ 177.762252] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.794669] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 07:14:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000080)=0xb163bec70566be4b) ioctl$sock_inet_SIOCGARP(r3, 0x8955, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @link_local}, 0x0, {0x2, 0x0, @broadcast}, 'bridge_slave_0\x00'}) close(r3) dup3(r1, r2, 0x0) [ 177.817650] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.838412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.856642] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 07:14:22 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4209, r1, 0x20400004, &(0x7f00000000c0)={&(0x7f0000000200)}) 07:14:22 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x800100000000) [ 177.864059] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.871936] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.885255] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.909114] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.926023] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.939167] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.958427] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 177.994719] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 07:14:22 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x800100000000) [ 178.009324] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 178.054099] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 178.087552] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 178.117002] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 178.133317] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 178.158126] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 178.174995] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 178.190041] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 178.196907] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 178.203605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 178.227776] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 07:14:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x2000000000000004, 0x109, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000040), 0xffffffffffffffff) futex(&(0x7f000000cffc), 0xa, 0x0, &(0x7f00006f7000)={0x0, 0x1c9c380}, &(0x7f0000000000), 0x223) 07:14:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000080)=0xb163bec70566be4b) ioctl$sock_inet_SIOCGARP(r3, 0x8955, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @link_local}, 0x0, {0x2, 0x0, @broadcast}, 'bridge_slave_0\x00'}) close(r3) dup3(r1, r2, 0x0) 07:14:22 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4209, r1, 0x20400004, &(0x7f00000000c0)={&(0x7f0000000200)}) 07:14:22 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") fchdir(r0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket(0x18, 0x0, 0x1) connect(r4, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r4, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 07:14:22 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/28, 0x1c}], 0x1) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) 07:14:22 executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 07:14:22 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x800100000000) 07:14:22 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4209, r1, 0x20400004, &(0x7f00000000c0)={&(0x7f0000000200)}) [ 178.324211] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 178.346791] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 07:14:22 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x2000000229, 0x400000000001}) 07:14:22 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x800100000000) [ 178.385754] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 178.424938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 07:14:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000001300090468fe0700000000000000ff3f0700000045000107000000141900040002000700efff0100000a00005d14a4e91ee438d2fd", 0x39}], 0x1) 07:14:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr}, 0xc) getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f00000000c0), &(0x7f0000000080)=0xb163bec70566be4b) ioctl$sock_inet_SIOCGARP(r3, 0x8955, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @link_local}, 0x0, {0x2, 0x0, @broadcast}, 'bridge_slave_0\x00'}) close(r3) dup3(r1, r2, 0x0) [ 178.455838] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 178.470559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 178.487054] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 07:14:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 178.514896] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 178.545605] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 178.563508] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 07:14:23 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/28, 0x1c}], 0x1) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) [ 178.587994] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 178.619054] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 07:14:23 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1}, 0xc) [ 178.689509] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 178.706396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 07:14:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x0, 0x0, @empty, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000775000)) recvfrom$packet(r1, &(0x7f0000000100)=""/23, 0x17, 0x0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x704000) [ 178.737223] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 178.767506] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 178.810637] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 178.831379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 178.860077] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 178.866754] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 178.874225] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 178.880940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 178.887854] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 178.898876] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 07:14:23 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r2, 0x0, 0x4) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000040)) tkill(r3, 0x1004000000016) close(r1) 07:14:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85715070") setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x80400000001, 0x240) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0xffffffffffffff1f, 0x0, 0x0, 0x56c3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f0000000040), 0x14) 07:14:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) write$P9_RWALK(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x8) write$P9_RSTATFS(r2, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x0, 0x100000001, 0x0, 0x120000000, 0x0, 0x0, 0x0, 0x6}}, 0x43) r3 = userfaultfd(0x0) dup3(0xffffffffffffffff, r3, 0x0) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000004100), 0x2a37, 0x2, 0x0) 07:14:23 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/28, 0x1c}], 0x1) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) 07:14:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180)=0x4, 0x4) fallocate(r1, 0x11, 0x0, 0x10000) fsync(r1) 07:14:23 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x800100000000) [ 178.996401] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 179.024823] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 07:14:23 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x800100000000) 07:14:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc) [ 179.051879] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 179.069472] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 179.099308] capability: warning: `syz-executor4' uses deprecated v2 capabilities in a way that may be insecure [ 179.103154] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 179.103179] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 179.103192] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 179.104231] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 179.104243] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 179.104256] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 07:14:23 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='bridge0\x00'}) 07:14:23 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x17, [], 0x17}}}]}, 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) [ 179.104268] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 179.113710] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 07:14:23 executing program 4: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000700)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/255, 0xff, 0x2002, 0x0, 0x0) 07:14:23 executing program 1: r0 = socket(0x18, 0x0, 0x1) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) 07:14:23 executing program 4: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000700)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/255, 0xff, 0x2002, 0x0, 0x0) 07:14:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1, @empty, @remote, 0x0, 0x0, 0x0, 0x400, 0x0, 0x810000, r2}) close(0xffffffffffffffff) 07:14:23 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) keyctl$join(0x1, &(0x7f0000000040)) 07:14:23 executing program 4: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000700)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/255, 0xff, 0x2002, 0x0, 0x0) 07:14:23 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x203ffe, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 07:14:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f000000d8c0)=[{}], 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x6e) recvfrom(r2, &(0x7f0000003540)=""/68, 0x44, 0x0, &(0x7f0000003640)=@hci, 0x707000) 07:14:23 executing program 7: clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045430, 0x706ffc) 07:14:23 executing program 1: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)) 07:14:23 executing program 4: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000700)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/255, 0xff, 0x2002, 0x0, 0x0) 07:14:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180)=0x4, 0x4) fallocate(r1, 0x11, 0x0, 0x10000) fsync(r1) 07:14:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x203ffe, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 07:14:24 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00') sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 07:14:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x120, 0x36b) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[], 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) close(r0) 07:14:24 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000001c0)=0x7f, 0x158) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:24 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x2700ab43) chmod(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1) 07:14:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f000000d8c0)=[{}], 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x6e) recvfrom(r2, &(0x7f0000003540)=""/68, 0x44, 0x0, &(0x7f0000003640)=@hci, 0x707000) 07:14:24 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058437dd554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)="2f0409004bddd9de91be10eebf000ee9a90f798058439ed554af1f02acc7edbcd7a071fb35331ce39c5a0000000000000000080000000000000000000aaad955a3c93f9d248b46a7c99eb35b406bf918ff01739e56187b2db8f1074424745271062042fb3808186e0a837132f9108c583073a4ca94b3e4e58717fe2b659fa3903c7b73bd66b83f5ecc0a7361257896883f1b43ff4ec0a1e336b92f705461af0b60825a7834ffd0a7339d85c51b8db7b4c0e4f40953dd2d9f2110f04c9fdf8489eaa996", 0xc3, 0x0) 07:14:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x203ffe, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 07:14:24 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058437dd554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)="2f0409004bddd9de91be10eebf000ee9a90f798058439ed554af1f02acc7edbcd7a071fb35331ce39c5a0000000000000000080000000000000000000aaad955a3c93f9d248b46a7c99eb35b406bf918ff01739e56187b2db8f1074424745271062042fb3808186e0a837132f9108c583073a4ca94b3e4e58717fe2b659fa3903c7b73bd66b83f5ecc0a7361257896883f1b43ff4ec0a1e336b92f705461af0b60825a7834ffd0a7339d85c51b8db7b4c0e4f40953dd2d9f2110f04c9fdf8489eaa996", 0xc3, 0x0) [ 179.856817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18772 sclass=netlink_route_socket 07:14:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180)=0x4, 0x4) fallocate(r1, 0x11, 0x0, 0x10000) fsync(r1) 07:14:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x203ffe, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) dup3(r1, r0, 0x0) [ 179.918350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18772 sclass=netlink_route_socket 07:14:24 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058437dd554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)="2f0409004bddd9de91be10eebf000ee9a90f798058439ed554af1f02acc7edbcd7a071fb35331ce39c5a0000000000000000080000000000000000000aaad955a3c93f9d248b46a7c99eb35b406bf918ff01739e56187b2db8f1074424745271062042fb3808186e0a837132f9108c583073a4ca94b3e4e58717fe2b659fa3903c7b73bd66b83f5ecc0a7361257896883f1b43ff4ec0a1e336b92f705461af0b60825a7834ffd0a7339d85c51b8db7b4c0e4f40953dd2d9f2110f04c9fdf8489eaa996", 0xc3, 0x0) 07:14:24 executing program 0: r0 = memfd_create(&(0x7f00000000c0)="0000000010573860b48e03ab0b8110408d893dac540318386fc7e2d740bd31e757e1ae2e3d919d036f2e3d2a17abca4287afd240c0f4b24d623af9f16312755a71654bf931e5704191541d13f5762dadc275e112a8030bf0621fa161bc744923b22b21b6ababbc86cdc1e0a0569fbd31345e7978c3c7175089f36fc12006e0575ef969c45e8fb854b36f9a3319fb30c0a76fe0f7a3ccb89b7c7bbede0de110c40d2ed349c687122fa098892b87a16cc3540fdf9cb289a4509aaddcb1e389bf2239dcd6c886587dcefea2204935721c83bacd0f177f5f229407ced0623ac9e98abb967cf5fd5b867eb063f3ba1e0e046aeb0da0312d171f4aa734acc712e6f7273a832227698f5c25fc87f25e961c3fdc9d4e0f2a1ec6a0ef46662046e9ff54f225e07b831d6bc401043f360748cdbb1e750d1d3de8f0b8bddb94362933c22f69bc71c1d69edc4c49f191925f48b6c41c1fd5deebe6981ea2b653f17d8ead11da91fdc4f377722ce6332852d3101c063105191e585ba7cbd3fe352a3e1889c84f626500000000ff2e70", 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="73797a318a268707f496b3d029"], 0xd) sendfile(r0, r0, &(0x7f0000001000), 0x10000000000ffff) fcntl$addseals(r0, 0x409, 0x6) fallocate(r0, 0x0, 0x0, 0x101) 07:14:24 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00') sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 07:14:24 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058437dd554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)="2f0409004bddd9de91be10eebf000ee9a90f798058439ed554af1f02acc7edbcd7a071fb35331ce39c5a0000000000000000080000000000000000000aaad955a3c93f9d248b46a7c99eb35b406bf918ff01739e56187b2db8f1074424745271062042fb3808186e0a837132f9108c583073a4ca94b3e4e58717fe2b659fa3903c7b73bd66b83f5ecc0a7361257896883f1b43ff4ec0a1e336b92f705461af0b60825a7834ffd0a7339d85c51b8db7b4c0e4f40953dd2d9f2110f04c9fdf8489eaa996", 0xc3, 0x0) [ 180.052584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18772 sclass=netlink_route_socket 07:14:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180)=0x4, 0x4) fallocate(r1, 0x11, 0x0, 0x10000) fsync(r1) 07:14:24 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00') sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 07:14:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 07:14:24 executing program 0: r0 = memfd_create(&(0x7f00000000c0)="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", 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="73797a318a268707f496b3d029"], 0xd) sendfile(r0, r0, &(0x7f0000001000), 0x10000000000ffff) fcntl$addseals(r0, 0x409, 0x6) fallocate(r0, 0x0, 0x0, 0x101) 07:14:24 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x2700ab43) chmod(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1) 07:14:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180)=0x4, 0x4) fallocate(r1, 0x11, 0x0, 0x10000) fsync(r1) 07:14:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f000000d8c0)=[{}], 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x6e) recvfrom(r2, &(0x7f0000003540)=""/68, 0x44, 0x0, &(0x7f0000003640)=@hci, 0x707000) 07:14:24 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000001c0)=0x7f, 0x158) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:24 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000000140)) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='iso9660\x00', 0x1020, &(0x7f0000000340)) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.ima\x00') 07:14:24 executing program 0: r0 = memfd_create(&(0x7f00000000c0)="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", 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="73797a318a268707f496b3d029"], 0xd) sendfile(r0, r0, &(0x7f0000001000), 0x10000000000ffff) fcntl$addseals(r0, 0x409, 0x6) fallocate(r0, 0x0, 0x0, 0x101) [ 180.536678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18772 sclass=netlink_route_socket 07:14:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067f7b81ff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:14:25 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00') sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) [ 180.647818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18772 sclass=netlink_route_socket 07:14:25 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x2700ab43) chmod(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1) 07:14:25 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) 07:14:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4), 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000001c0)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x24d, &(0x7f00000003c0)}}, {{&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000500), 0xfffffeb6}], 0x1, &(0x7f0000000000)}}], 0x40000000000001c, 0x0) 07:14:25 executing program 0: r0 = memfd_create(&(0x7f00000000c0)="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", 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="73797a318a268707f496b3d029"], 0xd) sendfile(r0, r0, &(0x7f0000001000), 0x10000000000ffff) fcntl$addseals(r0, 0x409, 0x6) fallocate(r0, 0x0, 0x0, 0x101) [ 180.809617] input: syz1 as /devices/virtual/input/input29 [ 180.864548] input: syz1 as /devices/virtual/input/input30 07:14:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180)=0x4, 0x4) fallocate(r1, 0x11, 0x0, 0x10000) fsync(r1) 07:14:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={"766574000000000000000000bd6800", 0x102}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0xfc7b}}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/226, 0x1}], 0x1) 07:14:25 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000008) 07:14:25 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) 07:14:25 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x2700ab43) chmod(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1) [ 181.068307] input: syz1 as /devices/virtual/input/input31 [ 181.193782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.211002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.230154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.246795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 07:14:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180)=0x4, 0x4) fallocate(r1, 0x11, 0x0, 0x10000) fsync(r1) 07:14:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f000000d8c0)=[{}], 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x6e) recvfrom(r2, &(0x7f0000003540)=""/68, 0x44, 0x0, &(0x7f0000003640)=@hci, 0x707000) 07:14:25 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000001c0)=0x7f, 0x158) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228336e88319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe919e21cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f56091c38cbab", 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0xffffffffffffffff, 0x3, 0xc776, 'queue1\x00\x00\r\x00', 0x1}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000200)={[], 0xc, 0x8000, 0x3, 0x100000000}) write$sndseq(r2, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) ftruncate(r1, 0x2008203) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:25 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) 07:14:25 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x303) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2321202e2f66696c65300af5261e68096d5c0229a3b790564806b2d199ab53bb15d0f456464f127c998493b19e80"], 0x2e) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x5) 07:14:25 executing program 3: r0 = socket(0x10, 0x2, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x100a00}, 0xc) getsockname$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000080)=0x6e) 07:14:25 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote, r1}, 0x14) dup2(r2, r0) [ 181.514091] input: syz1 as /devices/virtual/input/input32 07:14:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000040)) 07:14:26 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) 07:14:26 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote, r1}, 0x14) dup2(r2, r0) [ 181.650952] input: syz1 as /devices/virtual/input/input33 07:14:26 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 07:14:26 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote, r1}, 0x14) dup2(r2, r0) 07:14:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote, r1}, 0x14) dup2(r2, r0) 07:14:26 executing program 6: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:14:26 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x3, &(0x7f0000000480)={0x0, 0x20, 0x0, @thr={&(0x7f00000004c0), &(0x7f0000000540)}}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) 07:14:26 executing program 2: socketpair$unix(0x1, 0x40000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x7ffffffc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = dup(r0) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 07:14:26 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote, r1}, 0x14) dup2(r2, r0) 07:14:26 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000001c0)=0x7f, 0x158) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228336e88319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe919e21cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f56091c38cbab", 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0xffffffffffffffff, 0x3, 0xc776, 'queue1\x00\x00\r\x00', 0x1}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000200)={[], 0xc, 0x8000, 0x3, 0x100000000}) write$sndseq(r2, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) ftruncate(r1, 0x2008203) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote, r1}, 0x14) dup2(r2, r0) 07:14:26 executing program 6: creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r0, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 07:14:26 executing program 1: clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 07:14:26 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, "c5b80ce09a01cb08e70f836d5d9b511853934fae3a40748da1c5a26bc671656a"}) 07:14:26 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="c626262c8523bf") r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) 07:14:26 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 07:14:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote, r1}, 0x14) dup2(r2, r0) 07:14:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228336e88319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe919e21cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f56091c38cbab", 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0xffffffffffffffff, 0x3, 0xc776, 'queue1\x00\x00\r\x00', 0x1}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000200)={[], 0xc, 0x8000, 0x3, 0x100000000}) write$sndseq(r2, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) ftruncate(r1, 0x2008203) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:26 executing program 6: creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r0, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 07:14:26 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='/dev/ptmx\x00') 07:14:26 executing program 6: creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r0, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 07:14:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r1, &(0x7f0000000100)=""/135, 0x87) getdents64(r1, &(0x7f0000002380)=""/4096, 0x1000) [ 182.490514] audit: type=1326 audit(1534922066.897:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=12331 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 [ 182.517645] audit: type=1326 audit(1534922066.917:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=12331 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 07:14:27 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='/dev/ptmx\x00') 07:14:27 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd0e5) [ 182.540584] audit: type=1326 audit(1534922066.947:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=12331 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 07:14:27 executing program 6: creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r0, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 07:14:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228336e88319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe919e21cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f56091c38cbab", 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0xffffffffffffffff, 0x3, 0xc776, 'queue1\x00\x00\r\x00', 0x1}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000200)={[], 0xc, 0x8000, 0x3, 0x100000000}) write$sndseq(r2, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) ftruncate(r1, 0x2008203) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:27 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='/dev/ptmx\x00') 07:14:27 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000180)={{0x0, 0x1}}) 07:14:29 executing program 1: clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 07:14:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4), 0xc, &(0x7f000024dff0)={&(0x7f0000000000)={0x2c, 0x1, 0x1, 0x800000001, 0x0, 0x0, {}, [@typed={0x18, 0x12, @ipv6=@mcast1}]}, 0x2c}}, 0x0) 07:14:29 executing program 6: clone(0x200, &(0x7f00000000c0), &(0x7f0000744000), &(0x7f0000001880), &(0x7f00000001c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') socket$inet6(0xa, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000080), 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) open$dir(&(0x7f0000000180)='./file0\x00', 0x27e, 0x0) 07:14:29 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 07:14:29 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000440)) preadv(r0, &(0x7f00000023c0), 0x0, 0x0) 07:14:29 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='/dev/ptmx\x00') 07:14:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228336e88319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe919e21cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f56091c38cbab", 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0xffffffffffffffff, 0x3, 0xc776, 'queue1\x00\x00\r\x00', 0x1}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000200)={[], 0xc, 0x8000, 0x3, 0x100000000}) write$sndseq(r2, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) ftruncate(r1, 0x2008203) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228336e88319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe919e21cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f56091c38cbab", 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0xffffffffffffffff, 0x3, 0xc776, 'queue1\x00\x00\r\x00', 0x1}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000200)={[], 0xc, 0x8000, 0x3, 0x100000000}) write$sndseq(r2, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) ftruncate(r1, 0x2008203) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:29 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1, &(0x7f00000017c0)=""/116, 0x74}}], 0x1, 0x0, &(0x7f0000004a40)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) 07:14:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="425cc80700145f8f764070") unshare(0x24000000) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)="6e732f757473000b189d998fe7741c3b2f9a8feedce227f3a39923e16a4b064c0178849df0855daf2eda881c742ba2c9301a12c1c5e3cff5f64c127e0dd63015266869d8c90068a687aca7ea9572eaeabbe4184ddb0bf1") setns(r1, 0x0) 07:14:29 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xb7891e60387e7f1f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{0x8}, {}, {}, {}], 0x2217) 07:14:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="425cc80700145f8f764070") unshare(0x24000000) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)="6e732f757473000b189d998fe7741c3b2f9a8feedce227f3a39923e16a4b064c0178849df0855daf2eda881c742ba2c9301a12c1c5e3cff5f64c127e0dd63015266869d8c90068a687aca7ea9572eaeabbe4184ddb0bf1") setns(r1, 0x0) 07:14:29 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=@updsa={0xf0, 0x1a, 0x703, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@ipv4={[], [], @multicast1}, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 07:14:30 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1, &(0x7f00000017c0)=""/116, 0x74}}], 0x1, 0x0, &(0x7f0000004a40)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) 07:14:30 executing program 6: clone(0x200, &(0x7f00000000c0), &(0x7f0000744000), &(0x7f0000001880), &(0x7f00000001c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') socket$inet6(0xa, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000080), 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) open$dir(&(0x7f0000000180)='./file0\x00', 0x27e, 0x0) 07:14:30 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000080)='./bus\x00', 0x8000400141042, 0x0) personality(0xe43b847ef4ff6b96) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r1, 0x0) [ 185.662044] audit: type=1326 audit(1534922070.067:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=12407 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 [ 185.666477] audit: type=1326 audit(1534922070.067:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=12407 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x459eaa code=0x0 [ 185.704721] audit: type=1326 audit(1534922070.107:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=12407 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 07:14:32 executing program 1: clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 07:14:32 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1, &(0x7f00000017c0)=""/116, 0x74}}], 0x1, 0x0, &(0x7f0000004a40)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) 07:14:32 executing program 6: clone(0x200, &(0x7f00000000c0), &(0x7f0000744000), &(0x7f0000001880), &(0x7f00000001c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') socket$inet6(0xa, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000080), 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) open$dir(&(0x7f0000000180)='./file0\x00', 0x27e, 0x0) 07:14:32 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228336e88319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe919e21cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f56091c38cbab", 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0xffffffffffffffff, 0x3, 0xc776, 'queue1\x00\x00\r\x00', 0x1}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000200)={[], 0xc, 0x8000, 0x3, 0x100000000}) write$sndseq(r2, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) ftruncate(r1, 0x2008203) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:32 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 07:14:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000200)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{0x0, 0x80000001}, {0x80}}) 07:14:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="425cc80700145f8f764070") unshare(0x24000000) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)="6e732f757473000b189d998fe7741c3b2f9a8feedce227f3a39923e16a4b064c0178849df0855daf2eda881c742ba2c9301a12c1c5e3cff5f64c127e0dd63015266869d8c90068a687aca7ea9572eaeabbe4184ddb0bf1") setns(r1, 0x0) 07:14:32 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f00000000c0), 0x0) 07:14:33 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1, &(0x7f00000017c0)=""/116, 0x74}}], 0x1, 0x0, &(0x7f0000004a40)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) 07:14:33 executing program 0: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={"747501010000000000000082de00", @ifru_settings={0x400, 0x0, @raw_hdlc=&(0x7f0000000040)}}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x80, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2c4000, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1ff) clock_getres(0x3, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x411c9a659591b9b3, &(0x7f0000ffe000/0x2000)=nil) keyctl$get_keyring_id(0x0, 0x0, 0x80) 07:14:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="425cc80700145f8f764070") unshare(0x24000000) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)="6e732f757473000b189d998fe7741c3b2f9a8feedce227f3a39923e16a4b064c0178849df0855daf2eda881c742ba2c9301a12c1c5e3cff5f64c127e0dd63015266869d8c90068a687aca7ea9572eaeabbe4184ddb0bf1") setns(r1, 0x0) 07:14:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) [ 188.785526] audit: type=1326 audit(1534922073.187:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=12478 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 [ 188.806772] audit: type=1326 audit(1534922073.207:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=12478 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 07:14:33 executing program 6: clone(0x200, &(0x7f00000000c0), &(0x7f0000744000), &(0x7f0000001880), &(0x7f00000001c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') socket$inet6(0xa, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000080), 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) open$dir(&(0x7f0000000180)='./file0\x00', 0x27e, 0x0) [ 188.828150] audit: type=1326 audit(1534922073.227:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=12478 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=3 compat=0 ip=0x410c41 code=0x0 07:14:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 188.914729] IPVS: Creating netns size=2552 id=21 07:14:33 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000000200)={0x0, &(0x7f0000000180)}, 0x10) 07:14:33 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) keyctl$set_timeout(0xf, r0, 0x0) [ 189.091386] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 189.209209] IPVS: Creating netns size=2552 id=22 07:14:35 executing program 1: clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 07:14:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xfff, 0x4) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x1c) 07:14:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 07:14:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 07:14:35 executing program 0: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={"747501010000000000000082de00", @ifru_settings={0x400, 0x0, @raw_hdlc=&(0x7f0000000040)}}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x80, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2c4000, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1ff) clock_getres(0x3, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x411c9a659591b9b3, &(0x7f0000ffe000/0x2000)=nil) keyctl$get_keyring_id(0x0, 0x0, 0x80) 07:14:35 executing program 2: socketpair$unix(0x1, 0x4000000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x40002cc, 0x0, 0x0) 07:14:35 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000006c0), 0xfffffea1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r3 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="232168a865f79de6"], 0x8) 07:14:35 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000380)={'syz_tun\x00', {0x2, 0x0, @local}}) 07:14:35 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{0x0, 0x10001}, {0x80}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x100000001}, {0x80}, 0x0, 0xbf000000}) 07:14:35 executing program 6: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000180)="7542b3710b40a566c970ec6b4d75e098ca86650551a23b26236d63dedc05af9dbf074b520fcf80e5b1ce4945da3e8ed74d0f554cf9547a4e1810655c") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000100)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 07:14:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x101, 0x10000025e) listen(r0, 0x0) 07:14:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000140)={"697036746e6c300000009100", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 07:14:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) [ 