fff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:25:57 executing program 0: [ 339.458718] *** Guest State *** [ 339.462456] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 339.471376] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 339.480440] CR3 = 0x0000000000000000 [ 339.484277] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 339.490376] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 339.496582] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 339.503905] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 339.511944] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 339.520165] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 339.528290] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 339.536458] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 339.544618] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 18:25:57 executing program 1: 18:25:57 executing program 5: [ 339.552788] GDTR: limit=0x00000000, base=0x0000000000000000 [ 339.560820] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 339.569362] IDTR: limit=0x00000000, base=0x0000000000000000 [ 339.577577] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 339.585751] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 339.592346] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 339.599910] Interruptibility = 00000000 ActivityState = 00000000 [ 339.606307] *** Host State *** [ 339.609586] RIP = 0xffffffff812c8203 RSP = 0xffff880113b9f3c8 [ 339.615813] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 339.622357] FSBase=00007f4fca99c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 339.630263] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 339.636341] CR0=0000000080050033 CR3=0000000191c51000 CR4=00000000001426f0 [ 339.643550] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 339.650270] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 339.656545] *** Control State *** [ 339.660053] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 339.666941] EntryControls=0000d1ff ExitControls=002fefff [ 339.672867] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 339.679906] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 339.686762] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 339.693542] reason=80000021 qualification=0000000000000000 [ 339.699909] IDTVectoring: info=00000000 errcode=00000000 [ 339.705615] TSC Offset = 0xffffff4416c9601e 18:25:57 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r3) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:25:57 executing program 0: [ 339.709992] TPR Threshold = 0x00 [ 339.713540] EPT pointer = 0x000000010b85701e 18:25:57 executing program 3: 18:25:57 executing program 5: 18:25:58 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='cmdline\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, 0x0) 18:25:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0da606e9c0203136b6ad06791347a3a0558ac909ad49f99452249ee6ad8ef623ae8b64a3628deb8c72ff11451096600d678e163d540bffe4b89e21aee223c94c", "3237a5b17237399cc68352ea80c4f1a49b136601fb678a09302210a605674701"}) 18:25:58 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) 18:25:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000002000)}) 18:25:58 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r3) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:25:58 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) [ 340.461462] *** Guest State *** [ 340.465034] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 340.474112] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 340.483087] CR3 = 0x0000000000000000 [ 340.486900] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 340.493112] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 340.499201] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 340.506649] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 340.514851] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 340.523021] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 340.531107] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 340.539281] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 340.547448] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 340.555630] GDTR: limit=0x00000000, base=0x0000000000000000 [ 340.563796] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 340.571812] IDTR: limit=0x00000000, base=0x0000000000000000 [ 340.580028] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 340.588539] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 340.595265] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 340.602842] Interruptibility = 00000000 ActivityState = 00000000 [ 340.609247] *** Host State *** [ 340.612649] RIP = 0xffffffff812c8203 RSP = 0xffff88010be6f3c8 [ 340.618695] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 340.625326] FSBase=00007f4fca99c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 340.633264] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 340.639249] CR0=0000000080050033 CR3=000000010bedf000 CR4=00000000001426f0 [ 340.644716] binder_alloc: 10346: binder_alloc_buf, no vma [ 340.646428] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 340.652136] binder: 10346:10347 transaction failed 29189/-3, size 0-0 line 2970 [ 340.658729] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 340.672448] *** Control State *** [ 340.675947] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 340.682841] EntryControls=0000d1ff ExitControls=002fefff [ 340.688350] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 340.695459] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 340.702289] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 340.708959] reason=80000021 qualification=0000000000000000 [ 340.715444] IDTVectoring: info=00000000 errcode=00000000 [ 340.720990] TSC Offset = 0xffffff438f5803c1 [ 340.725464] TPR Threshold = 0x00 [ 340.728879] EPT pointer = 0x000000010af1e01e 18:25:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000f9f000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(r2, &(0x7f0000bba000)={&(0x7f0000c57ff8)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r1, &(0x7f00003d6fc8)={&(0x7f0000698000)=@generic, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000f9fff8)=""/90, 0x5a}, 0x0) 18:25:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='gre0\x00', 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@l2, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000200)}}], 0x400001f, 0x0) [ 340.828413] binder: BINDER_SET_CONTEXT_MGR already set [ 340.833984] binder: 10346:10350 ioctl 40046207 0 returned -16 18:25:58 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r3) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:25:58 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x400000000a, 0x300) r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") syz_emit_ethernet(0x243, &(0x7f00000000c0)={@empty, @remote, [{}], {@generic={0x8864}}}, 0x0) [ 340.874617] binder: undelivered TRANSACTION_ERROR: 29189 18:25:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000000e80), 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000008c0), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x4af) write$binfmt_elf64(r0, &(0x7f0000001080)=ANY=[@ANYBLOB], 0x0) 18:25:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000f9f000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(r2, &(0x7f0000bba000)={&(0x7f0000c57ff8)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r1, &(0x7f00003d6fc8)={&(0x7f0000698000)=@generic, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000f9fff8)=""/90, 0x5a}, 0x0) 18:25:59 executing program 1: clone(0x2102001fbf, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000140)='bdevmime_typeproc\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) 18:25:59 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:59 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r3) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:25:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="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") ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000200)) 18:25:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="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") ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)) 18:25:59 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x0, 0x0) 18:25:59 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000200)}, 0x20) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x9, 0x20, 0x80, 0x8}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x28, &(0x7f00000005c0)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={r1}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x28, &(0x7f0000000080)}, 0x1) socketpair(0x80000000001, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000300)='0\x00') 18:26:00 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x1800000000000000, 0x34, 0x29, &(0x7f0000000100)="030000005b1b00000000000000ead5dc57ee41dea43e63a377fb8a977c3f1d1700040000d80648a2ac141411e0000001e1977d48", &(0x7f0000000400)=""/41, 0x100}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 18:26:00 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) semget$private(0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 18:26:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)}, 0x0) 18:26:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0xaf}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 18:26:00 executing program 1: futex(&(0x7f000000cffc), 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) 18:26:00 executing program 0: 18:26:00 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) semget$private(0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 18:26:00 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r3) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:26:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)}, 0x0) 18:26:00 executing program 5: 18:26:00 executing program 1: 18:26:00 executing program 0: 18:26:00 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) semget$private(0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 18:26:01 executing program 0: 18:26:01 executing program 5: 18:26:01 executing program 1: 18:26:01 executing program 3: 18:26:01 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) semget$private(0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:26:01 executing program 0: 18:26:01 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r3) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:26:01 executing program 1: 18:26:01 executing program 5: 18:26:01 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) semget$private(0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:26:01 executing program 3: 18:26:01 executing program 0: 18:26:02 executing program 3: 18:26:02 executing program 5: 18:26:02 executing program 1: 18:26:02 executing program 0: 18:26:02 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) semget$private(0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:26:02 executing program 5: 18:26:02 executing program 1: 18:26:02 executing program 3: 18:26:02 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) r2 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r2) r3 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:26:02 executing program 5: 18:26:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:02 executing program 0: 18:26:03 executing program 5: [ 345.122942] *** Guest State *** [ 345.126536] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 345.135607] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 345.144666] CR3 = 0x0000000000000000 [ 345.148421] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 345.154579] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 345.160602] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 345.167420] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 345.175558] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 345.183707] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 345.191735] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 345.199884] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 345.208011] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 345.216155] GDTR: limit=0x00000000, base=0x0000000000000000 [ 345.224277] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 345.232457] IDTR: limit=0x00000000, base=0x0000000000000000 [ 345.240494] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 345.248644] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 345.255199] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 345.262789] Interruptibility = 00000000 ActivityState = 00000000 [ 345.269054] *** Host State *** [ 345.272605] RIP = 0xffffffff812c8203 RSP = 0xffff88010c55f3c8 [ 345.278687] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 345.285244] FSBase=00007f4fca99c700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 345.293259] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 345.299207] CR0=0000000080050033 CR3=000000010be43000 CR4=00000000001426e0 [ 345.306430] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ae01260 [ 345.313245] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 345.319382] *** Control State *** [ 345.323029] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 345.329794] EntryControls=0000d1ff ExitControls=002fefff [ 345.335437] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 345.342619] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 345.349334] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 345.356162] reason=80000021 qualification=0000000000000000 [ 345.362613] IDTVectoring: info=00000000 errcode=00000000 [ 345.368145] TSC Offset = 0xffffff410eedfb2c 18:26:03 executing program 3: 18:26:03 executing program 1: 18:26:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1], 0x2}, 0x1, 0x0, 0x0, 0x4000}, 0x90) [ 345.372650] TPR Threshold = 0x00 [ 345.376071] EPT pointer = 0x000000010a8c101e 18:26:03 executing program 5: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) 18:26:03 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000240)) r0 = inotify_init() mknod(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) inotify_add_watch(r0, &(0x7f00000005c0)='./file0/file0\x00', 0x80000012) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 18:26:03 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, 0xffffffffffffffff) fstat(r0, &(0x7f0000000180)) 18:26:03 executing program 0: syz_open_procfs(0x0, &(0x7f00000003c0)='net/if_inet6\x00') r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) [ 345.693059] capability: warning: `syz-executor5' uses deprecated v2 capabilities in a way that may be insecure [ 345.881306] binder: 10516:10519 transaction failed 29189/-22, size 24-8 line 2855 [ 345.901395] binder: 10516:10519 BC_INCREFS_DONE u0000000000000000 no match [ 345.928921] binder: 10516:10519 transaction failed 29189/-22, size 24-8 line 2855 [ 345.945745] binder: 10516:10524 BC_INCREFS_DONE u0000000000000000 no match 18:26:04 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) r2 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r2) r3 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:26:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:04 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:26:04 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, 0xffffffffffffffff) fstat(r0, &(0x7f0000000180)) 18:26:04 executing program 3: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) socketpair(0x2, 0x3, 0x0, &(0x7f0000000080)) 18:26:04 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x100132, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f00000001c0)) 18:26:04 executing program 1: openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000), 0x1) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 18:26:04 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) select(0x8150138, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}) 18:26:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x9}]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)) 18:26:04 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000980), &(0x7f00000006c0)) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:26:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 346.694432] print_req_error: I/O error, dev loop0, sector 0 18:26:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}]}, 0x58) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r3 = gettid() recvmmsg(r2, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) r4 = dup(r2) write$FUSE_GETXATTR(r4, &(0x7f0000000240)={0x18}, 0x14) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) dup3(r1, r4, 0x0) tkill(r3, 0x1004000000013) 18:26:05 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) r2 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r2) r3 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:26:05 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x261, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x5fc, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) fgetxattr(r0, &(0x7f0000000000)=@known='security.apparmor\x00', &(0x7f0000000280)=""/112, 0x70) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x2000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x1, r0, 0xb) 18:26:05 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x9, 0x20, 0x80, 0x8}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r1, 0x28a, &(0x7f0000000100)}, 0x10) 18:26:05 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:05 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) recvmsg$kcm(r0, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x22) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) [ 347.465598] *** Guest State *** [ 347.469205] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 347.478558] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 347.487619] CR3 = 0x0000000000000000 [ 347.491435] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 347.497663] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 347.504335] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 347.511175] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 347.519456] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 347.527656] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 347.536035] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 347.544189] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 347.552429] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 18:26:05 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfffffffffffffdc3, &(0x7f0000000080)=""/251}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x25}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0xf9, &(0x7f0000000100)="4d8d8fe636f6cac49c53c4e73fff", &(0x7f0000000200)=""/249, 0x8d18}, 0x28) 18:26:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) [ 347.560501] GDTR: limit=0x00000000, base=0x0000000000000000 [ 347.568790] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 347.576956] IDTR: limit=0x00000000, base=0x0000000000000000 [ 347.585207] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 347.593370] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 347.603887] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 347.611508] Interruptibility = 00000000 ActivityState = 00000000 [ 347.618005] *** Host State *** [ 347.621251] RIP = 0xffffffff812c8203 RSP = 0xffff88010cf9f3c8 [ 347.627538] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 347.634097] FSBase=00007f4fca99c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 347.642155] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 347.648158] CR0=0000000080050033 CR3=000000010cace000 CR4=00000000001426f0 [ 347.655426] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 347.662281] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 347.668464] *** Control State *** [ 347.672433] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 347.679235] EntryControls=0000d1ff ExitControls=002fefff [ 347.684908] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 347.692065] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 347.698834] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 347.705691] reason=80000021 qualification=0000000000000000 [ 347.712333] IDTVectoring: info=00000000 errcode=00000000 [ 347.717914] TSC Offset = 0xffffff3fcb5960ac [ 347.722425] TPR Threshold = 0x00 [ 347.725904] EPT pointer = 0x000000010a32401e [ 347.835702] raw_sendmsg: syz-executor3 forgot to set AF_INET. Fix it! 18:26:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000140), &(0x7f0000000180)=0x8) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) 18:26:06 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) recvmsg$kcm(r0, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x22) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) 18:26:06 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:06 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000190007031dfffd946f61830002200a000900005e00000000000000a20400ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) listen(0xffffffffffffffff, 0x4000000043) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000280)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0), 0x98) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000200)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) 18:26:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @dev}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000140003007465616d300000000000000000000000"], 0x1}}, 0x0) [ 348.352650] *** Guest State *** [ 348.356274] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 348.365383] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 348.374344] CR3 = 0x0000000000000000 [ 348.378140] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 348.384248] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 348.390409] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 348.397218] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 348.405361] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 348.413488] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 348.421577] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 348.429709] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 348.437949] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 348.446086] GDTR: limit=0x00000000, base=0x0000000000000000 [ 348.454241] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 348.462402] IDTR: limit=0x00000000, base=0x0000000000000000 [ 348.470488] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 348.478692] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 348.485264] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 348.492905] Interruptibility = 00000000 ActivityState = 00000000 [ 348.499225] *** Host State *** [ 348.502640] RIP = 0xffffffff812c8203 RSP = 0xffff88010c89f3c8 [ 348.508683] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 348.515307] FSBase=00007f4fca99c700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 348.523244] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 348.529221] CR0=0000000080050033 CR3=000000010ce47000 CR4=00000000001426e0 [ 348.536419] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ae01260 [ 348.543231] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 348.549320] *** Control State *** 18:26:06 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r3) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 348.552970] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 348.559823] EntryControls=0000d1ff ExitControls=002fefff [ 348.565662] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 348.572745] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 348.579454] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 348.586253] reason=80000021 qualification=0000000000000000 [ 348.592706] IDTVectoring: info=00000000 errcode=00000000 [ 348.598293] TSC Offset = 0xffffff3f536738b8 [ 348.602780] TPR Threshold = 0x00 [ 348.606188] EPT pointer = 0x000000010a38e01e 18:26:06 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) recvmsg$kcm(r0, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x22) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) 18:26:06 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 348.926640] *** Guest State *** [ 348.930246] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 348.939380] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 348.948359] CR3 = 0x0000000000000000 [ 348.952221] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 348.958233] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 348.964369] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 348.971149] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 348.979345] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 348.987579] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 348.995712] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 349.003827] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 349.011887] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 349.020045] GDTR: limit=0x00000000, base=0x0000000000000000 [ 349.028188] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 349.036305] IDTR: limit=0x00000000, base=0x0000000000000000 [ 349.044449] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 349.052561] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 349.059051] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 349.066645] Interruptibility = 00000000 ActivityState = 00000000 [ 349.073011] *** Host State *** [ 349.076258] RIP = 0xffffffff812c8203 RSP = 0xffff88010c89f3c8 [ 349.082384] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 349.088876] FSBase=00007f4fca99c700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 349.096811] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 349.103081] CR0=0000000080050033 CR3=000000010a867000 CR4=00000000001426e0 [ 349.110155] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ae01260 [ 349.116981] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 349.123165] *** Control State *** [ 349.126659] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 349.133468] EntryControls=0000d1ff ExitControls=002fefff [ 349.138971] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 349.146087] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 349.152896] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 349.159565] reason=80000021 qualification=0000000000000000 [ 349.166020] IDTVectoring: info=00000000 errcode=00000000 [ 349.171559] TSC Offset = 0xffffff3f037865d7 [ 349.176090] TPR Threshold = 0x00 [ 349.179494] EPT pointer = 0x000000010bbf601e 18:26:07 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe", 0x59) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:07 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) recvmsg$kcm(r0, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x22) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) 18:26:08 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe", 0x59) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 350.035834] *** Guest State *** [ 350.039348] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 350.048404] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 350.057466] CR3 = 0x0000000000000000 [ 350.061226] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 350.067370] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 350.073484] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 350.080301] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 350.088431] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 350.096577] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 350.104788] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 350.112920] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 350.120943] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 350.129077] GDTR: limit=0x00000000, base=0x0000000000000000 [ 350.137231] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 350.145361] IDTR: limit=0x00000000, base=0x0000000000000000 [ 350.153527] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 350.161602] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 350.168226] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 350.175845] Interruptibility = 00000000 ActivityState = 00000000 [ 350.182254] *** Host State *** 18:26:08 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) recvmsg$kcm(r0, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x22) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) [ 350.185493] RIP = 0xffffffff812c8203 RSP = 0xffff88010c9ff3c8 [ 350.191571] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 350.198189] FSBase=00007f4fca99c700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 350.206203] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 350.212274] CR0=0000000080050033 CR3=00000001095cd000 CR4=00000000001426e0 [ 350.219381] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ae01260 [ 350.226267] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 350.232534] *** Control State *** [ 350.236035] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 350.242898] EntryControls=0000d1ff ExitControls=002fefff [ 350.248397] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 350.255548] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 350.262406] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 350.269070] reason=80000021 qualification=0000000000000000 [ 350.275609] IDTVectoring: info=00000000 errcode=00000000 [ 350.281257] TSC Offset = 0xffffff3e6adb6a6d [ 350.285764] TPR Threshold = 0x00 [ 350.289172] EPT pointer = 0x000000010952c01e [ 350.677335] team0 (unregistering): Port device team_slave_0 removed [ 351.108210] team0 (unregistering): Port device team_slave_1 removed [ 351.509138] device team0 entered promiscuous mode [ 351.514346] device team_slave_0 entered promiscuous mode [ 351.520168] device team_slave_1 entered promiscuous mode [ 351.544418] device team0 left promiscuous mode [ 351.549241] device team_slave_0 left promiscuous mode [ 351.555015] device team_slave_1 left promiscuous mode 18:26:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000140), &(0x7f0000000180)=0x8) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) 18:26:09 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe", 0x59) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:09 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) 18:26:09 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r3) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:26:09 executing program 1: r0 = socket$inet(0x10, 0x400000000000003, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)="1b0000001200030207fffd946fa283080700190000000000000085", 0x1b}], 0x1}, 0x0) 18:26:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000140003007465616d300000000000000000000000"], 0x1}}, 0x0) [ 351.846863] *** Guest State *** [ 351.850347] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 351.859583] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 351.868649] CR3 = 0x0000000000000000 [ 351.872566] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 351.878637] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 351.884855] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 351.891691] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 351.899899] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 351.908062] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 351.916234] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 351.924414] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 351.932590] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 351.940651] GDTR: limit=0x00000000, base=0x0000000000000000 [ 351.948828] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 351.957111] IDTR: limit=0x00000000, base=0x0000000000000000 [ 351.965400] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 351.973536] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 351.979992] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 351.987694] Interruptibility = 00000000 ActivityState = 00000000 [ 351.994068] *** Host State *** [ 351.997310] RIP = 0xffffffff812c8203 RSP = 0xffff88010946f3c8 [ 352.003528] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 352.009995] FSBase=00007f4fca99c700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 352.018015] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 352.024065] CR0=0000000080050033 CR3=000000017f23e000 CR4=00000000001426e0 [ 352.031174] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ae01260 [ 352.038045] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 352.044257] *** Control State *** 18:26:10 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) [ 352.047757] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 352.054637] EntryControls=0000d1ff ExitControls=002fefff [ 352.060135] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 352.067231] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 352.074101] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 352.080772] reason=80000021 qualification=0000000000000000 [ 352.087297] IDTVectoring: info=00000000 errcode=00000000 [ 352.092895] TSC Offset = 0xffffff3d73f21a30 [ 352.097253] TPR Threshold = 0x00 [ 352.100659] EPT pointer = 0x000000010ada001e [ 352.108669] netlink: 7 bytes leftover after parsing attributes in process `syz-executor1'. 18:26:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) 18:26:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x1) 18:26:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 18:26:10 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e", 0x86) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:10 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) [ 352.692707] *** Guest State *** [ 352.696162] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 352.705273] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 352.714369] CR3 = 0x0000000000000000 [ 352.718169] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 352.724397] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 352.730541] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 352.737347] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 352.745496] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 352.753648] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 352.761737] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 352.769857] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 352.778016] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 352.786131] GDTR: limit=0x00000000, base=0x0000000000000000 [ 352.794304] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 352.802421] IDTR: limit=0x00000000, base=0x0000000000000000 [ 352.810501] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 352.818703] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 352.825291] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 352.832908] Interruptibility = 00000000 ActivityState = 00000000 [ 352.839226] *** Host State *** [ 352.842599] RIP = 0xffffffff812c8203 RSP = 0xffff88010942f3c8 [ 352.848634] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 352.855322] FSBase=00007f4fca99c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 352.863248] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 352.869230] CR0=0000000080050033 CR3=000000010c97f000 CR4=00000000001426f0 [ 352.876440] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 352.883264] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 352.889351] *** Control State *** [ 352.892985] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 352.899742] EntryControls=0000d1ff ExitControls=002fefff [ 352.905479] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 352.912596] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 352.919309] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 352.926089] reason=80000021 qualification=0000000000000000 [ 352.932555] IDTVectoring: info=00000000 errcode=00000000 [ 352.938097] TSC Offset = 0xffffff3cffb37355 18:26:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, &(0x7f00000001c0)='B'}) 18:26:11 executing program 3: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x22) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) 18:26:11 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r3) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:26:11 executing program 0: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)) 18:26:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)) [ 352.942594] TPR Threshold = 0x00 [ 352.945997] EPT pointer = 0x0000000182e0101e 18:26:11 executing program 3: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x22) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) 18:26:11 executing program 1: r0 = epoll_create1(0x0) io_setup(0x0, &(0x7f0000000080)) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f00000000c0)={0x6}, 0x8) 18:26:11 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) 18:26:11 executing program 5: getrusage(0x1, &(0x7f0000001440)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x13, 0x80f, 0x1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_DESTROY(r2, &(0x7f0000000300), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x9) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x618, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x0) fcntl$getown(r0, 0x9) r5 = getpgid(0x0) times(&(0x7f0000000340)) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x2, 0x2, 0x0, 0x90, 0x0, 0x3, 0x0, 0x4, 0x1, 0x7f, 0x3f, 0x9, 0x14f, 0x5, 0x1ff, 0x401, 0x4, 0x3, 0x7, 0xbf, 0x5, 0x3ff, 0x21, 0x7, 0x4d4, 0xdd, 0x0, 0x5, 0x800, 0x6, 0x80, 0xffff, 0x8, 0xea6, 0x2, 0x5, 0x0, 0x80000000000000, 0x3, @perf_bp={&(0x7f0000000100), 0x1}, 0x80, 0x7, 0x9, 0x0, 0x9, 0x101, 0x2}, r5, 0xffffffffffffffff, 0xffffffffffffff9c, 0x2) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r3}, 0x10) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000380)={0x1, 0x1, 0x80000000}) r6 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000680)=""/117, 0x75}, {&(0x7f0000000500)=""/48, 0x30}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/145, 0x91}, {&(0x7f0000000840)=""/117, 0x75}, {&(0x7f00000008c0)=""/129, 0x81}, {&(0x7f0000000980)=""/114, 0x72}, {&(0x7f0000000a00)=""/68, 0x44}], 0x9) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000003c0)=0x3, 0x4) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') write$uinput_user_dev(r7, &(0x7f0000000040)={'syz1\x00', {0x7c00000000000000, 0x20, 0x2, 0x10001}, 0x13, [0x6, 0xb9, 0x0, 0x7, 0x10001, 0x3, 0x4, 0x4, 0x18, 0x4, 0x10001, 0x7f, 0x101, 0x55, 0x0, 0xffffffff, 0xfffffffffffffff7, 0xffff, 0x8, 0xc0b, 0x401, 0x6, 0x3, 0x40, 0xffffffffffff8000, 0x4, 0xfffffffffffffffe, 0x101, 0x7, 0x1, 0x100000001, 0x3f, 0x9, 0x10000, 0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x10000, 0x100000001, 0x3, 0x1, 0x4, 0x1ff, 0x0, 0x6, 0xff, 0x1, 0xb5, 0x0, 0x8b], [0x81, 0x800, 0x80000000, 0x0, 0x9, 0x4, 0xffffffff80000000, 0x514f, 0xffff, 0xee97, 0x5, 0x2, 0xc10, 0x7, 0x0, 0x5, 0x100, 0x7, 0x8000, 0x80, 0x6, 0x7f, 0x9, 0x8, 0x8, 0x1, 0xffffffffffffc355, 0x2, 0x8, 0x8, 0x8, 0xfffffffffffffffb, 0x7, 0x81, 0x8000, 0x9, 0x80, 0xf6d, 0x19, 0xfcdd, 0x4, 0x1448, 0xffff, 0x5, 0xfffffffffffffffd, 0x8001, 0x8, 0x4, 0x100000000, 0x3, 0x7, 0x100, 0x1, 0xff, 0x8, 0x3d, 0x0, 0x0, 0x5, 0x3, 0x3, 0x800, 0x4000000000000000, 0xc8], [0xffff, 0x10001, 0x400, 0x6, 0x5, 0x9, 0x9, 0x0, 0x8000, 0x3, 0xdb, 0x2, 0x0, 0x4, 0x0, 0x9, 0x1ff, 0x9, 0x80000001, 0x6, 0x7, 0x1800000000000, 0xff, 0x8, 0xdf, 0x6, 0xffffffff00000001, 0x401, 0x6, 0x7, 0x80000001, 0xffff, 0x717f, 0x3f, 0xffffffffcb3ba54c, 0x382a, 0x9, 0x8, 0xff, 0xf4e2, 0x5f, 0x10000, 0x7, 0xfff, 0x4, 0x9, 0x4, 0x7, 0x0, 0x2, 0x8140, 0x4, 0xda1, 0x1, 0x8, 0x1, 0x9, 0x87, 0x2, 0x7, 0x0, 0x1, 0x1, 0x101], [0x7, 0x80000001, 0x3, 0x0, 0x4, 0x2, 0x0, 0x8, 0xffffffffffffffbc, 0x9, 0x2, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x10001, 0x2, 0x10001, 0x1, 0xffffffffffffffff, 0x80000000, 0x6, 0x0, 0xc3, 0x6, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x1, 0x4, 0x2, 0x7f, 0x8, 0x0, 0x40, 0x0, 0x2, 0x9, 0x6, 0x4, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffffffffff001, 0x9, 0x2ea, 0x9, 0x2, 0xdb, 0x6264, 0x101, 0x0, 0x0, 0x2, 0x8, 0x8001]}, 0x45c) 18:26:11 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e", 0x86) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 353.707444] *** Guest State *** [ 353.711009] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 353.720196] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 353.729170] CR3 = 0x0000000000000000 [ 353.733084] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 353.739104] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 353.745343] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 18:26:11 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd\x00') ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) dup2(r1, r0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) getresuid(&(0x7f0000000440), &(0x7f0000000340), &(0x7f00000003c0)) [ 353.752156] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 353.760254] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 353.768434] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 353.776604] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 353.784760] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 353.792912] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 18:26:11 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x1e0000) 18:26:11 executing program 3: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x22) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) [ 353.800936] GDTR: limit=0x00000000, base=0x0000000000000000 [ 353.809159] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 353.817314] IDTR: limit=0x00000000, base=0x0000000000000000 [ 353.825510] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 353.833639] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 353.840154] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 353.847787] Interruptibility = 00000000 ActivityState = 00000000 [ 353.854216] *** Host State *** [ 353.857465] RIP = 0xffffffff812c8203 RSP = 0xffff880108a7f3c8 [ 353.863654] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 353.870175] FSBase=00007f4fca99c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 353.878151] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 353.884219] CR0=0000000080050033 CR3=0000000109cd5000 CR4=00000000001426f0 [ 353.891286] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 353.898177] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 353.904350] *** Control State *** [ 353.907956] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 353.914833] EntryControls=0000d1ff ExitControls=002fefff [ 353.920343] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 353.927485] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 353.934296] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 353.940972] reason=80000021 qualification=0000000000000000 [ 353.947459] IDTVectoring: info=00000000 errcode=00000000 [ 353.953087] TSC Offset = 0xffffff3c75de81c3 [ 353.957442] TPR Threshold = 0x00 [ 353.960849] EPT pointer = 0x000000010a15101e 18:26:12 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x1ffc) 18:26:12 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:26:12 executing program 3: r0 = socket$kcm(0x2, 0x0, 0x84) recvmsg$kcm(r0, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x22) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) 18:26:12 executing program 1: 18:26:12 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e", 0x86) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:12 executing program 1: 18:26:12 executing program 0: [ 354.977571] *** Guest State *** [ 354.981158] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 354.990366] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 354.999400] CR3 = 0x0000000000000000 [ 355.003318] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 355.009379] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 355.015573] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 355.022463] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 355.030499] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 355.038715] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 355.046950] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 355.055135] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 355.063438] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 18:26:13 executing program 5: 18:26:13 executing program 3: r0 = socket$kcm(0x2, 0x0, 0x84) recvmsg$kcm(r0, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x22) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) 18:26:13 executing program 1: 18:26:13 executing program 0: [ 355.071507] GDTR: limit=0x00000000, base=0x0000000000000000 [ 355.079739] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 355.087913] IDTR: limit=0x00000000, base=0x0000000000000000 [ 355.096113] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 355.104273] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 355.110728] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 355.118502] Interruptibility = 00000000 ActivityState = 00000000 [ 355.124890] *** Host State *** [ 355.128171] RIP = 0xffffffff812c8203 RSP = 0xffff880109d4f3c8 [ 355.134442] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 355.140909] FSBase=00007f4fca99c700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 355.148953] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 355.155001] CR0=0000000080050033 CR3=000000010a0a4000 CR4=00000000001426e0 [ 355.162268] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ae01260 [ 355.168993] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 355.175276] *** Control State *** [ 355.178780] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 355.185679] EntryControls=0000d1ff ExitControls=002fefff [ 355.191186] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 355.198343] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 355.205173] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 355.211836] reason=80000021 qualification=0000000000000000 [ 355.218373] IDTVectoring: info=00000000 errcode=00000000 [ 355.223999] TSC Offset = 0xffffff3bc54221c0 [ 355.228361] TPR Threshold = 0x00 [ 355.231767] EPT pointer = 0x0000000109d1901e 18:26:13 executing program 1: 18:26:13 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:26:13 executing program 0: 18:26:13 executing program 5: 18:26:13 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe", 0x9c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:13 executing program 3: r0 = socket$kcm(0x2, 0x0, 0x84) recvmsg$kcm(r0, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x22) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) 18:26:13 executing program 5: 18:26:13 executing program 1: [ 355.910255] *** Guest State *** [ 355.914045] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 355.923243] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 355.932263] CR3 = 0x0000000000000000 [ 355.936151] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 355.942331] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 355.948418] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 355.955347] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 355.963566] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 355.971616] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 355.979880] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 355.988134] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 355.996585] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 356.004782] GDTR: limit=0x00000000, base=0x0000000000000000 [ 356.013159] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 356.021200] IDTR: limit=0x00000000, base=0x0000000000000000 [ 356.029501] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 356.037697] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 356.044360] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 356.051876] Interruptibility = 00000000 ActivityState = 00000000 18:26:14 executing program 0: [ 356.058367] *** Host State *** [ 356.061624] RIP = 0xffffffff812c8203 RSP = 0xffff88010c5bf3c8 [ 356.067854] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 356.074526] FSBase=00007f4fca99c700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 356.082524] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 356.088554] CR0=0000000080050033 CR3=0000000108a48000 CR4=00000000001426e0 [ 356.095953] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ae01260 [ 356.102867] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 18:26:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}, 0x4) [ 356.108975] *** Control State *** [ 356.112690] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 356.119496] EntryControls=0000d1ff ExitControls=002fefff [ 356.125211] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 356.132348] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 356.139075] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 356.145961] reason=80000021 qualification=0000000000000000 [ 356.152467] IDTVectoring: info=00000000 errcode=00000000 [ 356.158051] TSC Offset = 0xffffff3b496a02c9 [ 356.162615] TPR Threshold = 0x00 [ 356.166044] EPT pointer = 0x0000000109f4801e 18:26:14 executing program 0: request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz'}, &(0x7f0000000240)='syz', 0xfffffffffffffffe) 18:26:14 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x22) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) 18:26:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 18:26:14 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:26:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) fstat(r0, &(0x7f0000000100)) 18:26:14 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe", 0x9c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:14 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x22) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) 18:26:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x39, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00', @ANYPTR64=&(0x7f0000000000)=ANY=[]], 0x0, 0x800020, &(0x7f0000009000)}) 18:26:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="00000000c3"]], 0x0, 0x800020, &(0x7f0000009000)}) [ 356.946197] *** Guest State *** [ 356.949740] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 356.958931] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 356.968041] CR3 = 0x0000000000000000 [ 356.971851] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 356.978068] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 356.984367] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 356.991099] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 356.999338] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 357.007609] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 357.015866] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 357.024041] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 357.032281] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 357.040307] GDTR: limit=0x00000000, base=0x0000000000000000 [ 357.048545] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 357.056702] IDTR: limit=0x00000000, base=0x0000000000000000 [ 357.065048] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 357.066323] binder: 10848:10849 transaction failed 29189/-22, size 40-8 line 2855 [ 357.073200] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 357.073230] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 357.073256] Interruptibility = 00000000 ActivityState = 00000000 [ 357.073271] *** Host State *** [ 357.073301] RIP = 0xffffffff812c8203 RSP = 0xffff88010891f3c8 [ 357.073345] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 357.073377] FSBase=00007f4fca99c700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 357.073404] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 357.073437] CR0=0000000080050033 CR3=000000010ad28000 CR4=00000000001426e0 [ 357.073469] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ae01260 [ 357.073496] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 357.073510] *** Control State *** [ 357.073542] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 357.073574] EntryControls=0000d1ff ExitControls=002fefff [ 357.098738] binder_alloc: binder_alloc_mmap_handler: 10848 20000000-20002000 already mapped failed -16 [ 357.101927] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 357.102157] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 18:26:15 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x22) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) [ 357.112818] binder: 10848:10851 transaction failed 29189/-22, size 40-8 line 2855 [ 357.117944] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 357.117967] reason=80000021 qualification=0000000000000000 [ 357.117989] IDTVectoring: info=00000000 errcode=00000000 [ 357.118019] TSC Offset = 0xffffff3ab9495d06 [ 357.138666] binder: 10850:10852 unknown command 536870912 [ 357.139195] TPR Threshold = 0x00 [ 357.146063] binder: 10850:10852 ioctl c0306201 20008000 returned -22 [ 357.152083] EPT pointer = 0x000000010b6b201e [ 357.222582] binder: undelivered TRANSACTION_ERROR: 29189 [ 357.248789] binder: undelivered TRANSACTION_ERROR: 29189 18:26:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000000e80), 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000008c0), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x4b7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000340)) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") recvfrom$inet(0xffffffffffffffff, &(0x7f0000000100)=""/59, 0x3b, 0x0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0xb49) 18:26:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000001fe8)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3d}, [@ldst={0x2000cfad}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x48d, &(0x7f000000cf3d)=""/195}, 0x18) 18:26:15 executing program 1: socket$inet(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/54) 18:26:15 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) recvmsg$kcm(r0, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) 18:26:15 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe", 0x9c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:15 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r3) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:26:15 executing program 5: request_key(&(0x7f00000001c0)="646e735f7265736f6c76657200945f2bb211589a01c2b8b2701fabf8bc7351fe8c7c68002e65e23a38824e7f5f39d7e76e47ef8245310312174e8b717b944a157eb56849679701e6effe731fc1d8d0ecbc3c028d50e91387094c0fc92b9a52967c578b0feaea5ca75666e40294af42ae4daf864e02874d1e686746130166e8624c3f41bf43ac8d387643e782d5beac51c5a2e1be14a01e8b7c74541ab2b6e846d5a9fc0d3a3b28e927ade3046bd7b81edde52737e59b17e9e7f2310af6b999551d294d767ff8b2ba5c94199f", &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000040)='selinuxuser\x00', 0xffffffffffffffff) [ 357.948126] *** Guest State *** [ 357.951726] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 357.960863] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 357.969960] CR3 = 0x0000000000000000 [ 357.973882] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 357.979970] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 357.986156] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 357.993077] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 358.001122] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 358.009452] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 358.017640] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 358.025952] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 358.034109] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 358.042328] GDTR: limit=0x00000000, base=0x0000000000000000 [ 358.050378] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 358.058632] IDTR: limit=0x00000000, base=0x0000000000000000 [ 358.066785] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 358.075005] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 358.081476] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 358.089281] Interruptibility = 00000000 ActivityState = 00000000 [ 358.095679] *** Host State *** [ 358.098924] RIP = 0xffffffff812c8203 RSP = 0xffff88010821f3c8 [ 358.105222] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 358.111695] FSBase=00007f4fca99c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 358.119759] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 358.125809] CR0=0000000080050033 CR3=00000001095b9000 CR4=00000000001426f0 [ 358.133125] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 358.139865] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 358.146167] *** Control State *** [ 358.149674] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 358.156573] EntryControls=0000d1ff ExitControls=002fefff [ 358.162163] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 358.169195] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 358.176061] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 358.182815] reason=80000021 qualification=0000000000000000 [ 358.189178] IDTVectoring: info=00000000 errcode=00000000 [ 358.194892] TSC Offset = 0xffffff3a3242354c 18:26:16 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000000e80), 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000008c0), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x4b7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000340)) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") recvfrom$inet(0xffffffffffffffff, &(0x7f0000000100)=""/59, 0x3b, 0x0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0xb49) 18:26:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) [ 358.199260] TPR Threshold = 0x00 [ 358.202823] EPT pointer = 0x000000010893b01e 18:26:16 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb", 0xa7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x1, 0x138, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000000), &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000e1ffffffffffffff0000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001b0000000000000000000000000000001f00000000000000000069726c616e30000000000000000000030000006809000000000000000000000000797a6b616c6c0000000000000000000180c200000000e7ffffffffffffffaaaabb00000000010000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000002000aaaaaaaaaa000000fdffffff00000000"]}, 0x1b0) r2 = dup2(r0, r0) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0xf}, 0xf) 18:26:16 executing program 1: [ 358.751725] *** Guest State *** [ 358.755378] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 358.764488] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 358.773475] CR3 = 0x0000000000000000 [ 358.777294] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 358.783437] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 358.789546] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 358.796559] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 358.804726] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 358.812901] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 358.820986] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 358.829257] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 358.837418] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 358.845612] GDTR: limit=0x00000000, base=0x0000000000000000 [ 358.853800] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 358.861821] IDTR: limit=0x00000000, base=0x0000000000000000 [ 358.870031] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 358.878134] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 358.884773] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 358.892358] Interruptibility = 00000000 ActivityState = 00000000 [ 358.898685] *** Host State *** 18:26:16 executing program 0: 18:26:16 executing program 1: [ 358.901926] RIP = 0xffffffff812c8203 RSP = 0xffff88010c5bf3c8 [ 358.908136] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 358.914872] FSBase=00007f4fca99c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 358.922799] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 358.928792] CR0=0000000080050033 CR3=000000010a913000 CR4=00000000001426f0 [ 358.935978] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 358.942808] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 358.948897] *** Control State *** 18:26:17 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) recvmsg$kcm(r0, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x22) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) [ 358.952508] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 358.959286] EntryControls=0000d1ff ExitControls=002fefff [ 358.964905] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 358.971930] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 358.978782] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 358.985579] reason=80000021 qualification=0000000000000000 [ 358.992083] IDTVectoring: info=00000000 errcode=00000000 [ 358.997626] TSC Offset = 0xffffff39c162901f 18:26:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x1, 0x138, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000000), &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x1b0) r2 = dup2(r0, r0) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0xf}, 0xf) [ 359.002099] TPR Threshold = 0x00 [ 359.005509] EPT pointer = 0x0000000109ccb01e 18:26:17 executing program 0: 18:26:17 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r3) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:26:17 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb", 0xa7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:17 executing program 5: 18:26:17 executing program 1: 18:26:17 executing program 0: 18:26:17 executing program 5: 18:26:17 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb", 0xa7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:17 executing program 0: 18:26:17 executing program 5: 18:26:18 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) recvmsg$kcm(r0, &(0x7f0000001a40)={&(0x7f0000001800)=@can, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/66, 0x42}, 0x22) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000000), 0x1, &(0x7f0000001500)=""/201, 0xc9}, 0x0) 18:26:18 executing program 1: [ 360.195061] *** Guest State *** [ 360.198570] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 360.207786] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 360.216804] CR3 = 0x0000000000000000 [ 360.220656] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 360.226853] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 360.232963] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 360.239740] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 360.247856] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 360.256011] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 360.264124] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 360.272649] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 360.280677] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 18:26:18 executing program 5: [ 360.288813] GDTR: limit=0x00000000, base=0x0000000000000000 [ 360.296927] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 360.305061] IDTR: limit=0x00000000, base=0x0000000000000000 [ 360.313259] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 360.321329] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 360.327909] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 360.335532] Interruptibility = 00000000 ActivityState = 00000000 [ 360.341820] *** Host State *** [ 360.345155] RIP = 0xffffffff812c8203 RSP = 0xffff8801083bf3c8 [ 360.351244] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 360.357781] FSBase=00007f4fca99c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 360.365763] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 360.371700] CR0=0000000080050033 CR3=0000000109e22000 CR4=00000000001426f0 [ 360.378893] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 360.385695] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 360.391851] *** Control State *** [ 360.395447] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 360.402264] EntryControls=0000d1ff ExitControls=002fefff [ 360.407772] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 360.414868] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 360.421584] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 360.428327] reason=80000021 qualification=0000000000000000 [ 360.434779] IDTVectoring: info=00000000 errcode=00000000 [ 360.440324] TSC Offset = 0xffffff38fba7d8ab [ 360.444765] TPR Threshold = 0x00 [ 360.448167] EPT pointer = 0x00000001089c001e 18:26:18 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r3) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:26:18 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f00000002c0)=@ethernet, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070") sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)=ANY=[@ANYBLOB="00000000010000000000000000000000790eaada477f17eb046695eea58af88d0ba3b8f5ca34f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"], 0x1}}, 0x0) 18:26:18 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000500)='security.selinux\x00', &(0x7f0000000540)='system_u:object_r:audisp_var_run_t:s0\x00', 0x26, 0x1) 18:26:18 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x859, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 18:26:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xffffffffffffffca, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) close(r0) 18:26:18 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb3", 0xad) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:18 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000000004, 0x231, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 18:26:19 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000040), 0x4) [ 361.021459] *** Guest State *** [ 361.025144] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 361.034226] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 361.043240] CR3 = 0x0000000000000000 [ 361.046999] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 361.053212] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 361.059317] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 18:26:19 executing program 1: io_setup(0x6, &(0x7f0000000040)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000380)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}) [ 361.066327] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 361.074453] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 361.082678] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 361.090707] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 361.098907] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 361.107051] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 361.115248] GDTR: limit=0x00000000, base=0x0000000000000000 [ 361.123952] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 361.132077] IDTR: limit=0x00000000, base=0x0000000000000000 [ 361.140108] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 361.148287] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 361.154819] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 361.162463] Interruptibility = 00000000 ActivityState = 00000000 [ 361.168741] *** Host State *** [ 361.172098] RIP = 0xffffffff812c8203 RSP = 0xffff88010b66f3c8 [ 361.178196] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 361.184785] FSBase=00007f4fca99c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 361.192747] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 361.198742] CR0=0000000080050033 CR3=0000000109471000 CR4=00000000001426f0 [ 361.205915] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 361.212702] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 361.218864] *** Control State *** [ 361.222432] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 361.229189] EntryControls=0000d1ff ExitControls=002fefff [ 361.234754] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 361.241777] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 361.248586] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 361.255311] reason=80000021 qualification=0000000000000000 [ 361.261769] IDTVectoring: info=00000000 errcode=00000000 [ 361.267420] TSC Offset = 0xffffff388aa113b2 [ 361.271781] TPR Threshold = 0x00 [ 361.275260] EPT pointer = 0x00000001088c901e 18:26:19 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) 18:26:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) 18:26:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000340)) 18:26:19 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r3) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:26:19 executing program 1: io_setup(0x6, &(0x7f0000000040)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000380)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}) 18:26:19 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) 18:26:19 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb3", 0xad) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:19 executing program 0: getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000001280)={'icmp\x00'}, &(0x7f00000012c0)=0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000003c0)={'irlan0\x00'}) dup2(r1, r0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x1, 0x0, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000180)) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000280)=""/66, &(0x7f0000000200)=0x42) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000001c0)={'tunl0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 18:26:19 executing program 5: r0 = socket(0x2, 0x3, 0x1) sendmmsg$unix(r0, &(0x7f0000004300)=[{&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000003c0)="10d9", 0x2}], 0x1, &(0x7f0000000340)}], 0x1, 0x8800) [ 362.059436] *** Guest State *** [ 362.063128] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 362.072209] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 362.081096] CR3 = 0x0000000000000000 [ 362.085019] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 362.091046] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 362.097252] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 362.104158] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 362.112380] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 362.120428] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 362.128634] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 362.136841] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 362.145107] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 362.153232] GDTR: limit=0x00000000, base=0x0000000000000000 [ 362.161301] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 362.169470] IDTR: limit=0x00000000, base=0x0000000000000000 [ 362.177655] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 362.185867] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 362.192431] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 362.199993] Interruptibility = 00000000 ActivityState = 00000000 [ 362.206460] *** Host State *** [ 362.209718] RIP = 0xffffffff812c8203 RSP = 0xffff8801083ef3c8 [ 362.215916] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 362.222504] FSBase=00007f4fca99c700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 362.230359] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 362.236473] CR0=0000000080050033 CR3=00000001094cd000 CR4=00000000001426e0 [ 362.243664] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ae01260 [ 362.250444] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 362.256668] *** Control State *** [ 362.260170] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 362.267223] EntryControls=0000d1ff ExitControls=002fefff [ 362.272826] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 362.279839] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 362.286739] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 362.293490] reason=80000021 qualification=0000000000000000 [ 362.299865] IDTVectoring: info=00000000 errcode=00000000 [ 362.305536] TSC Offset = 0xffffff37fd046710 18:26:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') sendfile(r0, r1, &(0x7f0000000080), 0x1000000404000ff) 18:26:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe9ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7}) [ 362.309899] TPR Threshold = 0x00 [ 362.313456] EPT pointer = 0x00000001086ed01e 18:26:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000140)) 18:26:20 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb3", 0xad) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote}, 0x1c) 18:26:20 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x88a8ffff}, @empty=[0x0, 0x60], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @igmp={0x11, 0x0, 0x0, @empty, "b3000000"}}}}}, &(0x7f0000000000)={0x4305000000000000}) [ 362.933601] *** Guest State *** [ 362.937126] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 362.946310] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 362.955304] CR3 = 0x0000000000000000 [ 362.959087] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 362.965281] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 362.971740] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 362.978653] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 362.986834] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 362.994988] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 363.003112] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 363.011190] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 363.019382] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 363.027719] GDTR: limit=0x00000000, base=0x0000000000000000 [ 363.035893] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 363.044037] IDTR: limit=0x00000000, base=0x0000000000000000 [ 363.052198] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 363.060269] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 363.066961] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 363.074593] Interruptibility = 00000000 ActivityState = 00000000 [ 363.080857] *** Host State *** [ 363.084244] RIP = 0xffffffff812c8203 RSP = 0xffff88017890f3c8 [ 363.090340] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 363.096945] FSBase=00007f4fca99c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 363.104922] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 363.110859] CR0=0000000080050033 CR3=000000013bb43000 CR4=00000000001426f0 [ 363.118098] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 363.124911] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 363.131054] *** Control State *** [ 363.134713] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 363.141487] EntryControls=0000d1ff ExitControls=002fefff [ 363.147228] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 363.154404] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 363.161126] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 363.167948] reason=80000021 qualification=0000000000000000 [ 363.174413] IDTVectoring: info=00000000 errcode=00000000 [ 363.179970] TSC Offset = 0xffffff378414ddaa [ 363.184506] TPR Threshold = 0x00 [ 363.187926] EPT pointer = 0x000000010ce2a01e 18:26:21 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r3) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:26:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delroute={0x28, 0x19, 0x309, 0x0, 0x0, {}, [@RTA_METRICS={0x4}, @RTA_PRIORITY={0x8, 0x6, 0xffffffffffffcc7e}]}, 0x28}}, 0x0) 18:26:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') sendfile(r0, r1, &(0x7f0000000080), 0x1000000404000ff) 18:26:21 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/35, 0x23}], 0x200000000000019b, 0x20000) 18:26:21 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge_slave_1\x00', 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 18:26:21 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6", 0xb0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 363.522260] *** Guest State *** [ 363.525633] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 363.534711] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 363.543699] CR3 = 0x0000000000000000 [ 363.547491] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 363.553658] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 363.559712] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 363.566538] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 363.574682] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 363.583098] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 363.591181] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 363.599359] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 363.607511] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 363.615691] GDTR: limit=0x00000000, base=0x0000000000000000 [ 363.623898] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 363.631924] IDTR: limit=0x00000000, base=0x0000000000000000 [ 363.640134] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 363.648265] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 363.654935] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 363.662537] Interruptibility = 00000000 ActivityState = 00000000 [ 363.668841] *** Host State *** [ 363.672722] RIP = 0xffffffff812c8203 RSP = 0xffff8801095ef3c8 [ 363.678753] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 363.685330] FSBase=00007f4fca99c700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 363.693321] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 363.699296] CR0=0000000080050033 CR3=0000000188b42000 CR4=00000000001426e0 [ 363.706590] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ae01260 [ 363.713442] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 363.719546] *** Control State *** [ 363.723207] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 363.729954] EntryControls=0000d1ff ExitControls=002fefff [ 363.735623] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 363.742739] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 363.749448] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 363.756253] reason=80000021 qualification=0000000000000000 [ 363.762727] IDTVectoring: info=00000000 errcode=00000000 [ 363.768254] TSC Offset = 0xffffff3734ea5597 18:26:21 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1b4, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0x246, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x100000002, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f0000000000)=@nl, 0x80, &(0x7f00000000c0), 0x258, &(0x7f00000002c0)=""/18, 0x12}}], 0x1, 0x12000, &(0x7f0000000100)={0x77359400}) 18:26:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 363.772758] TPR Threshold = 0x00 [ 363.776165] EPT pointer = 0x000000010866401e 18:26:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delroute={0x28, 0x19, 0x309, 0x0, 0x0, {}, [@RTA_METRICS={0x4}, @RTA_PRIORITY={0x8, 0x6, 0xffffffffffffcc7e}]}, 0x28}}, 0x0) 18:26:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') sendfile(r0, r1, &(0x7f0000000080), 0x1000000404000ff) [ 363.893119] bond0: Releasing backup interface bond_slave_1 18:26:22 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f0000000040)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 18:26:22 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6", 0xb0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 364.274700] ptrace attach of "/root/syz-executor0"[6568] was attempted by "/root/syz-executor0"[11064] [ 364.301498] ptrace attach of "/root/syz-executor0"[6568] was attempted by "/root/syz-executor0"[11064] [ 364.492791] *** Guest State *** [ 364.496264] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 364.505957] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 364.515149] CR3 = 0x0000000000000000 [ 364.518954] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 364.525121] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 364.531203] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 364.538095] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 364.546265] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 364.554446] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 364.562622] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 364.570653] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 364.578908] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 18:26:22 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r3) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:26:22 executing program 0: 18:26:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') sendfile(r0, r1, &(0x7f0000000080), 0x1000000404000ff) [ 364.587103] GDTR: limit=0x00000000, base=0x0000000000000000 [ 364.595319] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 364.603443] IDTR: limit=0x00000000, base=0x0000000000000000 [ 364.611543] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 364.619762] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 364.626536] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 364.634182] Interruptibility = 00000000 ActivityState = 00000000 [ 364.640528] *** Host State *** [ 364.643864] RIP = 0xffffffff812c8203 RSP = 0xffff8801095ef3c8 [ 364.649900] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 364.656564] FSBase=00007f4fca99c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 364.664545] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 364.670574] CR0=0000000080050033 CR3=0000000188b42000 CR4=00000000001426f0 [ 364.677805] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 364.684662] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 364.690757] *** Control State *** [ 364.694386] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 364.701182] EntryControls=0000d1ff ExitControls=002fefff [ 364.706830] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 364.713924] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 364.720634] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 364.727436] reason=80000021 qualification=0000000000000000 [ 364.733877] IDTVectoring: info=00000000 errcode=00000000 [ 364.739422] TSC Offset = 0xffffff36b006566a [ 364.743898] TPR Threshold = 0x00 [ 364.747306] EPT pointer = 0x000000010867601e 18:26:22 executing program 0: 18:26:23 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6", 0xb0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x1000000404000ff) 18:26:23 executing program 0: [ 365.235346] *** Guest State *** [ 365.238892] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 365.247981] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 365.256962] CR3 = 0x0000000000000000 [ 365.260781] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 365.267040] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 365.273314] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 365.280038] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 365.288305] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 365.296446] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 365.304675] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 365.312801] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 365.320885] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 365.329054] GDTR: limit=0x00000000, base=0x0000000000000000 [ 365.337225] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 365.345394] IDTR: limit=0x00000000, base=0x0000000000000000 [ 365.353576] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 365.361595] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 365.368229] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 365.375824] Interruptibility = 00000000 ActivityState = 00000000 [ 365.382292] *** Host State *** [ 365.385552] RIP = 0xffffffff812c8203 RSP = 0xffff8801095ef3c8 [ 365.391601] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 365.398238] FSBase=00007f4fca99c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 365.406255] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 365.412452] CR0=0000000080050033 CR3=0000000109cb1000 CR4=00000000001426f0 [ 365.419641] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 365.426577] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 365.432988] *** Control State *** [ 365.436497] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 365.443489] EntryControls=0000d1ff ExitControls=002fefff [ 365.449073] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 365.456191] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 365.463044] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 365.469670] reason=80000021 qualification=0000000000000000 [ 365.476232] IDTVectoring: info=00000000 errcode=00000000 [ 365.481731] TSC Offset = 0xffffff3648d295e6 [ 365.486320] TPR Threshold = 0x00 [ 365.489725] EPT pointer = 0x000000010b69801e 18:26:23 executing program 3: 18:26:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delroute={0x28, 0x19, 0x309, 0x0, 0x0, {}, [@RTA_METRICS={0x4}, @RTA_PRIORITY={0x8, 0x6, 0xffffffffffffcc7e}]}, 0x28}}, 0x0) 18:26:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0x1000000404000ff) 18:26:23 executing program 0: 18:26:23 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c648", 0xb1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:23 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r3) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 365.943470] *** Guest State *** [ 365.946992] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 365.956115] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 365.965100] CR3 = 0x0000000000000000 [ 365.968910] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 365.975358] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 365.981442] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 365.988344] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 365.996534] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 366.004746] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 366.012915] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 366.020948] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 366.029288] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 366.037419] GDTR: limit=0x00000000, base=0x0000000000000000 [ 366.045709] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 366.053827] IDTR: limit=0x00000000, base=0x0000000000000000 [ 366.061916] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 366.070083] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 366.076691] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 366.084324] Interruptibility = 00000000 ActivityState = 00000000 [ 366.090644] *** Host State *** [ 366.094034] RIP = 0xffffffff812c8203 RSP = 0xffff88010a13f3c8 [ 366.100073] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 366.106739] FSBase=00007f4fca99c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 366.114690] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 366.120690] CR0=0000000080050033 CR3=0000000108a7a000 CR4=00000000001426f0 [ 366.127910] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 366.134754] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 366.140845] *** Control State *** 18:26:24 executing program 3: [ 366.144541] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 366.151308] EntryControls=0000d1ff ExitControls=002fefff [ 366.156956] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 366.164053] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 366.170761] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 366.177666] reason=80000021 qualification=0000000000000000 [ 366.184141] IDTVectoring: info=00000000 errcode=00000000 [ 366.189686] TSC Offset = 0xffffff35e8527fb5 18:26:24 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') sendfile(r0, r1, &(0x7f0000000080), 0x1000000404000ff) 18:26:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delroute={0x28, 0x19, 0x309, 0x0, 0x0, {}, [@RTA_METRICS={0x4}, @RTA_PRIORITY={0x8, 0x6, 0xffffffffffffcc7e}]}, 0x28}}, 0x0) [ 366.194178] TPR Threshold = 0x00 [ 366.197590] EPT pointer = 0x000000010863a01e 18:26:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00', 0x803}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) 18:26:24 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000140)={0x7}, 0x7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) 18:26:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0x1000000404000ff) 18:26:24 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delroute={0x28, 0x19, 0x309, 0x0, 0x0, {}, [@RTA_METRICS={0x4}, @RTA_PRIORITY={0x8, 0x6, 0xffffffffffffcc7e}]}, 0x28}}, 0x0) 18:26:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x1000000404000ff) 18:26:25 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delroute={0x28, 0x19, 0x309, 0x0, 0x0, {}, [@RTA_METRICS={0x4}, @RTA_PRIORITY={0x8, 0x6, 0xffffffffffffcc7e}]}, 0x28}}, 0x0) 18:26:25 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c648", 0xb1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:25 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r3) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) 18:26:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') sendfile(r0, r1, &(0x7f0000000080), 0x0) 18:26:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delroute={0x28, 0x19, 0x309, 0x0, 0x0, {}, [@RTA_METRICS={0x4}, @RTA_PRIORITY={0x8, 0x6, 0xffffffffffffcc7e}]}, 0x28}}, 0x0) [ 367.425806] *** Guest State *** [ 367.429305] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 367.438350] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 367.447375] CR3 = 0x0000000000000000 [ 367.451142] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 367.457346] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 367.463588] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 367.470367] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 367.478597] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 367.486779] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 367.494979] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 367.503672] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 367.511714] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 367.520419] GDTR: limit=0x00000000, base=0x0000000000000000 [ 367.528588] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 367.536820] IDTR: limit=0x00000000, base=0x0000000000000000 [ 367.544947] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 367.553159] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 367.559625] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 367.567333] Interruptibility = 00000000 ActivityState = 00000000 [ 367.573704] *** Host State *** [ 367.576941] RIP = 0xffffffff812c8203 RSP = 0xffff88010a13f3c8 [ 367.583410] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 367.589870] FSBase=00007f4fca99c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 367.597964] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 367.603996] CR0=0000000080050033 CR3=000000010d8f2000 CR4=00000000001426f0 [ 367.611125] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 367.617996] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 367.624221] *** Control State *** [ 367.627717] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 367.634613] EntryControls=0000d1ff ExitControls=002fefff [ 367.640118] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 367.647298] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 367.654186] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 367.660873] reason=80000021 qualification=0000000000000000 [ 367.667416] IDTVectoring: info=00000000 errcode=00000000 18:26:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') sendfile(r0, r1, &(0x7f0000000080), 0x0) [ 367.673346] TSC Offset = 0xffffff351ceac33b [ 367.677702] TPR Threshold = 0x00 [ 367.681112] EPT pointer = 0x00000001092a201e 18:26:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 18:26:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000000)=0x44) 18:26:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delroute={0x28, 0x19, 0x0, 0x0, 0x0, {}, [@RTA_METRICS={0x4}, @RTA_PRIORITY={0x8, 0x6, 0xffffffffffffcc7e}]}, 0x28}}, 0x0) 18:26:26 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c648", 0xb1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') sendfile(r0, r1, &(0x7f0000000080), 0x0) 18:26:26 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 18:26:26 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040), 0x4) 18:26:26 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r3) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) 18:26:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delroute={0x28, 0x19, 0x0, 0x0, 0x0, {}, [@RTA_METRICS={0x4}, @RTA_PRIORITY={0x8, 0x6, 0xffffffffffffcc7e}]}, 0x28}}, 0x0) 18:26:26 executing program 0: 18:26:26 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) semget$private(0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:26:26 executing program 3: 18:26:26 executing program 5: 18:26:26 executing program 0: 18:26:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delroute={0x28, 0x19, 0x0, 0x0, 0x0, {}, [@RTA_METRICS={0x4}, @RTA_PRIORITY={0x8, 0x6, 0xffffffffffffcc7e}]}, 0x28}}, 0x0) 18:26:27 executing program 5: 18:26:27 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) semget$private(0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:26:27 executing program 3: 18:26:27 executing program 0: 18:26:27 executing program 4: syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x100}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r3) r4 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) 18:26:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delroute={0x20, 0x19, 0x309, 0x0, 0x0, {}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) 18:26:27 executing program 3: 18:26:27 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) semget$private(0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:26:27 executing program 5: 18:26:27 executing program 0: 18:26:27 executing program 5: 18:26:27 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delroute={0x20, 0x19, 0x309, 0x0, 0x0, {}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) 18:26:28 executing program 0: 18:26:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f00000002c0)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) writev(r0, &(0x7f00000017c0)=[{&(0x7f0000000040)="46b07c72f33a4f56aecb9ef83dc137e238255d732510f8c3", 0x18}], 0x1) 18:26:28 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff}, 0xc) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x2, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB], &(0x7f0000000800)='syzkaller\x00', 0x1f, 0x3a, &(0x7f0000000840)=""/58, 0x40f00, 0x1, [], 0x0, 0x6}, 0x48) openat$cgroup(0xffffffffffffff9c, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0), 0xc) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000300)=@in={0x2, 0x4e22, @loopback}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)="6546525ad43f2d8010df051376ebbd421f6355e4407cbcacca0dc0137aaee50cb2ba24197a991f2b94dfcaf13715e5c7a577f3b9e75a85595ae42e633b9e0da8dc5d5610a11e4efa620a51217417a27b014a0a", 0x53}], 0x1, 0x0, 0x0, 0x20000890}, 0x40) sendmsg$kcm(r1, &(0x7f0000001600)={&(0x7f0000000000)=@in={0x2, 0x2000000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000080)="e5", 0x1}], 0x1, &(0x7f00000013c0)}, 0x0) [ 370.244650] input: syz1 as /devices/virtual/input/input10 [ 370.279431] input: syz1 as /devices/virtual/input/input11 18:26:29 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:29 executing program 0: socketpair$unix(0x1, 0x80200000000003, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="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", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc020660b, 0x70e005) 18:26:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delroute={0x20, 0x19, 0x309, 0x0, 0x0, {}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) 18:26:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f00000002c0), &(0x7f0000000380)="439f0b39278b7e4d7398ec24517419bdaff23387885274c8f1a6f8f568116615d5c8b0e56ab2800634b0663b63efd13c7a820706d346aa8529b354194fbcf909579b05e9f5c13791a21e98bab6f5765490761d859c3c9e2e37af24dafdadc6f85224ec74d4e6ba8804a32a44d43b0ec76dfe462e140ae10cb0e7066fa5f88c9b39f2ebbecc20bf22efcaa29a93fc34d132d0be5dbcf3c8835c2b53f82f644f4b91556f6c9dd26c7f59f7b49926e60873", 0x2}, 0x20) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x2, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x11, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000100000000000000010001007c0902000433b8bf355415e40000000000000000000085b70c00f0ffffff000000000000000dd4bacc00000000009042f5ae634ef45f69589e6feadeeb2fab012a08793e0871e35d9a424d1905afb1dfba8582d2d87c6043f96f9dd9c9b1ed66f6125ec7e302d35caf236972083ed7948433cfeb3b8c7d412c54a2"], &(0x7f0000000800)='syzkaller\x00', 0x1f, 0x3a, &(0x7f0000000840)=""/58, 0x40f00, 0x1, [], 0x0, 0x6}, 0x48) openat$cgroup(0xffffffffffffff9c, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x5}, 0xc) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000300)=@in={0x2, 0x4e22, @loopback}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x0, 0x20000890}, 0x0) sendmsg$kcm(r1, &(0x7f0000001600)={&(0x7f0000000000)=@in={0x2, 0x2000000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000080)="e5", 0x1}], 0x1, &(0x7f00000013c0)}, 0x0) 18:26:29 executing program 5: socketpair$unix(0x1, 0x80200000000003, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="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", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc020660b, 0x70e003) 18:26:29 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f000000d700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0xe7, &(0x7f000000d940)}, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000780)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3dad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88bc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e57e43a3e36bd48d2a85bf4fd4a804e83f2f3cf378a435af5e287d4e27337b4ada11b26219832ec6b2b38446b3b95fe3771e9f42ca30fb21e12f0a3d8bc2d85454af9fcc0232d8fd909448b01f46c593d31ea1c926465e35a4199079c3ca41128b17cb01fbf5b522be0fd02022ada37fecc14b6c8c8831883b85a1106f2f867020d529f17a350f20dd3bf51a98cfda70c2e3638a483fd3f87940bb478b07c4c110394c0093d17955089f2ca97bbe075124c9b1ff6500d536a95d96f03d48596e008bf0a028b539cec796cec9bf585eb80fe3e0d26") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000340)) socket$kcm(0x11, 0x0, 0x300) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e40)="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", 0x200002, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0xd6, &(0x7f0000000500)="6e7230030060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e"}, 0x30) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000cc0)={&(0x7f0000000140)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x9, 0x2, 0xc2, 0x1, 0x0, 0x7, 0x100, 0x0, 0x3, 0x93, 0x0, 0x3, 0x1000, 0x6, 0x9, 0x4, 0x464, 0x7, 0xffffffff, 0x8, 0x1, 0x8, 0x5, 0x7, 0x0, 0xf9e099d, 0x2, 0x8, 0x4, 0x614, 0x0, 0x6, 0x1ff, 0x8000, 0x1000, 0x8, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000380), 0x8}, 0x8, 0xffffffffffffff81, 0x20000000, 0x0, 0x1, 0x0, 0x6}, r4, 0x6, 0xffffffffffffffff, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000400)) r5 = openat$cgroup(r3, &(0x7f0000000c40)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000c80)='rdma.current\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x12) perf_event_open(&(0x7f0000000b80)={0x55297c67c9091a9e, 0x70, 0xe74, 0x2, 0x1f7, 0x3bf, 0x0, 0xee, 0x2045, 0x4, 0x7, 0x4, 0x7, 0xf48d, 0x1f, 0x100000000, 0x6, 0x100, 0x4, 0x2, 0x300000000, 0x0, 0xbc03, 0xe7, 0xffff, 0x80, 0x7, 0x9, 0x2, 0x5, 0x0, 0x0, 0x6, 0x81, 0x100000001, 0xfffffffffffffff8, 0x3, 0x2, 0x0, 0x5, 0x7, @perf_bp={&(0x7f00000003c0), 0x2}, 0x8, 0x8, 0x1000, 0x7, 0x6, 0x3, 0x8001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000940)=ANY=[], &(0x7f0000000300)="4f50431c4e4c0000eb0000000000000000"}, 0x48) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000c00)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000740)={r3}) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xd, 0xf6, &(0x7f00000000c0)="410b8a8046c3a988fbc5f08e8e", &(0x7f00000001c0)=""/246}, 0x28) socketpair(0x10, 0x80001, 0x1, &(0x7f0000000100)) close(0xffffffffffffffff) 18:26:29 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x10001}) 18:26:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delroute={0x1c, 0x19, 0x309}, 0x1c}}, 0x0) 18:26:29 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:29 executing program 0: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') 18:26:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delroute={0x1c, 0x19, 0x309}, 0x1c}}, 0x0) 18:26:29 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f000000d700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0xe7, &(0x7f000000d940)}, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000780)="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") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000340)) socket$kcm(0x11, 0x0, 0x300) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e40)="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", 0x200002, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0xd6, &(0x7f0000000500)="6e7230030060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e"}, 0x30) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000cc0)={&(0x7f0000000140)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x9, 0x2, 0xc2, 0x1, 0x0, 0x7, 0x100, 0x0, 0x3, 0x93, 0x0, 0x3, 0x1000, 0x6, 0x9, 0x4, 0x464, 0x7, 0xffffffff, 0x8, 0x1, 0x8, 0x5, 0x7, 0x0, 0xf9e099d, 0x2, 0x8, 0x4, 0x614, 0x0, 0x6, 0x1ff, 0x8000, 0x1000, 0x8, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000380), 0x8}, 0x8, 0xffffffffffffff81, 0x20000000, 0x0, 0x1, 0x0, 0x6}, r4, 0x6, 0xffffffffffffffff, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000400)) r5 = openat$cgroup(r3, &(0x7f0000000c40)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000c80)='rdma.current\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x12) perf_event_open(&(0x7f0000000b80)={0x55297c67c9091a9e, 0x70, 0xe74, 0x2, 0x1f7, 0x3bf, 0x0, 0xee, 0x2045, 0x4, 0x7, 0x4, 0x7, 0xf48d, 0x1f, 0x100000000, 0x6, 0x100, 0x4, 0x2, 0x300000000, 0x0, 0xbc03, 0xe7, 0xffff, 0x80, 0x7, 0x9, 0x2, 0x5, 0x0, 0x0, 0x6, 0x81, 0x100000001, 0xfffffffffffffff8, 0x3, 0x2, 0x0, 0x5, 0x7, @perf_bp={&(0x7f00000003c0), 0x2}, 0x8, 0x8, 0x1000, 0x7, 0x6, 0x3, 0x8001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000940)=ANY=[], &(0x7f0000000300)="4f50431c4e4c0000eb0000000000000000"}, 0x48) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000c00)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000740)={r3}) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xd, 0xf6, &(0x7f00000000c0)="410b8a8046c3a988fbc5f08e8e", &(0x7f00000001c0)=""/246}, 0x28) socketpair(0x10, 0x80001, 0x1, &(0x7f0000000100)) close(0xffffffffffffffff) 18:26:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delroute={0x1c, 0x19, 0x309}, 0x1c}}, 0x0) 18:26:29 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x10001}) 18:26:30 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:26:30 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x1000001) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180), 0x3}], 0x100000000000002f, 0x0) 18:26:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @remote, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/54, 0x36}], 0x1, 0x0) 18:26:30 executing program 1: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x4000, 0x0) 18:26:30 executing program 0: syz_emit_ethernet(0x104b2, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 18:26:30 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') 18:26:30 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xfffffffffffffff0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1}, 0x8}, 0x0) 18:26:30 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080), 0x10) 18:26:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x10001}) 18:26:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000180)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f0000000200)={0x2, 0x100004e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0xff9c, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) 18:26:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffff24, 0x122, 0x0, 0x4f) read(r0, &(0x7f0000000380)=""/172, 0xffffffc7) 18:26:31 executing program 4: 18:26:31 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 373.178077] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:26:31 executing program 1: 18:26:31 executing program 0: 18:26:31 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x10001}) 18:26:31 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:31 executing program 4: 18:26:31 executing program 0: 18:26:32 executing program 1: 18:26:32 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0/file1\x00') 18:26:32 executing program 0: 18:26:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffff24, 0x122, 0x0, 0x4f) read(r0, &(0x7f0000000380)=""/172, 0xffffffc7) 18:26:32 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:32 executing program 4: 18:26:32 executing program 1: 18:26:32 executing program 0: 18:26:32 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x10001}) 18:26:32 executing program 4: 18:26:32 executing program 0: 18:26:32 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:32 executing program 1: 18:26:33 executing program 4: 18:26:33 executing program 5: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x10001}) 18:26:33 executing program 4: 18:26:33 executing program 0: 18:26:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffff24, 0x122, 0x0, 0x4f) read(r0, &(0x7f0000000380)=""/172, 0xffffffc7) 18:26:33 executing program 1: 18:26:33 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:33 executing program 5: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x10001}) 18:26:33 executing program 1: [ 375.714137] *** Guest State *** [ 375.717652] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 375.726761] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 375.735887] CR3 = 0x0000000000000000 [ 375.739656] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 375.745875] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 375.751904] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 375.758955] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 375.767090] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 375.775330] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 375.783455] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 375.791591] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 375.799721] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 375.807884] GDTR: limit=0x00000000, base=0x0000000000000000 [ 375.816009] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 375.824150] IDTR: limit=0x00000000, base=0x0000000000000000 [ 375.832268] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 375.840349] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 375.846889] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 375.854535] Interruptibility = 00000000 ActivityState = 00000000 [ 375.860807] *** Host State *** 18:26:33 executing program 0: [ 375.864153] RIP = 0xffffffff812c8203 RSP = 0xffff8801079af3c8 [ 375.870338] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 375.876950] FSBase=00007f4fca99c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 375.884924] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 375.890861] CR0=0000000080050033 CR3=000000017883e000 CR4=00000000001426f0 [ 375.898059] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 375.904863] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 375.911047] *** Control State *** [ 375.914691] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 375.921470] EntryControls=0000d1ff ExitControls=002fefff [ 375.927064] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 375.934136] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 375.940849] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 375.947619] reason=80000021 qualification=0000000000000000 [ 375.954069] IDTVectoring: info=00000000 errcode=00000000 [ 375.959634] TSC Offset = 0xffffff30acccdef7 18:26:34 executing program 5: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x10001}) [ 375.964078] TPR Threshold = 0x00 [ 375.967484] EPT pointer = 0x0000000106c8701e 18:26:34 executing program 4: 18:26:34 executing program 1: 18:26:34 executing program 0: 18:26:34 executing program 4: 18:26:34 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x10001}) 18:26:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffff24, 0x122, 0x0, 0x4f) read(r0, &(0x7f0000000380)=""/172, 0xffffffc7) 18:26:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000580)="89", 0x1, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) recvfrom(r0, &(0x7f0000000380)=""/239, 0xfffffffffffffccd, 0x0, 0x0, 0x307) 18:26:34 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$session_to_parent(0x12) 18:26:34 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x20080003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000100)={0x80000000, 0x7fff, 0x8}, 0xc) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000006a80)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x198) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000380), 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x0, 0x3ff, 0x9b28, 0x8}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040), 0x10) statfs(&(0x7f0000000080)='./bus\x00', &(0x7f0000001000)=""/4096) 18:26:34 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x10001}) [ 377.026835] *** Guest State *** [ 377.030424] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 377.039647] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 377.048749] CR3 = 0x0000000000000000 [ 377.052612] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 377.058688] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 377.064939] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 377.071713] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 377.079841] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 377.088001] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 377.096118] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 377.104279] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 377.112393] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 377.120467] GDTR: limit=0x00000000, base=0x0000000000000000 [ 377.128611] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 377.136789] IDTR: limit=0x00000000, base=0x0000000000000000 [ 377.144934] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 377.153075] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 377.159545] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 377.167169] Interruptibility = 00000000 ActivityState = 00000000 [ 377.173612] *** Host State *** [ 377.176847] RIP = 0xffffffff812c8203 RSP = 0xffff88010538f3c8 [ 377.183009] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 377.189463] FSBase=00007f4fca99c700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 377.197454] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 377.203486] CR0=0000000080050033 CR3=00000001061d5000 CR4=00000000001426f0 [ 377.210643] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 377.217596] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 377.223825] *** Control State *** 18:26:35 executing program 4: getrusage(0x1, &(0x7f0000001440)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x13, 0x80f, 0x1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_DESTROY(r2, &(0x7f0000000300), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x9) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x0) fcntl$getown(r0, 0x9) r5 = getpgid(0x0) times(&(0x7f0000000340)) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x2, 0x2, 0x0, 0x90, 0x0, 0x3, 0x0, 0x4, 0x1, 0x7f, 0x3f, 0x9, 0x14f, 0x5, 0x1ff, 0x0, 0x4, 0x3, 0x7, 0xbf, 0x5, 0x0, 0x21, 0x7, 0x4d4, 0xdd, 0x0, 0x5, 0x800, 0x6, 0x80, 0xffff, 0x8, 0xea6, 0x2, 0x5, 0x0, 0x80000000000000, 0x3, @perf_bp={&(0x7f0000000100), 0x1}, 0x80, 0x7, 0x9, 0x0, 0x9, 0x0, 0x2}, r5, 0x0, 0xffffffffffffff9c, 0x2) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r3}, 0x10) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000380)={0x1, 0x1, 0x80000000}) r6 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000680)=""/117, 0x75}, {&(0x7f0000000500)=""/48, 0x30}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/145, 0x91}, {&(0x7f0000000840)=""/117, 0x75}, {&(0x7f00000008c0)=""/129, 0x81}, {&(0x7f0000000980)=""/114, 0x72}, {&(0x7f0000000a00)=""/68, 0x44}], 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000003c0), 0x4) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') write$uinput_user_dev(r7, &(0x7f0000000040)={'syz1\x00', {0x0, 0x20, 0x2, 0x10001}, 0x0, [0x6, 0xb9, 0x0, 0x7, 0x0, 0x3, 0x4, 0x4, 0x18, 0x4, 0x10001, 0x7f, 0x101, 0x55, 0x0, 0x0, 0xfffffffffffffff7, 0xffff, 0x0, 0xc0b, 0x401, 0x6, 0x3, 0x40, 0xffffffffffff8000, 0x4, 0xfffffffffffffffe, 0x101, 0x7, 0x0, 0x100000001, 0x0, 0x9, 0x0, 0x0, 0x9236, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x10000, 0x0, 0x3, 0x1, 0x4, 0x1ff, 0xe291, 0x6, 0xff, 0x1, 0xb5, 0x0, 0x8b], [0x81, 0x800, 0x0, 0x0, 0x0, 0x4, 0xffffffff80000000, 0x514f, 0xffff, 0xee97, 0x5, 0x2, 0xc10, 0x7, 0x0, 0x5, 0x0, 0x7, 0x8000, 0x80, 0x6, 0x7f, 0x9, 0x8, 0x0, 0x1, 0xffffffffffffc355, 0x2, 0x8, 0x8, 0x0, 0x0, 0x7, 0x81, 0x8000, 0x0, 0x80, 0xf6d, 0x0, 0xfcdd, 0x0, 0x1448, 0xffff, 0x5, 0x0, 0x8001, 0x8, 0x4, 0x100000000, 0x3, 0x7, 0x100, 0x1, 0xff, 0x8, 0x3d, 0x5, 0x6c5c, 0x5, 0x3, 0x3, 0x800, 0x4000000000000000, 0xc8], [0xffff, 0x10001, 0x400, 0x0, 0x5, 0x9, 0x9, 0x1, 0x8000, 0x3, 0xdb, 0x2, 0x40, 0x4, 0x200, 0x9, 0x0, 0x9, 0x80000001, 0x6, 0x7, 0x1800000000000, 0xff, 0x8, 0xdf, 0x6, 0xffffffff00000001, 0x401, 0x6, 0x7, 0x80000001, 0xffff, 0x717f, 0x3f, 0xffffffffcb3ba54c, 0x382a, 0x9, 0x8, 0xff, 0xf4e2, 0x5f, 0x10000, 0x7, 0xfff, 0x4, 0x9, 0x4, 0x0, 0x0, 0x0, 0x8140, 0x4, 0xda1, 0x1, 0x8, 0x1, 0x9, 0x87, 0x2, 0x7, 0x0, 0x1, 0x1, 0x101], [0x7, 0x80000001, 0x3, 0xfffffffffffffffe, 0x4, 0x2, 0x78e, 0x8, 0xffffffffffffffbc, 0x0, 0x2, 0xffffffff, 0x1f, 0x1, 0x7fffffff, 0x7d7, 0x0, 0x31a9, 0x10001, 0x2, 0x10001, 0x1, 0xffffffffffffffff, 0x80000000, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x8000, 0x1, 0x4, 0x2, 0x0, 0x8, 0xa8, 0x40, 0x0, 0x2, 0x9, 0x6, 0x4, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffffffffff001, 0x9, 0x2ea, 0x9, 0x2, 0xdb, 0x0, 0x101, 0x3, 0x0, 0x2, 0x8, 0x8001]}, 0x45c) [ 377.227326] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 377.234167] EntryControls=0000d1ff ExitControls=002fefff [ 377.239683] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 377.246786] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 377.253607] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 377.260289] reason=80000021 qualification=0000000000000000 [ 377.266728] IDTVectoring: info=00000000 errcode=00000000 [ 377.272317] TSC Offset = 0xffffff2ff8bbd5e0 [ 377.276670] TPR Threshold = 0x00 [ 377.280073] EPT pointer = 0x00000001095e701e 18:26:35 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x0, 0x10001}) 18:26:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/uinput\x00', 0x806, 0x0) write$uinput_user_dev(r0, &(0x7f00000002c0)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000200)=""/164, 0xa4}], 0x1) 18:26:35 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9}) 18:26:35 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 377.795212] input: syz1 as /devices/virtual/input/input12 18:26:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffff24, 0x122, 0x0, 0x4f) [ 377.873498] input: syz1 as /devices/virtual/input/input13 18:26:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 18:26:36 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) recvfrom(0xffffffffffffffff, &(0x7f00000011c0)=""/4096, 0xffffffffffffffec, 0x0, &(0x7f0000001140)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0xfffffe6b) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0xb979) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = geteuid() lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000340)='/dev/loop0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000680)='fuseblk\x00', 0x1000000, &(0x7f0000000780)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1ff}}, {@max_read={'max_read', 0x3d, 0xbfb}}], [{@hash='hash'}]}}) getpeername$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', r6}) write(r3, &(0x7f00000001c0), 0xfffffef3) geteuid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x246f) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = socket$inet6(0xa, 0x2, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000000c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000001480)={0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7fffffff}}, 0x20) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000400)={0x100000000, 0x9, 0x7, 0x4, 0xe72}) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$TUNSETLINK(r8, 0x400454cd, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet6_opts(r8, 0x29, 0x3f, &(0x7f0000000540)=""/229, &(0x7f0000000640)=0xe5) preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/173, 0xad}, {&(0x7f0000000080)=""/59, 0x3b}], 0x2, 0x60) 18:26:36 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) 18:26:36 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:26:43 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257315bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0xa8, &(0x7f0000000140)="3ad26c8be8cffb6db070b8d66277", &(0x7f0000000480)=""/168}, 0x28) 18:26:43 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x20080003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000100)={0x80000000, 0x7fff, 0x8}, 0xc) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000006a80)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x198) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000380), 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x0, 0x3ff, 0x9b28, 0x8}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040), 0x10) statfs(&(0x7f0000000080)='./bus\x00', &(0x7f0000001000)=""/4096) 18:26:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 18:26:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) 18:26:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) 18:26:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) 18:26:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000440)="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") r0 = socket$kcm(0xa, 0x40122000000003, 0x11) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x0, 0x0, 0x3, 0x0, 0x7, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f0000000240)='GPL\x00', 0xf4, 0x47, &(0x7f0000000280)=""/71, 0x41f00, 0xe7db288e1ffb0d80, [], 0x0, 0xf}, 0x48) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000001c0), 0x4) socket$kcm(0x29, 0x7, 0x0) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x1b, &(0x7f0000000040)=r2, 0x52d) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}, 0x100}, 0x80, &(0x7f0000000400), 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x400000000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) socketpair(0x9, 0x80000, 0x380000, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth1\x00', 0xd020}) r4 = openat$cgroup_ro(r3, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000001100)) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000700)={r2}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000600)) openat$cgroup_ro(r4, &(0x7f0000000580)='cgroup.controllers\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_sys\x00', 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0) socket$kcm(0x29, 0x5, 0x0) 18:26:43 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket(0x800000000000010, 0x20100000003, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 18:26:43 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000000), 0xc) 18:26:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000ccb000), 0x10) 18:26:44 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000a8000200000000000000ffffd4"], &(0x7f00000001c0)=""/187, 0x19, 0xbb, 0x1}, 0x20) 18:26:44 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev}}, 0x1e) 18:26:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000280)=@can, 0x80, &(0x7f00000027c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c0000002900000033fffff8"], 0xc}}], 0x1, 0x0) 18:26:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 18:26:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) 18:26:47 executing program 4: set_mempolicy(0x1, &(0x7f0000000000), 0x9) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x10001) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0xffffffffffffffcd) 18:26:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x20001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:47 executing program 5: futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000048000), 0x0) 18:26:47 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev}}, 0x1e) 18:26:47 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff}, 0x20) 18:26:48 executing program 5: 18:26:48 executing program 3: sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) 18:26:48 executing program 1: 18:26:48 executing program 4: 18:26:48 executing program 0: 18:26:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x20001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:48 executing program 5: 18:26:48 executing program 4: 18:26:48 executing program 1: 18:26:48 executing program 3: sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) 18:26:48 executing program 0: 18:26:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x20001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:48 executing program 4: 18:26:49 executing program 0: 18:26:49 executing program 5: 18:26:49 executing program 1: 18:26:49 executing program 3: sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) 18:26:49 executing program 4: 18:26:49 executing program 0: 18:26:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x20001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:26:49 executing program 1: 18:26:49 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) 18:26:49 executing program 5: 18:26:49 executing program 0: 18:26:49 executing program 4: 18:26:49 executing program 2: 18:26:50 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) 18:26:50 executing program 4: 18:26:50 executing program 5: 18:26:50 executing program 0: 18:26:50 executing program 1: 18:26:50 executing program 2: 18:26:50 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) 18:26:50 executing program 4: 18:26:50 executing program 5: 18:26:50 executing program 1: 18:26:50 executing program 0: 18:26:50 executing program 2: 18:26:50 executing program 5: 18:26:50 executing program 4: 18:26:51 executing program 0: 18:26:51 executing program 1: 18:26:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x0, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) 18:26:51 executing program 2: 18:26:51 executing program 4: 18:26:51 executing program 5: 18:26:51 