191.610718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12850 sclass=netlink_route_socket [ 191.643074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14129 sclass=netlink_route_socket [ 191.655508] audit: type=1326 audit(1534922076.057:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=12545 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 [ 191.656009] audit: type=1326 audit(1534922076.057:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=12545 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=3 compat=0 ip=0x410c41 code=0x0 07:14:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000380)="025cc88cd194") ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000400)) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) syz_open_procfs(0x0, &(0x7f00000000c0)="2f6578650000000000049b840572137291be10eebf000ee9a90f798058439ed5e901d2da758d5d02acc7edbcd7a071fb35331ce3e8f5eb845f06c2b4833f0f84b356f039192806008f7ce66c728841041afe57059503eb5a7819e56e5180b49acad4596489f4455f2cba58ee6d298147dfab3256c742c1b69f67793dfd6a9b4db888e646223be7fb2717202ea956118f193fb84166c236fdaf9716ed51bd15d81d43b89e1cecabcba5d2e62f5b3ec8afedae871218ff070000000000001db98e5856f17a930fe864295da8aebc0f7f7f5680e4d3f7ade20a2d3e420b35456180b109549e4ef0e1b55691030039ce36a24837297a9b9f7a674b065f6f33f00100f484f04d8bba268991d364ec5ac1383d9ab7460d2a89938fb7600936d99b6a7926ddfb27e09600c5030b051d15119f710af109000000000000000000000000") write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x8}, 0x10) r1 = dup3(0xffffffffffffff9c, r0, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000440)) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r3 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) write$P9_RLOCK(r1, &(0x7f0000000240)={0x8, 0x35, 0x2, 0x3}, 0x8) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) sync() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x5, @thr={&(0x7f0000000600)="fe55b93bb5731df0687339ef1b5e12b19c32f64af01789f644b88d75ad394c92c35aebdbd001584e1aa110445c6057e016c45b6a93f261b5b7f21f3e5a5f2cd5b7e79af237fa2744966884f28fd51c164adc1562ebc725236e2c4704ee9ac2e1d2f5d2499812b73bac901cc6c29e28bbafe66c3eeb46f99079cbdb9e20a2ddb2ae673b764d32bca3e69abe5a67f2de96a3a43946abbb52e426beda421d18fde1d873aae37d123ced0bfe805d131c5a7acc06dbe2c4b97c45305ce6f53fe7be1867eed94728380b4b3e576ea5cd4014260bd1f914963f1ffb17188a257e01c14c0e7e579159e41db918ecc920", &(0x7f0000000700)="d912eab8558422b0e4a5883764beb674dc8b81ed4a3ea64587fc559aca2ecfe07523267cbbad480c5559574df35cda72684d9ba5516644f7350253c472f8dd42a5ea44c609affbc68069c46de9bfd3a72c429a2216b436fd5952bffcd79c57ba7ecbeb1e911392fba167a6d23091f19d7690ad1535d47b04cf91904c33f71e5b08e16e12e63af7fc168775f3853ece82c7e7559b47ac951a67b41ef74627fb1b76282f51ad487b7304cf234aca519da08dafdd0f0b677d3cacedc048c8fdf4db204d0133a1"}}, &(0x7f0000044000)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000540)={@dev, 0x0}, &(0x7f0000000800)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@gettclass={0x24, 0x2a, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, r4, {0xffff, 0xffff}, {0x0, 0xb}, {0xd}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) [ 191.733169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25964 sclass=netlink_route_socket 07:14:36 executing program 4: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f00003efff0)={0x0, 0x0, 0x30000}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000002d40), 0x8, 0x0) r3 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r3, 0x0) read(r2, &(0x7f0000000000)=""/128, 0x80) signalfd4(r2, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) 07:14:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) [ 191.902553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12850 sclass=netlink_route_socket [ 192.032502] IPVS: Creating netns size=2552 id=23 07:14:38 executing program 4: r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000)=0x20000, 0x800000080000002) 07:14:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000000)=0x100020, 0x200000000008003) 07:14:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 07:14:38 executing program 6: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000180)="7542b3710b40a566c970ec6b4d75e098ca86650551a23b26236d63dedc05af9dbf074b520fcf80e5b1ce4945da3e8ed74d0f554cf9547a4e1810655c") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000100)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 07:14:38 executing program 7: clone(0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000580)) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000580), 0x0) 07:14:38 executing program 0: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={"747501010000000000000082de00", @ifru_settings={0x400, 0x0, @raw_hdlc=&(0x7f0000000040)}}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x80, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2c4000, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1ff) clock_getres(0x3, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x411c9a659591b9b3, &(0x7f0000ffe000/0x2000)=nil) keyctl$get_keyring_id(0x0, 0x0, 0x80) 07:14:38 executing program 2: socketpair$unix(0x1, 0x4000000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x40002cc, 0x0, 0x0) 07:14:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$int_out(r1, 0x80804535, &(0x7f0000000080)) 07:14:38 executing program 7: clone(0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000580)) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000580), 0x0) [ 194.547798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12850 sclass=netlink_route_socket [ 194.584532] IPVS: Creating netns size=2552 id=24 07:14:39 executing program 7: clone(0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000580)) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000580), 0x0) 07:14:39 executing program 4: r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000)=0x20000, 0x800000080000002) [ 194.623871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14129 sclass=netlink_route_socket [ 194.683614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25964 sclass=netlink_route_socket 07:14:39 executing program 1: r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000)=0x20000, 0x800000080000002) 07:14:39 executing program 6: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000180)="7542b3710b40a566c970ec6b4d75e098ca86650551a23b26236d63dedc05af9dbf074b520fcf80e5b1ce4945da3e8ed74d0f554cf9547a4e1810655c") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000100)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 07:14:39 executing program 7: clone(0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000580)) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000580), 0x0) 07:14:39 executing program 0: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={"747501010000000000000082de00", @ifru_settings={0x400, 0x0, @raw_hdlc=&(0x7f0000000040)}}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x80, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2c4000, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1ff) clock_getres(0x3, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x411c9a659591b9b3, &(0x7f0000ffe000/0x2000)=nil) keyctl$get_keyring_id(0x0, 0x0, 0x80) 07:14:39 executing program 1: r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000)=0x20000, 0x800000080000002) 07:14:39 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @rand_addr}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 07:14:39 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) lremovexattr(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x0) 07:14:39 executing program 4: r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000)=0x20000, 0x800000080000002) 07:14:39 executing program 7: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000080)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e28000000020a43ba5d8060000000060001000029ec2400020cd37ed01cc0730ec279b295bf4042d1", 0x4c}], 0x1}, 0x0) 07:14:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 07:14:39 executing program 1: r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000)=0x20000, 0x800000080000002) [ 195.046986] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. [ 195.149748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12850 sclass=netlink_route_socket [ 195.171610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14129 sclass=netlink_route_socket [ 195.194565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26982 sclass=netlink_route_socket 07:14:39 executing program 2: socketpair$unix(0x1, 0x4000000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x40002cc, 0x0, 0x0) 07:14:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200), &(0x7f0000000240)="dc", 0x1, 0xfffffffffffffffb) 07:14:39 executing program 4: r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000)=0x20000, 0x800000080000002) 07:14:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) 07:14:39 executing program 6: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000180)="7542b3710b40a566c970ec6b4d75e098ca86650551a23b26236d63dedc05af9dbf074b520fcf80e5b1ce4945da3e8ed74d0f554cf9547a4e1810655c") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000100)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 07:14:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180), 0x4) close(r3) dup3(r1, r2, 0x0) 07:14:39 executing program 1: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="0001705f66696c657300") getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 07:14:39 executing program 7: gettid() unshare(0x40000000) getgid() munlockall() lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x5) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f00000000c0)={0x87, 0x29, 0x2, {0x0, [{{0x2, 0x2}, 0x8000, 0x7, 0x7, './file0'}, {{0x8, 0x2, 0x6}, 0xac, 0x1f, 0x7, './file0'}, {{0x50, 0x1}, 0x100000001, 0x1000, 0x7, './file0'}, {{0x49, 0x4}, 0x0, 0x7fffffff, 0x7, './file0'}]}}, 0x87) [ 195.370983] encrypted_key: insufficient parameters specified [ 195.403028] encrypted_key: insufficient parameters specified [ 195.706058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12850 sclass=netlink_route_socket [ 195.719961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14129 sclass=netlink_route_socket [ 195.731122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25964 sclass=netlink_route_socket [ 196.577376] pktgen: kernel_thread() failed for cpu 0 [ 196.582570] pktgen: Cannot create thread for cpu 0 (-4) [ 196.587994] pktgen: kernel_thread() failed for cpu 1 [ 196.593154] pktgen: Cannot create thread for cpu 1 (-4) [ 196.598507] pktgen: Initialization failed for all threads 07:14:41 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) lremovexattr(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x0) 07:14:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) read(r0, &(0x7f0000000d00)=""/4096, 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 07:14:41 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) acct(&(0x7f0000000140)='./file0\x00') mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x80000, &(0x7f0000000140)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, &(0x7f0000000000), 0x80000002) 07:14:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) pwrite64(r1, &(0x7f0000000140)="b8", 0x1, 0x0) fsync(r1) 07:14:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f00000004c0), 0xc, &(0x7f0000000000)={&(0x7f00000005c0)={0x24, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @typed={0x8, 0x8, @pid}]}, 0x24}}, 0x0) 07:14:41 executing program 2: socketpair$unix(0x1, 0x4000000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x40002cc, 0x0, 0x0) [ 196.704419] pktgen: kernel_thread() failed for cpu 0 [ 196.709572] pktgen: Cannot create thread for cpu 0 (-4) [ 196.716095] pktgen: kernel_thread() failed for cpu 1 [ 196.725788] pktgen: Cannot create thread for cpu 1 (-4) [ 196.731950] pktgen: Initialization failed for all threads [ 196.753382] input: syz1 as /devices/virtual/input/input34 07:14:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) pwrite64(r1, &(0x7f0000000140)="b8", 0x1, 0x0) fsync(r1) [ 196.800163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13617 sclass=netlink_route_socket 07:14:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) pwrite64(r1, &(0x7f0000000140)="b8", 0x1, 0x0) fsync(r1) 07:14:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) syz_open_pts(r0, 0x0) [ 196.854212] input: syz1 as /devices/virtual/input/input35 07:14:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) pwrite64(r1, &(0x7f0000000140)="b8", 0x1, 0x0) fsync(r1) 07:14:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write$FUSE_POLL(r2, &(0x7f0000000140)={0x18}, 0x18) [ 196.941377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13617 sclass=netlink_route_socket 07:14:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) read(r0, &(0x7f0000000d00)=""/4096, 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 07:14:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) read(r0, &(0x7f0000000d00)=""/4096, 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 07:14:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_getnetconf={0x14, 0x52, 0x1fa69918d895a87b}, 0x14}}, 0x0) 07:14:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000000c0), 0x4) [ 197.071221] input: syz1 as /devices/virtual/input/input36 [ 197.120795] input: syz1 as /devices/virtual/input/input37 [ 197.196549] pktgen: kernel_thread() failed for cpu 0 [ 197.217382] pktgen: Cannot create thread for cpu 0 (-4) [ 197.234501] IPVS: Creating netns size=2552 id=25 07:14:41 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$invalidate(0x15, 0x0) 07:14:41 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000002c0)=[{r1}, {r0}], 0x2, 0x80c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201020, &(0x7f00000002c0)) 07:14:41 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) lremovexattr(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x0) 07:14:41 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000600)="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", 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81803) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) read(r0, &(0x7f00000004c0)=""/244, 0xfffffea0) 07:14:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) read(r0, &(0x7f0000000d00)=""/4096, 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 07:14:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) read(r0, &(0x7f0000000d00)=""/4096, 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 197.314885] input: syz1 as /devices/virtual/input/input39 [ 197.322864] input: syz1 as /devices/virtual/input/input38 07:14:41 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) lremovexattr(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x0) 07:14:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x3) 07:14:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCFLSH(r1, 0x540b, 0x0) 07:14:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) read(r0, &(0x7f0000000d00)=""/4096, 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 07:14:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f000044e000/0x600000)=nil, 0x600000, 0x0, 0x4012, r1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x30, &(0x7f0000678f70)={0x0, {{0x2, 0x0, @multicast2}}}, 0x33f7) 07:14:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) read(r0, &(0x7f0000000d00)=""/4096, 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 07:14:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)={@broadcast, @broadcast}, &(0x7f00000004c0)=0x219) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000240), 0xc, &(0x7f0000000180)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in=@rand_addr}, {0x4, 0x81, 0x1f, 0x11}, {}, 0x0, 0x0, 0xc32b59e911fd36b1, 0x0, 0x1}}, 0xb8}, 0x8}, 0x0) 07:14:42 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r1, &(0x7f0000000440)={&(0x7f0000000180)=@can, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000140)=""/50, 0x32}, 0x0) [ 197.613425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 197.622415] input: syz1 as /devices/virtual/input/input40 [ 197.637353] input: syz1 as /devices/virtual/input/input41 07:14:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000001000010009040800410300000000fcff", 0x58}], 0x1) 07:14:42 executing program 2: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) 07:14:42 executing program 1: clone(0x0, &(0x7f00000002c0), &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000380)) ppoll(&(0x7f0000000240), 0x0, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000280), 0x8) 07:14:42 executing program 2: mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) close(r0) 07:14:42 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1}, 0x6e) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$cont(0x21, r1, 0x0, 0x2) 07:14:42 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) personality(0xc50000f) ioctl$ASHMEM_SET_SIZE(r0, 0x40087705, 0x1) 07:14:42 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000002c0)=[{r1}, {r0}], 0x2, 0x80c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201020, &(0x7f00000002c0)) 07:14:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x14, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10) 07:14:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0), 0x0) 07:14:42 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="232101"], 0x3) execveat(r0, &(0x7f0000000080)='\x00', &(0x7f0000000300), &(0x7f00000003c0), 0x1000) 07:14:43 executing program 6: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000340)=@rc, &(0x7f00000001c0)=0x80, 0x80800) ioctl$sock_ifreq(r0, 0x89da, &(0x7f0000000540)={'ipddp0\x00', @ifru_hwaddr=@broadcast}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000400)={0x1, 0xbe}, 0x8) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24}}, 0x100000000, 0x4c79, 0x15, "2960d4499cc042fb6a554d6e13e4ea2434f05b5b61055400abe02509bc3122e5703baf31babfd3a34e399fd9d021f0b25699114261daf588bf643257781796205d4321e095b33062c7b75ad2dc3afc0c"}, 0xd8) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000580)=0x5, 0x4) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f00000005c0), 0x8000efffffff) 07:14:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)) 07:14:43 executing program 7: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 07:14:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={"0061a40000ffebf9000000000200", 0x9d01}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x209}, 0x24}}, 0x0) 07:14:43 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$int_in(r0, 0x5452, &(0x7f0000affff8)=0x7fffffff) dup2(r0, r2) 07:14:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1, 0x8) 07:14:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 07:14:43 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x2276, &(0x7f0000000000)) 07:14:43 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) uname(&(0x7f0000000040)=""/29) accept(0xffffffffffffffff, 0x0, &(0x7f0000000700)) unshare(0x60000000) stat(&(0x7f00000000c0)='\x00', &(0x7f0000000100)) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) fanotify_mark(r0, 0x2, 0x8, r1, &(0x7f0000000280)='./file0\x00') 07:14:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x802) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000030fb4)={0x0, 0x0, 0x4}) write$sndseq(r1, &(0x7f0000000e50), 0xfffffe41) 07:14:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x8000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x809, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8, 0xa, 0x7f}]}, 0x3c}}, 0x0) 07:14:43 executing program 7: symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file0\x00') lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00', &(0x7f0000000180)=""/29, 0x1d) [ 198.963823] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 198.982117] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. 07:14:43 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000002c0)=[{r1}, {r0}], 0x2, 0x80c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201020, &(0x7f00000002c0)) 07:14:43 executing program 6: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000340)=@rc, &(0x7f00000001c0)=0x80, 0x80800) ioctl$sock_ifreq(r0, 0x89da, &(0x7f0000000540)={'ipddp0\x00', @ifru_hwaddr=@broadcast}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000400)={0x1, 0xbe}, 0x8) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24}}, 0x100000000, 0x4c79, 0x15, "2960d4499cc042fb6a554d6e13e4ea2434f05b5b61055400abe02509bc3122e5703baf31babfd3a34e399fd9d021f0b25699114261daf588bf643257781796205d4321e095b33062c7b75ad2dc3afc0c"}, 0xd8) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000580)=0x5, 0x4) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f00000005c0), 0x8000efffffff) 07:14:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000100), 0x4) 07:14:43 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x80400000001, 0x240) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x80000001, 0x4) sendto$inet(r0, &(0x7f0000000100), 0xffffffffffffff1f, 0x0, 0x0, 0x56c3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f0000000040), 0x14) 07:14:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x800000000089f0, &(0x7f0000000040)={'ip6gre0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 07:14:43 executing program 3: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 07:14:43 executing program 5: prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) rt_sigpending(&(0x7f0000000100), 0x8) 07:14:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={"0061a40000ffebf9000000000200", 0x9d01}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x209}, 0x24}}, 0x0) 07:14:43 executing program 7: socketpair$unix(0x1, 0x100800000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) userfaultfd(0x0) 07:14:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff004}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000006e00)=[{{&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, 0x80, &(0x7f00000000c0)}}, {{&(0x7f00000058c0)=@can, 0x80, &(0x7f0000005a40), 0x0, &(0x7f0000005a80)}}], 0x2, 0x0) [ 200.000909] pktgen: kernel_thread() failed for cpu 0 [ 200.006091] pktgen: Cannot create thread for cpu 0 (-4) [ 200.011514] pktgen: kernel_thread() failed for cpu 1 [ 200.016619] pktgen: Cannot create thread for cpu 1 (-4) [ 200.022019] pktgen: Initialization failed for all threads [ 200.148562] IPVS: Creating netns size=2552 id=26 [ 200.185622] pktgen: kernel_thread() failed for cpu 0 [ 200.191274] pktgen: Cannot create thread for cpu 0 (-4) [ 200.196959] pktgen: kernel_thread() failed for cpu 1 [ 200.202527] pktgen: Cannot create thread for cpu 1 (-4) [ 200.207893] pktgen: Initialization failed for all threads [ 200.627405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 200.644408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 201.127682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 201.144735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 201.271220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 201.295185] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 201.323581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.352447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.336002] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 202.391857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 07:14:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x102}) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/12, 0xc}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000580)) close(r0) 07:14:47 executing program 6: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000340)=@rc, &(0x7f00000001c0)=0x80, 0x80800) ioctl$sock_ifreq(r0, 0x89da, &(0x7f0000000540)={'ipddp0\x00', @ifru_hwaddr=@broadcast}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000400)={0x1, 0xbe}, 0x8) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24}}, 0x100000000, 0x4c79, 0x15, "2960d4499cc042fb6a554d6e13e4ea2434f05b5b61055400abe02509bc3122e5703baf31babfd3a34e399fd9d021f0b25699114261daf588bf643257781796205d4321e095b33062c7b75ad2dc3afc0c"}, 0xd8) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000580)=0x5, 0x4) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f00000005c0), 0x8000efffffff) 07:14:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") rt_sigsuspend(&(0x7f0000000000), 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:14:47 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000000040)=""/157) 07:14:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5405, 0x0) 07:14:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={"0061a40000ffebf9000000000200", 0x9d01}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x209}, 0x24}}, 0x0) 07:14:47 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000002c0)=[{r1}, {r0}], 0x2, 0x80c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201020, &(0x7f00000002c0)) 07:14:47 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000600)="240000001a0025f00485bc04fef7001c0a0b49ffed000000800008000800100001000000", 0x24) 07:14:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() prctl$setname(0xf, &(0x7f0000000100)="73746174757380335cd4e10a088c21b43224678c9681e4728c80decc0d2c7fea4fafb59d66ddbb75607354aaf40556fa3a4e3685d9f129bb74fbf21de904957f925696eb3f1b0281499a385ffb9e0a497f3cdf1c438a3beed465f4a6883890e019b8bfbccb25fb5056d89d11d797915e7880497df37b414ed2ba869a2292") r2 = syz_open_procfs(r1, &(0x7f0000000000)='status\x00') sendfile(r2, r2, &(0x7f0000000040)=0x10000, 0x1) 07:14:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) [ 202.865008] binder: 13254:13257 transaction failed 29201/-22, size 0-0 line 3137 [ 202.881071] binder_alloc: binder_alloc_mmap_handler: 13254 20001000-20004000 already mapped failed -16 [ 202.890913] binder: BINDER_SET_CONTEXT_MGR already set [ 202.896349] binder: 13254:13257 ioctl 40046207 0 returned -16 [ 202.903249] binder_alloc: 13254: binder_alloc_buf, no vma 07:14:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x1c9, 0x0) 07:14:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") recvmmsg(r0, &(0x7f0000002e80)=[{{&(0x7f0000000380)=@sco, 0x80, &(0x7f00000002c0)}}], 0x1, 0x0, &(0x7f0000002e40)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0) [ 202.909030] binder: 13254:13261 transaction failed 29189/-3, size 0-0 line 3137 [ 202.917607] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.923517] binder: undelivered TRANSACTION_ERROR: 29189 07:14:47 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') setns(r0, 0x0) [ 202.983804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.995781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.016103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 07:14:47 executing program 6: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000340)=@rc, &(0x7f00000001c0)=0x80, 0x80800) ioctl$sock_ifreq(r0, 0x89da, &(0x7f0000000540)={'ipddp0\x00', @ifru_hwaddr=@broadcast}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000400)={0x1, 0xbe}, 0x8) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24}}, 0x100000000, 0x4c79, 0x15, "2960d4499cc042fb6a554d6e13e4ea2434f05b5b61055400abe02509bc3122e5703baf31babfd3a34e399fd9d021f0b25699114261daf588bf643257781796205d4321e095b33062c7b75ad2dc3afc0c"}, 0xd8) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000580)=0x5, 0x4) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f00000005c0), 0x8000efffffff) [ 203.034071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 07:14:47 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4f, 0x0) 07:14:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") recvmmsg(r0, &(0x7f0000002e80)=[{{&(0x7f0000000380)=@sco, 0x80, &(0x7f00000002c0)}}], 0x1, 0x0, &(0x7f0000002e40)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0) 07:14:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000002c0)={0x7, 0x1, 0xfff, 'queue0\x00', 0x8}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) fcntl$getown(r0, 0x9) r2 = gettid() modify_ldt$read_default(0x2, &(0x7f0000000380)=""/184, 0xb8) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") r4 = dup2(r0, r3) ioctl$KDDELIO(r1, 0x4b35, 0xffffffffffffffe0) connect$netlink(r4, &(0x7f0000000080)=@unspec, 0xc) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r5, &(0x7f00000001c0), 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 07:14:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") recvmmsg(r0, &(0x7f0000002e80)=[{{&(0x7f0000000380)=@sco, 0x80, &(0x7f00000002c0)}}], 0x1, 0x0, &(0x7f0000002e40)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0) 07:14:48 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) fallocate(r1, 0x10, 0xa96, 0x1) 07:14:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={"0061a40000ffebf9000000000200", 0x9d01}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x209}, 0x24}}, 0x0) 07:14:48 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f00000006c0), 0x2, &(0x7f0000000040)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)='tunl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)='tunl0\x00') 07:14:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4f, 0x0) 07:14:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x1c9, 0x0) 07:14:48 executing program 4: clone(0xa080000, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000002300)) 07:14:48 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x18c) 07:14:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") recvmmsg(r0, &(0x7f0000002e80)=[{{&(0x7f0000000380)=@sco, 0x80, &(0x7f00000002c0)}}], 0x1, 0x0, &(0x7f0000002e40)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0) 07:14:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='coredump_filter\x00') socket$inet6(0xa, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0xd7) 07:14:48 executing program 4: socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=@srh, 0x8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000780), 0x0) prctl$getreaper(0x0, &(0x7f0000000040)) 07:14:48 executing program 3: r0 = gettid() exit(0x0) ioprio_get$pid(0x1, r0) 07:14:48 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) dup2(r1, r0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") 07:14:48 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x43) r2 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000340), 0x80000009) 07:14:48 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) renameat(r1, &(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f0000000000)='./file0\x00') 07:14:48 executing program 7: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) write$FUSE_POLL(r0, &(0x7f0000000040)={0x18, 0x0, 0x5, {0x5}}, 0x18) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0xfcd, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x4a48b125e13656f}) 07:14:48 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x200000, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x4, 0x2010000) get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000280)={&(0x7f0000000100)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0x18) 07:14:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x1c9, 0x0) 07:14:48 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) openat$ipvs(0xffffffffffffff9c, &(0x7f00000057c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) dup3(r1, r0, 0x80000) clock_gettime(0x0, &(0x7f000000a500)={0x0, 0x0}) recvmmsg(r0, &(0x7f000000a380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/137, 0x89}], 0x3, &(0x7f0000000280)=""/4096, 0x1000, 0x6}, 0xff}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/27, 0x1b}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/216, 0xd8}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/52, 0x34}, {&(0x7f0000004400)=""/107, 0x6b}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/17, 0x11}, {&(0x7f00000054c0)=""/97, 0x61}], 0xa, &(0x7f0000005600)=""/114, 0x72, 0x2}, 0x3}, {{&(0x7f0000005680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000069c0)=[{&(0x7f0000005700)=""/115, 0x73}, {&(0x7f0000005780)=""/31, 0x1f}, {&(0x7f00000057c0)}, {&(0x7f0000005800)=""/126, 0x7e}, {&(0x7f0000005880)=""/4096, 0x1000}, {&(0x7f0000006880)=""/32, 0x20}, {&(0x7f00000068c0)=""/245, 0xf5}], 0x7, &(0x7f0000006a40)=""/254, 0xfe, 0x1f}, 0x7}, {{0x0, 0x0, &(0x7f0000008b80)=[{&(0x7f0000006b40)=""/25, 0x19}, {&(0x7f0000006b80)=""/4096, 0x1000}, {&(0x7f0000007b80)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x7}, 0x4}, {{&(0x7f0000008bc0)=@can, 0x80, &(0x7f0000008dc0)=[{&(0x7f0000008c40)=""/211, 0xd3}, {&(0x7f0000008d40)}, {&(0x7f0000008d80)=""/35, 0x23}], 0x3, &(0x7f0000008e00)=""/17, 0x11, 0x7ff}, 0x7}, {{&(0x7f0000008e40)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000009300)=[{&(0x7f0000008ec0)=""/199, 0xc7}, {&(0x7f0000008fc0)=""/200, 0xc8}, {&(0x7f00000090c0)=""/68, 0x44}, {&(0x7f0000009140)=""/101, 0x65}, {&(0x7f00000091c0)=""/11, 0xb}, {&(0x7f0000009200)=""/79, 0x4f}, {&(0x7f0000009280)=""/2, 0x2}, {&(0x7f00000092c0)}], 0x8, &(0x7f0000009380)=""/4096, 0x1000, 0x3f}, 0x9}], 0x6, 0x1, &(0x7f000000a540)={r2, r3+10000000}) 07:14:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140), 0xc, &(0x7f0000000600)={&(0x7f00000003c0)=@delpolicy={0x5c, 0x14, 0x131, 0x0, 0x0, {{@in6=@mcast2, @in6=@local}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) 07:14:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4f, 0x0) 07:14:49 executing program 1: r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3ff0000}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x80000000000004c, &(0x7f0000b54ffc)=0x1000000, 0x4) 07:14:49 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) dup2(r1, r0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") 07:14:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x1c9, 0x0) 07:14:49 executing program 3: syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x94100) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = gettid() unshare(0x8000000) exit(0x5) tkill(r1, 0x1004000000016) 07:14:49 executing program 4: socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=@srh, 0x8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000780), 0x0) prctl$getreaper(0x0, &(0x7f0000000040)) 07:14:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x241, 0x0) write$eventfd(r1, &(0x7f0000000140)=0x20000100000001, 0x1e5) 07:14:49 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) dup2(r1, r0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") [ 204.955144] keychord: invalid keycode count 0 07:14:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendto$inet6(r2, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) 07:14:49 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0x5, 0x4) write$binfmt_aout(r1, &(0x7f00000002c0), 0x20) [ 205.066578] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:14:49 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x200000, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x4, 0x2010000) get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000280)={&(0x7f0000000100)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0x18) 07:14:49 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) dup2(r1, r0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") 07:14:49 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x200000, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x4, 0x2010000) get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000280)={&(0x7f0000000100)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0x18) 07:14:49 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x200000, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x4, 0x2010000) get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000280)={&(0x7f0000000100)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0x18) 07:14:49 executing program 2: mlock2(&(0x7f0000034000/0x3000)=nil, 0x3000, 0x0) getresgid(&(0x7f0000001f80), &(0x7f0000000000), &(0x7f0000002000)) 07:14:49 executing program 2: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0xfffffffffffffffc, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sendmmsg(r5, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5432, &(0x7f0000000000)) r6 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000016) 07:14:50 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000000)) 07:14:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) futex(&(0x7f0000000ffc), 0x0, 0x0, &(0x7f0000003ff0), &(0x7f0000000000), 0x0) r3 = socket$inet6(0xa, 0x801, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4f, 0x0) 07:14:50 executing program 4: socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=@srh, 0x8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000780), 0x0) prctl$getreaper(0x0, &(0x7f0000000040)) 07:14:50 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x200000, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x4, 