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x1) 18:26:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x0, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) 18:26:51 executing program 2: pipe(&(0x7f0000001580)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000002800)=[{&(0x7f0000002740)="02cd256aea66097f8c673d925301cbe2c3306ad41a24b216617e26abb0b21459be76fbda5b9b51b178cc7d3193f044b130277c43955f70d58e91d846c20ea69177880d84fdff320db3161867a81371e82a08e7b4afa0723129987c7b2465679ca530ee2a05e99b78a53c1e280170f9fa105bfa594f34b748849d147a4f1b09d93d1acc5133137e167b67d7b76013095bca5c3b1cba70bf29071421b6894258", 0x9f}], 0x1, 0x0) 18:26:51 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) 18:26:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000001c0)={0x1e, 0x4, 0x5}) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x0, 0x79, 0x9}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000500)=""/246) rt_sigaction(0x1c, &(0x7f0000000040)={0x0}, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) 18:26:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_getneigh={0x20, 0x1e, 0x303, 0x0, 0x0, {0xc00}}, 0x20}}, 0x0) 18:26:51 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getparam(0x0, &(0x7f0000000040)) 18:26:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x0, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) [ 393.853615] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 393.862473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 18:26:52 executing program 0: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00003ed000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000000)=""/13, 0xd, 0x2) 18:26:52 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x1, 0x549, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0}, 0x20) 18:26:52 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 394.154091] mmap: syz-executor0 (11724) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 18:26:52 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000000)=""/13, 0xd, 0x2) 18:26:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback, [0x2]}, 0x10) 18:26:52 executing program 0: r0 = memfd_create(&(0x7f0000000140)='/dev/rtc0\x00', 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)) 18:26:52 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000240)='./bus\x00', 0x20800) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) set_robust_list(&(0x7f0000000280)={&(0x7f0000000180), 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, 0x18) creat(&(0x7f0000000040)='./bus\x00', 0x0) 18:26:52 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr}}}, {{@in6=@local}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x5}}, 0xe8) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:26:52 executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000240)='./bus\x00', 0x20800) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) set_robust_list(&(0x7f0000000280)={&(0x7f0000000180), 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, 0x18) write$P9_RFLUSH(r1, &(0x7f0000000140)={0x7, 0x6d, 0x8}, 0x7) creat(&(0x7f0000000040)='./bus\x00', 0x0) 18:26:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f00000001c0)) 18:26:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000000)) 18:26:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) io_setup(0x280, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x1}]) 18:26:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40041271, &(0x7f0000000080)) 18:26:53 executing program 5: open(&(0x7f0000000040)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000180)='./cgroup.cpu\x00'], &(0x7f0000000500), 0x0) 18:26:53 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/116, 0x74) 18:26:53 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000000)=""/13, 0xd, 0x2) 18:26:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, "520c778ad2083b3d6fba6fa293c4fcb3166c31416c0100000036fe95f8adb573dd38ca94f1b22b0a75daf0232cff750999ac31190ddaf493663ab99c28dd3fc8", "25c1f918ade844de8c60036a21a87cc898496e2040442861ecaf7e30e3b683ec"}) getpgrp(0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/128, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) 18:26:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) request_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000500)="74086e750000000000000000008c00", 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000006c0), &(0x7f0000000700)=""/181, 0xb5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000280)={0x0, 0x3}) 18:26:53 executing program 3: syz_emit_ethernet(0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)) 18:26:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a80)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f0000000340)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) renameat(r1, &(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f0000000000)='./file0\x00') 18:26:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'Xat\x00', 0x19, 0x3, 0x3e0, [0x20001600, 0x0, 0x0, 0x200018d8, 0x20001908], 0x0, &(0x7f0000000240), &(0x7f0000001600)=ANY=[@ANYBLOB="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"]}, 0x458) 18:26:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") getuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000009b80)=[{{&(0x7f0000000040)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)="5b9acaac73824efcfa5014112ff2f8a3a000e856f3f23600d245cb3305961e5636e8e79e6c99a218bdfb09f38b13667603845bacdf1cfdd83cf758460951df514a56de9aa35fa28f752d948ac190f17b9d711ce4dfb2f761fe65dd450bf061506b63a8a4cc38da1d8dc7a2b47affe9556376330276afa4", 0x77}], 0x1, &(0x7f0000000500)=[{0xd8, 0x129, 0x1, "459746b85b55b2df0b30ab08ac0129ab585852a99a0e568a4c62c4851558d71ea8a58d4fcf5729935b51f21649ff3fe042c33e119613e5e004e18d3724704ea320a37176000f41297122344857c4bf7a0237e5936bb1ee99075dff23c266f2d08a0616f377ca5fad90b3199c60098173937a2d865be2ad5a0029b1fad79eb55566ed8a4759693dd87f938e004c0ef2dd1c34d4378c2ef9941828b32b4e563f1117f5630c24746d9970a9fea30bfb0eb07a993b1ecd4d6b2a3ef1e1f8683ca0bbc278c3c30f7d4b"}], 0xd8, 0x800}, 0x80}, {{&(0x7f0000000380)=@ipx={0x4, 0x0, 0x3, "6c5b2506d11b", 0x7fffffff}, 0x80, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x4080}, 0x8001}, {{&(0x7f0000003d80)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003e40)}], 0x1, &(0x7f0000004000), 0x0, 0x40040}, 0xfb48}], 0x3, 0x0) 18:26:54 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000740)='./file0\x00', 0x0) pread64(r0, &(0x7f0000000340)=""/232, 0xe8, 0x0) 18:26:54 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') 18:26:54 executing program 3: pipe2(&(0x7f0000000040), 0x0) [ 396.187406] x_tables: eb_tables: snat target: only valid in nat table, not Xat 18:26:54 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0xcbd6) write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0xffffff17) fcntl$setstatus(r1, 0x4, 0x4000) io_setup(0x20000000000808, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) 18:26:54 executing program 2: 18:26:54 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000000)=""/13, 0xd, 0x2) 18:26:54 executing program 5: 18:26:54 executing program 0: 18:26:54 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) 18:26:54 executing program 2: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x88a8ffff}, @empty=[0x0, 0x60, 0x88470000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @igmp={0x11, 0x0, 0x0, @empty, "b3000000"}}}}}, &(0x7f0000000000)) 18:26:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x1bb, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xd}]}, 0x30}}, 0x0) 18:26:55 executing program 5: 18:26:55 executing program 4: 18:26:55 executing program 2: 18:26:55 executing program 3: 18:26:55 executing program 5: [ 397.271771] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:26:55 executing program 4: 18:26:55 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000000)=""/13, 0xd, 0x2) 18:26:55 executing program 5: 18:26:55 executing program 2: 18:26:55 executing program 4: 18:26:55 executing program 3: 18:26:55 executing program 0: 18:26:56 executing program 4: 18:26:56 executing program 2: 18:26:56 executing program 5: 18:26:56 executing program 0: 18:26:56 executing program 3: 18:26:56 executing program 4: 18:26:56 executing program 1: getrandom(&(0x7f0000000000)=""/13, 0xd, 0x2) 18:26:56 executing program 0: 18:26:56 executing program 5: 18:26:56 executing program 2: 18:26:56 executing program 3: 18:26:56 executing program 4: 18:26:56 executing program 4: 18:26:57 executing program 0: 18:26:57 executing program 2: 18:26:57 executing program 5: 18:26:57 executing program 3: 18:26:57 executing program 0: 18:26:57 executing program 1: getrandom(&(0x7f0000000000)=""/13, 0xd, 0x0) 18:26:57 executing program 2: 18:26:57 executing program 4: 18:26:57 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000000c0)) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 18:26:57 executing program 3: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=0x9, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f80)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000045c0)=[{{&(0x7f0000004380)=@xdp={0x2c, 0x2, r0, 0x2e}, 0x80, &(0x7f0000004580)=[{&(0x7f00000044c0)="60c8d98254bcb412400d68ad851088380166889630719ee1f5ba8f73fa7e128d85545215142a736d2f7410d223ca91df1df7e6629eb85f29e6fb54a2f7b0e8855b256ba541ce24e3db11b256225c404d8ff0a364a3cbdb95b6a3bf9b5862adca4c32d8f29c145df1684c04bff0df2ee71010b595cd5d725ab33fe27a816187efbe", 0x81}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)="146c0750e6213b6c4e85c197c007e329863f48407f88a037373935711f37c5c2f5881dca91542e0797b404b119a0d26f06b397c97a0d10940563214b54646324dc3d", 0xfffffffffffffd3c) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$update(0x2, r3, &(0x7f0000000580)="8adb07b2c2017f9577a86ba3a7a68677dc3f2b0fbd3a6ba6f892e604d80e66bcee3b0fa0ce290f394eafc38e217f0784540bea2ffce9a854b76f1f04de9ccc4f4cc665bb2a931cc81a4dca909128519bf5e266f9cc58ba739de367cd10c1d81e8bdc487c38eed3d3297beac35fbc1a1c6f87c3ac53ace1d9767e16342463ffcaa21fd7c2641999", 0x87) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x801, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180), 0x0, 0xfffffffffffffffb) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket(0x0, 0x0, 0x10001) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) socket$nl_generic(0xa, 0x3, 0x10) 18:26:57 executing program 0: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) ftruncate(r0, 0x48204) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141442, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000004c0)='./bus\x00', &(0x7f0000002f80)='trusted.overlay.nlink\x00', &(0x7f0000002fc0)={'L-', 0xfffffffffffffff9}, 0x28, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 18:26:58 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 18:26:58 executing program 2: writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1d916b7bf443df", 0x7}], 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 400.009539] print_req_error: I/O error, dev loop3, sector 0 [ 400.015551] Buffer I/O error on dev loop3, logical block 0, lost async page write [ 400.023618] print_req_error: I/O error, dev loop3, sector 8 [ 400.029402] Buffer I/O error on dev loop3, logical block 1, lost async page write [ 400.037355] print_req_error: I/O error, dev loop3, sector 16 [ 400.043298] Buffer I/O error on dev loop3, logical block 2, lost async page write [ 400.051173] print_req_error: I/O error, dev loop3, sector 24 [ 400.057189] Buffer I/O error on dev loop3, logical block 3, lost async page write [ 400.065075] print_req_error: I/O error, dev loop3, sector 32 [ 400.070937] Buffer I/O error on dev loop3, logical block 4, lost async page write [ 400.079061] print_req_error: I/O error, dev loop3, sector 40 [ 400.085004] Buffer I/O error on dev loop3, logical block 5, lost async page write [ 400.092950] print_req_error: I/O error, dev loop3, sector 48 [ 400.098819] Buffer I/O error on dev loop3, logical block 6, lost async page write [ 400.106757] print_req_error: I/O error, dev loop3, sector 56 [ 400.112698] Buffer I/O error on dev loop3, logical block 7, lost async page write [ 400.120504] print_req_error: I/O error, dev loop3, sector 64 [ 400.126516] Buffer I/O error on dev loop3, logical block 8, lost async page write [ 400.134397] print_req_error: I/O error, dev loop3, sector 72 [ 400.140260] Buffer I/O error on dev loop3, logical block 9, lost async page write 18:26:58 executing program 1: getrandom(&(0x7f0000000000)=""/13, 0xd, 0x0) 18:26:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f00000018c0), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=@polexpire={0xe4, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0xa0}, {}, {}, 0x0, 0x0, 0x1}}, [@lifetime_val={0x24}]}, 0xe4}}, 0x0) 18:26:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0x0, 0x0, 0x0, 0x5000000]}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf6, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0xd2}, 0x100) 18:26:58 executing program 3: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=0x9, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f80)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000045c0)=[{{&(0x7f0000004380)=@xdp={0x2c, 0x2, r0, 0x2e}, 0x80, &(0x7f0000004580)=[{&(0x7f00000044c0)="60c8d98254bcb412400d68ad851088380166889630719ee1f5ba8f73fa7e128d85545215142a736d2f7410d223ca91df1df7e6629eb85f29e6fb54a2f7b0e8855b256ba541ce24e3db11b256225c404d8ff0a364a3cbdb95b6a3bf9b5862adca4c32d8f29c145df1684c04bff0df2ee71010b595cd5d725ab33fe27a816187efbe", 0x81}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)="146c0750e6213b6c4e85c197c007e329863f48407f88a037373935711f37c5c2f5881dca91542e0797b404b119a0d26f06b397c97a0d10940563214b54646324dc3d", 0xfffffffffffffd3c) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$update(0x2, r3, &(0x7f0000000580)="8adb07b2c2017f9577a86ba3a7a68677dc3f2b0fbd3a6ba6f892e604d80e66bcee3b0fa0ce290f394eafc38e217f0784540bea2ffce9a854b76f1f04de9ccc4f4cc665bb2a931cc81a4dca909128519bf5e266f9cc58ba739de367cd10c1d81e8bdc487c38eed3d3297beac35fbc1a1c6f87c3ac53ace1d9767e16342463ffcaa21fd7c2641999", 0x87) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x801, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180), 0x0, 0xfffffffffffffffb) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket(0x0, 0x0, 0x10001) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) socket$nl_generic(0xa, 0x3, 0x10) 18:26:58 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r0, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3bfb}, 0xffffff7f}], 0x3e8, 0x0) 18:26:58 executing program 1: getrandom(&(0x7f0000000000)=""/13, 0xd, 0x0) 18:26:58 executing program 5: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1/file1\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1/file1\x00') 18:26:59 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r0, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3bfb}, 0xffffff7f}], 0x3e8, 0x0) 18:26:59 executing program 0: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) ftruncate(r0, 0x48204) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141442, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000004c0)='./bus\x00', &(0x7f0000002f80)='trusted.overlay.nlink\x00', &(0x7f0000002fc0)={'L-', 0xfffffffffffffff9}, 0x28, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 18:26:59 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000740)='./file0\x00', 0x0) write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0xffffff17) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) io_setup(0x20000000000808, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1}]) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x84) 18:26:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) 18:26:59 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) 18:26:59 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r0, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3bfb}, 0xffffff7f}], 0x3e8, 0x0) 18:27:00 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x0, 0x1011, r0, 0x0) 18:27:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x3, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000340)) 18:27:00 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r0, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3bfb}, 0xffffff7f}], 0x3e8, 0x0) 18:27:00 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) 18:27:00 executing program 3: getrusage(0x1, &(0x7f0000001440)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x13, 0x80f, 0x1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_DESTROY(r2, &(0x7f0000000300), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x9) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x618, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x0) fcntl$getown(r0, 0x9) r5 = getpgid(0x0) times(&(0x7f0000000340)) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x2, 0x2, 0x0, 0x90, 0x0, 0x3, 0x0, 0x4, 0x1, 0x7f, 0x3f, 0x9, 0x14f, 0x5, 0x1ff, 0x401, 0x4, 0x3, 0x7, 0xbf, 0x5, 0x3ff, 0x21, 0x7, 0x4d4, 0xdd, 0x0, 0x5, 0x800, 0x6, 0x80, 0xffff, 0x8, 0xea6, 0x2, 0x5, 0x0, 0x80000000000000, 0x3, @perf_bp={&(0x7f0000000100), 0x1}, 0x80, 0x7, 0x9, 0x0, 0x9, 0x101, 0x2}, r5, 0xffffffffffffffff, 0xffffffffffffff9c, 0x2) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r3}, 0x10) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000380)={0x1, 0x1, 0x80000000}) r6 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000680)=""/117, 0x75}, {&(0x7f0000000500)=""/48, 0x30}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/145, 0x91}, {&(0x7f0000000840)=""/117, 0x75}, {&(0x7f00000008c0)=""/129, 0x81}, {&(0x7f0000000980)=""/114, 0x72}, {&(0x7f0000000a00)=""/68, 0x44}], 0x9) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000003c0)=0x3, 0x4) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') write$uinput_user_dev(r7, &(0x7f0000000040)={'syz1\x00', {0x7c00000000000000, 0x20, 0x2, 0x10001}, 0x13, [0x6, 0xb9, 0x0, 0x7, 0x10001, 0x3, 0x4, 0x4, 0x18, 0x4, 0x10001, 0x7f, 0x101, 0x55, 0x0, 0xffffffff, 0xfffffffffffffff7, 0xffff, 0x8, 0xc0b, 0x401, 0x6, 0x3, 0x40, 0xffffffffffff8000, 0x4, 0xfffffffffffffffe, 0x101, 0x7, 0x1, 0x100000001, 0x3f, 0x0, 0x0, 0x0, 0x9236, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x10000, 0x100000001, 0x3, 0x1, 0x4, 0x1ff, 0xe291, 0x6, 0xff, 0x1, 0xb5, 0x0, 0x8b], [0x81, 0x800, 0x80000000, 0x0, 0x9, 0x4, 0xffffffff80000000, 0x514f, 0xffff, 0xee97, 0x5, 0x2, 0xc10, 0x7, 0x0, 0x5, 0x100, 0x7, 0x8000, 0x80, 0x6, 0x7f, 0x9, 0x8, 0x8, 0x1, 0xffffffffffffc355, 0x2, 0x8, 0x8, 0x8, 0xfffffffffffffffb, 0x7, 0x81, 0x8000, 0x9, 0x80, 0xf6d, 0x19, 0xfcdd, 0x4, 0x1448, 0xffff, 0x5, 0xfffffffffffffffd, 0x8001, 0x8, 0x4, 0x100000000, 0x3, 0x7, 0x100, 0x1, 0xff, 0x8, 0x3d, 0x5, 0x6c5c, 0x5, 0x3, 0x3, 0x800, 0x4000000000000000, 0xc8], [0xffff, 0x10001, 0x400, 0x6, 0x5, 0x9, 0x9, 0x1, 0x8000, 0x3, 0xdb, 0x2, 0x40, 0x4, 0x200, 0x9, 0x1ff, 0x9, 0x80000001, 0x6, 0x7, 0x1800000000000, 0xff, 0x8, 0xdf, 0x6, 0xffffffff00000001, 0x401, 0x6, 0x7, 0x80000001, 0xffff, 0x717f, 0x3f, 0xffffffffcb3ba54c, 0x382a, 0x9, 0x8, 0xff, 0xf4e2, 0x5f, 0x10000, 0x7, 0xfff, 0x4, 0x9, 0x4, 0x7, 0x0, 0x2, 0x8140, 0x4, 0xda1, 0x1, 0x8, 0x1, 0x9, 0x87, 0x2, 0x7, 0x0, 0x1, 0x1, 0x101], [0x7, 0x80000001, 0x3, 0xfffffffffffffffe, 0x4, 0x2, 0x78e, 0x8, 0xffffffffffffffbc, 0x9, 0x2, 0xffffffff, 0x1f, 0x1, 0x7fffffff, 0x7d7, 0x0, 0x31a9, 0x10001, 0x2, 0x10001, 0x1, 0xffffffffffffffff, 0x80000000, 0x6, 0x9, 0xc3, 0x6, 0x4, 0x6, 0x9, 0x0, 0x0, 0x8000, 0x1, 0x4, 0x2, 0x7f, 0x8, 0xa8, 0x40, 0x0, 0x2, 0x9, 0x6, 0x4, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffffffffff001, 0x9, 0x2ea, 0x9, 0x2, 0xdb, 0x6264, 0x101, 0x3, 0x0, 0x2, 0x8, 0x8001]}, 0x45c) 18:27:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000001a00)=0x0) io_submit(r2, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000042000), 0x0, 0x0, 0x0, 0x1, r1}]) 18:27:00 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000240)) mount(&(0x7f0000000000)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000900)='./file0\x00') r0 = add_key$keyring(&(0x7f0000000800)='keyring\x00', &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$invalidate(0x15, r0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8) fadvise64(r1, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000340)=0x200, 0x4) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000580)={0x801a, 0x4, 0x256b, 0x48b8, 0x10000, 0x800}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x2000, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) lsetxattr$security_smack_transmute(&(0x7f0000000880)='./file0/file0\x00', &(0x7f0000000500)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000940)='TRUE', 0x0, 0x3) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f00000001c0)={@mcast1, 0x0}, &(0x7f00000005c0)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000700)=r3) accept(0xffffffffffffff9c, &(0x7f00000000c0)=@alg, &(0x7f0000000140)=0x80) execve(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='system.advise\x00', &(0x7f0000000400)='\x00']) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.advise\x00') 18:27:00 executing program 0: 18:27:00 executing program 5: 18:27:00 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3bfb}, 0xffffff7f}], 0x3e8, 0x0) 18:27:01 executing program 1: 18:27:01 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3bfb}, 0xffffff7f}], 0x3e8, 0x0) 18:27:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) fallocate(r0, 0x0, 0x0, 0x400) 18:27:01 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xab11, 0x0) 18:27:01 executing program 1: r0 = memfd_create(&(0x7f0000000880)="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", 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) signalfd(0xffffffffffffffff, &(0x7f0000000280)={0x6}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r2, &(0x7f0000000340)='threaded\x00', 0xffffffc5) fsync(r2) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) lsetxattr$security_selinux(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='security.selinux\x00', &(0x7f0000000980)='system_u:object_r:unconfined_execmem_exec_t:s0\x00', 0x199, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:27:01 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3bfb}, 0xffffff7f}], 0x3e8, 0x0) 18:27:02 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000240)) mount(&(0x7f0000000000)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000900)='./file0\x00') r0 = add_key$keyring(&(0x7f0000000800)='keyring\x00', &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$invalidate(0x15, r0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8) fadvise64(r1, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000340)=0x200, 0x4) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000580)={0x801a, 0x4, 0x256b, 0x48b8, 0x10000, 0x800}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x2000, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) lsetxattr$security_smack_transmute(&(0x7f0000000880)='./file0/file0\x00', &(0x7f0000000500)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000940)='TRUE', 0x0, 0x3) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f00000001c0)={@mcast1, 0x0}, &(0x7f00000005c0)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000700)=r3) accept(0xffffffffffffff9c, &(0x7f00000000c0)=@alg, &(0x7f0000000140)=0x80) execve(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='system.advise\x00', &(0x7f0000000400)='\x00']) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.advise\x00') 18:27:02 executing program 3: 18:27:02 executing program 5: 18:27:02 executing program 0: 18:27:02 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3bfb}, 0xffffff7f}], 0x3e8, 0x0) 18:27:02 executing program 1: 18:27:02 executing program 0: 18:27:02 executing program 4: socket$l2tp(0x18, 0x1, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3bfb}, 0xffffff7f}], 0x3e8, 0x0) 18:27:02 executing program 3: 18:27:02 executing program 5: 18:27:02 executing program 1: 18:27:02 executing program 4: socket$l2tp(0x18, 0x1, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3bfb}, 0xffffff7f}], 0x3e8, 0x0) 18:27:03 executing program 2: 18:27:03 executing program 5: 18:27:03 executing program 0: 18:27:03 executing program 3: 18:27:03 executing program 1: 18:27:03 executing program 4: socket$l2tp(0x18, 0x1, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3bfb}, 0xffffff7f}], 0x3e8, 0x0) 18:27:03 executing program 0: 18:27:03 executing program 5: 18:27:03 executing program 2: 18:27:03 executing program 1: 18:27:03 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}], 0x1, 0x0) 18:27:03 executing program 3: 18:27:03 executing program 2: 18:27:03 executing program 0: 18:27:03 executing program 1: 18:27:03 executing program 5: 18:27:03 executing program 3: 18:27:04 executing program 2: 18:27:04 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x0, 0x0) 18:27:04 executing program 1: dup(0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x10000000, 0x1100082) memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x800000000016, 0xd, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42ff00000000000000a96aae15813f0dceb297", "a8a4ff000000e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334000000000400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7", [0x100000000]}) 18:27:04 executing program 0: mkdir(&(0x7f00000003c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) 18:27:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x723, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x41c, 0x0, 0x234, 0x12c, 0x12c, 0x234, 0x350, 0x350, 0x350, 0x350, 0x350, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@mh={0x24, 'mh\x00', 0x0, {0x4, 0xffffffff00000001, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x400, 0x7fff, 0x8, 0x3, 0x9, 0x7, 0x9, 0xff]}}}, {{@uncond, 0x0, 0xc8, 0x108}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x100000001, 0x73, 0x1, 0x4, 0x643, 0x10000, 0x4, 0x6]}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x1a}, @mcast2, [0xff, 0x0, 0xffffff00], [0xffffff00, 0xffffffff, 0x0, 0xffffffff], 'gretap0\x00', 'bond0\x00', {0xff}, {}, 0x2e, 0x66b, 0x2, 0x40}, 0x0, 0xec, 0x11c, 0x0, {}, [@common=@mh={0x24, 'mh\x00', 0x0, {0x200, 0x0, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x6, 0x7, 0x8}, {0x0, 0x9, 0x8001}, 0xec, 0x6}}}], {{[], 0x0, 0xa8, 0xcc}, {0x24}}}}, 0x478) ioctl$sock_ifreq(r0, 0x4000000000089f2, &(0x7f0000000040)={"736974300000000400", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e20, @rand_addr=0x240000}}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000580)) 18:27:04 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) 18:27:04 executing program 2: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300), &(0x7f0000000000)) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) tkill(r0, 0x3d) 18:27:04 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x0, 0x0) 18:27:04 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) io_setup(0x3f, &(0x7f00000005c0)=0x0) io_submit(r0, 0x1, &(0x7f0000001a40)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001800)}]) 18:27:04 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bond_slave_0\x00', 0xb8) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendto$inet(r0, &(0x7f0000000240)='?', 0x1, 0x0, &(0x7f0000002c40)={0x2, 0x0, @dev}, 0x10) 18:27:04 executing program 2: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300), &(0x7f0000000000)) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) tkill(r0, 0x3d) 18:27:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in6=@local}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000600)={@ipv4={[], [], @multicast1}}, &(0x7f0000000640)=0x14) pipe(&(0x7f0000000040)) accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x80800) r1 = socket(0x17, 0x2, 0x9) accept$packet(r1, &(0x7f0000001b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x100ac) recvmsg(r0, &(0x7f0000001ec0)={&(0x7f0000001b80)=@can, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c00)=""/55, 0x37}, {&(0x7f0000001c40)=""/237, 0xed}, {&(0x7f0000000180)=""/193, 0xc1}], 0x3, &(0x7f0000001e80)=""/6, 0x6, 0x8}, 0x20) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001f00)={{{@in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000002000)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4400}, 0xc, &(0x7f0000002240)={&(0x7f0000002040)=ANY=[@ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) 18:27:04 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x0, 0x0) 18:27:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x803, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'lo\x00@\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00', 0xfff7fffffffffffb}) 18:27:05 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000004c0)={0xfffffffffffffffe, 0x1}) 18:27:05 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000a8000000c0007400ffffffffd4aca22397640c596e856d494b3781c3dbd0dea6fbf95b6071178ef11ad50e5d286da1c8306880a99b84bd66fd1c48294f4259f1d2fdeabd848b12e40254379a465653d964eee003056b2766c4d0194f8ed0689857e1377825510208d867b3da6ac7bb55063bcd986202c79f47fb4a9530028426fd0b116c30fd7fec291730a829338688acd2d12025dea897bf7619d5a7b9a5c30509127587ad6551b152d61ee1528022b30749a4"], &(0x7f00000001c0)=""/187, 0xc0, 0xbb, 0x1}, 0x20) [ 407.175697] device lo entered promiscuous mode 18:27:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000a8000000c000ba00ffffffffd4aca22397640c596e856d494b3781c3dbd0dea6fbf95b6071178ef11ad50e5d286da1c8306880a99b84bd66fd1c48294f4259f1d2fdeabd848b12e40254379a465653d964eee003056b2766c4d0194f8ed0689857e1377825510208d867b3da6ac7bb55063bcd986202c79f47fb4a9530028426fd0b116c30fd7fec291730a829338688acd2d12025dea897bf7619d5a7b9a5c30509127587ad6551b152d61ee1528022b30749a4"], &(0x7f00000001c0)=""/187, 0xc0, 0xbb, 0x1}, 0x20) 18:27:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, "26c0a64b100eb846ad31dd442fb3334ab0cea045ad07c300ae76a68479f21063340ef0ced4728d5db431cd06234a33bcc92db7b2114627e6101961ae05242b0f", "fb09aec873b92846c283c32dee1b1aa75025d94fc5de9b41bf5f0bcaec1728fabee4ea2d88a0ecf848ecbdf64b6eccfcf0d63dca94a6b57eb3a33eab70faad6b", "81adbfa91823bfffca729475e6dae326c47483661fde15f5a66485eb8b20e987"}) 18:27:05 executing program 2: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300), &(0x7f0000000000)) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) tkill(r0, 0x3d) 18:27:05 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000240)='./bus\x00', 0x800) r2 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000140)={[{0xfffffffffffffff8, 0x1, 0x7723, 0x200, 0x6d, 0x0, 0x8, 0x1, 0x7, 0xaf, 0x0, 0x400, 0x1f}, {0x1fe, 0x401, 0xfffffffffffffffd, 0x8, 0x1000, 0x1ff, 0x1, 0xfffffffffffffffa, 0x1f, 0x1f, 0x4, 0x0, 0x7}, {0x3, 0x1f, 0xfffffffffffffff9, 0x100, 0x4, 0x9, 0xffffffffffffffc1, 0x7fffffff, 0xfffffffffffffff8, 0x7, 0x8, 0x6}], 0xaf}) fallocate(r3, 0x0, 0x0, 0x0) lseek(r3, 0x0, 0x3) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0xfffffffffffffffe) 18:27:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x64e6) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30}, 0x30) close(r2) 18:27:05 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000200), 0x4) 18:27:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c7465720000000000000000080000a513982661fe98559b102c8bf2910000000000000000000093fed576637ee2b200505073bb143d3bde12bbe07415e8373e5bae5d885258e8aef260400618f1902691cf35081e1deb804a12c03b16bb6b6504a71595ceb0446f441217f83991e2f1d0ab490880b049580225fdbd178b92a8928df2cc56dfdd7878f1e13dc9e5c4a14fff532c903afcdf85e95d8a606d280d1a5aa588b4dc556e816d50469f0b89e257502469c40a41a65ef9174bbaa3dbb182a63b7d36d7cc"], &(0x7f0000000040)=0x1) 18:27:05 executing program 5: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1/file1\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1/file1\x00') mkdir(&(0x7f0000000380)='./file1/file1\x00', 0x0) 18:27:05 executing program 0: restart_syscall() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) syncfs(r0) 18:27:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f0000000600)='./file0\x00', 0x40, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000100)) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = open(&(0x7f0000000180)='./file0\x00', 0x8000000000141042, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r1, 0x0, 0x6, &(0x7f0000000080)='ramfs\x00', 0xffffffffffffffff}, 0x30) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000480)={{0x9d, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e24, 0x1, 'sed\x00', 0x0, 0xffff, 0x70}, {@broadcast, 0x4e20, 0x10003, 0x510b, 0x0, 0xfffffffffffffe01}}, 0x44) write$P9_RSTATFS(r1, &(0x7f0000000500)={0x43, 0x9, 0x2, {0x0, 0x3, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x100, 0x8}}, 0x43) unlinkat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000640)={@in={{0x2, 0x4e23, @dev}}, 0xfffffffffffffffe, 0x1, 0x100000001, "9dc817b5751ac3470f0b50fa1944849c9741880043f0f5ac7889b9806ee90a590d1f2957e8a985375231b18f255e3229458f40ce95239a9df3a0c76712aa018f234d80c995cb8306e4009202c35eb30e"}, 0xd8) open$dir(&(0x7f0000000380)='./file0\x00', 0x101400, 0x0) 18:27:06 executing program 3: clone(0xfffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) exit_group(0x0) unshare(0x400) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000040)) 18:27:06 executing program 1: socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x8860000, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'veth1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="00ff25bd7000fcdbdf250f"], 0x1}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[]}}, 0x4011) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000140)) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000007c0)={'filter\x00'}, &(0x7f0000000840)=0x50) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2000000002007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000680)=0x50) setxattr(&(0x7f0000000900)='./bus\x00', &(0x7f00000008c0)=@known='security.apparmor\x00', &(0x7f0000000880)='filter\x00', 0x7, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000600), 0xffffffffffffffff) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000700)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$setflags(r2, 0x2, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000640)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 18:27:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) syncfs(r0) 18:27:06 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140), 0x4) 18:27:06 executing program 3: clone(0xfffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) exit_group(0x0) unshare(0x400) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000040)) 18:27:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x806, 0x0) r1 = dup(r0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9, 0x0, 0x0, 0x2, 0xffffffffffff0001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9c6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2315, 0x100000001, 0x0, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000, 0x40, 0x6], [0x0, 0xe15c, 0x40, 0xf5, 0x2, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x5, 0x8, 0xc0, 0x0, 0x7, 0x0, 0x5, 0x6, 0x557, 0x0, 0x4, 0x0, 0x0, 0xf7, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x81, 0x0, 0x0, 0xe68c, 0x0, 0x0, 0xfffffffffffffe01, 0x0, 0x7ff, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x81, 0x2, 0x0, 0x0, 0x200, 0xfb1, 0x8, 0x0, 0x7, 0xb6fb, 0x0, 0x2, 0x0, 0x0, 0xd5, 0x973], [0x401, 0x0, 0x0, 0x0, 0x8000, 0x23, 0x2b0, 0x9, 0x7, 0xc4, 0x0, 0x1ff, 0x0, 0x7, 0x1f, 0x0, 0x0, 0x2, 0x2, 0x0, 0x9, 0x40, 0x1000, 0x0, 0xfff, 0x400, 0x2, 0x0, 0x0, 0x3, 0x7, 0xbece, 0x4, 0x0, 0x11c591bb, 0x127, 0x6, 0x2, 0x0, 0x0, 0x3f, 0x9, 0x0, 0xaa, 0x3ff, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xbb, 0x7fff, 0x0, 0x6, 0x70ca45c0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3000000000000000000000000000000400"}) ioctl$UI_DEV_DESTROY(r1, 0x5502) 18:27:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f0000000600)='./file0\x00', 0x40, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000100)) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = open(&(0x7f0000000180)='./file0\x00', 0x8000000000141042, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r1, 0x0, 0x6, &(0x7f0000000080)='ramfs\x00', 0xffffffffffffffff}, 0x30) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000480)={{0x9d, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e24, 0x1, 'sed\x00', 0x0, 0xffff, 0x70}, {@broadcast, 0x4e20, 0x10003, 0x510b, 0x0, 0xfffffffffffffe01}}, 0x44) write$P9_RSTATFS(r1, &(0x7f0000000500)={0x43, 0x9, 0x2, {0x0, 0x3, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x100, 0x8}}, 0x43) unlinkat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000640)={@in={{0x2, 0x4e23, @dev}}, 0xfffffffffffffffe, 0x1, 0x100000001, "9dc817b5751ac3470f0b50fa1944849c9741880043f0f5ac7889b9806ee90a590d1f2957e8a985375231b18f255e3229458f40ce95239a9df3a0c76712aa018f234d80c995cb8306e4009202c35eb30e"}, 0xd8) open$dir(&(0x7f0000000380)='./file0\x00', 0x101400, 0x0) [ 408.786554] input: syz0 as /devices/virtual/input/input14 18:27:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080), &(0x7f0000000100), 0x8) [ 408.871781] input: syz0 as /devices/virtual/input/input15 18:27:07 executing program 1: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socket(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) socket$nl_generic(0xa, 0x3, 0x10) 18:27:07 executing program 5: 18:27:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 18:27:07 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x1800000000000000, 0x2c, 0x29, &(0x7f0000000440)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1700040000d84648a2ac141412", &(0x7f0000000400)=""/41, 0x100}, 0x28) 18:27:07 executing program 3: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000500)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000002640)=[{0x60, 0xff, 0xff, "843f8a9c5537748907f11f7653588e5ba22beeeeb5978371fbf65fed08c2674b58626eb226032e29ca77e9f16b5ab4b49f27c5722f76d247532b387b7ec464e20453764699dac6b904150c1dd34b"}], 0x60, 0x4000}, 0x8000) 18:27:07 executing program 0: 18:27:07 executing program 2: 18:27:07 executing program 5: 18:27:07 executing program 4: 18:27:08 executing program 3: 18:27:08 executing program 1: 18:27:08 executing program 0: 18:27:08 executing program 5: 18:27:08 executing program 2: 18:27:08 executing program 3: 18:27:08 executing program 0: 18:27:08 executing program 4: 18:27:08 executing program 5: 18:27:08 executing program 1: 18:27:08 executing program 3: 18:27:08 executing program 2: 18:27:08 executing program 4: 18:27:08 executing program 0: 18:27:08 executing program 3: 18:27:09 executing program 5: 18:27:09 executing program 1: 18:27:09 executing program 0: 18:27:09 executing program 4: 18:27:09 executing program 2: 18:27:09 executing program 5: 18:27:09 executing program 3: 18:27:09 executing program 1: 18:27:09 executing program 0: 18:27:09 executing program 4: 18:27:09 executing program 2: 18:27:09 executing program 3: 18:27:09 executing program 5: 18:27:10 executing program 4: 18:27:10 executing program 0: 18:27:10 executing program 1: 18:27:10 executing program 2: 18:27:10 executing program 3: 18:27:10 executing program 4: 18:27:10 executing program 5: 18:27:10 executing program 2: 18:27:10 executing program 0: 18:27:10 executing program 3: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000006b00)={@rand_addr, @loopback}, 0x3) 18:27:10 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x10001) 18:27:10 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x2, &(0x7f0000000040)=@raw=[@generic={0x9}], &(0x7f0000000100)='syzkaller\x00', 0x5, 0xe0, &(0x7f0000000140)=""/224}, 0x48) 18:27:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) shutdown(r0, 0x1) 18:27:10 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002680)={0x2, 0xa, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x17}]}, 0x18}}, 0x0) 18:27:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x4000000043) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000004c0), &(0x7f0000000500)=0x4) bind$pptp(r1, &(0x7f0000000540)={0x18, 0x2, {0x2}}, 0x1e) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) r3 = accept4(r0, 0x0, &(0x7f0000da8ffc)=0xffffffffffffff52, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 18:27:11 executing program 3: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000100)) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) r0 = open(&(0x7f0000000180)='./file0\x00', 0x8000000000141042, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000500)={0x43}, 0x43) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 18:27:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$netlink(r0, &(0x7f0000000a00)={&(0x7f0000000680), 0xc, &(0x7f0000000980)=[{&(0x7f00000006c0)={0x10}, 0x10}], 0x1, &(0x7f00000009c0)}, 0x0) 18:27:11 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f00000001c0), 0x8) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 18:27:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), &(0x7f0000000300)) 18:27:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x20040000, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000440), 0xffffffffffffff13, 0x20000004, &(0x7f000031e000), 0x1c) 18:27:11 executing program 1: pipe(&(0x7f0000001600)) 18:27:11 executing program 3: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000100)) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) r0 = open(&(0x7f0000000180)='./file0\x00', 0x8000000000141042, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000500)={0x43}, 0x43) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 18:27:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000003c0)=0xff) 18:27:11 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) fchdir(r0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) pipe(&(0x7f0000000080)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000000c0)) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xff60}, 0xfecb) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) poll(&(0x7f0000000040)=[{}, {}], 0x2, 0x0) fdatasync(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) fsetxattr$security_smack_transmute(r4, &(0x7f0000000380)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x400000000002) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0xfffffffffffffffe, @local}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) 18:27:12 executing program 2: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280)) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000500)=0x80) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3a100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) add_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000003c0), 0x0, 0xfffffffffffffffa) add_key(&(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000000400)={'syz'}, 0x0, 0xff2c, 0xfffffffffffffffe) readahead(r0, 0x0, 0x1) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000180)=0x78) r2 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) syncfs(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000335ff8), 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x800000000000000) 18:27:12 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x2040, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x20080003) statfs(&(0x7f0000000080)='./bus\x00', &(0x7f0000001000)=""/4096) 18:27:12 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000400)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xff60}, 0xfecb) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0xfffffffffffffffe, @local}, 0x10) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000300)={0x6, 0xffffffff}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000440)=""/91, 0x5b, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) 18:27:12 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f00000001c0), 0x8) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 18:27:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3b) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:27:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000140), &(0x7f0000000180)=0x4) 18:27:12 executing program 2: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280)) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000500)=0x80) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3a100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) add_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000003c0), 0x0, 0xfffffffffffffffa) add_key(&(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000000400)={'syz'}, 0x0, 0xff2c, 0xfffffffffffffffe) readahead(r0, 0x0, 0x1) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000180)=0x78) r2 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) syncfs(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000335ff8), 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x800000000000000) 18:27:12 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000180)=0x78) 18:27:12 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 18:27:13 executing program 2: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = eventfd2(0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) fcntl$setownex(r0, 0xf, &(0x7f0000000480)={0x1}) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') 18:27:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x8000000000141042, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r0, 0x0, 0x6, &(0x7f0000000080)='ramfs\x00', 0xffffffffffffffff}, 0x30) write$P9_RSTATFS(r0, &(0x7f0000000500)={0x43, 0x9, 0x0, {0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100, 0x8}}, 0x43) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 18:27:13 executing program 1: 18:27:13 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 18:27:13 executing program 4: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) getsockname$packet(0xffffffffffffffff, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f80)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000045c0)=[{{&(0x7f0000004380)=@xdp={0x2c, 0x0, 0x0, 0x2e}, 0x80, &(0x7f0000004580), 0x0, 0x0, 0x0, 0x40}, 0x4}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000580), 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x801, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180), 0x0, 0xfffffffffffffffb) ioctl$LOOP_CLR_FD(r0, 0x4c01) socket(0x0, 0x0, 0x10001) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) socket$nl_generic(0xa, 0x3, 0x10) 18:27:14 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000400)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xff60}, 0xfecb) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0xfffffffffffffffe, @local}, 0x10) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000300)={0x6, 0xffffffff}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000440)=""/91, 0x5b, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) 18:27:14 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000000040), 0x0, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000100), 0xfffffffffffffffa, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0xab11, 0x0) 18:27:14 executing program 5: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x8001}}], 0x0, 0x0, &(0x7f0000000280)}) 18:27:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x59d, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 416.165107] binder: 12528:12530 got transaction to invalid handle [ 416.171663] binder: 12528:12530 transaction failed 29201/-22, size 0-0 line 2855 [ 416.219655] binder: 12528:12533 got transaction to invalid handle [ 416.226461] binder: 12528:12533 transaction failed 29201/-22, size 0-0 line 2855 18:27:14 executing program 2: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = eventfd2(0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) fcntl$setownex(r0, 0xf, &(0x7f0000000480)={0x1}) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') [ 416.281890] binder: undelivered TRANSACTION_ERROR: 29201 [ 416.287880] binder: undelivered TRANSACTION_ERROR: 29201 18:27:14 executing program 4: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000000c0)) timer_delete(0x0) 18:27:14 executing program 5: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000140)=[@exit_looper], 0x0, 0x0, &(0x7f0000000280)}) 18:27:14 executing program 2: pipe(&(0x7f0000000380)) 18:27:14 executing program 4: r0 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) 18:27:15 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0xcbd6) write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0xffffff17) fcntl$setstatus(r1, 0x4, 0x4000) io_setup(0x20000000000808, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 18:27:15 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0xcbd6) write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0xffffff17) fcntl$setstatus(r1, 0x4, 0x4000) io_setup(0x20000000000808, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x84) 18:27:15 executing program 4: recvfrom(0xffffffffffffffff, &(0x7f00000011c0)=""/4096, 0xffffffffffffffec, 0x0, &(0x7f0000001140)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0xfffffe6b) r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0xb979) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x38d) 18:27:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080), 0x4) 18:27:15 executing program 2: request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='GPL\x00', 0x0) 18:27:15 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:16 executing program 0: 18:27:16 executing program 4: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) bind(r0, &(0x7f0000006a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80) 18:27:16 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) 18:27:16 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 18:27:16 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newlink={0x34, 0x12, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) read(r0, &(0x7f0000000300)=""/222, 0x42737ed3) 18:27:16 executing program 3: 18:27:16 executing program 1: 18:27:16 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:16 executing program 2: 18:27:16 executing program 4: 18:27:16 executing program 0: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='tunl0\x00', 0x106) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000006b00)={@rand_addr, @loopback}, 0xc) 18:27:17 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:17 executing program 1: 18:27:17 executing program 3: 18:27:17 executing program 4: 18:27:17 executing program 0: 18:27:17 executing program 2: 18:27:17 executing program 1: 18:27:17 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00'}) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:17 executing program 4: 18:27:17 executing program 3: 18:27:17 executing program 0: 18:27:17 executing program 1: 18:27:17 executing program 4: 18:27:17 executing program 2: 18:27:17 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00'}) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:18 executing program 0: 18:27:18 executing program 4: 18:27:18 executing program 3: 18:27:18 executing program 1: 18:27:18 executing program 0: 18:27:18 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00'}) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:18 executing program 2: 18:27:18 executing program 3: 18:27:18 executing program 4: 18:27:18 executing program 0: 18:27:18 executing program 1: 18:27:18 executing program 2: 18:27:18 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:19 executing program 4: 18:27:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x200005) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) dup2(r1, r0) 18:27:19 executing program 1: clone(0x0, &(0x7f00000000c0), &(0x7f00000005c0), &(0x7f0000000100), &(0x7f0000000600)) membarrier(0x0, 0x0) 18:27:19 executing program 0: 18:27:19 executing program 3: 18:27:19 executing program 4: 18:27:19 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:19 executing program 0: 18:27:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="0800050000000000"], 0x1}}, 0x0) 18:27:19 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 18:27:19 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sysinfo(&(0x7f00000005c0)=""/208) 18:27:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000040000000001c0012000c000100626f6e6400f9ec686a4be31103cd442def19da0000000c000200080003b000000000"], 0x1}}, 0x0) 18:27:20 executing program 1: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) dup3(r0, 0xffffffffffffffff, 0x0) 18:27:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6d616e670000000000000000002dd3bf25000000000000ffff000000000000"], &(0x7f0000000240)=0x1) 18:27:20 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0)={0x1d, r0}, 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 18:27:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 18:27:20 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) 18:27:20 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0)={0x1d, r0}, 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000340)=""/39, 0x27, 0x0) 18:27:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) 18:27:21 executing program 0: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) syncfs(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000335ff8), 0x0) 18:27:21 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x3, 0x17e) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 18:27:21 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0)={0x1d, r0}, 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"6e72300100", 0x1102}) 18:27:21 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000580)}, 0x20008844) 18:27:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) 18:27:21 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) 18:27:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000010404000001007d60b7030000010000006a0a40fe00000000850000000d000000b4000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0xe8, &(0x7f00000005c0)="9294e17bbcd717975b722b01bf62", &(0x7f0000000740)=""/232, 0x200}, 0x28) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000), 0x4) 18:27:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x0, &(0x7f0000000100)=@abs, 0x930000) 18:27:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r1, &(0x7f0000000040), 0x20000102000007) 18:27:21 executing program 1: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0xb979) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0x2) 18:27:22 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:22 executing program 0: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="d3", 0x1, 0xfffffffffffffffc) 18:27:22 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}, 0x119) 18:27:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) [ 424.314819] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 18:27:22 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:22 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f0000000040)='ppp0{-\x00') [ 424.375493] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 18:27:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x10000000, 0x1100082) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xcfb06c17a1281df3, 0x0) memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x800000000016, 0x8, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4ff000000e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334000000000400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"}) 18:27:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) 18:27:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 424.869174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:27:23 executing program 4: setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000240), 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 18:27:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000001680)={&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000004c0)}, 0x0) 18:27:23 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:23 executing program 2: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000040)) 18:27:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:23 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000040)) [ 425.285393] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:27:23 executing program 3: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz'}, 0x0, 0x0, r0) 18:27:23 executing program 0: syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00') 18:27:23 executing program 4: syz_emit_ethernet(0x3a5, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x7ffff}}}}}}, 0x0) 18:27:23 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:23 executing program 3: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='tunl0\x00', 0x106) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) 18:27:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000000e80), 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x4b7) write$binfmt_elf64(r1, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0xb49) 18:27:23 executing program 0: syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00') 18:27:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000100)) 18:27:24 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:24 executing program 3: r0 = socket$kcm(0xa, 0x10000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, &(0x7f0000000d80), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000000000002900000002000000fe80000000000000000000"], 0x1b}, 0x0) 18:27:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:24 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00'}) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:24 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(r1) [ 426.507092] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:27:24 executing program 3: [ 426.663449] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:27:24 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00'}) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:25 executing program 2: 18:27:25 executing program 4: 18:27:25 executing program 3: 18:27:25 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00'}) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:25 executing program 4: 18:27:25 executing program 2: 18:27:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:25 executing program 3: 18:27:25 executing program 0: 18:27:25 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:25 executing program 4: [ 427.748593] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:27:25 executing program 2: 18:27:25 executing program 3: 18:27:25 executing program 0: 18:27:26 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:26 executing program 4: 18:27:26 executing program 0: 18:27:26 executing program 3: 18:27:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:26 executing program 2: 18:27:26 executing program 4: 18:27:26 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:26 executing program 0: 18:27:26 executing program 3: 18:27:26 executing program 0: [ 428.866576] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:27:27 executing program 4: 18:27:27 executing program 2: 18:27:27 executing program 3: 18:27:27 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:27 executing program 3: 18:27:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:27 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) recvfrom(0xffffffffffffffff, &(0x7f00000011c0)=""/4096, 0xffffffffffffffec, 0x0, &(0x7f0000001140)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0xfffffe6b) r3 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r3, 0xb979) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', r6}) write(r5, &(0x7f00000001c0), 0xfffffef3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') geteuid() sendfile(r7, r8, &(0x7f0000000000), 0x246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = socket$inet6(0xa, 0x2, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f00000000c0)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000001480)={0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7fffffff}}, 0x20) ioctl$PIO_CMAP(r8, 0x4b71, &(0x7f0000000400)={0x100000000, 0x9, 0x7, 0x4, 0xe72}) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$TUNSETLINK(r10, 0x400454cd, 0x0) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet6_opts(r10, 0x29, 0x3f, &(0x7f0000000540)=""/229, &(0x7f0000000640)=0xe5) preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000140)=""/173, 0xad}, {&(0x7f0000000080)=""/59, 0x3b}], 0x2, 0x60) 18:27:27 executing program 2: 18:27:27 executing program 4: 18:27:27 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:27 executing program 3: 18:27:27 executing program 2: [ 429.819304] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:27:27 executing program 3: 18:27:27 executing program 4: 18:27:28 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f7f7000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 18:27:28 executing program 4: 18:27:28 executing program 3: 18:27:28 executing program 5: 18:27:28 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) recvfrom(0xffffffffffffffff, &(0x7f00000011c0)=""/4096, 0xffffffffffffffec, 0x0, &(0x7f0000001140)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0xfffffe6b) r3 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r3, 0xb979) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', r6}) write(r5, &(0x7f00000001c0), 0xfffffef3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') geteuid() sendfile(r7, r8, &(0x7f0000000000), 0x246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = socket$inet6(0xa, 0x2, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f00000000c0)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000001480)={0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7fffffff}}, 0x20) ioctl$PIO_CMAP(r8, 0x4b71, &(0x7f0000000400)={0x100000000, 0x9, 0x7, 0x4, 0xe72}) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$TUNSETLINK(r10, 0x400454cd, 0x0) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet6_opts(r10, 0x29, 0x3f, &(0x7f0000000540)=""/229, &(0x7f0000000640)=0xe5) preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000140)=""/173, 0xad}, {&(0x7f0000000080)=""/59, 0x3b}], 0x2, 0x60) 18:27:28 executing program 2: 18:27:28 executing program 3: 18:27:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:28 executing program 4: 18:27:29 executing program 5: 18:27:29 executing program 4: 18:27:29 executing program 3: 18:27:29 executing program 5: 18:27:29 executing program 2: 18:27:29 executing program 4: msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 18:27:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)) 18:27:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vlan0\x00@\b\x00', 0x2d803}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @local}}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000540)="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", 0xb89, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) 18:27:30 executing program 2: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=0x9, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f80)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000045c0)=[{{&(0x7f0000004380)=@xdp={0x2c, 0x2, r0, 0x2e}, 0x80, &(0x7f0000004580)=[{&(0x7f00000044c0)="60c8d98254bcb412400d68ad851088380166889630719ee1f5ba8f73fa7e128d85545215142a736d2f7410d223ca91df1df7e6629eb85f29e6fb54a2f7b0e8855b256ba541ce24e3db11b256225c404d8ff0a364a3cbdb95b6a3bf9b5862adca4c32d8f29c145df1684c04bff0df2ee71010b595cd5d725ab33fe27a8161", 0x7e}], 0x1, 0x0, 0x0, 0x40}, 0x4}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000680)='reno\x00', 0x5) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$update(0x2, r3, &(0x7f0000000580)="8adb07b2c2017f9577a86ba3a7a68677dc3f2b0fbd3a6ba6f892e604d80e66bcee3b0fa0ce290f394eafc38e217f0784540bea2ffce9a854b76f1f04de9ccc4f4cc665bb2a931cc81a4dca909128519bf5e266f9cc58ba739de367cd10c1d81e8bdc487c38eed3d3297beac35fbc1a1c6f87c3ac53ace1d9767e16342463ffcaa21fd7c2641999", 0x87) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x801, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180), 0x0, 0xfffffffffffffffb) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket(0x0, 0x0, 0x10001) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 18:27:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000000c0)) 18:27:30 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00') close(r0) 18:27:30 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x20000102000007) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r1, r0, 0x0) 18:27:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7ff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) listen(r0, 0x0) 18:27:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./file1\x00', 0x3) io_setup(0x1fe2, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200), 0xfffffd07}]) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)}]) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x1, 0x0) [ 432.514224] print_req_error: 250 callbacks suppressed [ 432.514253] print_req_error: I/O error, dev loop3, sector 0 [ 432.525771] buffer_io_error: 250 callbacks suppressed [ 432.525798] Buffer I/O error on dev loop3, logical block 0, lost async page write [ 432.539010] print_req_error: I/O error, dev loop3, sector 8 [ 432.544965] Buffer I/O error on dev loop3, logical block 1, lost async page write [ 432.552855] print_req_error: I/O error, dev loop3, sector 16 [ 432.558850] Buffer I/O error on dev loop3, logical block 2, lost async page write [ 432.566800] print_req_error: I/O error, dev loop3, sector 24 [ 432.572795] Buffer I/O error on dev loop3, logical block 3, lost async page write [ 432.580620] print_req_error: I/O error, dev loop3, sector 32 [ 432.586692] Buffer I/O error on dev loop3, logical block 4, lost async page write [ 432.594662] print_req_error: I/O error, dev loop3, sector 40 [ 432.600601] Buffer I/O error on dev loop3, logical block 5, lost async page write [ 432.608567] print_req_error: I/O error, dev loop3, sector 48 18:27:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 432.614703] Buffer I/O error on dev loop3, logical block 6, lost async page write [ 432.622758] print_req_error: I/O error, dev loop3, sector 56 [ 432.628706] Buffer I/O error on dev loop3, logical block 7, lost async page write [ 432.636744] print_req_error: I/O error, dev loop3, sector 64 [ 432.642780] Buffer I/O error on dev loop3, logical block 8, lost async page write [ 432.650600] print_req_error: I/O error, dev loop3, sector 72 [ 432.656836] Buffer I/O error on dev loop3, logical block 9, lost async page write 18:27:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000), 0x4) 18:27:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vlan0\x00@\b\x00', 0x2d803}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @local}}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000540)="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", 0xb89, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) 18:27:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140), 0x3) 18:27:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x0) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r2, 0x2aa, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x2b283714574a214d}]) 18:27:31 executing program 2: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=0x9, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f80)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000045c0)=[{{&(0x7f0000004380)=@xdp={0x2c, 0x2, r0, 0x2e}, 0x80, &(0x7f0000004580)=[{&(0x7f00000044c0)="60c8d98254bcb412400d68ad851088380166889630719ee1f5ba8f73fa7e128d85545215142a736d2f7410d223ca91df1df7e6629eb85f29e6fb54a2f7b0e8855b256ba541ce24e3db11b256225c404d8ff0a364a3cbdb95b6a3bf9b5862adca4c32d8f29c145df1684c04bff0df2ee71010b595cd5d725ab33fe27a8161", 0x7e}], 0x1, 0x0, 0x0, 0x40}, 0x4}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000680)='reno\x00', 0x5) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$update(0x2, r3, &(0x7f0000000580)="8adb07b2c2017f9577a86ba3a7a68677dc3f2b0fbd3a6ba6f892e604d80e66bcee3b0fa0ce290f394eafc38e217f0784540bea2ffce9a854b76f1f04de9ccc4f4cc665bb2a931cc81a4dca909128519bf5e266f9cc58ba739de367cd10c1d81e8bdc487c38eed3d3297beac35fbc1a1c6f87c3ac53ace1d9767e16342463ffcaa21fd7c2641999", 0x87) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x801, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180), 0x0, 0xfffffffffffffffb) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket(0x0, 0x0, 0x10001) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 18:27:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x389756b1353686c0, 0x120, 0x0, 0xffffffffffffffeb) 18:27:31 executing program 5: syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000028001a000000849078ac141400ac1423bb0e00907800000000000000000000000000000000"], &(0x7f0000000100)) 18:27:31 executing program 0: add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) 18:27:31 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x8860000, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000400)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000005c0)={'veth1\x00', 0x200000005002}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) accept4$unix(r3, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="00ff25bd7000fcdbdf250f"], 0x1}}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[]}}, 0x4011) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000007c0)={'filter\x00'}, &(0x7f0000000840)=0x50) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2000000002007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000680)=0x50) setxattr(&(0x7f0000000900)='./bus\x00', &(0x7f00000008c0)=@known='security.apparmor\x00', &(0x7f0000000880)='filter\x00', 0x7, 0x2) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000600), 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000640)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={r8}) ioctl$ASHMEM_PURGE_ALL_CACHES(r6, 0x770a, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 18:27:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) 18:27:31 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x406, r1) clone(0x8860000, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000005c0)={'veth1\x00', 0x200000005002}) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[]}}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[]}}, 0x4011) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000007c0)={'filter\x00'}, &(0x7f0000000840)=0x50) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2000000002007fff) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000680)=0x50) setxattr(&(0x7f0000000900)='./bus\x00', &(0x7f00000008c0)=@known='security.apparmor\x00', &(0x7f0000000880)='filter\x00', 0x7, 0x2) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000600), 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000640)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={r6}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 18:27:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000600)=0x3) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(0xffffffffffffffff, &(0x7f00000001c0)=""/39, 0x27, 0x0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0x0, 0xd4b6}, &(0x7f0000000580)=0xc) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x4557434d) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) sendfile(r0, r2, &(0x7f0000000100), 0x20000000009) sendmsg$FOU_CMD_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[]}, 0x1, 0xffffff7f00000000}, 0x0) 18:27:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") write(0xffffffffffffffff, &(0x7f00000050c0), 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000000e80), 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x31a) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x4b7) write$binfmt_elf64(r1, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0xb49) 18:27:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:32 executing program 2: socket$netlink(0x10, 0x3, 0x5) 18:27:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301a0ffffff00"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:27:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000001680)={&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000004c0)=[{0x10}], 0x10}, 0x40) 18:27:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:33 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x5, &(0x7f0000002340), 0x4) 18:27:33 executing program 2: 18:27:33 executing program 4: 18:27:33 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) fcntl$dupfd(r1, 0x406, r1) clone(0x8860000, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000005c0)={'veth1\x00', 0x200000005002}) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[]}}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[]}}, 0x4011) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000007c0)={'filter\x00'}, &(0x7f0000000840)=0x50) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2000000002007fff) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000680)=0x50) setxattr(&(0x7f0000000900)='./bus\x00', &(0x7f00000008c0)=@known='security.apparmor\x00', &(0x7f0000000880)='filter\x00', 0x7, 0x2) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000600), 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000640)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={r6}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 18:27:33 executing program 2: 18:27:33 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x5, &(0x7f0000002340), 0x4) 18:27:33 executing program 5: 18:27:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:33 executing program 4: 18:27:33 executing program 4: 18:27:34 executing program 3: 18:27:34 executing program 2: 18:27:34 executing program 5: 18:27:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:34 executing program 3: 18:27:34 executing program 0: 18:27:34 executing program 2: 18:27:34 executing program 4: 18:27:34 executing program 5: 18:27:34 executing program 3: 18:27:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:35 executing program 5: 18:27:35 executing program 2: 18:27:35 executing program 0: 18:27:35 executing program 4: 18:27:35 executing program 3: 18:27:35 executing program 0: 18:27:35 executing program 4: 18:27:35 executing program 2: 18:27:35 executing program 5: 18:27:35 executing program 2: 18:27:35 executing program 3: 18:27:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:35 executing program 0: 18:27:35 executing program 5: 18:27:36 executing program 4: 18:27:36 executing program 0: 18:27:36 executing program 3: 18:27:36 executing program 2: 18:27:36 executing program 5: 18:27:36 executing program 4: 18:27:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:36 executing program 3: 18:27:36 executing program 2: 18:27:36 executing program 0: 18:27:36 executing program 5: 18:27:36 executing program 4: 18:27:36 executing program 0: 18:27:36 executing program 2: 18:27:37 executing program 3: 18:27:37 executing program 4: 18:27:37 executing program 5: 18:27:37 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:37 executing program 0: 18:27:37 executing program 2: 18:27:37 executing program 5: 18:27:37 executing program 0: 18:27:37 executing program 4: 18:27:37 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback}, &(0x7f0000000100)=0x20) 18:27:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:27:37 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1) write$P9_RATTACH(r1, &(0x7f0000000040)={0x14}, 0x14) 18:27:37 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0), &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) [ 439.916215] binder: 13316:13317 transaction failed 29189/-22, size 0-0 line 2855 18:27:38 executing program 4: epoll_create1(0x80000) epoll_create1(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) stat(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x110, 0xffffffffffffffff, 0x0) pwritev(r3, &(0x7f0000000480), 0x0, 0x81806) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x82d, 0x6e371b8c}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) unlinkat(r3, &(0x7f00000003c0)='./file0\x00', 0x200) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@loopback, 0x62, r5}) keyctl$unlink(0x9, r4, r4) sendfile(r1, r2, &(0x7f0000000300), 0x2000006) r6 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz'}, 0x0, 0x0, r6) 18:27:38 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:38 executing program 5: epoll_create1(0x80000) epoll_create1(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) stat(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)) fcntl$setstatus(r0, 0x4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r3 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x110, 0xffffffffffffffff, 0x0) pwritev(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)="2bd83b0010947db9141978d2d9c93f59a4f3ec7e1e3f09811624c2f43040cc8b8d570728e9fafff91e41a78f52db481db6f8", 0x32}], 0x1, 0x81806) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x0, 0x82d, 0x6e371b8c}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) unlinkat(r3, &(0x7f00000003c0)='./file0\x00', 0x200) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@loopback, 0x62}) keyctl$unlink(0x9, r4, r4) sendfile(r1, r2, &(0x7f0000000300), 0x2000006) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 18:27:38 executing program 2: epoll_create1(0x80000) epoll_create1(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) stat(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)) fcntl$setstatus(r0, 0x4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r3 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x110, 0xffffffffffffffff, 0x0) pwritev(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)="2bd83b0010947db9141978d2d9c93f59a4f3ec7e1e3f09811624c2f43040cc8b8d570728e9fafff91e41a78f52db481db6f8", 0x32}], 0x1, 0x81806) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x0, 0x82d, 0x6e371b8c}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) unlinkat(r3, &(0x7f00000003c0)='./file0\x00', 0x200) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@loopback, 0x62}) keyctl$unlink(0x9, r4, r4) sendfile(r1, r2, &(0x7f0000000300), 0x2000006) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 18:27:38 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc), 0x4) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, &(0x7f0000000540)={&(0x7f00000008c0)={0x14}, 0x14}}, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) 18:27:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000200)) [ 440.307446] binder: undelivered TRANSACTION_ERROR: 29189 18:27:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) 18:27:38 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='trustedselinuxnodev)') 18:27:38 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:38 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4000) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r2, 0x2aa, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x2b283714574a214d}]) 18:27:39 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$unix(r1, &(0x7f0000000240)=@file={0x1, './bus\x00'}, 0x6e) 18:27:39 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt(r0, 0xea8, 0x7fffffff, &(0x7f0000000780)="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", 0x1000) clone(0x2102009ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) socketpair$inet6(0xa, 0xb, 0x4, &(0x7f0000000000)) mlockall(0x7) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000000180)=""/35, 0x23}], 0x3) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) keyctl$set_reqkey_keyring(0xe, 0x2) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000100)) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000640)="d13ff3d776dcf205111c8742bdebc93c67724ddd29a2e23c1b412f08d6ec0ac252039241001c6590a442afb4d0d208bd842ed2327e3c0154e456c5fe898353366185b15a658e8602477f4d46ed4bee4e74c5012f07311c647f6da66e4653241d096ea4039f250580bb4ccb50196999fa010000000100000020a2ddbe5bb9488dc326a90e45e49fb4f9bcf2dd971d6cb8bd6d4901f0cd25c790f30c49729152ba98d898fd34120210a1971d1d9933ea1eb82dcdb12842f94087ff0b03c16dc39ffccfd3eef2e0c799dc5ad454bfc68c4b4f42b4adc1cff12faf521f5cf97eb1046b610780888b448077851fb7e7eeef153a4357a496186560a72867c3d2e711c9f3690be08dd011f65b6a5f80c8e06026b5e9e465e3a5629ac0a34ec0c297b1588d674f7cce", 0x0) 18:27:39 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) setsockopt(r0, 0xea8, 0x7fffffff, &(0x7f0000000780)="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", 0x800) clone(0x2102009ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) socketpair$inet6(0xa, 0xb, 0x4, &(0x7f0000000000)) mlockall(0x7) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x2) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000100)) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000640)="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", 0x0) 18:27:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r0, &(0x7f0000000200), 0xff11) close(r0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000540)}, 0x0) sendmsg(r2, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1, &(0x7f0000000580)}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e0"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000440)) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x18000000000002a0, 0x34, 0x29, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", &(0x7f00000000c0)=""/41, 0x100}, 0x28) socketpair(0x7, 0x0, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x0, &(0x7f00000006c0)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'eql\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="b702000000001f00bfa30000000000000703000000feffff7a0af0fff8ffefff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000f2000000b7050000230000006a0a00fe"], &(0x7f0000000340)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed0, 0x4, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0x6}, 0x0, 0x0, r4, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20d) openat$cgroup_ro(r6, &(0x7f0000000480)='cpu.stat\x00', 0x0, 0x0) recvmsg$kcm(r5, &(0x7f00000005c0)={&(0x7f0000000600)=@hci, 0xfffffffffffffec1, &(0x7f00000039c0), 0x21d, &(0x7f0000000880)=""/4096, 0x1000, 0x6}, 0x20) 18:27:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:27:39 executing program 5: setresuid(0x0, 0x0, 