0x2010000) get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000280)={&(0x7f0000000100)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0x18) 07:14:50 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x200000, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x4, 0x2010000) get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000280)={&(0x7f0000000100)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0x18) 07:14:50 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x200000, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x4, 0x2010000) get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000280)={&(0x7f0000000100)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0x18) 07:14:50 executing program 1: clone(0x0, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000240), &(0x7f00000003c0)) membarrier(0x0, 0x0) 07:14:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 07:14:50 executing program 2: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0xfffffffffffffffc, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sendmmsg(r5, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5432, &(0x7f0000000000)) r6 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000016) [ 206.610119] hrtimer: interrupt took 146681 ns 07:14:51 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) futex(&(0x7f0000000ffc), 0x0, 0x0, &(0x7f0000003ff0), &(0x7f0000000000), 0x0) r3 = socket$inet6(0xa, 0x801, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:51 executing program 1: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0xfffffffffffffffc, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sendmmsg(r5, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5432, &(0x7f0000000000)) r6 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000016) 07:14:51 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) futex(&(0x7f0000000ffc), 0x0, 0x0, &(0x7f0000003ff0), &(0x7f0000000000), 0x0) r3 = socket$inet6(0xa, 0x801, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:51 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) futex(&(0x7f0000000ffc), 0x0, 0x0, &(0x7f0000003ff0), &(0x7f0000000000), 0x0) r3 = socket$inet6(0xa, 0x801, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:51 executing program 2: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0xfffffffffffffffc, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sendmmsg(r5, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5432, &(0x7f0000000000)) r6 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000016) 07:14:51 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x200000, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x4, 0x2010000) get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000280)={&(0x7f0000000100)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0x18) 07:14:51 executing program 3: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0xfffffffffffffffc, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sendmmsg(r5, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5432, &(0x7f0000000000)) r6 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000016) 07:14:51 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x200000, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x4, 0x2010000) get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000280)={&(0x7f0000000100)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0x18) 07:14:52 executing program 4: socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=@srh, 0x8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000780), 0x0) prctl$getreaper(0x0, &(0x7f0000000040)) 07:14:52 executing program 1: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0xfffffffffffffffc, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sendmmsg(r5, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5432, &(0x7f0000000000)) r6 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000016) 07:14:52 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x200000, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0x4) fallocate(r1, 0x11, 0x4, 0x2010000) get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000280)={&(0x7f0000000100)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0x18) 07:14:52 executing program 3: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0xfffffffffffffffc, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sendmmsg(r5, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5432, &(0x7f0000000000)) r6 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000016) 07:14:52 executing program 2: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0xfffffffffffffffc, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sendmmsg(r5, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5432, &(0x7f0000000000)) r6 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000016) 07:14:52 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) clock_settime(0x0, &(0x7f00000000c0)={0x0, 0x989680}) 07:14:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x10, &(0x7f0000000040)={0x0, 'bond_slave_0\x00'}, 0x18) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:14:52 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000013ff4)={@dev, @loopback, @local={0xac, 0x14, 0xffffffffffffffff}}, 0xc) recvmsg(r1, &(0x7f00000001c0), 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) dup3(r1, r0, 0x0) 07:14:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x467f3d1b}}, 0x1c) 07:14:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x10, &(0x7f0000000040)={0x0, 'bond_slave_0\x00'}, 0x18) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:14:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x10, &(0x7f0000000040)={0x0, 'bond_slave_0\x00'}, 0x18) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:14:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x467f3d1b}}, 0x1c) 07:14:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x10, &(0x7f0000000040)={0x0, 'bond_slave_0\x00'}, 0x18) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:14:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x467f3d1b}}, 0x1c) 07:14:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 07:14:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x467f3d1b}}, 0x1c) [ 208.678581] binder_alloc: binder_alloc_mmap_handler: 13581 20001000-20004000 already mapped failed -16 [ 208.717055] binder: BINDER_SET_CONTEXT_MGR already set [ 208.723323] binder: 13581:13582 ioctl 40046207 0 returned -16 [ 208.729816] binder: send failed reply for transaction 56 to 13581:13582 [ 208.748564] binder: undelivered TRANSACTION_COMPLETE [ 208.764411] binder: undelivered TRANSACTION_ERROR: 29189 07:14:53 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x10000000000013, &(0x7f0000534000), &(0x7f0000000040)=0x2) 07:14:53 executing program 1: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0xfffffffffffffffc, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sendmmsg(r5, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5432, &(0x7f0000000000)) r6 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000016) 07:14:53 executing program 4: ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000000c0)) clone(0x0, &(0x7f0000000440), &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000640)) 07:14:53 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x54) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 07:14:53 executing program 3: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0xfffffffffffffffc, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sendmmsg(r5, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5432, &(0x7f0000000000)) r6 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000016) 07:14:53 executing program 2: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in, @in6}}, {{@in=@rand_addr}, 0x0, @in6=@mcast1}}, &(0x7f0000000640)=0xe8) getresgid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/user\x00', 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000780)='/dev/null\x00', 0x40, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/autofs\x00', 0x301, 0x0) memfd_create(&(0x7f0000000800)='bdev\x00', 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000840)='/dev/sequencer\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000880)='/dev/input/mice\x00', 0x0, 0x20000) memfd_create(&(0x7f00000008c0)='mime_type&\x00', 0x3) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000900)='/dev/sw_sync\x00', 0x101000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cpuset.effective_mems\x00', 0x0, 0x0) socketpair(0x7, 0x80000, 0x8000, &(0x7f0000000980)) openat$full(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/full\x00', 0x202100, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001b40), &(0x7f0000001b80)=0xc) fstat(0xffffffffffffff9c, &(0x7f0000001bc0)) getgid() openat$cgroup(0xffffffffffffff9c, &(0x7f0000001c40)='syz1\x00', 0x200002, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000001c80)) inotify_init() openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001d80)='/selinux/user\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/null\x00', 0x4000, 0x0) fanotify_init(0x41, 0x1000) timerfd_create(0x1, 0x80800) signalfd(0xffffffffffffffff, &(0x7f0000001e00)={0x1ff}, 0x8) accept(0xffffffffffffff9c, &(0x7f0000001e40)=@nfc_llcp, &(0x7f0000001ec0)=0x80) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001f00)) openat$autofs(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/autofs\x00', 0x40000, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001f80)='/selinux/user\x00', 0x2, 0x0) open$dir(&(0x7f0000001fc0)='./file0\x00', 0x2, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000002000)) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000002040)='/selinux/user\x00', 0x2, 0x0) syz_open_dev$rtc(&(0x7f0000002080)='/dev/rtc#\x00', 0x0, 0x400000) userfaultfd(0x80800) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000020c0)='/selinux/mls\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002100)='/selinux/enforce\x00', 0x80000, 0x0) syz_open_dev$sg(&(0x7f0000002140)='/dev/sg#\x00', 0x9, 0x10000) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000002180)) getresuid(&(0x7f00000021c0), &(0x7f0000002200), &(0x7f0000002240)) lstat(&(0x7f0000002280)='./file0\x00', &(0x7f00000022c0)) getpgid(0x0) getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002340), &(0x7f0000002380)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002940), &(0x7f0000002980)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000029c0), &(0x7f0000002a00)=0xc) fstat(0xffffffffffffffff, &(0x7f0000002a40)) dup2(0xffffffffffffffff, 0xffffffffffffff9c) getpgrp(0x0) fstat(0xffffffffffffff9c, &(0x7f0000002ac0)) getgroups(0x7, &(0x7f0000002b40)=[0xee00, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00]) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000002b80)='/selinux/relabel\x00', 0x2, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000002bc0)) timerfd_create(0x7, 0x800) epoll_create(0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/rfkill\x00', 0x901, 0x0) openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000002c40)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002f40)) fstat(0xffffffffffffffff, &(0x7f0000002f80)) getgid() userfaultfd(0x80000) socket$inet_tcp(0x2, 0x1, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000003000)='/dev/keychord\x00', 0x20000, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000003040)='/selinux/create\x00', 0x2, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000003080)) openat$selinux_context(0xffffffffffffff9c, &(0x7f00000030c0)='/selinux/context\x00', 0x2, 0x0) accept(0xffffffffffffffff, &(0x7f0000003100)=@sco, &(0x7f0000003180)=0x80) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000031c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003200)={{{@in6=@dev, @in6}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000003300)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000003340)) open$dir(&(0x7f0000003cc0)='./file0\x00', 0x8000, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000003d00)='/dev/ppp\x00', 0x202202, 0x0) pipe(&(0x7f0000003d40)) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000003d80)='/selinux/user\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003dc0)='/dev/sequencer\x00', 0x2000, 0x0) fcntl$getown(0xffffffffffffff9c, 0x9) lstat(&(0x7f0000003e00)='./file0\x00', &(0x7f0000003e40)) fstat(0xffffffffffffffff, &(0x7f0000003ec0)) getpgid(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003f40), &(0x7f0000003f80)=0xc) fstat(0xffffffffffffffff, &(0x7f0000003fc0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000004040)) getresuid(&(0x7f0000004080), &(0x7f00000040c0), &(0x7f0000004100)) getgid() accept$unix(0xffffffffffffffff, &(0x7f0000004a40), &(0x7f0000004ac0)=0x6e) socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(&(0x7f0000004b00)="2eb3766d6e65743100", 0x0, 0x0, &(0x7f0000004b40)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000004ec0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000004f00)={{{@in=@rand_addr, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000005000)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005040), &(0x7f0000005080)=0xc) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000050c0)) geteuid() fstat(0xffffffffffffffff, &(0x7f0000005100)) syz_open_dev$sg(&(0x7f0000005180)='/dev/sg#\x00', 0x0, 0x0) creat(&(0x7f00000051c0)='./file0\x00', 0x0) socket(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000005200)='cgroup.threads\x00', 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000005240)='/dev/ppp\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000005280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f00000052c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000005300)=0x1c, 0x0) perf_event_open(&(0x7f0000005380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000005400)) getresuid(&(0x7f0000005440), &(0x7f0000005480), &(0x7f00000054c0)) fstat(0xffffffffffffff9c, &(0x7f0000005500)) getpid() stat(&(0x7f0000005580)='./file0\x00', &(0x7f00000055c0)) fstat(0xffffffffffffff9c, &(0x7f0000005640)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000056c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005700)={{{@in=@local, @in=@loopback}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000005800)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000005840)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000059c0), 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)={@dev}, 0x14) mlockall(0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={@remote}, 0x14) 07:14:53 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="0001705f66696c657300") getdents(r1, &(0x7f0000000ea9)=""/407, 0x197) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 07:14:53 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000013ff4)={@dev, @loopback, @local={0xac, 0x14, 0xffffffffffffffff}}, 0xc) recvmsg(r1, &(0x7f00000001c0), 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) dup3(r1, r0, 0x0) 07:14:53 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'}) 07:14:53 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="0001705f66696c657300") getdents(r1, &(0x7f0000000ea9)=""/407, 0x197) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 07:14:53 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)="617474722f63757272656e740099871411d7432e4cd1d0c3679f15b8cb27b7fcfedaffdfb67899fd7611a29de5a2a9897cbc43db1add207e2395f8e43a285a5487f4d39a3f4160448ebe8e43b67448ec2d6ebc0522cdcfc53ec697") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = syz_open_procfs(0x0, &(0x7f0000000700)='net/arp\x00') sendfile(r0, r2, &(0x7f0000000280)=0x38, 0x2000000000000001) 07:14:53 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000040)=""/101, 0xfffffffffffffeec, 0x10100, 0x0, 0x0) shutdown(r0, 0x0) 07:14:53 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 07:14:53 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="0001705f66696c657300") getdents(r1, &(0x7f0000000ea9)=""/407, 0x197) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 07:14:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x0, {{0xa, 0x4e21, 0x6, @dev}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xc}}}}, 0x108) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000140)=""/91, &(0x7f00000001c0)=0x5b) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)="000000800000800000") r2 = request_key(&(0x7f0000000200)='blacklist\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000002c0)='/dev/ashmem\x00', 0xfffffffffffffffe) recvfrom(r0, &(0x7f0000000340)=""/17, 0x11, 0x1, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x3, @broadcast, 'veth0_to_bond\x00'}}, 0x80) keyctl$clear(0x7, r2) ioctl$int_out(r0, 0x0, &(0x7f0000000300)) close(r1) 07:14:54 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4024700a, &(0x7f0000000040)) 07:14:54 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="0001705f66696c657300") getdents(r1, &(0x7f0000000ea9)=""/407, 0x197) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 07:14:54 executing program 7: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x8000005, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) prctl$setname(0xf, &(0x7f0000000000)='user\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="92", 0x1}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() tkill(r1, 0x1000000000013) socket$inet6(0xa, 0x0, 0x0) 07:14:54 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4024700a, &(0x7f0000000040)) 07:14:54 executing program 2: keyctl$update(0x2, 0x0, 0x0, 0xffffffffffffffbb) 07:14:54 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000007fc8)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001000ff20fffefd956fc283b724a600000d00000000060000000000001000010005c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b0790ed", 0x4c}], 0x1}, 0x0) 07:14:54 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000013ff4)={@dev, @loopback, @local={0xac, 0x14, 0xffffffffffffffff}}, 0xc) recvmsg(r1, &(0x7f00000001c0), 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) dup3(r1, r0, 0x0) 07:14:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x10000000000011, &(0x7f0000534000), &(0x7f0000000000)=0x4) 07:14:54 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x10, 0x2, 0xa) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r1, r2, &(0x7f00000000c0)=0x44, 0x200080000004) 07:14:54 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4024700a, &(0x7f0000000040)) 07:14:54 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4024700a, &(0x7f0000000040)) 07:14:54 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) fchdir(r0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8200003) [ 210.248307] netlink: 28 bytes leftover after parsing attributes in process `syz-executor2'. 