0x0) 18:27:39 executing program 0: timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x8, @tid=0xffffffffffffffff}, &(0x7f0000000080)) 18:27:39 executing program 3: request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0) 18:27:40 executing program 5: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) recvfrom(0xffffffffffffffff, &(0x7f00000011c0)=""/4096, 0xffffffffffffffec, 0x0, &(0x7f0000001140)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0xfffffe6b) r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0xb979) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x38d) keyctl$join(0x1, &(0x7f0000000040)={'syz'}) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) getpgrp(0x0) ioprio_set$pid(0x0, 0x0, 0x0) 18:27:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:40 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) recvfrom(0xffffffffffffffff, &(0x7f00000011c0)=""/4096, 0xffffffffffffffec, 0x0, &(0x7f0000001140)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0xfffffe6b) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0xb979) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r2, r1, &(0x7f0000335ff8), 0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x38d) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x2a) 18:27:40 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000000280)={0x6}, 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x2d) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:27:40 executing program 3: request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0) 18:27:40 executing program 5: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) recvfrom(0xffffffffffffffff, &(0x7f00000011c0)=""/4096, 0xffffffffffffffec, 0x0, &(0x7f0000001140)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0xfffffe6b) r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0xb979) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x38d) keyctl$join(0x1, &(0x7f0000000040)={'syz'}) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) getpgrp(0x0) ioprio_set$pid(0x0, 0x0, 0x0) 18:27:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r0, &(0x7f0000000200), 0xff11) close(r0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000540)}, 0x0) sendmsg(r2, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1, &(0x7f0000000580)}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e0"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000440)) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x18000000000002a0, 0x34, 0x29, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", &(0x7f00000000c0)=""/41, 0x100}, 0x28) socketpair(0x7, 0x0, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x0, &(0x7f00000006c0)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'eql\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="b702000000001f00bfa30000000000000703000000feffff7a0af0fff8ffefff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000f2000000b7050000230000006a0a00fe"], &(0x7f0000000340)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed0, 0x4, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0x6}, 0x0, 0x0, r4, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20d) openat$cgroup_ro(r6, &(0x7f0000000480)='cpu.stat\x00', 0x0, 0x0) recvmsg$kcm(r5, &(0x7f00000005c0)={&(0x7f0000000600)=@hci, 0xfffffffffffffec1, &(0x7f00000039c0), 0x21d, &(0x7f0000000880)=""/4096, 0x1000, 0x6}, 0x20) 18:27:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:41 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') 18:27:41 executing program 3: request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0) 18:27:41 executing program 4: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) recvfrom(0xffffffffffffffff, &(0x7f00000011c0)=""/4096, 0xffffffffffffffec, 0x0, &(0x7f0000001140)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0xfffffe6b) r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0xb979) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x38d) keyctl$join(0x1, &(0x7f0000000040)={'syz'}) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) getpgrp(0x0) ioprio_set$pid(0x0, 0x0, 0x0) 18:27:41 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') 18:27:42 executing program 3: request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0) 18:27:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4), 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:42 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80000, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') 18:27:42 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x8860000, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000400)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000005c0)={'veth1\x00', 0x200000005002}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) accept4$unix(r4, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="00ff25bd7000fcdbdf250f"], 0x1}}, 0x800) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[]}}, 0x4011) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f00000007c0)={'filter\x00'}, &(0x7f0000000840)=0x50) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2000000002007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000680)=0x50) setxattr(&(0x7f0000000900)='./bus\x00', &(0x7f00000008c0)=@known='security.apparmor\x00', &(0x7f0000000880)='filter\x00', 0x7, 0x2) write(r8, &(0x7f00000001c0), 0xfffffef3) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000600), 0xffffffffffffffff) fcntl$setflags(r6, 0x2, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000000640)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={r9}) ioctl$ASHMEM_PURGE_ALL_CACHES(r7, 0x770a, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 18:27:42 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x8860000, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000400)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000005c0)={'veth1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) accept4$unix(r4, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="00ff25bd7000fcdbdf250f"], 0x1}}, 0x800) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[]}}, 0x4011) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f00000007c0)={'filter\x00'}, &(0x7f0000000840)=0x50) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2000000002007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000680)=0x50) setxattr(&(0x7f0000000900)='./bus\x00', &(0x7f00000008c0)=@known='security.apparmor\x00', &(0x7f0000000880)='filter\x00', 0x7, 0x2) write(r8, &(0x7f00000001c0), 0xfffffef3) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000600), 0xffffffffffffffff) fcntl$setflags(r6, 0x2, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000000640)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={r9}) ioctl$ASHMEM_PURGE_ALL_CACHES(r7, 0x770a, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 18:27:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/unix\x00') fcntl$setpipe(r0, 0x407, 0x0) 18:27:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r0, &(0x7f0000000200), 0xff11) close(r0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000540)}, 0x0) sendmsg(r2, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1, &(0x7f0000000580)}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e0"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000440)) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x18000000000002a0, 0x34, 0x29, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", &(0x7f00000000c0)=""/41, 0x100}, 0x28) socketpair(0x7, 0x0, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x0, &(0x7f00000006c0)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'eql\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="b702000000001f00bfa30000000000000703000000feffff7a0af0fff8ffefff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000f2000000b7050000230000006a0a00fe"], &(0x7f0000000340)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed0, 0x4, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0x6}, 0x0, 0x0, r4, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20d) openat$cgroup_ro(r6, &(0x7f0000000480)='cpu.stat\x00', 0x0, 0x0) recvmsg$kcm(r5, &(0x7f00000005c0)={&(0x7f0000000600)=@hci, 0xfffffffffffffec1, &(0x7f00000039c0), 0x21d, &(0x7f0000000880)=""/4096, 0x1000, 0x6}, 0x20) 18:27:42 executing program 5: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x2}, 0x28, 0x3) syslog(0xa, &(0x7f0000000000)=""/3, 0x3) 18:27:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4), 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0xaa3648ef98585225) 18:27:43 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000004c0)) r1 = syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000640)=0x8) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) futex(&(0x7f0000000740)=0x3, 0x0, 0x2, &(0x7f0000000680)={r2, r3+30000000}, &(0x7f0000000700)=0x2, 0x2) sched_rr_get_interval(r0, &(0x7f0000000040)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x48c000, 0x0) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000580)={'rose0\x00', 0x92}) syz_open_dev$mice(&(0x7f00000008c0)='/dev/input/mice\x00', 0x0, 0x200000040001) msgget$private(0x0, 0x8) 18:27:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getresuid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) 18:27:43 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000005c0)=""/223) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x8, 0x200d, 0xff}, 0x2c) read(r1, &(0x7f00000003c0)=""/243, 0xfffffffffffffe42) getrusage(0x0, &(0x7f0000000300)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/2}, 0x18) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) writev(r0, &(0x7f0000000280), 0x0) pipe(&(0x7f0000000000)) memfd_create(&(0x7f0000000240)='\x00', 0x6) r2 = add_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000540)="8aa69913f6ed5a0af48f0622ff637dd143d4cf28c2cc12c51ebb3b73d99798a88a38310289ae145c875c97a371eec26ddf2307884509dae0f54130f6e2bdf20267a4fdede7ac806980db91736735fb1b6dca02d39c28e816914ed70bfdf336f45d", 0x61, 0xfffffffffffffff8) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) truncate(&(0x7f0000000500)='./file0\x00', 0x1ff) 18:27:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$TIOCOUTQ(r0, 0x80045439, &(0x7f0000000040)) [ 445.377364] audit: type=1326 audit(1541960863.424:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13499 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:27:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r0, &(0x7f0000000200), 0xff11) close(r0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000540)}, 0x0) sendmsg(r2, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1, &(0x7f0000000580)}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e0"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000440)) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x18000000000002a0, 0x34, 0x29, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", &(0x7f00000000c0)=""/41, 0x100}, 0x28) socketpair(0x7, 0x0, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x0, &(0x7f00000006c0)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'eql\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="b702000000001f00bfa30000000000000703000000feffff7a0af0fff8ffefff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000f2000000b7050000230000006a0a00fe"], &(0x7f0000000340)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed0, 0x4, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0x6}, 0x0, 0x0, r4, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20d) openat$cgroup_ro(r6, &(0x7f0000000480)='cpu.stat\x00', 0x0, 0x0) recvmsg$kcm(r5, &(0x7f00000005c0)={&(0x7f0000000600)=@hci, 0xfffffffffffffec1, &(0x7f00000039c0), 0x21d, &(0x7f0000000880)=""/4096, 0x1000, 0x6}, 0x20) 18:27:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4), 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:43 executing program 0: 18:27:44 executing program 3: 18:27:44 executing program 0: [ 446.065112] audit: type=1326 audit(1541960864.114:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13499 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:27:44 executing program 2: 18:27:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:44 executing program 5: 18:27:44 executing program 0: 18:27:44 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000004c0)) r1 = syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000640)=0x8) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) futex(&(0x7f0000000740)=0x3, 0x0, 0x2, &(0x7f0000000680)={r2, r3+30000000}, &(0x7f0000000700)=0x2, 0x2) sched_rr_get_interval(r0, &(0x7f0000000040)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x48c000, 0x0) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000580)={'rose0\x00', 0x92}) syz_open_dev$mice(&(0x7f00000008c0)='/dev/input/mice\x00', 0x0, 0x200000040001) msgget$private(0x0, 0x8) 18:27:44 executing program 3: 18:27:44 executing program 2: 18:27:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:44 executing program 5: 18:27:44 executing program 2: 18:27:44 executing program 0: [ 446.924233] audit: type=1326 audit(1541960864.974:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13550 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:27:45 executing program 3: 18:27:45 executing program 5: 18:27:45 executing program 2: 18:27:45 executing program 0: 18:27:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:45 executing program 4: 18:27:45 executing program 2: 18:27:45 executing program 5: 18:27:45 executing program 3: 18:27:45 executing program 0: 18:27:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:46 executing program 4: 18:27:46 executing program 0: 18:27:46 executing program 3: 18:27:46 executing program 5: 18:27:46 executing program 2: 18:27:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:46 executing program 0: 18:27:46 executing program 3: 18:27:46 executing program 4: 18:27:46 executing program 5: 18:27:46 executing program 2: 18:27:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000268, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0/../file0\x00'}, 0x6e) 18:27:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000300), 0x2000006) 18:27:46 executing program 0: open(&(0x7f0000000100)='./bus\x00', 0x47f, 0x0) setxattr$security_capability(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v3, 0x18, 0x0) 18:27:47 executing program 4: syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) 18:27:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:47 executing program 2: epoll_create1(0x80000) epoll_create1(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) stat(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)) fcntl$setstatus(r0, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200) keyctl$unlink(0x9, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000300), 0x2000006) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz'}, 0x0, 0x0, r3) 18:27:47 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x1800000000000000, 0xe, 0x29, &(0x7f0000000440)="b90703e6681bfffffffe000000ea", &(0x7f00000000c0)=""/41, 0x3f}, 0x28) 18:27:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000001800)=[{&(0x7f0000000480)=""/67, 0x43}], 0x1, 0x0) 18:27:47 executing program 4: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000051000/0x600000)=nil, 0x600000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 18:27:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/128) 18:27:47 executing program 5: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x800094, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x8000000000141042, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000500)={0x43}, 0x43) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 18:27:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:47 executing program 4: io_setup(0xfeb, &(0x7f0000002680)=0x0) io_destroy(r0) 18:27:47 executing program 0: epoll_create1(0x80000) epoll_create1(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) stat(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)) fcntl$setstatus(r0, 0x4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r3 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x110, 0xffffffffffffffff, 0x0) pwritev(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)="2bd83b0010947db9141978d2d9c93f59a4f3ec7e1e3f09811624c2f43040cc8b8d570728e9fafff91e41a78f52db481db6f8", 0x32}], 0x1, 0x81806) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x0, 0x82d, 0x6e371b8c}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) unlinkat(r3, &(0x7f00000003c0)='./file0\x00', 0x200) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@loopback, 0x62, r5}) keyctl$unlink(0x9, r4, r4) sendfile(r1, r2, &(0x7f0000000300), 0x2000006) r6 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz'}, 0x0, 0x0, r6) 18:27:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x10001, 0x0, 0x0, "68c6244e9c5083334632ae970323fc7f3b86efc81bbe1d5b976663785b916936"}) [ 449.966864] audit: type=1804 audit(1541960868.014:38): pid=13649 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/newroot/320/file0/file0" dev="ramfs" ino=53386 res=1 18:27:48 executing program 3: fremovexattr(0xffffffffffffffff, &(0x7f0000000380)=@random={'system.', '-\\\x00'}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)="69703a0874ecff000009000100", 0xfffffffffffffd74) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x1b, 0x4) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=""/143, &(0x7f00000000c0)=0x428) sendto$inet6(r0, &(0x7f00000000c0), 0xfead, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x100000002, @mcast2}, 0x1c) [ 450.076490] audit: type=1804 audit(1541960868.044:39): pid=13649 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/newroot/320/file0/file0" dev="ramfs" ino=53386 res=1 18:27:48 executing program 5: epoll_create1(0x80000) epoll_create1(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) stat(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)) fcntl$setstatus(r0, 0x4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x110, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r3, r3) sendfile(r1, r2, &(0x7f0000000300), 0x2000006) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 18:27:48 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) 18:27:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000100)=""/231) 18:27:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000040)="d2af4ff30fb8c99ccd54347ea5a6772ec98ccc3b188c16481d54245c86088372eaf467e4e1f1cd389971da5ac724113eaf3080c98fe27de424d9cc045fabfd1c2a0f337b2fa482dd"}) 18:27:48 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x806, 0x0) dup(0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401], [], [0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3000000000000000000000000000000400"}) 18:27:48 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @rand_addr=0x9, 0x0, 0x0, 'lblcr\x00'}, 0x2c) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2) 18:27:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:49 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x806, 0x0) dup(0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01], [0x401, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2b0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3000000000000000000000000000000400"}) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 451.006833] input: syz0 as /devices/virtual/input/input16 18:27:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r0, &(0x7f0000000200), 0xff11) close(r0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000540)}, 0x0) sendmsg(r2, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1, &(0x7f0000000580)}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e0"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000440)) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x18000000000002a0, 0x34, 0x29, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", &(0x7f00000000c0)=""/41, 0x100}, 0x28) socketpair(0x7, 0x0, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x0, &(0x7f00000006c0)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'eql\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="b702000000001f00bfa30000000000000703000000feffff7a0af0fff8ffefff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000f2000000b7050000230000006a0a00fe"], &(0x7f0000000340)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed0, 0x4, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0x6}, 0x0, 0x0, r4, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20d) openat$cgroup_ro(r6, &(0x7f0000000480)='cpu.stat\x00', 0x0, 0x0) recvmsg$kcm(r5, &(0x7f00000005c0)={&(0x7f0000000600)=@hci, 0xfffffffffffffec1, &(0x7f00000039c0), 0x21d, &(0x7f0000000880)=""/4096, 0x1000, 0x6}, 0x20) [ 451.136631] input: syz0 as /devices/virtual/input/input17 18:27:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000), 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) fstatfs(r1, &(0x7f0000000180)=""/16) [ 451.270661] input: syz0 as /devices/virtual/input/input18 [ 451.363954] input: syz0 as /devices/virtual/input/input19 18:27:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 18:27:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000), 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x800) 18:27:50 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000240)=""/4096) 18:27:50 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000005c0), 0x24, 0x0) 18:27:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d02402b6285717070") fcntl$setflags(r0, 0x2, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x2}, 0x20) 18:27:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000), 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x18}}, &(0x7f0000000340)=""/147, 0x1a, 0x93, 0x1}, 0x20) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400000000000003, 0x0) 18:27:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) 18:27:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') readv(0xffffffffffffffff, &(0x7f0000002340), 0x0) readv(r0, &(0x7f0000000580), 0x3c1) 18:27:50 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r0, 0x0) 18:27:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/unix\x00') readv(r0, &(0x7f00000000c0)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x20000000000000b4) 18:27:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/unix\x00') readv(r0, &(0x7f00000000c0)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x20000000000000b4) readv(r0, &(0x7f0000000580), 0x3c1) creat(&(0x7f0000000000)='./bus\x00', 0x0) 18:27:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x0, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:51 executing program 4: r0 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r0, &(0x7f0000000200)='\x00', 0x1) fcntl$addseals(r0, 0x409, 0xd) 18:27:51 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r1, 0x400, 0x0) execveat(r1, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect(r3, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 18:27:51 executing program 0: 18:27:51 executing program 3: [ 453.364439] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:27:51 executing program 2: 18:27:51 executing program 0: 18:27:51 executing program 4: 18:27:51 executing program 5: 18:27:51 executing program 3: 18:27:51 executing program 2: 18:27:52 executing program 4: 18:27:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:52 executing program 0: 18:27:52 executing program 2: 18:27:52 executing program 4: 18:27:52 executing program 5: 18:27:52 executing program 3: 18:27:52 executing program 4: [ 454.481352] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:27:52 executing program 0: [ 454.585315] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 454.593036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 454.601684] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 454.610757] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 18:27:52 executing program 4: 18:27:52 executing program 5: 18:27:52 executing program 2: 18:27:52 executing program 3: 18:27:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:53 executing program 0: 18:27:53 executing program 5: 18:27:53 executing program 4: 18:27:53 executing program 2: 18:27:53 executing program 3: 18:27:53 executing program 0: 18:27:53 executing program 2: 18:27:53 executing program 4: [ 455.587989] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:27:53 executing program 3: 18:27:53 executing program 5: [ 455.795967] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 455.803687] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 455.812519] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 455.820025] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 18:27:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001480)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) 18:27:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="1cfffffffb000000020000000000000005"]) 18:27:54 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000040)=""/34, 0x22}, {&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000080)=""/6, 0x6}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000002300)=""/145, 0x91}], 0x7, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0xd5e333a58547eec3, 0x80020000001, &(0x7f0000b63fe4), 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r4, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mmap(&(0x7f0000f44000/0x4000)=nil, 0x507000, 0x1000007, 0x2013, r4, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000440)) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2a0727bd7000fddbdf25010000000000060002000000000000000800010000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044880) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000640)={'icmp\x00'}, &(0x7f0000000380)=0x1e) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x1ff) 18:27:54 executing program 3: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@mcast2}, 0x14) 18:27:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0x1, 0x4) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendmmsg$unix(r0, &(0x7f0000003e40)=[{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000440)="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", 0x241}], 0x1, &(0x7f00000003c0)}], 0x1, 0x4801) 18:27:54 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000ecffbfa30000000000000703000028feffff7a0af0fff8ffffff15a4f0ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 456.484041] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:27:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) [ 456.600129] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:27:54 executing program 4: ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000180)=""/4096) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x141042, 0x0) fallocate(r0, 0x1, 0x0, 0x8010000101) 18:27:54 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x900, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r3, &(0x7f0000000480), 0x1000000000000268, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendto$unix(r1, &(0x7f0000000600), 0x0, 0x0, &(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) [ 456.693954] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 456.701663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 456.711814] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 456.719405] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 18:27:54 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x1800000000000000, 0xe, 0x29, &(0x7f0000000440)="b90703e6681bfffffffe000000ea", &(0x7f0000000400)=""/41}, 0x28) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x10, &(0x7f00000002c0)={&(0x7f00000004c0)=""/183, 0xb7, 0xffffffffffffffff}}, 0x10) 18:27:55 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x1800000000000000, 0xe, 0x29, &(0x7f0000000440)="b90703e6681bfffffffe000000ea", &(0x7f0000000400)=""/41}, 0x28) 18:27:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/202) 18:27:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 18:27:55 executing program 5: munmap(&(0x7f000000f000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 18:27:55 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fsync(r1) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2) 18:27:55 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 18:27:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x1, 0x12d6769d388fc888) 18:27:55 executing program 2: socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000040)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x806, 0x0) r1 = dup(r0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda79], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x7, 0xbece, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70ca45c0]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3000000000000000000000000000000400"}) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 457.698518] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 457.755448] input: syz0 as /devices/virtual/input/input20 18:27:55 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x5}, &(0x7f0000000040)) 18:27:56 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect(r3, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 18:27:56 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:27:56 executing program 3: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x1f, r0, 0x0, 0x7) ptrace$cont(0x9, r0, 0x0, 0x0) [ 458.525726] input: syz0 as /devices/virtual/input/input21 18:27:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000000c0)) 18:27:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)}, 0x0) 18:27:56 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:27:56 executing program 5: munmap(&(0x7f000000f000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 18:27:56 executing program 2: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:27:56 executing program 3: execveat(0xffffffffffffffff, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43) [ 458.901430] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:27:57 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:27:57 executing program 2: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:27:57 executing program 0: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) socket$unix(0x1, 0x0, 0x0) 18:27:57 executing program 3: 18:27:57 executing program 2: 18:27:57 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:27:57 executing program 0: 18:27:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)}, 0x0) 18:27:57 executing program 5: 18:27:57 executing program 3: 18:27:57 executing program 2: 18:27:57 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) tkill(r1, 0x1000000000013) 18:27:57 executing program 0: 18:27:58 executing program 0: 18:27:58 executing program 3: 18:27:58 executing program 5: [ 460.085647] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:27:58 executing program 2: 18:27:58 executing program 3: 18:27:58 executing program 0: 18:27:58 executing program 5: 18:27:58 executing program 2: 18:27:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)}, 0x0) 18:27:58 executing program 3: 18:27:58 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:27:58 executing program 0: 18:27:59 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:27:59 executing program 2: 18:27:59 executing program 5: [ 461.133101] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:27:59 executing program 0: 18:27:59 executing program 3: 18:27:59 executing program 2: 18:27:59 executing program 5: 18:27:59 executing program 0: 18:27:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)}], 0x1}, 0x0) 18:27:59 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0xb0c, &(0x7f0000ffd000/0x3000)=nil) 18:27:59 executing program 2: openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) 18:27:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r2, &(0x7f0000000140), 0x20000102000007) 18:27:59 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000013) 18:27:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x41000000009) bind$netlink(r0, &(0x7f0000000100)={0x4400000010, 0x0, 0x0, 0x70a0}, 0xc) 18:28:00 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000013) [ 462.126282] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:00 executing program 3: clock_nanosleep(0x1000000000000002, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000080)) r0 = gettid() syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0x3) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x800040000000015) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/udp6\x00') socket$nl_route(0x10, 0x3, 0x0) tkill(r0, 0x1000000000016) ioctl$NBD_DISCONNECT(r1, 0xab08) 18:28:00 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x1bac}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) 18:28:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 18:28:00 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000013) 18:28:00 executing program 5: r0 = socket$inet6(0xa, 0x1200000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000100)=0x801, 0x2) pipe2(&(0x7f0000000200), 0x4800) syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000040)) socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x80000) r3 = gettid() truncate(&(0x7f00000002c0)='./file0\x00', 0x73513001) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x800) 18:28:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)}], 0x1}, 0x0) 18:28:01 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000030, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') preadv(r1, &(0x7f0000000480), 0x200000000000028a, 0x300000000000000) 18:28:01 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:01 executing program 2: truncate(&(0x7f00000002c0)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 18:28:01 executing program 3: clock_nanosleep(0x1000000000000002, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000080)) r0 = gettid() syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0x3) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x800040000000015) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/udp6\x00') socket$nl_route(0x10, 0x3, 0x0) tkill(r0, 0x1000000000016) ioctl$NBD_DISCONNECT(r1, 0xab08) [ 463.233902] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:01 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') setns(r1, 0x0) 18:28:01 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[{0x10}], 0x10, 0x20000000}, 0x800) 18:28:01 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:01 executing program 3: clock_nanosleep(0x1000000000000002, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000080)) r0 = gettid() syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0x3) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x800040000000015) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/udp6\x00') socket$nl_route(0x10, 0x3, 0x0) tkill(r0, 0x1000000000016) ioctl$NBD_DISCONNECT(r1, 0xab08) 18:28:01 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) recvfrom$unix(r1, &(0x7f0000000140)=""/99, 0x63, 0x0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x18) 18:28:01 executing program 2: truncate(&(0x7f00000002c0)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 18:28:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc4", 0x26}], 0x1}, 0x0) 18:28:02 executing program 0: syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') 18:28:02 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x800007) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fsync(r1) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000040)={0x0, @rand_addr=0x9, 0x4e21, 0x0, 'lblcr\x00', 0x20, 0xf80000000000000}, 0x2c) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2) 18:28:02 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:02 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:02 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:02 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x806, 0x0) r1 = dup(r0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x39, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2490c5a2, 0xffff, 0x401, 0x0, 0x0, 0x0, 0x80000001, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000000000], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x557, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3000000000000000000000000000000400"}) ioctl$UI_DEV_DESTROY(r1, 0x5502) 18:28:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000019c0)={0x0, &(0x7f0000001980)}, 0x8) [ 464.478657] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 464.616935] input: syz0 as /devices/virtual/input/input23 18:28:02 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0xff7b, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:28:02 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000040)="0e", 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @local}, 0x10) shutdown(r0, 0x1) 18:28:03 executing program 0: setgroups(0x0, &(0x7f00000004c0)) 18:28:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc4", 0x26}], 0x1}, 0x0) 18:28:03 executing program 2: r0 = socket(0x11, 0x80000000000000a, 0x0) sendmsg$netlink(r0, &(0x7f0000004c40)={&(0x7f0000000040)=@proc, 0xc, &(0x7f0000004b40), 0x0, &(0x7f0000004c00)}, 0x0) 18:28:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 18:28:03 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:03 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) shutdown(r0, 0x0) 18:28:03 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x2, 0x24011, r1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 465.719919] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:03 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) shutdown(r0, 0x0) 18:28:03 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:03 executing program 2: 18:28:04 executing program 0: 18:28:04 executing program 5: 18:28:04 executing program 3: 18:28:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc4", 0x26}], 0x1}, 0x0) 18:28:04 executing program 2: 18:28:04 executing program 0: 18:28:04 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:04 executing program 5: 18:28:04 executing program 3: [ 466.771822] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:04 executing program 0: 18:28:04 executing program 3: 18:28:04 executing program 5: 18:28:05 executing program 2: 18:28:05 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:05 executing program 0: 18:28:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c6", 0x39}], 0x1}, 0x0) 18:28:05 executing program 5: 18:28:05 executing program 3: 18:28:05 executing program 2: 18:28:05 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:05 executing program 0: 18:28:05 executing program 5: 18:28:05 executing program 2: 18:28:05 executing program 3: [ 467.861944] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:06 executing program 0: 18:28:06 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r0, 0x1000000000013) 18:28:06 executing program 2: 18:28:06 executing program 0: 18:28:06 executing program 5: 18:28:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c6", 0x39}], 0x1}, 0x0) 18:28:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000ecffbfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d400300000000006506000001ed00001c040000000000006c460000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:28:06 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000080)={0x0, {{0x2, 0x0, @remote}}}, 0x88) 18:28:06 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r0, 0x1000000000013) 18:28:06 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r0, 0x1000000000013) [ 468.775085] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000ecffbfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d400300000000006506000001ed00001c040000000000003f460000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:28:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000280)=""/81, 0x51, 0x0) 18:28:07 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000040)=""/34, 0x22}, {&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000080)=""/6, 0x6}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000140)=""/13, 0xd}], 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x507000, 0x1000007, 0x2013, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000440)) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2a0727bd7000fddbdf25010000000000060002000000000000000800010000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044880) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000640)={'icmp\x00'}, &(0x7f0000000380)=0x1e) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x1ff) 18:28:07 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000ecffbfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d400300000000006506000001ed00001c040000000000006c460000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:28:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac14140b}, @in={0x2, 0x4e23, @local={0xa}}]}, &(0x7f00000001c0)=0x10) 18:28:07 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x3ff}]}, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x300, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xffffffffffffffee, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000000000]}}, 