07:14:54 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000040)=""/101, 0xfffffffffffffeec, 0x10100, 0x0, 0x0) shutdown(r0, 0x0) 07:14:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffd}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 07:14:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c330a00145f8f764070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 07:14:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000040)=""/101, 0xfffffffffffffeec, 0x10100, 0x0, 0x0) shutdown(r0, 0x0) 07:14:54 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) fchdir(r0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8200003) [ 210.398611] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 210.398611] program syz-executor2 not setting count and/or reply_len properly 07:14:54 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) fchdir(r0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8200003) [ 210.476087] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 210.476087] program syz-executor2 not setting count and/or reply_len properly 07:14:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"6c6f000000000000000000000000ed1f", 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@loopback, @local, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85160088, r3}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000380)={@local, @loopback, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 07:14:55 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x20000801, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0), 0x6) sendto$inet(r0, &(0x7f00000007c0)="94", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) 07:14:55 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) lstat(&(0x7f0000002b80)='./bus\x00', &(0x7f0000002bc0)) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="0800000000000000ffffff7fffffffff03"]) fallocate(r1, 0x0, 0x7, 0x8000) pwrite64(r2, &(0x7f00000001c0)='A', 0x1, 0x0) 07:14:55 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) fchdir(r0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8200003) 07:14:55 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000013ff4)={@dev, @loopback, @local={0xac, 0x14, 0xffffffffffffffff}}, 0xc) recvmsg(r1, &(0x7f00000001c0), 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) dup3(r1, r0, 0x0) 07:14:55 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00003b9ffc)=0x40000000000800, 0x160) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000140)=0x2, 0x4) recvfrom$inet(r0, &(0x7f0000000000)=""/248, 0xf8, 0x40012000, 0x0, 0x0) 07:14:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) recvmmsg(r1, &(0x7f000000b1c0)=[{{&(0x7f0000000600)=@alg, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=""/164, 0xa4}}], 0x1, 0x20, &(0x7f000000b400)={0x77359400}) 07:14:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x40000000000034f, 0x0) 07:14:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000040)=""/101, 0xfffffffffffffeec, 0x10100, 0x0, 0x0) shutdown(r0, 0x0) 07:14:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"6c6f000000000000000000000000ed1f", 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@loopback, @local, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85160088, r3}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000380)={@local, @loopback, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 07:14:55 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000040)=""/101, 0xfffffffffffffeec, 0x10100, 0x0, 0x0) shutdown(r0, 0x0) 07:14:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"6c6f000000000000000000000000ed1f", 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@loopback, @local, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85160088, r3}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000380)={@local, @loopback, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 07:14:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4f, 0x0) 07:14:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0xa, 0x24, 0x0, 0x2b}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0xff}, 0x0, @in=@multicast2}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00002cef88)='W', 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ac0)="a6270a8eafae4644705387b020951fc42286821d2ee088f5010d14b6be9ca420e4bdd08522fe7bd0d3b7e860f7dde50f1ff7098eabf7527984dd783c138b5ef88922692d7f78399c48e61f658db7f4302304eb4e50552967add1dfbf022f65be52f172fbc877a12e381522094f18", 0x6e) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @remote}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000200)=""/80, 0x50}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000180), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYRES16], 0x1}}, 0x40000) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) 07:14:55 executing program 0: unshare(0x8000400) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, &(0x7f0000000140)) creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 07:14:55 executing program 3: r0 = epoll_create1(0x0) flock(r0, 0x1) flock(r0, 0x5) 07:14:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 07:14:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0xa, 0x24, 0x0, 0x2b}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0xff}, 0x0, @in=@multicast2}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00002cef88)='W', 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ac0)="a6270a8eafae4644705387b020951fc42286821d2ee088f5010d14b6be9ca420e4bdd08522fe7bd0d3b7e860f7dde50f1ff7098eabf7527984dd783c138b5ef88922692d7f78399c48e61f658db7f4302304eb4e50552967add1dfbf022f65be52f172fbc877a12e381522094f18", 0x6e) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @remote}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000200)=""/80, 0x50}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000180), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYRES16], 0x1}}, 0x40000) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) 07:14:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f00000001c0)) 07:14:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"6c6f000000000000000000000000ed1f", 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@loopback, @local, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85160088, r3}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000380)={@local, @loopback, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 07:14:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0xa, 0x24, 0x0, 0x2b}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0xff}, 0x0, @in=@multicast2}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00002cef88)='W', 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ac0)="a6270a8eafae4644705387b020951fc42286821d2ee088f5010d14b6be9ca420e4bdd08522fe7bd0d3b7e860f7dde50f1ff7098eabf7527984dd783c138b5ef88922692d7f78399c48e61f658db7f4302304eb4e50552967add1dfbf022f65be52f172fbc877a12e381522094f18", 0x6e) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @remote}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000200)=""/80, 0x50}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000180), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYRES16], 0x1}}, 0x40000) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) 07:14:55 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x51}, 0x40002102) 07:14:55 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) socket$inet6(0xa, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r2, &(0x7f0000000900)=[{&(0x7f00000009c0)="1f", 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) write$binfmt_misc(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x309) sendfile(r1, r1, &(0x7f0000000000), 0x20000102000007) fallocate(0xffffffffffffffff, 0x0, 0x7fff, 0x8000) 07:14:55 executing program 7: mmap(&(0x7f0000009000/0xc00000)=nil, 0x7ffffffff000, 0x0, 0x2c031, 0xffffffffffffffff, 0x0) 07:14:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000040)=""/101, 0xfffffffffffffeec, 0x10100, 0x0, 0x0) shutdown(r0, 0x0) 07:14:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0xa, 0x24, 0x0, 0x2b}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0xff}, 0x0, @in=@multicast2}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00002cef88)='W', 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ac0)="a6270a8eafae4644705387b020951fc42286821d2ee088f5010d14b6be9ca420e4bdd08522fe7bd0d3b7e860f7dde50f1ff7098eabf7527984dd783c138b5ef88922692d7f78399c48e61f658db7f4302304eb4e50552967add1dfbf022f65be52f172fbc877a12e381522094f18", 0x6e) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @remote}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000200)=""/80, 0x50}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000180), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYRES16], 0x1}}, 0x40000) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) 07:14:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') ftruncate(r1, 0x100000000) 07:14:56 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x51}, 0x40002102) 07:14:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4f, 0x0) 07:14:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454da, 0xffffffffffffffff) 07:14:56 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) unshare(0x400) syncfs(r0) 07:14:56 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000040)=""/101, 0xfffffffffffffeec, 0x10100, 0x0, 0x0) shutdown(r0, 0x0) 07:14:56 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x51}, 0x40002102) 07:14:56 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x6, 0xa, &(0x7f0000000100), &(0x7f0000013000)=0xffffffffffffff95) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r1) 07:14:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 07:14:56 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x1ff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000000), &(0x7f00000000c0), 0xfffff, 0xfffffffffffffffb) 07:14:56 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x51}, 0x40002102) 07:14:56 executing program 7: keyctl$session_to_parent(0x12) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x80000000000002, 0x8003, 0x0, 0x8000}) prctl$intptr(0x24, 0x8) 07:14:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x3) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:14:56 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x1ff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000000), &(0x7f00000000c0), 0xfffff, 0xfffffffffffffffb) 07:14:56 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x1ff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000000), &(0x7f00000000c0), 0xfffff, 0xfffffffffffffffb) 07:14:56 executing program 7: keyctl$session_to_parent(0x12) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x80000000000002, 0x8003, 0x0, 0x8000}) prctl$intptr(0x24, 0x8) 07:14:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 07:14:56 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @local}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @broadcast}, 'bond0\x00'}) 07:14:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4f, 0x0) 07:14:56 executing program 7: keyctl$session_to_parent(0x12) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x80000000000002, 0x8003, 0x0, 0x8000}) prctl$intptr(0x24, 0x8) 07:14:56 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x1ff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000000), &(0x7f00000000c0), 0xfffff, 0xfffffffffffffffb) 07:14:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setopts(0x4203, r2, 0x0, 0xa07000) 07:14:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000001800120008000100736974000c00020008000a0073a6a9b2ea8aee775acd696ae554b46aa604b142e5f9c043aa578fa1fb7d31b6d43c9d156a94195f08d9a0a524377608157d694d8cbf36764ba87974c79a77f6ef40c630f6b162e1c3da5a56e0688058e81fce96ede5339ed399c66c589cac1519b53a795eb46c93653dacacd5a450e657c77e96866114bb5bea2432aa041a9beae04f1c808102eee9b5724b516ebb3e789a9698", @ANYRES32=0x0], 0x2}}, 0x0) 07:14:57 executing program 7: keyctl$session_to_parent(0x12) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x80000000000002, 0x8003, 0x0, 0x8000}) prctl$intptr(0x24, 0x8) 07:14:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 07:14:57 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc08c5102, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 07:14:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x0, @dev}}, 0x0, 0x6, 0x0, "b6f73b6e690dfa12c023fe736a343f8b70bbfadd0b2b7917794acb5f197a68d966aa0b5a5f41ca2b6204d8bac209c26d4b213ba809a1c6e983a2b18c3657b1710a93895ee1e98fb8566092d73d71d352"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000014c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x4b, 0x0, "4ae9645a4bdbefd0187f1e35cba955127c7ca8b982f7408054208a36ee7b341bc01b6d8d52e8ee57c61ec7f041e965466b7a2d4cec6a16d568c9683cac6791e3bef5d31b03d40e4f5f68137e44379c3b"}, 0xd8) 07:14:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4f, 0x0) 07:14:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe9ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x10007fff) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) r3 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) dup3(r1, r0, 0x0) close(r3) 07:14:57 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x400000000000007, &(0x7f0000000080)={0x40e5cf, {0xffffdfbfffbff275}}, &(0x7f0000000000), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f0000000140)="00000000000000000000000000002bb15419f8c39ded903f328f750228158caec297f83bf6d6c02505dae3999280109244bb843613f8a1183248a418b54fb794") 07:14:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x4000000000007fa}) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x8004) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:57 executing program 3: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x1, 0x0, &(0x7f0000002640)={0x0, r0+10000000}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') pwritev(r1, &(0x7f0000001400), 0x2a6, 0x0) 07:14:57 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x4, 0x2}, 0x10}}, 0x0) 07:14:57 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x400000000000007, &(0x7f0000000080)={0x40e5cf, {0xffffdfbfffbff275}}, &(0x7f0000000000), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f0000000140)="00000000000000000000000000002bb15419f8c39ded903f328f750228158caec297f83bf6d6c02505dae3999280109244bb843613f8a1183248a418b54fb794") 07:14:57 executing program 4: creat(&(0x7f000002bff8)='./file0\x00', 0x0) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d3ccf) r1 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r0, 0xf, &(0x7f0000fa4000)={0x0, r1}) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) fcntl$notify(r0, 0xa, 0x34) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r0, r2) 07:14:57 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6dfd0)={0xee, 0x0, &(0x7f0000dd0000)=[@acquire], 0x0, 0x0, &(0x7f0000000040)}) 07:14:57 executing program 3: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x1, 0x0, &(0x7f0000002640)={0x0, r0+10000000}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') pwritev(r1, &(0x7f0000001400), 0x2a6, 0x0) 07:14:57 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x400000000000007, &(0x7f0000000080)={0x40e5cf, {0xffffdfbfffbff275}}, &(0x7f0000000000), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f0000000140)="00000000000000000000000000002bb15419f8c39ded903f328f750228158caec297f83bf6d6c02505dae3999280109244bb843613f8a1183248a418b54fb794") [ 212.920865] binder: 13956:13958 unknown command 0 07:14:57 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='system.advise\x00', &(0x7f0000000080)='/dev/sequencer\x00', 0xf, 0x0) [ 212.950720] binder: 13956:13958 ioctl c0306201 20c6dfd0 returned -22 07:14:57 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x400000000000007, &(0x7f0000000080)={0x40e5cf, {0xffffdfbfffbff275}}, &(0x7f0000000000), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f0000000140)="00000000000000000000000000002bb15419f8c39ded903f328f750228158caec297f83bf6d6c02505dae3999280109244bb843613f8a1183248a418b54fb794") 07:14:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 07:14:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x4000000000007fa}) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x8004) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) [ 213.006560] binder: BINDER_SET_CONTEXT_MGR already set [ 213.016137] binder: 13956:13958 ioctl 40046207 0 returned -16 07:14:57 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xffffffffffffffe1) close(r1) 07:14:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0xfffffff0, 0x9}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 07:14:57 executing program 3: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x1, 0x0, &(0x7f0000002640)={0x0, r0+10000000}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') pwritev(r1, &(0x7f0000001400), 0x2a6, 0x0) 07:14:57 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000000048, &(0x7f0000000040)=0x5, 0x4) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000180), &(0x7f0000000080)=0x4) 07:14:57 executing program 1: prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 07:14:57 executing program 6: clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) 07:14:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x4000000000007fa}) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x8004) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:57 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x7fffffff) 07:14:57 executing program 4: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000080)='./file0\x00', 0x103f, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440), &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000002740)=""/85, 0x55}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 07:14:57 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0xffffffffffffffff, r1) ptrace(0x18, r1) 07:14:57 executing program 6: clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) 07:14:57 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000006bc0)=[{{&(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002480)}}], 0x1, 0x10020, &(0x7f0000006d80)={0x0, 0x1c9c380}) 07:14:57 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) read$eventfd(r1, &(0x7f0000000040), 0x8) tkill(r0, 0x1000000000016) 07:14:57 executing program 3: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x1, 0x0, &(0x7f0000002640)={0x0, r0+10000000}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') pwritev(r1, &(0x7f0000001400), 0x2a6, 0x0) 07:14:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000001980)=[{{&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)="0b8671b2f487a2c0a1e8b7f67ad959f0", 0x10}], 0x1, &(0x7f0000000480)}}, {{&(0x7f0000001640)=@nl, 0x80, &(0x7f0000001840), 0x0, &(0x7f0000001880)}}], 0x2, 0x0) 07:14:57 executing program 6: clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) 07:14:57 executing program 5: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000004, "010f010000000100", "88e7ed00000080000000001ef6c699f539e07ca19ab52389861ec9db7fd918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0x60) 07:14:57 executing program 2: r0 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$BLKGETSIZE(r1, 0x127a, &(0x7f0000000240)) 07:14:57 executing program 3: r0 = socket(0x18, 0x0, 0x1) getsockname(r0, &(0x7f00000000c0)=@l2, &(0x7f0000000140)=0x80) getsockname$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0xffffffffffffffe5) 07:14:57 executing program 4: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000080)='./file0\x00', 0x103f, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440), &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000002740)=""/85, 0x55}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 07:14:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x4000000000007fa}) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x8004) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:57 executing program 7: ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000140)={'syzkaller0\x00'}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:57 executing program 6: clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) 07:14:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xb1b}, 0x1c) 07:14:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0xa4}) 07:14:58 executing program 3: r0 = epoll_create1(0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}) 07:14:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0xff}, 0x0, @in6=@dev}}, 0xe8) dup3(r0, r1, 0x0) 07:14:58 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) mmap(&(0x7f0000ab8000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000abaff9)={0x3, 0xfff}, 0x10) 07:14:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x10012, r0, 0x20000) ioctl$SG_GET_NUM_WAITING(r0, 0x40086602, &(0x7f0000001400)) 07:14:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x337, 0x0) flistxattr(0xffffffffffffffff, &(0x7f00000003c0)=""/211, 0xffffffbf) 07:14:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x5111, &(0x7f0000000000)) 07:14:58 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f00000000c0)) setrlimit(0x0, &(0x7f0000e63ff0)) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 213.755034] audit: type=1326 audit(1534922098.157:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=14095 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 07:14:58 executing program 5: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000004, "010f010000000100", "88e7ed00000080000000001ef6c699f539e07ca19ab52389861ec9db7fd918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0x60) 07:14:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) 07:14:58 executing program 4: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000080)='./file0\x00', 0x103f, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440), &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000002740)=""/85, 0x55}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 07:14:58 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = eventfd(0x0) read(r1, &(0x7f0000000040)=""/191, 0xbf) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r2, &(0x7f0000000000), 0x1000000008) tkill(r0, 0x13) 07:14:58 executing program 7: ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000140)={'syzkaller0\x00'}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) 07:14:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) 07:14:58 executing program 4: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000080)='./file0\x00', 0x103f, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440), &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000002740)=""/85, 0x55}], 0x1, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 07:14:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) 07:14:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x337, 0x0) flistxattr(0xffffffffffffffff, &(0x7f00000003c0)=""/211, 0xffffffbf) 07:14:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0x0) 07:14:58 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xfffffffffffffffd}, {0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f00000012c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f00000001c0)}}, {{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80), 0x26e}}], 0x203, 0x0) 07:14:58 executing program 7: ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000140)={'syzkaller0\x00'}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0xffffffffffffffff) getpriority(0x1, r1) [ 214.541761] audit: type=1326 audit(1534922098.947:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=14095 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 07:14:59 executing program 2: socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="02") syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x80000000, 0x400000) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x2, 0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000001c0)=@srh, 0x8) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000780), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000006, &(0x7f0000937fed)=""/16, &(0x7f0000000180)=0x10) 07:14:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, {}, @rumble}) 07:14:59 executing program 7: ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000140)={'syzkaller0\x00'}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 07:14:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0xffffffffffffffff) getpriority(0x1, r1) 07:14:59 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xfffffffffffffffd}, {0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f00000012c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f00000001c0)}}, {{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80), 0x26e}}], 0x203, 0x0) 07:14:59 executing program 5: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000004, "010f010000000100", "88e7ed00000080000000001ef6c699f539e07ca19ab52389861ec9db7fd918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0x60) 07:14:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x337, 0x0) flistxattr(0xffffffffffffffff, &(0x7f00000003c0)=""/211, 0xffffffbf) 07:14:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 07:14:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0xffffffffffffffff) getpriority(0x1, r1) 07:14:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 07:14:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0xffffffffffffffff) getpriority(0x1, r1) 07:14:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, {}, @rumble}) 07:14:59 executing program 3: madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2) prctl$getreaper(0x25, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000bf3000)) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0) 07:14:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 07:14:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) write(r1, &(0x7f0000fd6000)='z', 0x1) close(r1) read(r0, &(0x7f0000000000)=""/173, 0xad) 07:14:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, {}, @rumble}) 07:14:59 executing program 2: socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="02") syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x80000000, 0x400000) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x2, 0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000001c0)=@srh, 0x8) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000780), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000006, &(0x7f0000937fed)=""/16, &(0x7f0000000180)=0x10) 07:14:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 07:14:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000040)}) 07:14:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, {}, @rumble}) 07:14:59 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xfffffffffffffffd}, {0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f00000012c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f00000001c0)}}, {{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80), 0x26e}}], 0x203, 0x0) 07:14:59 executing program 5: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000004, "010f010000000100", "88e7ed00000080000000001ef6c699f539e07ca19ab52389861ec9db7fd918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0x60) 07:14:59 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441ffffffeffffffffff004b867100fe36cef3e26def27000200000034", 0x1d) 07:14:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x337, 0x0) flistxattr(0xffffffffffffffff, &(0x7f00000003c0)=""/211, 0xffffffbf) 07:14:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='<', 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x3f) 07:14:59 executing program 4: clone(0x0, &(0x7f0000000080)="01c631c2a75b4be0c98f1bd3c1ade5cb56f3a6cbc1cfd765f649eefb7fe04298ee4d2d3da465c7c2031dfadfa4e157fd206ecf70ba999665c7000000ab95ee014e1b204d890d991c48cbe587acc1", &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x8141, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)) [ 215.397524] binder: 14230:14240 got transaction to invalid handle [ 215.424816] binder: 14230:14240 transaction failed 29201/-22, size 0-0 line 3014 07:14:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffbbfffffff, 0x6, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f00000002c0)="9b247f9c1793", &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f0000000480)}) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0xf6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000380)=""/42, 0xf0) 07:14:59 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) close(r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) pivot_root(&(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='./bus\x00') [ 215.494349] binder: BINDER_SET_CONTEXT_MGR already set [ 215.505938] binder: 14230:14257 got transaction to invalid handle [ 215.523269] binder: 14230:14240 ioctl 40046207 0 returned -16 07:14:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r1, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000002000/0x600000)=nil, 0x600000, 0x2) 07:15:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000040000)) 07:15:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0a85322, &(0x7f0000000080)={0x80, @time}) 07:15:00 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)) [ 215.540896] binder: 14230:14257 transaction failed 29201/-22, size 0-0 line 3014 [ 215.549743] binder: undelivered TRANSACTION_ERROR: 29201 [ 215.568495] binder: undelivered TRANSACTION_ERROR: 29201 07:15:00 executing program 2: socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="02") syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x80000000, 0x400000) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x2, 0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000001c0)=@srh, 0x8) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000780), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000006, &(0x7f0000937fed)=""/16, &(0x7f0000000180)=0x10) 07:15:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r1, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000002000/0x600000)=nil, 0x600000, 0x2) 07:15:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in, 0x0, 0x6, 0x0, "a0078f4b42942462e25be494b95090f81f5dc4967c7a9b6c4afe113cf3e122ecdc539737530885c24c8c61fa6c0957f86b390236c31bb0754f8cd42a53fd9b71efb812cc6b5cd386572ed55c8e2ca120"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x0, @local}}, 0x0, 0x1, 0x0, "0efdd9df3d13e9d4b03677374e2cfca56772d649673d744df5f65f2d06cd3a27153e16358c74b918412ddec1f20586eaf1f404e6cf85cf4a39c419dfe2e28cb3f74ac5aaf11d120ffdcb79c93a530697"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000011c0)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x0, "6ca32c4a9d7116ef67013122f3b7bf6303b13a12e59294c02928b9a341448c6fada9112fad8a7a70a3e3ac470803835fecc7da20e7697c492e334517d1495f47356ad64305085851140dc11b3897eeeb"}, 0xd8) 07:15:00 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, &(0x7f0000ec6000)=""/50, 0x32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) read$FUSE(r2, &(0x7f0000001040), 0x1000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 07:15:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}}}, 0xe8) sendto$inet6(r1, &(0x7f00000001c0), 0x2bc, 0x0, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 07:15:00 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xfffffffffffffffd}, {0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f00000012c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f00000001c0)}}, {{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80), 0x26e}}], 0x203, 0x0) 07:15:00 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f000080b000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='oom_score\x00') 07:15:00 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000001580)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000100)) 07:15:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x1, 0x0, 0x4}, 0x20) 07:15:00 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') preadv(r0, &(0x7f0000000240), 0x2000000000000308, 0x0) 07:15:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) 07:15:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r1, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000002000/0x600000)=nil, 0x600000, 0x2) 07:15:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x28}]}, 0x50}}, 0x0) 07:15:00 executing program 7: syz_open_dev$mice(&(0x7f0000001140)='/dev/input/mice\x00', 0x0, 0x100) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_rr_get_interval(r0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000280), &(0x7f00000001c0)) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000001300)={'rose0\x00', 0x7}) clock_gettime(0x3, &(0x7f0000001240)={0x0, 0x0}) setitimer(0x1, &(0x7f0000001280)={{}, {0x0, r2/1000+10000}}, &(0x7f0000000200)) socket$inet6(0xa, 0x801, 0x6) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000001340)={'erspan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/net/tun\x00', 0x28000, 0x0) [ 216.179413] binder: BINDER_SET_CONTEXT_MGR already set [ 216.197574] binder: 14312:14319 ioctl 40046207 0 returned -16 07:15:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r1, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000002000/0x600000)=nil, 0x600000, 0x2) 07:15:00 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="dd36140000000000000000"], 0xb) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r2, &(0x7f0000000140), 0x8fff) [ 216.222549] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 216.296737] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 07:15:01 executing program 2: socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="02") syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x80000000, 0x400000) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x2, 0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000001c0)=@srh, 0x8) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000780), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000006, &(0x7f0000937fed)=""/16, &(0x7f0000000180)=0x10) 07:15:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7]}, 0x45c) 07:15:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000002e0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 07:15:01 executing program 7: syz_open_dev$mice(&(0x7f0000001140)='/dev/input/mice\x00', 0x0, 0x100) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_rr_get_interval(r0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000280), &(0x7f00000001c0)) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000001300)={'rose0\x00', 0x7}) clock_gettime(0x3, &(0x7f0000001240)={0x0, 0x0}) setitimer(0x1, &(0x7f0000001280)={{}, {0x0, r2/1000+10000}}, &(0x7f0000000200)) socket$inet6(0xa, 0x801, 0x6) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000001340)={'erspan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/net/tun\x00', 0x28000, 0x0) 07:15:01 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000100)) umount2(&(0x7f0000000200)='./file0\x00', 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) unshare(0x40000000) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 07:15:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00005c8000)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65c856a45d61154adc2b2a976fbffffffffffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x81, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002200)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000002480)=""/112, 0x70}}], 0x1ee, 0x0, &(0x7f0000002a80)={0x77359400}) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x4) r1 = gettid() tkill(r1, 0x16) 07:15:01 executing program 6: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x40000005}) 07:15:01 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f000080b000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='oom_score\x00') [ 216.707455] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 216.718316] input: syz0 as /devices/virtual/input/input42 07:15:01 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') 07:15:01 executing program 7: syz_open_dev$mice(&(0x7f0000001140)='/dev/input/mice\x00', 0x0, 0x100) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_rr_get_interval(r0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000280), &(0x7f00000001c0)) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000001300)={'rose0\x00', 0x7}) clock_gettime(0x3, &(0x7f0000001240)={0x0, 0x0}) setitimer(0x1, &(0x7f0000001280)={{}, {0x0, r2/1000+10000}}, &(0x7f0000000200)) socket$inet6(0xa, 