0x1c) close(r0) 18:28:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c6", 0x39}], 0x1}, 0x0) 18:28:07 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:07 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$UHID_DESTROY(r1, &(0x7f0000000180), 0x4) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) 18:28:07 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'dummy0\x00', 0x5}, 0xfffffffffffffe7d) ioctl(r0, 0x100000008936, &(0x7f0000000000)) [ 469.913220] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$describe(0x6, 0x0, &(0x7f0000000200)=""/183, 0xb7) 18:28:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) accept(0xffffffffffffffff, &(0x7f0000000180)=@can, &(0x7f0000000000)=0x80) 18:28:08 executing program 5: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) 18:28:08 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000040)=""/34, 0x22}, {&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f0000000080)=""/6, 0x6}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000140)=""/13, 0xd}], 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x507000, 0x1000007, 0x2013, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000440)) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2a0727bd7000fddbdf25010000000000060002000000000000000800010000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044880) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000640)={'icmp\x00'}, &(0x7f0000000380)=0x1e) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x1ff) 18:28:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) getsockname(r0, &(0x7f0000000a00)=@can, &(0x7f0000000a80)=0x80) 18:28:08 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000140)) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000300)) 18:28:08 executing program 3: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000380)=""/40) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) close(0xffffffffffffffff) 18:28:08 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf3", 0x43}], 0x1}, 0x0) 18:28:08 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x20000300}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 18:28:09 executing program 5: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x10, &(0x7f0000000000)={&(0x7f0000000400)=""/4096, 0x1000, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001480), &(0x7f00000014c0)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000240)={0x10, 0x2b, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x10}, {&(0x7f0000000280)={0x10, 0x0, 0x210, 0x70bd28, 0x25dfdbff}, 0x10}, {&(0x7f0000001500)={0x1c, 0x1c, 0x121, 0x70bd2b, 0x25dfdbfc, "", [@nested={0xc, 0x10, [@typed={0x8, 0x0, @u32}]}]}, 0x1c}, {&(0x7f0000004140)={0x18, 0x16, 0x103, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x0, @ipv4}]}, 0x18}], 0x4, &(0x7f0000004480)=[@rights={0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r1, 0xffffffffffffffff, r1]}], 0x28}, 0x4000000) ftruncate(0xffffffffffffffff, 0x10840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000300)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000340)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) [ 471.150504] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:09 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x20000300}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 18:28:09 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioprio_get$uid(0x0, 0x0) 18:28:09 executing program 2: 18:28:09 executing program 0: 18:28:09 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:09 executing program 5: 18:28:10 executing program 0: 18:28:10 executing program 3: 18:28:10 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf3", 0x43}], 0x1}, 0x0) 18:28:10 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000240)=""/91) fcntl$setstatus(r2, 0x4, 0x10000043fc) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000380)) 18:28:10 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x80) fcntl$setstatus(r1, 0x4, 0x4400) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 18:28:10 executing program 0: [ 472.495974] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:10 executing program 0: 18:28:10 executing program 5: 18:28:10 executing program 2: 18:28:10 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:10 executing program 3: 18:28:11 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x0) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:11 executing program 0: 18:28:11 executing program 2: 18:28:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf3", 0x43}], 0x1}, 0x0) 18:28:11 executing program 5: 18:28:11 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x0) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:11 executing program 0: 18:28:11 executing program 3: 18:28:11 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x0) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) [ 473.671825] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:11 executing program 0: 18:28:11 executing program 5: 18:28:11 executing program 2: 18:28:12 executing program 3: 18:28:12 executing program 0: 18:28:12 executing program 2: 18:28:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc88", 0x48}], 0x1}, 0x0) 18:28:12 executing program 5: 18:28:12 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:12 executing program 3: 18:28:12 executing program 0: 18:28:12 executing program 2: 18:28:12 executing program 5: 18:28:12 executing program 3: [ 474.844356] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:13 executing program 0: 18:28:13 executing program 2: 18:28:13 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:13 executing program 5: 18:28:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc88", 0x48}], 0x1}, 0x0) 18:28:13 executing program 3: 18:28:13 executing program 0: 18:28:13 executing program 2: 18:28:13 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:13 executing program 5: 18:28:13 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x1800000000000000, 0x54, 0x29, &(0x7f0000000440)="b90703e6681b00000000000000ead5dc57ee41dea43e63a377fb8a977c3f1d1700040000d80648a2ac141411e0000001e1977d486a72d7363417ef6c909047dc183aea9747b34b3cbaa8ad830be27f3c1c54e771", &(0x7f0000000400)=""/41, 0x100}, 0x28) [ 475.763699] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x1800000000000000, 0x54, 0x29, &(0x7f0000000440)="b90703e6681b00000000000000ead5dc57ee41dea43e63a377fb8a977c3f1d1700040000d80648a2ac141411e0000001e1977d486a72d7363417ef6c909047dc183aea9747b34b3cbaa8ad830be27f3c1c54e771", &(0x7f0000000400)=""/41, 0x100}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x10, &(0x7f00000002c0)={&(0x7f00000004c0)=""/183, 0xb7, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000380)={&(0x7f0000000100)=""/75, 0x4b, r1}}, 0x10) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:28:13 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000280)='$!selfsystemvmnet1#ppp0md5sum\x00'}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) gettid() ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000003c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001400)={0xffffffffffffffff, &(0x7f0000000400)="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", &(0x7f00000002c0)="c74986d55e9c6453a9bbe5979c22da523b3dc3192378e16492fa16918fd54640a9231b5af522bd8bafaf46d0054693da66a3d1d7dc648cd0e97b74065eca9c41b2d804cffe0937e89e7192898ab456dc2de3cbe65dd5216f8f7dfe0e974cb9a642e0dcccac2ae33e6b0d22148241c3b0d77cf9031aa05d9b62b9412f114a54713a64a2917f3cce", 0x3}, 0x20) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000001600)) getpid() perf_event_open(&(0x7f0000001540)={0x0, 0x70, 0x0, 0x0, 0x8, 0x3, 0x0, 0x5, 0x200, 0xe, 0x0, 0x0, 0x1, 0xc60000000000, 0x33b, 0x0, 0x2000000, 0x0, 0x8, 0x0, 0x3, 0x1000, 0x3f, 0x0, 0x7, 0x0, 0x9, 0x9, 0x1, 0x3, 0x0, 0x1f, 0x2, 0x3, 0x0, 0x4, 0x100000001, 0x7, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001500)}, 0x40, 0x0, 0x0, 0xa, 0x3, 0x1, 0x6}, r0, 0xe, 0xffffffffffffff9c, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000017c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r2, 0x0, 0x37, 0x1, &(0x7f0000001680)="45ba7eba54486a1107b0e1110d505e0fb6b83a390a8ce16ddc58a4ebd0e34c95e4bbede84eddb95e958091a0d2b2c575fa58a7c87db47b", &(0x7f0000001700)=""/1, 0xfff}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2b) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000300)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x17, 0x0, 0x6, 0x0, 0x7, 0x2000, 0x2, 0x1, 0x0, 0x0, 0xff, 0x1, 0x0, 0x4300, 0x80, 0x0, 0x6, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10001, 0x0, 0x0, 0x0, 0x3711, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000040)}, 0x2901, 0x8, 0x5, 0x3}, 0x0, 0x0, r1, 0x1) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000001440)) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000100)) close(r3) 18:28:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d00000000005e510befccd7", 0x2e}], 0x1, &(0x7f0000000200)}, 0x0) 18:28:14 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3}, {0x16}]}) [ 476.168348] netlink: 'syz-executor5': attribute type 29 has an invalid length. [ 476.255349] netlink: 'syz-executor5': attribute type 29 has an invalid length. 18:28:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc88", 0x48}], 0x1}, 0x0) 18:28:14 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x11, 0x65, &(0x7f0000000000), 0x4) 18:28:14 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xffffffffffffffee, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000000000]}}, 0x1c) close(r0) 18:28:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) [ 476.740362] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000100)={'sit0\x00', @ifru_addrs=@in={0x2, 0x0, @rand_addr}}) 18:28:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="10000200000000002000060000000000"], 0x1, 0x2) 18:28:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x800000000000001b) ioctl$KDADDIO(r0, 0x4b34, 0x0) 18:28:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x80000000000e, 0x4, 0x2000000000004, 0x2000010070}, 0x2c) 18:28:15 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:15 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:15 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x2, 0x24011, r1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syslog(0x0, &(0x7f0000000340)=""/109, 0x6d) 18:28:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b07", 0x4a}], 0x1}, 0x0) 18:28:15 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 18:28:15 executing program 0: r0 = memfd_create(&(0x7f0000000140)="2d42d5f11f3d79ba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd558f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828000000000000", 0x0) pwritev(r0, &(0x7f0000000580)=[{&(0x7f00000003c0)="c2", 0x1}], 0x1, 0x0) 18:28:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x11f}}, 0x0) 18:28:15 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) [ 477.838704] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x8ec0, 0x0) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="fc", 0x1}], 0x1, 0x0) 18:28:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000), 0xc, &(0x7f00008a7000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000001040501ff20070401000000000000000c000200000000000000d0010c0005000000000000000000"], 0x2c}}, 0x0) 18:28:16 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:16 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0, [0x10]}, 0x2c) 18:28:16 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) [ 478.186225] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 18:28:16 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 18:28:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="0007000000000000000047e3553a513c162598fff2bef1d2433e43eb88695a02b58319f37718") getdents64(r0, &(0x7f0000000000)=""/206, 0xb6) [ 478.355805] netlink: 'syz-executor3': attribute type 5 has an invalid length. [ 478.416375] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 478.431152] netlink: 'syz-executor3': attribute type 5 has an invalid length. 18:28:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b07", 0x4a}], 0x1}, 0x0) 18:28:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0xfff) write$P9_RXATTRCREATE(r0, &(0x7f0000000100)={0x7}, 0x7) fallocate(r0, 0x0, 0x0, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 18:28:16 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 18:28:16 executing program 3: munmap(&(0x7f000000f000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000180)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/19, 0x1b43d2d9) 18:28:16 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 478.945807] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:17 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 18:28:17 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000013) 18:28:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) read(r0, &(0x7f0000000100)=""/160, 0xa0) 18:28:17 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000100), 0x6) [ 479.448704] cgroup: fork rejected by pids controller in /syz4 18:28:17 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) writev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 18:28:17 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000013) 18:28:18 executing program 5: 18:28:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b0798", 0x4b}], 0x1}, 0x0) 18:28:18 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000013) 18:28:18 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) writev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) [ 480.225154] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:18 executing program 3: 18:28:18 executing program 5: 18:28:18 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x0) 18:28:18 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) writev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 18:28:18 executing program 0: 18:28:19 executing program 3: 18:28:19 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x802}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000), 0xfdde) 18:28:19 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000045c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote, 0x1d}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="dd", 0x1}], 0x1, &(0x7f0000000340)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000480)=""/149, 0x95}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) 18:28:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b0798", 0x4b}], 0x1}, 0x0) 18:28:19 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x0) 18:28:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) [ 481.405718] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:19 executing program 3: 18:28:19 executing program 0: 18:28:19 executing program 5: 18:28:19 executing program 4: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', &(0x7f0000000100), &(0x7f00000000c0), 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x0) 18:28:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 18:28:19 executing program 3: 18:28:20 executing program 5: r0 = socket$inet6(0xa, 0x10000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000080)=0x3ff, 0x4) 18:28:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x1, &(0x7f0000000080)={&(0x7f0000000100)=@ipmr_delroute={0x1c}, 0x1c}}, 0x0) 18:28:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 18:28:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x10000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008034480000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b0798", 0x4b}], 0x1}, 0x0) 18:28:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) 18:28:20 executing program 4: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:28:20 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x200000, 0x0) 18:28:20 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000001340)={0x0, 0x3}, 0x0) [ 482.628675] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:20 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000), 0x0, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 18:28:20 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) 18:28:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000ecffbfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d400300000000006506000001ed00002c040000000000006f460000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:28:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000ecffbfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d400300000000006506000001ed00000f040000000000006f460000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:28:21 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000ecffbfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d400300000000006506000001ed000055040000000000006f460000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:28:21 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x2}, 0x20) 18:28:21 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000), 0x0, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 18:28:21 executing program 4: socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r1, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000000)=0x8dc, 0x578) 18:28:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000ecffbfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d400300000000006506000001ed00007c040000000000006f460000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:28:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000ecffbfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d400300000000006506000001ed00000f040000000000006f460000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:28:21 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000ecffbfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d400300000000006506000001ed000055040000000000006f460000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:28:21 executing program 1: socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r1 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000001c0)='./control\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000000)='./control\x00', r1, &(0x7f00000000c0)='./file0\x00') 18:28:21 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000), 0x0, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 18:28:22 executing program 0: socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000000)=0x8dc, 0x578) sendto$inet6(r2, &(0x7f0000000040), 0x10, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 18:28:22 executing program 4: getrusage(0xffffffffffffffff, &(0x7f0000000040)) 18:28:22 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = socket$inet(0x2, 0x0, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 18:28:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000b28000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) poll(&(0x7f0000b2c000), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x14) [ 484.231728] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:28:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x15f) 18:28:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e7230010100", 0x2}) close(r0) 18:28:22 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702eb631000073797a3000", 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000380)="6e7230100060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) 18:28:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000d55000), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)={0x14}}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200), &(0x7f0000000240)=0x18) 18:28:22 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = socket$inet(0x2, 0x0, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 18:28:22 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x7fff) sendto$inet(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000240)={0x2, 0x0, @rand_addr}, 0x10) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 18:28:22 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x7fff) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$alg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=[@iv={0x18}], 0x18, 0x2404c881}, 0x44004) 18:28:23 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet(0x2, 0x3, 0x6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000001c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00006cdffb), 0x0) 18:28:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000005ec0)=@can, 0x80, &(0x7f0000006000), 0x0, &(0x7f00000000c0)=""/66, 0x42}, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x11036, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000280)={0x0, 0x70}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) mkdir(&(0x7f0000000340)='./file0\x00', 0x98) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 18:28:23 executing program 0: r0 = socket$kcm(0x2, 0x8000000000001, 0x84) sendmsg(r0, &(0x7f0000002740)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000280)=[{&(0x7f0000002940)='1', 0x1}], 0x1, &(0x7f00000004c0)}, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000020c0), 0x0, &(0x7f0000000100)=""/122, 0x60}, 0x0) 18:28:23 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 18:28:23 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='cpuacct.usage_all\x00', 0x2761, 0x0) 18:28:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r0, &(0x7f0000000200), 0xff11) close(r0) write$cgroup_pid(r1, &(0x7f0000000000), 0x1a00) 18:28:23 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = socket$inet(0x2, 0x0, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 18:28:23 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1a, 0x0, 0x6, &(0x7f0000000040)) close(0xffffffffffffffff) close(0xffffffffffffffff) 18:28:23 executing program 5: 18:28:23 executing program 0: 18:28:24 executing program 4: 18:28:24 executing program 3: 18:28:24 executing program 1: 18:28:24 executing program 5: 18:28:24 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) socket$inet(0x2, 0x4000000000000001, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 18:28:24 executing program 0: 18:28:24 executing program 4: 18:28:24 executing program 5: 18:28:24 executing program 3: 18:28:24 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) socket$inet(0x2, 0x4000000000000001, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 18:28:24 executing program 0: 18:28:24 executing program 1: 18:28:24 executing program 4: 18:28:25 executing program 5: 18:28:25 executing program 3: 18:28:25 executing program 0: 18:28:25 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) socket$inet(0x2, 0x4000000000000001, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 18:28:25 executing program 1: 18:28:25 executing program 4: 18:28:25 executing program 5: 18:28:25 executing program 3: 18:28:25 executing program 0: 18:28:25 executing program 1: 18:28:25 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80), 0x0) 18:28:25 executing program 4: 18:28:25 executing program 5: 18:28:25 executing program 3: 18:28:26 executing program 0: 18:28:26 executing program 1: 18:28:26 executing program 4: 18:28:26 executing program 3: 18:28:26 executing program 0: 18:28:26 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80), 0x0) 18:28:26 executing program 1: 18:28:26 executing program 5: 18:28:26 executing program 4: 18:28:26 executing program 5: 18:28:26 executing program 0: 18:28:26 executing program 3: 18:28:27 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80), 0x0) 18:28:27 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00007fe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 18:28:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0xfcc9, &(0x7f0000000380)={0x78d63ef8, 0x0, 0x0, 0x80, 0x0, 0x0, 0x6, 0x1}, &(0x7f0000000580)={0x0, 0x3, 0xf0f, 0x6, 0x0, 0x8, 0x0, 0x1}, &(0x7f00000005c0)={0x200, 0x10001, 0x0, 0x0, 0xfff}, &(0x7f0000000640), &(0x7f00000006c0)={&(0x7f0000000680)={0x7}, 0x8}) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000500), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1816030000000000000000a6102e7a000000000000569681c422276f4867140fe570a1eeca335c020000001ac1d4770d18ef98952edbc0aaae20ae3558309d"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfb, &(0x7f00000000c0)=""/251}, 0x48) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000004c0)=""/60) pipe(&(0x7f0000000480)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 18:28:27 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x7de, 0x0) 18:28:27 executing program 5: pipe(&(0x7f0000000040)) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r0, 0x1, &(0x7f0000001680)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) 18:28:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{&(0x7f0000003980)=@rc, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1, &(0x7f0000002c00)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000000080)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x1f000000) 18:28:27 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00007fe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 18:28:27 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)}], 0x1) 18:28:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, r2, 0x0, 0x15, &(0x7f0000000080)='.$*,trusted\'.keyring\x00', 0xffffffffffffffff}, 0x30) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000140)=ANY=[]) 18:28:27 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x80, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 18:28:27 executing program 0: r0 = socket$inet6(0xa, 0x10000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000200)=0x3ff, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x0) 18:28:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:28:28 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)}], 0x1) [ 489.950269] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:28:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{&(0x7f0000003980)=@rc, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1, &(0x7f0000002c00)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000000080)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x1f000000) 18:28:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000300)={0xffffffffffffff91}, 0x7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000380)={0x0, r2}) 18:28:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x80, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 18:28:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1000000105085) writev(r0, &(0x7f0000000780)=[{&(0x7f00000005c0)}], 0x1) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000880)={0x7, 0x79, 0x1}, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000240)={'ip6tnl0\x00', {0x2, 0x4e22, @loopback}}) 18:28:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:28:28 executing program 4: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x80004000000, 0x1}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)) 18:28:28 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000280)}], 0x1) [ 490.531252] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:28:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x23) 18:28:28 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) 18:28:28 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0207000002000000000000000000be00"], 0x10}}, 0x0) 18:28:29 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000000)=""/115, 0x73, 0x0) 18:28:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:28:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={"73797a5f74756e00000000000100", 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@ipv6_newaddr={0x34, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x284}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x34}}, 0x0) [ 491.187638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:28:29 executing program 0: socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 18:28:29 executing program 3: perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000080)=""/167) io_setup(0x5, &(0x7f00000001c0)=0x0) io_getevents(r0, 0x8000, 0x0, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x1c9c380}) 18:28:29 executing program 4: prctl$getreaper(0x67, &(0x7f0000000100)) 18:28:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={"73797a5f74756e00000000000100", 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@ipv6_newaddr={0x34, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x284}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x34}}, 0x0) 18:28:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:28:29 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'lo\x00', 0x1001}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000280)="6c6f00966fd651b159a9c84a2c60d29800000020") [ 491.761105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:28:29 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x1800000000000000, 0x54, 0x29, &(0x7f0000000440)="b90703e6681b00000000000000ead5dc57ee41dea43e63a377fb8a977c3f1d1700040000d80648a2ac141411e0000001e1977d486a72d7363417ef6c909047dc183aea9747b34b3cbaa8ad830be27f3c1c54e771", &(0x7f0000000400)=""/41, 0x100}, 0x28) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x10, &(0x7f00000002c0)={&(0x7f00000004c0)=""/183, 0xb7, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000100)=""/75, 0x4b, r2}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x10, &(0x7f0000000280)={&(0x7f0000000740)=""/187, 0xbb, 0xffffffffffffffff}}, 0x10) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:28:30 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x12, 0x1f, 0x4, 0x7}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) 18:28:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x28, &(0x7f0000000400)}, 0x10) close(r3) 18:28:30 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:28:30 executing program 2: 18:28:30 executing program 4: 18:28:30 executing program 3: 18:28:30 executing program 0: 18:28:30 executing program 2: 18:28:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x28, &(0x7f0000000400)}, 0x10) close(r3) 18:28:31 executing program 5: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:28:31 executing program 3: 18:28:31 executing program 4: 18:28:31 executing program 0: 18:28:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:28:31 executing program 3: 18:28:31 executing program 2: 18:28:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x28, &(0x7f0000000400)}, 0x10) close(r3) 18:28:31 executing program 0: 18:28:31 executing program 4: 18:28:31 executing program 3: 18:28:31 executing program 2: 18:28:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x28, &(0x7f0000000400)}, 0x10) close(r3) 18:28:32 executing program 0: 18:28:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:28:32 executing program 4: 18:28:32 executing program 2: 18:28:32 executing program 3: 18:28:32 executing program 0: 18:28:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r3) 18:28:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:28:32 executing program 4: 18:28:32 executing program 3: 18:28:32 executing program 0: 18:28:32 executing program 2: 18:28:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) close(r3) 18:28:33 executing program 3: 18:28:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) 18:28:33 executing program 4: 18:28:33 executing program 0: 18:28:33 executing program 2: 18:28:33 executing program 3: 18:28:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) close(r3) 18:28:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) 18:28:33 executing program 4: 18:28:33 executing program 0: 18:28:33 executing program 2: 18:28:33 executing program 3: 18:28:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) close(r3) 18:28:34 executing program 0: 18:28:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x0) 18:28:34 executing program 4: 18:28:34 executing program 2: 18:28:34 executing program 3: 18:28:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r2) 18:28:34 executing program 0: request_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz'}, &(0x7f0000000300)='/dev/input/mice\x00', 0xfffffffffffffffb) 18:28:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="6e6f0e9fdecfafe574d71cd2f5ff679d46c992e3c7a1e012e5d8f30c4f823063d537ae3d7e76aec21aaab6baee581942b28c7d1679f0af3592d78d0a63ae2da1790dd11eab0f9033b0e9ce1a383fc42d7b2eae6023870a80e8d96cf811e18f01ba88d9a4fa569628180220e010ab31099853c0a7d2dfcff54db45de2233d52daa2feef847e73cd30a92d84d8c1f3782eeaf477956d02d4f39e674dc543eb834a623ac23a0fc23ee481fc5f7cc2338a80e285f6137d51ebd815507271505c95a231d5101bd654e816e33430fcb5ea7e491c1831ec0b4def5f5245fddca3cb300fb510b9c0b536423256dd0a83df7723cbbe2cef6fb89c988857c5a91beade0da222a39017533bf36d6f4c156d6f9de2fee49e051548a712d5a73bfbab7921be7f0c5df04025e1180d54c3b6e6856049ba16dc9d5b31f023e0611e439d09dee78aef3dcab1c31f5c752cfa8b51af2804be0d865208c0eab0c22e8c8bd9764b7b27e0d2a3be0de042280d4dcd5ec9946f60448612aacd997ececd19c67356e4e5e44b6afad44e0a2aec2226c68e29291c5c2a820d94d81b166c9d6528ab5a7b103af97160aee1f7248c2a3a7ab476bfb40f0a1efe072af3b3acaf3f335e606692efb5d97b183365bdec6da5dcd8dffde5fb0e021e263911e6c38526c50b432ed7f545c811bc4706ef3a187e8b6694288b54a4104c7d58e2f03b25fda6d8aee2aedb8cc343334f8ea9d5577eb5274c22bc5414b5e8780452b0cc6813a221e57a4004504fb7389b4b28e5c05293a0f15a71a82280b47c9a2d73423d44a1fae4f7dadb11f4d82b1b70cbf13c2605edb15398c603fbe3dcbddfbe91cdf6a8a1ae9384732d1b2630d770cf25994b5e80d8dde9c2f172b66b5feef22701005a1de0f9f74597f3c390207c5c997983d3b4cb6f269770c98174c4fe3fbdc3b030293c57cb9669fca1b9a3684fc7556b8060ea1ea88c69a7d18436eb770d6696338c9605c16f98e4c2f85ec01ccbafcf20440991702a4375814df8025b0ba1cb87001532d788fafe869c99064190f10aff86febc5dc1eabc5e7fbe1cfa8da26643ce511773ee8f664a5c4097c67137847a680b3963906083d6c0843a66be26caef0584e1c4ee2925d1bfccec689400980f570c63c35c1d823bc2868aab7a2bbe2f366c216926b9dc4069b3dd60ca2048c7807107c39808006390c8b4f923b7e542efcbbef5bb6a93133617b04d2edee264183e9192691132316ed7e945776095f7d8a1975cf61fe1b3db4d78fb46eab7e6df7e29b40e21354ef481445dbdb7bc20dd93b3fa16d53b7a449321736bb84e02df514115d81cbb0461a3542b7d53e045f6ac6646885e0c66df647814845a34f4fc20056505f5aa8e9092dc8fe9e475437629ef75bb953d4ad05723ee7e31675ab12a328f020a07925fb8b073dff619b559020ef656324b6b3f76e3a824c81d1bb98e05267d0c8d6e7450f34375b16be3dacf9e28186adb9b0a264127d46302a2cf0269ddd3f0484b0ad0b3b0eebac6a45386e35909252e3e82c975c5c4f9b624c35ef7760e37055a994ca41986c8c720766320e2505c4b34b31e718951a16c0d8e1288120971530c1788c87db541800449927e95e2b8c86bccba00cf05caf435e83313407e76d35e4e09c1ba398a8cb2cad75805c502f9606a654c3599e3bca9d2302b7afd12b917372451b3416260f0b073d6b443f443ecdbd17379c5c9b2601ed3962837fa1578c5ce56a01584b551d5f5174afdf8b93bae0cee75086cb8290fe65087e58516b10fce97e1b22e62909708f5c8f9feacc035c80777c84b767aa078aa9a5ffe03cfa22aeef00fbafba9b1be4f74bf61ce86cc356cbff245d1afed6b3fc96b8eeb29940c824cc8a0eb02b801daf1d7d177e4e5111243a1f8b94da20fe4a443c683adfd9ec302682a3c8475dbd2e5067482629a311215500b42302bafc6b042d3330cb8ed852fb01b90719170d7773c2f4212d803f15c7d4e51d810ad55dab364f48bf157657afac3f92aa20a9c3af95bb63d122b6a8bdb81520d23d29bf10ec6658a281e5e6fed7e26ac759026e6e49125ef2fe8717f9124c6782e420640c67625b2c3c417eada5ac08b02b6308c4718aef1c53ec99d8bcd6a95cfffaa256b3347adbcf26aab2dc58d96bdc2e0665d20ff5b4531420299013042e1d91ecde5b5020d638af385cba9916c2606be32f96c64e3341b3f724b43aff8c9b724546a69ef5f18a9c455a4688848d9dde0fb5ea9d9bb80b7fb007e30fa9d2ceb90dcfcdf64d69c9584f239bbae134fb1053ad78f31c324e047e8cb8545f6127b024ff293e3f7b28e7588c7bcee1cffc9d8df1b1e6f3d33fa155a93b2be6074fb4daa67857a4ce38cb4e01743f2a45ff4065f00e1a37655661d2973b0e8bc899981aa71feb55089b644f054a2a1c87143b4eb4e59fb18a99aa8af10598cb4befea33057389d3d78f86527c11229100bacd8e8f98fe1f26cc4931cb5ce90a9be15f6af021b76fcfb86f90328177f356c280470276594b1130928038fea6f5fc7e83cde791638377f96e48465faf1e1b5b88e62c128a1dddfd703b84e7d09af3fbd2ef52d0ee42ab18abb54f7009584eee101224c23a49e6c061fcdc25c91972e2964c680745ae88a1899ad2ee0c092a522b489daa89f9a9fa40d4d3eaf354e8bf94c6439db5ed4ed12d057a3c62ef7b562f0c1b0c119af2c1e4d67cd986cdc873f92446e0647044ab547defb7eb576614eec257cdf69605ef6cf55d9d09194b443994a25838ea01518698554b0345d985b7f871ff36150819ccb95fb96d2cd7837f4f7bf8166b3062fc958cba1cb1e259575e05f994a76416a54e37512eb3abd61878b4ded1bd349d23e8ee0aef832b35b4fef0ab95889276512d4847a24a207071912368df0bdcf72791582b596e4f0edcf216f9e066720f11676a82c721f23bcf854d8e7db65a2f6c1dd130f080c666f49760edbffaa687b2847216295648398076d5593d16190d6b24c924ff34f5a0e8fc2e780cfa019cd1a32af5f23a26bc4ef993eddb503249329d8f6cf1c5b544a2c45d19dbe92ef2c851c9b52bef8aedab65a2aa0203259f074f1d056e045b9683bf1ed48c2c8bb45b5c60ef61be262f22be804e0b606f6e3e8091087e3e045b97e70d95646b3815d01340a99a747d89aab721b02ea13def6249351eab2d29751170f162ebf99ae1c895c0b89013f197240dd65dae62e02f54a6b2768b74a2ec4c0876cf064703a67fcb23ec86b82cc3506c1eebf0ae23f6c566676264395e6bcf3676c31a6995778228a6f0e6a55e3931d27590ddc7f5f8519d788d13c7ecbfba4f1e4bad94729361376aba3b8c7225c1f4c9185d8fb31617e505fa097028c88082fd3ea45e56bb9d9413602afba3796ec09d91fb84f36fe51802ca140d95af926b1c2e0bb95da274b7856007f5b18833f5954b6c8701dab817c1c30d7add9affc037ecf3e8d3878be374e61ee0f6e1e2fbc6548314de055f3e4a7ce88c104167c0691a47a55aa033027b945d56fd9921eb74c372b34c551b5a4fb39905ca9c85b5b3334b217322c5ef22bbec63a122a9586165d32094ef6fa85dac000638e0597bcbccf3a4524d24b233cb8fc6b8ec70ee50afb907a89a3ec5063732603de4cbd25b54f0f8c7f0b0152fd49f3bccddab3b2e9d3e5acc920d0ed2b3a2c8fea58747dc1a4841de9b4688fea730bfadf5286f1df008d231a68c4f425a4d66c22724c2906ea0e0060443603ca83439f09a59b3fbcc3a71557e4ce5bf6cce69fa807b85ca8df87d8404d74faac9fc06495534efe989d455d8b9c055f875f0ce5cb62f94d35546030eb45f3a2dfb1945b45e01d52975031cf63eac4518642b1481dfee1163d34e84b1afb87a243ca71f386f3b0bbe347a79fe8d4dc27f6d5a129b905d7ef550bca1b614a6e50f6ba313f36602385fc53670b08a71e2e490c0380a34e1b82cfd926ee4f04bc087bf6a36256b9ee9c9d72d631290ddc5caa209842240c38e73c51ae11d78ad8f7e90abbfe9d89bed828a063ee83a49e533db01c8a0de5e9c9e0a96c94c9527cdb772d7a46022a35da57a7d28613342090f7a1be3abf9fd9f3e24370c78a161b03bc9027a3a128333be810cd4d6cb7abac2a0e19295bfd0d0871635dff8d796e3d6a6121c933c52e116a845ee75d5a24fccbe91d8c60394532b871e56e949f13b1023f262f42eaae8bd30e4f92926a96524277b321e34d10f03cdc359c883d2cfa5336fde8df0a08ba36f5841f496c7bb44384a3cbecaca5729b9edc82c7344c33277531baadf95f2ca51d7be8c7e2c78a80ce670aef3263a1553be09f83c6de6d90371c729fd20a80ca0027064342e864d703b8a779d2bf7f4017c78134593495a2808f72d443c3841f678574638d2ed4307a6765c7f8e5f10ddab7961ae297ca1104ea2eb5a26c002713b2bb8bc3d7579c7890084c9ae7f1a992edf6595e575c48f40c4c01cd84e4ee72bdfa6b76667e76e29305ef5f4de98bf89c4c596d0aa8f61dcae7030faff6db5710261f5e679a7897f00c22a843efb5eea1489cc6e90f70d7e4fddfe62b24334694ffd658933956d9ab49a18e14b475e10eb0d7c86d60d68516bdc77f8dcdb4e4f18c80569923c739d6a5ef9767b09abecdc46cbd66285404e9391f3aab3d10e0fc681fcc93d393345bfd1ca6479581064e662eba85a63c1529adeb0c85faf1860a448a481765af41803a7180e947b5b34b4202cbe52c2e48f73e9b298ea2c7e8b7b05511812a6b43aa4978ac331990ea82e7bed1dd258f61b99dc5ea7ee14574e6c03d3811e0d715848e7cd0243bd94d0201bf47cc534e3fdbe7c13b3684647fc3160435ba027de13731583ab5c1359d849584446d508932e1318fad377689eee61ff0f7c0485812a8d7cdedd9909f48ebd9799c3adec7f2ddf23757829a978775b47cbc57e1b02e11a39cb9d90d67a40d1f16f15b4fc97e7c4d71d4cafdc5422f7a688275976eefaf72bad487fe3012e37f06ef940384e903096b1ea9d234f9a52b1f91ba321171904973646d64aff64e9007337e9612ba639de8cb321aa3d099e1d0c40cc81ef0360cfbfbfdc1d727239281b7436a9bac2a5f44793a1f3c39d294ae7e7f28b1d214e3ea409c2a41a36b7ee4a144a9a09dfe5742d7d9d9360bd24aca865c5df3f66ca9d0298cd41d26146a861ba5a118f38824608750ef3b00544544a8aca45606e654ba80bb769c2c00f87038cb5c830c530c751cbfd528bb11e822b3189ecbf097a929749f44504184010287c2d24c43415d7939ed01a35204769c51f4d65658fb2a8c1e492b2d847ecf13d4199fd5bd7b1371219dc880259e79957c70d2325d836bacbfbe55f5628e88e8722b6bb538d7b2826acb6355403903dd6d8a0d9b74f626b1ae0d5ec1d64141f208a02b09f66f702f9e88a0aa44f625e99a6cd56fbe03052cfc80a7fbb18171a93e24e24e34aefd8b88c8b2a6c9b4a4e91bda0aa471511af7ac2ad4dd0afe3e5214a6d32c9a0c331e967ead0a3d0b8a4b7875d7defb9a1bfe896d5ae0857101044f2d98731ca457b555247e5b276a9fb29e8055e3982df9a44acf05a28742561129d5dbec4e45827d4823825e53dc5609f16336a02d55cbb9a8", 0xf9d}], 0x1, &(0x7f0000001780)}, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000100)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) sendto$inet(r1, &(0x7f0000000340)="e4f3ed09200c036f6d3a378e60e359f22951307c9f9d68f749b1f1dd8db083ffdde59bc4905f67bfcc6c6a27d1216c85b0ac44ec3baf04ca823371274295d8aac58c44054d1f4a79998100fac95c94128d1a5482f242d168d34c0d43a190dd8d763fc2", 0x63, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) 18:28:34 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:28:34 executing program 2: r0 = memfd_create(&(0x7f0000000880)="646e735f7265736fb41600000030713551bebc738f18bfa1ed3d8cde37af4cba4d5d60a3f34a5d892c21521004e68588884b74493ecec97d53fd381c6994c878426ffb64296e9d62e996aa7569afcd8a9dfcc5ec7b49b181d5dff4dfa360fe0a40f7e94cd77cf8338ae258b08ccc3369f43932785564bfe279849ba49edc0a1ca7bb4b87d5596ed2ab4956bfe2bfa26ba059f79a9dc6558bd1d1e7d733894630933d5abc7abe5dea30ba7f267ebe72e87593cf902a13d335a5575f5b1b935a878a8c035b2846aeb088cde907285c49a71565fccef10fef92cad7cdbf2c40f1c6a5dea961b8ea9b22b6fbe795b86cb9080869d87426d83cbec83e94dc55f1c9d5", 