0x801, 0x6) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000001340)={'erspan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/net/tun\x00', 0x28000, 0x0) [ 216.750368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 216.763512] input: syz0 as /devices/virtual/input/input43 [ 216.779502] IPVS: Creating netns size=2552 id=27 07:15:01 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000013002d54036205001a00000c9a934d4fe600001000e0c99f3d653c00f0ff9da499df000000000000000000000000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) 07:15:01 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008000a00110000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d40000000000000000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 07:15:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) munmap(&(0x7f0000000000/0x600000)=nil, 0x600000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)) 07:15:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'eql\x00', 0x2025}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20000000308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 07:15:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) munmap(&(0x7f0000000000/0x600000)=nil, 0x600000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)) 07:15:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) munmap(&(0x7f0000000000/0x600000)=nil, 0x600000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)) [ 217.181221] pktgen: kernel_thread() failed for cpu 0 [ 217.197552] pktgen: Cannot create thread for cpu 0 (-4) [ 217.208578] pktgen: kernel_thread() failed for cpu 1 [ 217.221504] pktgen: Cannot create thread for cpu 1 (-4) [ 217.226905] pktgen: Initialization failed for all threads 07:15:01 executing program 7: syz_open_dev$mice(&(0x7f0000001140)='/dev/input/mice\x00', 0x0, 0x100) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_rr_get_interval(r0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000280), &(0x7f00000001c0)) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000001300)={'rose0\x00', 0x7}) clock_gettime(0x3, &(0x7f0000001240)={0x0, 0x0}) setitimer(0x1, &(0x7f0000001280)={{}, {0x0, r2/1000+10000}}, &(0x7f0000000200)) socket$inet6(0xa, 0x801, 0x6) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000001340)={'erspan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/net/tun\x00', 0x28000, 0x0) 07:15:01 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f0000c8d000)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x800000001, 0x0, 0x0, {0x2}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@multicast2}]}]}, 0x20}}, 0x0) 07:15:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x31d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x3) 07:15:01 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f000080b000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='oom_score\x00') 07:15:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) munmap(&(0x7f0000000000/0x600000)=nil, 0x600000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)) 07:15:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'eql\x00', 0x2025}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20000000308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 07:15:01 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000100)) umount2(&(0x7f0000000200)='./file0\x00', 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) unshare(0x40000000) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 07:15:02 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000100)) umount2(&(0x7f0000000200)='./file0\x00', 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) unshare(0x40000000) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 07:15:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x200) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f000063a000)=0x2be, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x1001f00, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") [ 217.548966] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 217.580914] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 07:15:02 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='vboxnet0cgroupppp0systemkeyring!cpuset\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000100)=@rc, &(0x7f0000000180)=0x80) remap_file_pages(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x1f, 0x80000) ioctl$KDSETMODE(r0, 0x4b3a, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/net\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r3, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) [ 217.656506] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 07:15:02 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) fstat(r1, &(0x7f0000005a40)) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 07:15:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'eql\x00', 0x2025}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20000000308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 218.191648] ================================================================== [ 218.199178] BUG: KASAN: use-after-free in pppol2tp_connect+0x160a/0x1910 [ 218.206011] Read of size 8 at addr ffff8801d0832190 by task syz-executor0/14466 [ 218.213454] [ 218.215078] CPU: 0 PID: 14466 Comm: syz-executor0 Not tainted 4.4.151-ge917467 #84 [ 218.222771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.232110] 0000000000000000 3ddfd86e2e99d181 ffff8800b2d07b28 ffffffff81e15eed [ 218.240136] ffffea0007420c80 ffff8801d0832190 0000000000000000 ffff8801d0832190 [ 218.248163] ffff8800b2d07d50 ffff8800b2d07b60 ffffffff8151b390 ffff8801d0832190 [ 218.256202] Call Trace: [ 218.258777] [] dump_stack+0xc1/0x124 [ 218.264130] [] print_address_description+0x6c/0x216 [ 218.270785] [] kasan_report.cold.7+0x175/0x2f7 [ 218.277002] [] ? pppol2tp_connect+0x160a/0x1910 [ 218.283312] [] __asan_report_load8_noabort+0x14/0x20 [ 218.290051] [] pppol2tp_connect+0x160a/0x1910 [ 218.296182] [] ? pppol2tp_recv+0x320/0x320 [ 218.302053] [] ? security_socket_connect+0x8f/0xc0 [ 218.308637] [] SYSC_connect+0x1b8/0x300 [ 218.314246] [] ? SYSC_bind+0x280/0x280 [ 218.319766] [] ? get_unused_fd_flags+0xd0/0xd0 [ 218.325983] [] ? do_futex+0x17f0/0x17f0 [ 218.331593] [] ? SyS_socket+0x121/0x1b0 [ 218.337205] [] ? move_addr_to_kernel+0x50/0x50 [ 218.343428] [] SyS_connect+0x24/0x30 [ 218.348782] [] entry_SYSCALL_64_fastpath+0x22/0x9e [ 218.355344] [ 218.356979] Allocated by task 14451: [ 218.360676] [] save_stack_trace+0x26/0x50 [ 218.366602] [] save_stack+0x43/0xd0 [ 218.372001] [] kasan_kmalloc+0xc7/0xe0 [ 218.377668] [] __kmalloc+0x124/0x310 [ 218.383152] [] l2tp_session_create+0x39/0x1030 [ 218.389606] [] pppol2tp_connect+0x10f0/0x1910 [ 218.395865] [] SYSC_connect+0x1b8/0x300 [ 218.401601] [] SyS_connect+0x24/0x30 [ 218.407073] [] entry_SYSCALL_64_fastpath+0x22/0x9e [ 218.413763] [ 218.415382] Freed by task 14448: [ 218.418740] [] save_stack_trace+0x26/0x50 [ 218.424675] [] save_stack+0x43/0xd0 [ 218.430067] [] kasan_slab_free+0x72/0xc0 [ 218.435883] [] kfree+0xf4/0x310 [ 218.440924] [] l2tp_session_free+0x170/0x200 [ 218.447091] [] pppol2tp_session_destruct+0xd7/0x110 [ 218.453867] [] sk_destruct+0x4c/0x4c0 [ 218.459428] [] __sk_free+0x4f/0x220 [ 218.464820] [] sk_free+0x30/0x40 [ 218.469940] [] pppol2tp_release+0x26a/0x310 [ 218.476023] [] sock_release+0x96/0x1c0 [ 218.481677] [] sock_close+0x16/0x20 [ 218.487081] [] __fput+0x235/0x6f0 [ 218.492328] [] ____fput+0x15/0x20 [ 218.497542] [] task_work_run+0x10f/0x190 [ 218.503358] [] exit_to_usermode_loop+0x13d/0x160 [ 218.509869] [] syscall_return_slowpath+0x1b5/0x1f0 [ 218.516557] [] int_ret_from_sys_call+0x25/0xa3 [ 218.522904] [ 218.524520] The buggy address belongs to the object at ffff8801d0832000 [ 218.524520] which belongs to the cache kmalloc-512 of size 512 [ 218.537170] The buggy address is located 400 bytes inside of [ 218.537170] 512-byte region [ffff8801d0832000, ffff8801d0832200) [ 218.549032] The buggy address belongs to the page: [ 218.57002SeaBIOS (version 1.8.2-20180718_090847-google) Total RAM Size = 0x00000001e0000000 = 7680 MiB CPUs found: 2 Max CPUs supported: 256 found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=4194304 = 2048 MiB drive 0x000f2280: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304 Booting from Hard Disk 0... early console in decompress_kernel input_data: 0x0000000003b4f26e input_len: 0x00000000014d1864 output: 0x0000000001000000 output_len: 0x000000000400ba90 run_size: 0x0000000005755000 Decompressing Linux... Parsing ELF... done. Booting the kernel. [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Initializing cgroup subsys schedtune [ 0.000000] Linux version 4.4.151-ge917467 (syzkaller@ci) (gcc version 8.0.1 20180413 (experimental) (GCC) ) #84 SMP PREEMPT Wed Aug 22 06:36:05 UTC 2018 [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n ftrace_dump_on_oops=orig_cpu oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 nopti [ 0.000000] KERNEL supported cpus: [ 0.000000] Intel GenuineIntel [ 0.000000] AMD AuthenticAMD [ 0.000000] Centaur CentaurHauls [ 0.000000] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x04: 'AVX registers' [ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000bfff2fff] usable [ 0.000000] BIOS-e820: [mem 0x00000000bfff3000-0x00000000bfffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffbc000-0x00000000ffffffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000021fffffff] usable [ 0.000000] bootconsole [earlyser0] enabled [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] SMBIOS 2.4 present. [ 0.000000] Hypervisor detected: KVM [ 0.000000] Kernel/User page tables isolation: disabled [ 0.000000] e820: last_pfn = 0x220000 max_arch_pfn = 0x400000000 [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WC UC- WT [ 0.000000] e820: last_pfn = 0xbfff3 max_arch_pfn = 0x400000000 [ 0.000000] found SMP MP-table at [mem 0x000f2300-0x000f230f] mapped at [ffff8800000f2300] [ 0.000000] Scanning 1 areas for low memory corruption [ 0.000000] Using GB pages for direct mapping [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000F22C0 000014 (v00 Google) [ 0.000000] ACPI: RSDT 0x00000000BFFF3430 000038 (v01 Google GOOGRSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACP 0x00000000BFFFCF60 0000F4 (v02 Google GOOGFACP 00000001 GOOG 00000001) [ 0.000000] ACPI: DSDT 0x00000000BFFF3470 0017B2 (v01 Google GOOGDSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACS 0x00000000BFFFCF00 000040 [ 0.000000] ACPI: FACS 0x00000000BFFFCF00 000040 [ 0.000000] ACPI: SSDT 0x00000000BFFF65F0 00690D (v01 Google GOOGSSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: APIC 0x00000000BFFF5D10 000076 (v01 Google GOOGAPIC 00000001 GOOG 00000001) [ 0.000000] ACPI: WAET 0x00000000BFFF5CE0 000028 (v01 Google GOOGWAET 00000001 GOOG 00000001) [ 0.000000] ACPI: SRAT 0x00000000BFFF4C30 0000C8 (v01 Google GOOGSRAT 00000001 GOOG 00000001) [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 2:1fffd001, primary cpu clock [ 0.000000] kvm-clock: using sched offset of 2069986241 cycles [ 0.000000] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.000000] DMA32 [mem 0x0000000001000000-0x00000000ffffffff] [ 0.000000] Normal [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.000000] node 0: [mem 0x0000000000100000-0x00000000bfff2fff] [ 0.000000] node 0: [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000021fffffff] [ 0.000000] kasan: KernelAddressSanitizer initialized [ 0.000000] ACPI: PM-Timer IO Port: 0xb008 [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] smpboot: Allowing 2 CPUs, 0 hotplug CPUs [ 0.000000] PM: Registered nosave memory: [mem 0x00000000-0x00000fff] [ 0.000000] PM: Registered nosave memory: [mem 0x0009f000-0x0009ffff] [ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 0.000000] PM: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 0.000000] PM: Registered nosave memory: [mem 0xbfff3000-0xbfffffff] [ 0.000000] PM: Registered nosave memory: [mem 0xc0000000-0xfffbbfff] [ 0.000000] PM: Registered nosave memory: [mem 0xfffbc000-0xffffffff] [ 0.000000] e820: [mem 0xc0000000-0xfffbbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.000000] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:2 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 42 pages/cpu @ffff8801db200000 s134152 r8192 d29688 u1048576 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 1935227 [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n ftrace_dump_on_oops=orig_cpu oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 nopti [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes) [ 0.000000] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes) [ 0.000000] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.000000] Memory: 6579080K/7863876K available (41799K kernel code, 6308K rwdata, 9068K rodata, 1868K init, 23696K bss, 1284796K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.000000] Running RCU self tests [ 0.000000] Preemptible hierarchical RCU implementation. [ 0.000000] RCU lockdep checking is enabled. [ 0.000000] Build-time adjustment of leaf fanout to 64. [ 0.000000] RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=2. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=2 [ 0.000000] NR_IRQS:4352 nr_irqs:440 16 [ 0.000000] console [ttyS0] enabled [ 0.000000] console [ttyS0] enabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar [ 0.000000] ... MAX_LOCKDEP_SUBCLASSES: 8 [ 0.000000] ... MAX_LOCK_DEPTH: 48 [ 0.000000] ... MAX_LOCKDEP_KEYS: 8191 [ 0.000000] ... CLASSHASH_SIZE: 4096 [ 0.000000] ... MAX_LOCKDEP_ENTRIES: 32768 [ 0.000000] ... MAX_LOCKDEP_CHAINS: 65536 [ 0.000000] ... CHAINHASH_SIZE: 32768 [ 0.000000] memory used by lock dependency info: 8159 kB [ 0.000000] per task-struct memory footprint: 1920 bytes [ 0.000000] tsc: Detected 2300.000 MHz processor [ 1.142378] Calibrating delay loop (skipped) preset value.. 4600.00 BogoMIPS (lpj=23000000) [ 1.143714] pid_max: default: 32768 minimum: 301 [ 1.144508] ACPI: Core revision 20150930 [ 1.581835] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 1.583225] Security Framework initialized [ 1.583802] SELinux: Initializing. [ 1.584522] AppArmor: AppArmor disabled by boot time parameter [ 1.585540] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.586747] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.590593] Initializing cgroup subsys io [ 1.591254] Initializing cgroup subsys freezer [ 1.592175] Initializing cgroup subsys hugetlb [ 1.592876] Initializing cgroup subsys debug [ 1.593769] CPU: Physical Processor ID: 0 [ 1.595397] mce: CPU supports 32 MCE banks [ 1.596294] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 [ 1.597380] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 [ 1.598361] Spectre V2 : Mitigation: Full generic retpoline [ 1.599264] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch [ 1.600521] Speculative Store Bypass: Vulnerable [ 1.604311] Freeing SMP alternatives memory: 48K [ 1.615338] ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1 [ 1.731606] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.30GHz (family: 0x6, model: 0x3f, stepping: 0x0) [ 1.733294] Performance Events: unsupported p6 CPU model 63 no PMU driver, software events only. [ 1.821903] x86: Booting SMP configuration: [ 1.822611] .... node #0, CPUs: #1 [ 1.823493] kvm-clock: cpu 1, msr 2:1fffd041, secondary cpu clock [ 1.828682] x86: Booted up 1 node, 2 CPUs [ 1.829374] smpboot: Total of 2 processors activated (9200.00 BogoMIPS) [ 1.833714] devtmpfs: initialized [ 1.844636] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 1.846133] futex hash table entries: 512 (order: 4, 65536 bytes) [ 1.848077] xor: automatically using best checksumming function: [ 1.860042] kworker/u4:0 (21) used greatest stack depth: 27920 bytes left [ 1.941637] avx : 26617.200 MB/sec [ 1.942984] RTC time: 7:15:07, date: 08/22/18 [ 1.946263] NET: Registered protocol family 16 [ 1.947514] schedtune: init normalization constants... [ 1.948242] schedtune: no energy model data [ 1.948887] schedtune: disabled! [ 1.954220] kworker/u4:0 (27) used greatest stack depth: 27520 bytes left [ 1.982000] cpuidle: using governor ladder [ 2.011703] cpuidle: using governor menu [ 2.013103] ACPI: bus type PCI registered [ 2.013746] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 [ 2.016886] PCI: Using configuration type 1 for base access [ 2.027680] kworker/u4:0 (46) used greatest stack depth: 27424 bytes left [ 2.501608] raid6: sse2x1 gen() 4505 MB/s [ 2.671601] raid6: sse2x1 xor() 2381 MB/s [ 2.841599] raid6: sse2x2 gen() 6927 MB/s [ 3.011595] raid6: sse2x2 xor() 4011 MB/s [ 3.181585] raid6: sse2x4 gen() 9368 MB/s [ 3.351585] raid6: sse2x4 xor() 5266 MB/s [ 3.521577] raid6: avx2x1 gen() 9198 MB/s [ 3.691574] raid6: avx2x2 gen() 12930 MB/s [ 3.861565] raid6: avx2x4 gen() 17767 MB/s [ 3.862285] raid6: using algorithm avx2x4 gen() 17767 MB/s [ 3.863068] raid6: using avx2x2 recovery algorithm [ 3.864523] ACPI: Added _OSI(Module Device) [ 3.865186] ACPI: Added _OSI(Processor Device) [ 3.865867] ACPI: Added _OSI(3.0 _SCP Extensions) [ 3.866610] ACPI: Added _OSI(Processor Aggregator Device) [ 3.894072] ACPI: Executed 2 blocks of module-level executable AML code [ 4.857665] ACPI: Interpreter enabled [ 4.858768] ACPI: (supports S0 S3 S4 S5) [ 4.859343] ACPI: Using IOAPIC for interrupt routing [ 4.860642] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 6.147829] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 6.148928] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI] [ 6.150463] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM [ 6.151482] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. [ 6.181037] PCI host bridge to bus 0000:00 [ 6.181717] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 6.182828] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 6.183842] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 6.185006] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] [ 6.186096] pci_bus 0000:00: root bus resource [bus 00-ff] [ 6.228325] pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI [ 6.314962] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 6.321380] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 6.327484] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 6.333767] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 6.337509] ACPI: PCI Interrupt Link [LNKS] (IRQs *9)