0x4) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) signalfd(0xffffffffffffffff, &(0x7f0000000280)={0x6}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r2, &(0x7f0000000340)='threaded\x00', 0xffffffc5) fsync(r2) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) lsetxattr$security_selinux(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='security.selinux\x00', &(0x7f0000000980)='system_u:object_r:unconfined_execmem_exec_t:s0\x00', 0x199, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000040)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:28:34 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) 18:28:35 executing program 0: syz_execute_func(&(0x7f0000000080)="cd8075fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f8ecd37c4e3a9f3d928eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a12630fc4c161fccddfde9f") 18:28:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r2) 18:28:35 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000280)=0x8) 18:28:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) accept4(r0, 0x0, &(0x7f0000000180), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) socketpair$inet(0x2, 0x0, 0x40000010001, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r3, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000004200)={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000004280)={r4, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000002bc0)=@assoc_id=r4, &(0x7f0000002b40)) mmap(&(0x7f0000f44000/0x4000)=nil, 0x50707c, 0x1000006, 0x2013, r3, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000002a00)=[{0x6, 0x8}, {0x2, 0x5}, {0x4, 0xcd0}, {0xc, 0xea94}, {0x0, 0x3}, {0x400000000000000a, 0x100000000}, {0xa}, {0x3, 0xffffffffffff5972}], 0x8) 18:28:35 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind(r0, &(0x7f0000008bc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80) 18:28:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(morus640-generic)\x00'}, 0x58) accept(r1, &(0x7f0000000140)=@rc, &(0x7f0000000200)=0x80) 18:28:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r2) 18:28:35 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000280)=0x8) 18:28:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(r1, 0x40047452, &(0x7f0000000100)) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 18:28:35 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-cast6-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ce746de8fde27ee7ddc866c31171a25c7967b55a66", 0x15) 18:28:35 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000280)=0x8) 18:28:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(0xffffffffffffffff) 18:28:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000280)=0x87, 0x0) sendto$inet6(r2, &(0x7f00000002c0), 0xfffffffffffffd93, 0x0, &(0x7f0000000f00)={0xa, 0x0, 0x0, @mcast2}, 0x1c) write$nbd(r2, &(0x7f0000000040), 0x10) close(r2) 18:28:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)) 18:28:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0xf2dab82004d8fac7}) dup2(r0, r1) 18:28:37 executing program 5: munmap(&(0x7f000000f000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00') ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xe84b}) r1 = syz_open_pts(r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0x0) dup3(r1, r0, 0x0) read(r0, &(0x7f00000000c0)=""/19, 0x1b43d2d9) 18:28:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(0xffffffffffffffff) 18:28:37 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000280)=0x8) 18:28:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100), 0x10) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000300)={0xffffffffffffff91}, 0x7) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000240)=""/91) fcntl$setstatus(r3, 0x4, 0x4400) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000380)={0x0, r2}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) 18:28:37 executing program 3: getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000280)=0x8) 18:28:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(0xffffffffffffffff) 18:28:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r2) 18:28:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = syz_open_pts(r1, 0x80000) write$P9_RLERROR(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x10e) ioctl$LOOP_CLR_FD(r4, 0x4c01) fallocate(r2, 0x0, 0x0, 0x5f5) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e24, @loopback}}) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000040)=""/126, &(0x7f00000000c0)=0x7e) setsockopt$inet_tcp_int(r1, 0x6, 0x15, &(0x7f0000000100)=0x4, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000240)={0x40000002}) lseek(r2, 0x0, 0x6) 18:28:38 executing program 3: getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000280)=0x8) 18:28:40 executing program 3: getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000280)=0x8) 18:28:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e7230010100", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x34, 0x0, 0x0, 0x10000fffff01c}, {0x16}]}) 18:28:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e7230010100", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x1, 0x0, 0x0, 0x10000fffff01c}, {0x16}]}) 18:28:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = syz_open_pts(r1, 0x80000) write$P9_RLERROR(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0b0021000701005fa00000c8b7169a7a19113f1786908747470fadc9b5522aeeb9621e22510f7d620c0096d3da39569815d8fd0f069010c01d95f7e6dc2c64f32cf6be4891a91307eaf4de6da86208ed8b0266d9ffae58b314afd4787dc8f1ed28d38237c82343eae1e73cb9d8fd71b9ab9a0c12f2cf593e3a13f96633059a41ea040e45fc288ed930eb045b0f447d9b3eae5f2461494ebd68c28c1bb0daba80c8efb2eda261c58e2f029da044d24165632d57e955b56bce42f87a0a7c369f64a766c10e77bea9db514f0968b5fae441fd6aed7e10535d2c2230de927f5a998145aa9c8dc2a10c62dc304aa24afd7c78782f4d1f5f92be400c137f6768cb5e1df40c55a5920cc79118726c62a956"], 0x10e) ioctl$LOOP_CLR_FD(r4, 0x4c01) fallocate(r2, 0x0, 0x0, 0x5f5) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e24, @loopback}}) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000040)=""/126, &(0x7f00000000c0)=0x7e) setsockopt$inet_tcp_int(r1, 0x6, 0x15, &(0x7f0000000100)=0x4, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000240)={0x40000002}) lseek(r2, 0x0, 0x6) 18:28:41 executing program 5: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getenv(0x4201, r0, 0x3, &(0x7f0000000080)) 18:28:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r2) 18:28:41 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000280)=0x8) 18:28:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000d000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x180000000000000a, 0xf, 0x29, &(0x7f0000000b00)="b99cc5d710d86cd86c075d649eddff", &(0x7f0000000300)=""/41, 0x69}, 0x28) 18:28:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x20000000021) sendto$inet6(r0, &(0x7f0000000000), 0x10284, 0x0, &(0x7f0000000180), 0x1a) 18:28:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x1bb, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) 18:28:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r2) 18:28:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = syz_open_pts(r1, 0x80000) write$P9_RLERROR(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0b0021000701005fa00000c8b7169a7a19113f1786908747470fadc9b5522aeeb9621e22510f7d620c0096d3da39569815d8fd0f069010c01d95f7e6dc2c64f32cf6be4891a91307eaf4de6da86208ed8b0266d9ffae58b314afd4787dc8f1ed28d38237c82343eae1e73cb9d8fd71b9ab9a0c12f2cf593e3a13f96633059a41ea040e45fc288ed930eb045b0f447d9b3eae5f2461494ebd68c28c1bb0daba80c8efb2eda261c58e2f029da044d24165632d57e955b56bce42f87a0a7c369f64a766c10e77bea9db514f0968b5fae441fd6aed7e10535d2c2230de927f5a998145aa9c8dc2a10c62dc304aa24afd7c78782f4d1f5f92be400c137f6768cb5e1df40c55a5920cc79118726c62a956"], 0x10e) ioctl$LOOP_CLR_FD(r4, 0x4c01) fallocate(r2, 0x0, 0x0, 0x5f5) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e24, @loopback}}) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000040)=""/126, &(0x7f00000000c0)=0x7e) setsockopt$inet_tcp_int(r1, 0x6, 0x15, &(0x7f0000000100)=0x4, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000240)={0x40000002}) lseek(r2, 0x0, 0x6) 18:28:41 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000280)=0x8) 18:28:42 executing program 5: [ 504.933188] IPVS: ftp: loaded support on port[0] = 21 [ 505.010873] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 505.026734] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 505.033579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.402739] device bridge_slave_1 left promiscuous mode [ 507.408666] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.463604] device bridge_slave_0 left promiscuous mode [ 507.469201] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.765901] team0 (unregistering): Port device team_slave_1 removed [ 510.778744] team0 (unregistering): Port device team_slave_0 removed [ 510.791123] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 510.829338] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 510.911392] bond0 (unregistering): Released all slaves [ 511.301582] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.308220] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.316746] device bridge_slave_0 entered promiscuous mode [ 511.444354] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.450875] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.459328] device bridge_slave_1 entered promiscuous mode [ 511.586093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 511.712802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 512.036051] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 512.124329] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 512.250379] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 512.257745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 512.342818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 512.349844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 512.627231] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 512.635052] team0: Port device team_slave_0 added [ 512.710785] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 512.718478] team0: Port device team_slave_1 added [ 512.795048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 512.874456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 512.952790] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 512.960217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 512.969242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 513.040427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 513.047903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 513.056925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 513.894963] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.901432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.908372] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.914880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.922850] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 514.052300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 517.039401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.328417] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 517.614808] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 517.621144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 517.629431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 517.917968] 8021q: adding VLAN 0 to HW filter on device team0 18:28:57 executing program 4: 18:28:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r2) 18:28:57 executing program 5: 18:28:57 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = syz_open_pts(r1, 0x80000) write$P9_RLERROR(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0b0021000701005fa00000c8b7169a7a19113f1786908747470fadc9b5522aeeb9621e22510f7d620c0096d3da39569815d8fd0f069010c01d95f7e6dc2c64f32cf6be4891a91307eaf4de6da86208ed8b0266d9ffae58b314afd4787dc8f1ed28d38237c82343eae1e73cb9d8fd71b9ab9a0c12f2cf593e3a13f96633059a41ea040e45fc288ed930eb045b0f447d9b3eae5f2461494ebd68c28c1bb0daba80c8efb2eda261c58e2f029da044d24165632d57e955b56bce42f87a0a7c369f64a766c10e77bea9db514f0968b5fae441fd6aed7e10535d2c2230de927f5a998145aa9c8dc2a10c62dc304aa24afd7c78782f4d1f5f92be400c137f6768cb5e1df40c55a5920cc79118726c62a956"], 0x10e) ioctl$LOOP_CLR_FD(r4, 0x4c01) fallocate(r2, 0x0, 0x0, 0x5f5) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e24, @loopback}}) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000040)=""/126, &(0x7f00000000c0)=0x7e) setsockopt$inet_tcp_int(r1, 0x6, 0x15, &(0x7f0000000100)=0x4, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000240)={0x40000002}) lseek(r2, 0x0, 0x6) 18:28:57 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000280)=0x8) 18:28:57 executing program 0: 18:28:58 executing program 0: 18:28:58 executing program 4: 18:28:58 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = syz_open_pts(r1, 0x80000) write$P9_RLERROR(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0b0021000701005fa00000c8b7169a7a19113f1786908747470fadc9b5522aeeb9621e22510f7d620c0096d3da39569815d8fd0f069010c01d95f7e6dc2c64f32cf6be4891a91307eaf4de6da86208ed8b0266d9ffae58b314afd4787dc8f1ed28d38237c82343eae1e73cb9d8fd71b9ab9a0c12f2cf593e3a13f96633059a41ea040e45fc288ed930eb045b0f447d9b3eae5f2461494ebd68c28c1bb0daba80c8efb2eda261c58e2f029da044d24165632d57e955b56bce42f87a0a7c369f64a766c10e77bea9db514f0968b5fae441fd6aed7e10535d2c2230de927f5a998145aa9c8dc2a10c62dc304aa24afd7c78782f4d1f5f92be400c137f6768cb5e1df40c55a5920cc79118726c62a956"], 0x10e) ioctl$LOOP_CLR_FD(r4, 0x4c01) fallocate(r2, 0x0, 0x0, 0x5f5) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e24, @loopback}}) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000040)=""/126, &(0x7f00000000c0)=0x7e) setsockopt$inet_tcp_int(r1, 0x6, 0x15, &(0x7f0000000100)=0x4, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000240)={0x40000002}) 18:28:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 18:28:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) 18:28:58 executing program 3: socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000280)=0x8) 18:28:58 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000240)='./bus\x00', 0x20800) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) set_robust_list(&(0x7f0000000280)={&(0x7f0000000180), 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, 0x18) sendfile(r1, r2, 0x0, 0xa5cc54d) creat(&(0x7f0000000040)='./bus\x00', 0x0) 18:28:58 executing program 4: capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000340)) shmctl$SHM_LOCK(0x0, 0xb) 18:28:58 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_pts(r1, 0x80000) write$P9_RLERROR(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x10e) ioctl$LOOP_CLR_FD(r4, 0x4c01) fallocate(r2, 0x0, 0x0, 0x5f5) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e24, @loopback}}) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000040)=""/126, &(0x7f00000000c0)=0x7e) setsockopt$inet_tcp_int(r1, 0x6, 0x15, &(0x7f0000000100)=0x4, 0x4) 18:28:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 18:28:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) [ 520.825115] capability: warning: `syz-executor4' uses 32-bit capabilities (legacy support in use) 18:28:59 executing program 3: socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000280)=0x8) 18:28:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) 18:28:59 executing program 4: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:28:59 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_pts(r1, 0x80000) write$P9_RLERROR(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x10e) ioctl$LOOP_CLR_FD(r4, 0x4c01) fallocate(r2, 0x0, 0x0, 0x5f5) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e24, @loopback}}) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000040)=""/126, &(0x7f00000000c0)=0x7e) 18:28:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 18:28:59 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000940)="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") ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000dc0)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x28, &(0x7f0000000240)}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00'}) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000480)) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x28, &(0x7f0000000140)}, 0x5) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2f, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000580)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000005c0)={'bcsf0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) 18:28:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) 18:28:59 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_pts(r1, 0x80000) write$P9_RLERROR(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x10e) ioctl$LOOP_CLR_FD(r4, 0x4c01) fallocate(r2, 0x0, 0x0, 0x5f5) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e24, @loopback}}) 18:28:59 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2}, 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=@raw, &(0x7f00000001c0)='GPL\x00', 0x0, 0xfb, &(0x7f0000000080)=""/251}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 18:28:59 executing program 3: socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000280)=0x8) 18:28:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 18:29:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={"7261778800", 0x2, [{}, {}]}, 0x48) 18:29:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x3ff}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xffffffffffffffee, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000000000]}}, 0x1c) close(r0) 18:29:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_pts(r1, 0x80000) write$P9_RLERROR(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x10e) ioctl$LOOP_CLR_FD(r4, 0x4c01) fallocate(r2, 0x0, 0x0, 0x5f5) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') 18:29:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) 18:29:00 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x3, 0x218, [0x20000080, 0x0, 0x0, 0x200000b0, 0x200001c0], 0x0, &(0x7f0000000000), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x17, 0x8, 0x9000, 'bond0\x00', 'irlan0\x00', 'gre0\x00', 'bcsf0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @link_local, [0xff, 0xff, 0xff, 0xff], 0x70, 0xa8, 0xe0}, [@arpreply={'arpreply\x00', 0x10, {{@local, 0xffffffffffffffff}}}]}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth1\x00', 'ip6tnl0\x00', 'rose0\x00', 'bridge0\x00', @empty, [], @link_local, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast}}}}]}]}, 0x290) [ 522.429587] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:29:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 18:29:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001c00)=@broute={"62726f7574650000880200001100076c0000000000000200", 0x20, 0x2, 0x280, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f00000000c0), &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}, 0x2f8) 18:29:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_pts(r1, 0x80000) write$P9_RLERROR(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0b0021000701005fa00000c8b7169a7a19113f1786908747470fadc9b5522aeeb9621e22510f7d620c0096d3da39569815d8fd0f069010c01d95f7e6dc2c64f32cf6be4891a91307eaf4de6da86208ed8b0266d9ffae58b314afd4787dc8f1ed28d38237c82343eae1e73cb9d8fd71b9ab9a0c12f2cf593e3a13f96633059a41ea040e45fc288ed930eb045b0f447d9b3eae5f2461494ebd68c28c1bb0daba80c8efb2eda261c58e2f029da044d24165632d57e955b56bce42f87a0a7c369f64a766c10e77bea9db514f0968b5fae441fd6aed7e10535d2c2230de927f5a998145aa9c8dc2a10c62dc304aa24afd7c78782f4d1f5f92be400c137f6768cb5e1df40c55a5920cc79118726c62a956"], 0x10e) ioctl$LOOP_CLR_FD(r4, 0x4c01) fallocate(r2, 0x0, 0x0, 0x5f5) 18:29:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) [ 522.673345] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt [ 522.867642] xt_connbytes: cannot load conntrack support for proto=7 [ 522.882882] xt_connbytes: Forcing CT accounting to be enabled 18:29:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x3ff}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xffffffffffffffee, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000000000]}}, 0x1c) close(r0) 18:29:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 18:29:01 executing program 5: 18:29:01 executing program 4: 18:29:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_pts(r1, 0x80000) write$P9_RLERROR(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x10e) ioctl$LOOP_CLR_FD(r4, 0x4c01) [ 523.211837] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:29:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) 18:29:01 executing program 5: 18:29:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 18:29:01 executing program 4: 18:29:01 executing program 3: 18:29:01 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) 18:29:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_pts(r1, 0x80000) write$P9_RLERROR(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x10e) 18:29:01 executing program 5: 18:29:02 executing program 3: 18:29:02 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) 18:29:02 executing program 4: 18:29:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_pts(r1, 0x80000) 18:29:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 18:29:02 executing program 5: 18:29:02 executing program 3: 18:29:02 executing program 4: 18:29:02 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) 18:29:02 executing program 3: 18:29:02 executing program 5: 18:29:02 executing program 4: 18:29:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:03 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) 18:29:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 18:29:03 executing program 5: 18:29:03 executing program 4: 18:29:03 executing program 3: 18:29:03 executing program 5: 18:29:03 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) 18:29:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 18:29:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:03 executing program 4: 18:29:03 executing program 3: 18:29:03 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) 18:29:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 18:29:04 executing program 5: 18:29:04 executing program 4: 18:29:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:04 executing program 3: 18:29:04 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) 18:29:04 executing program 5: 18:29:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 18:29:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) bind(r0, &(0x7f0000000280)=@ax25={0x3, {"72cc3ae2cfa999"}}, 0x80) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000380)) 18:29:04 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x1000001cb) r2 = socket$inet6(0xa, 0x803, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000000003, 0x400031, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:29:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:04 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) 18:29:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x9}, 0x1c) read(r1, &(0x7f00000000c0)=""/108, 0x6c) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xffdc) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 18:29:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r0) 18:29:05 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10031, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000001280)="cf", 0x1, 0x0, &(0x7f0000002c40)={0x2, 0x0, @dev}, 0x10) 18:29:05 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) 18:29:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r0) 18:29:05 executing program 4: 18:29:05 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) 18:29:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r0) 18:29:05 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 18:29:05 executing program 4: 18:29:06 executing program 5: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x400000032, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000001380), &(0x7f0000000040), &(0x7f0000001340)) 18:29:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) 18:29:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 18:29:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000100)=0x1e) 18:29:06 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000031c000/0x3000)=nil}) 18:29:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x7}, 0x7) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x20000006100) fdatasync(r2) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ftruncate(r3, 0x5) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) 18:29:06 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f00000003c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000002c80), 0x0, &(0x7f0000002cc0)=[{0x38, 0x0, 0x0, "c754e0195db7ef01aef263913593d9b4873fd99f88f34949254d4521a1b04000fa671fb224"}], 0x38}, 0x3f}], 0x1, 0x0) 18:29:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getcwd(&(0x7f0000000000)=""/160, 0xa0) 18:29:06 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r2 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$sock_ifreq(r2, 0x8931, &(0x7f00000001c0)={'rose0\x00', @ifru_hwaddr}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r3, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 18:29:07 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x80000000000e, 0x4, 0x2000000000004, 0x2000010070}, 0x2c) 18:29:07 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000002900)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001340), 0x361, &(0x7f00000013c0)}, 0x20000054) sendmsg$kcm(r0, &(0x7f0000007a00)={&(0x7f0000007540)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000007980)}, 0x0) 18:29:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 18:29:07 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6e7230010100", 0x2}) 18:29:07 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r2, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:07 executing program 0: mmap(&(0x7f0000000000/0xa73000)=nil, 0xa73000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0), 0x0, 0x8) 18:29:07 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3ffffffffc, 0x31, 0xffffffffffffffff, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)) 18:29:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(0xffffffffffffffff) 18:29:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x100, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffffffffffaf, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) close(r1) 18:29:07 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x40) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r2, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000003c0)=""/172) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="fa"], 0x1) 18:29:07 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000240)) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000003c0)=""/172) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYBLOB="ba"], 0x1) sendfile(r2, r2, &(0x7f00000000c0), 0xfff) fchmod(r0, 0x40) 18:29:07 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xa400295c) removexattr(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)=@known='system.posix_acl_default\x00') [ 529.844373] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:29:08 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x5, &(0x7f0000000c80)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b702000000000000bfa3cd43c8a751409c6b05de01fefff77a0af0fff8ffffff79a417b13904ca07ede178d3566d62f0ff00000000b7060000000000012d6405000034000000040400010000000702000001000000b704543a4bb9db16d89ca176a10000000000006a0a00fe00000000850000001a0000"], &(0x7f0000000140)='GPL\x00'}, 0x48) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x80, 0x0) [ 529.984902] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:29:08 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) recvfrom$inet(r1, &(0x7f0000000540)=""/226, 0xe2, 0x61, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r2, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:08 executing program 0: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x5d52}) fcntl$lock(r0, 0x7, &(0x7f0000000140)) 18:29:08 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x11, r0, 0x0) 18:29:08 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x40, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x297ef) 18:29:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000140)=0x20) 18:29:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0xf03, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 18:29:08 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r2, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200), 0x8) 18:29:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) 18:29:09 executing program 3: syz_emit_ethernet(0x13c, &(0x7f00000004c0)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "f95cfb", 0x106, 0x0, 0x0, @dev, @ipv4={[], [], @remote}, {[], @gre={{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "814c95a369e75e2f20837c8aba9849fb93b5022487b603087aaa9a8eddd36b011678af476dcc80350028928cda28da685ed40fc4490c4333d2fdb91454ceb9495bd54754154c90c7f4329fd5578b56d8b4b00b"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "cac5a01af51d703ece723a7b04034628d276baf3e0"}, {0x8, 0x88be, 0x1, {{0x2, 0x1, 0xffff, 0x0, 0x6, 0x5, 0x0, 0x5}, 0x1, 0xde19}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x0, 0x7, 0x1, 0x349, 0x200, 0x10001}, 0x2, 0x7fffffff, 0x7, 0x10001, 0x5, 0x4, 0x10001, 0x6, 0xffffffffffffff7f, 0x7fffffff}}, {0x8, 0x6558, 0x2, "1e38241c89f7c0cb1e3e992cc9cdea1e08dc266bf9336ccc6d155b0f7f8dba6d04368d64ce1b5ce4baf18ce0183d5e591e848eb6764c523a1fc4bd7b0b4c439f918e8561b9f64aa4d2b6255e09cd8852a7df3c2b3d06d5a70dd2"}}}}}}}, 0x0) 18:29:09 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r2, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:09 executing program 4: 18:29:09 executing program 5: 18:29:09 executing program 0: 18:29:09 executing program 1: 18:29:09 executing program 5: 18:29:09 executing program 3: 18:29:09 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:09 executing program 4: 18:29:09 executing program 1: 18:29:09 executing program 0: 18:29:09 executing program 5: 18:29:09 executing program 3: 18:29:10 executing program 0: 18:29:10 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:10 executing program 4: 18:29:10 executing program 1: 18:29:10 executing program 5: 18:29:10 executing program 3: 18:29:10 executing program 0: 18:29:10 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:10 executing program 5: 18:29:10 executing program 1: 18:29:10 executing program 3: 18:29:10 executing program 4: 18:29:10 executing program 0: 18:29:11 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:11 executing program 1: 18:29:11 executing program 3: 18:29:11 executing program 4: 18:29:11 executing program 5: 18:29:11 executing program 0: 18:29:11 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:11 executing program 0: 18:29:11 executing program 5: 18:29:11 executing program 4: 18:29:11 executing program 1: 18:29:11 executing program 3: 18:29:11 executing program 2: fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:11 executing program 0: 18:29:12 executing program 5: 18:29:12 executing program 3: 18:29:12 executing program 4: 18:29:12 executing program 2: fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:12 executing program 1: 18:29:12 executing program 0: 18:29:12 executing program 5: 18:29:12 executing program 3: 18:29:12 executing program 2: fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:12 executing program 4: 18:29:12 executing program 1: 18:29:12 executing program 0: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:29:12 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @igmp}}}}, &(0x7f0000000000)) 18:29:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet(0x2, 0x3, 0x6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f00006cdffb)="89", 0x1) 18:29:13 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_to_team\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 18:29:13 executing program 1: r0 = socket(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000004300)=[{&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000003c0)="10d9", 0x2}], 0x1, &(0x7f0000000340)}], 0x1, 0x0) 18:29:13 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0xa, 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/103, 0x67, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000000600)={'team_slave_1\x00'}) 18:29:13 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000740)='./bus\x00', 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x67897bc0) 18:29:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) accept(r0, &(0x7f0000000040)=@sco, &(0x7f00000000c0)=0x80) close(0xffffffffffffffff) 18:29:13 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 535.400905] syz-executor5 uses obsolete (PF_INET,SOCK_PACKET) 18:29:13 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = memfd_create(&(0x7f0000000100)="9299f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc9aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb90000000000000000", 0x0) fallocate(r0, 0x0, 0x0, 0xfce1) [ 535.589828] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:29:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x40000000000001, 0xce) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@sco, &(0x7f00000000c0)=0x80) close(r2) 18:29:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80000000000003, 0x80000000000006) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)="b10b", 0x2}], 0x1, &(0x7f0000000200)}, 0x8000) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000000), 0x4) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000003b40)}, 0x0) 18:29:13 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:13 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) [ 535.868779] audit: type=1326 audit(1541960953.914:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16363 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 535.895404] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:29:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000e81b0012000c00010067726574617000000c0002000800030000000000"], 0x1}}, 0x0) 18:29:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000200)=""/15, &(0x7f00000000c0)=0xf) 18:29:14 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 18:29:14 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f00000000c0)='./file0\x00', 0x0) [ 536.486267] audit: type=1326 audit(1541960954.534:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16363 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:14 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:14 executing program 3: sched_setattr(0x0, &(0x7f0000000040), 0x0) 18:29:14 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev(r0, &(0x7f0000000080), 0x0, 0x0) 18:29:14 executing program 4: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2) [ 536.905467] audit: type=1326 audit(1541960954.954:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16411 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:15 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f0000000200)=0x80) 18:29:15 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001600)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000280)}]) 18:29:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) [ 537.254734] audit: type=1326 audit(1541960955.304:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16424 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:15 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 18:29:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x20}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x70}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 18:29:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) [ 537.620567] audit: type=1326 audit(1541960955.664:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16443 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 537.654778] audit: type=1326 audit(1541960955.694:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16411 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x20) 18:29:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$unix(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)=@file={0x0, './bus/file0\x00'}, 0x6e, &(0x7f0000000240), 0x0, &(0x7f0000000400)}], 0x1, 0x0) 18:29:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 18:29:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) [ 538.084321] audit: type=1326 audit(1541960956.134:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16424 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:16 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) setxattr(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200)=@random={'user.', "40406d643573756d73656c66c0626465765c2d747275737465642e6e6f646576706f7369785f61636c5f61636365737300"}, &(0x7f0000000240)='\x00', 0x1, 0x0) 18:29:16 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080), 0x10000027d) unlinkat(r1, &(0x7f0000000680)='./bus\x00', 0x200) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000700)=0x1) setxattr$security_smack_entry(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='security.SMACK64IPOUT\x00', &(0x7f00000001c0)='-#,\x00', 0x4, 0x2) rename(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='./bus\x00') ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000640)) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') unlinkat(r2, &(0x7f0000000600)='./bus\x00', 0x0) mlockall(0x1) lgetxattr(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)=@random={'osx.', 'pagemap\x00'}, &(0x7f0000000500)=""/211, 0xd3) r3 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00'}) sendfile(r3, r2, &(0x7f0000000380), 0x2000005) prctl$intptr(0x0, 0x80) 18:29:16 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x800, 0x0) read$FUSE(r0, &(0x7f00000011c0), 0x1000) 18:29:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={"00ac070000000000ec973f820f7c4000", 0xb511}) fcntl$getown(0xffffffffffffffff, 0x9) close(0xffffffffffffffff) [ 538.505428] audit: type=1326 audit(1541960956.544:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16443 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:16 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="999cac0e5f57c8c8688d5692"], 0xc) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x2000}) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x4}, {0x0, 0x1}, @period={0x0, 0x0, 0x0, 0x426, 0x1, {0x3, 0x0, 0x20, 0x1}, 0x1, &(0x7f0000000080)=[0x0]}}) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000240)) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000003c0)=""/172) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYBLOB="ba"], 0x1) sendfile(r2, r2, &(0x7f00000000c0), 0xfff) 18:29:16 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x24}, 0x24}}, 0x0) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc, 0x2d0, &(0x7f0000000080), 0x0, &(0x7f0000000000), 0x11d}}], 0x4000000000001bf, 0x0) 18:29:16 executing program 1: 18:29:17 executing program 4: socket$inet6(0xa, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000), 0xc, &(0x7f00008a7000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000001040503ff0080f7fdffff2e0a0000000c000100ffffffff7f0000010c000400010022ffd4c526fdd2"], 0x2d}}, 0x0) 18:29:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001700)=[{&(0x7f0000000300)="fc", 0x1}], 0x1, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000140), 0x0, 0xc000, &(0x7f0000000200)={0x2, 0x4e23}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 18:29:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000003c00)=@newneigh={0x30, 0x1c, 0x331, 0x0, 0x0, {0xa, 0x0, 0x0, r2}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x30}}, 0x0) 18:29:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x803, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000080)=""/119, 0x77}], 0x1) write$binfmt_aout(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x181) splice(r0, 0x0, r4, 0x0, 0x7, 0x0) [ 539.315736] netlink: 'syz-executor4': attribute type 4 has an invalid length. [ 539.407186] netlink: 'syz-executor4': attribute type 4 has an invalid length. 18:29:17 executing program 2: r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001680)={&(0x7f0000000480)=@in={0x2, 0x0, @rand_addr=0x80000000}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)='m', 0x1}], 0x1, &(0x7f00000016c0)=[{0x10}], 0x10}, 0x100000000000044) 18:29:17 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080), 0x10000027d) unlinkat(r1, &(0x7f0000000680)='./bus\x00', 0x200) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000700)=0x1) setxattr$security_smack_entry(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='security.SMACK64IPOUT\x00', &(0x7f00000001c0)='-#,\x00', 0x4, 0x2) rename(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='./bus\x00') ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000640)) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') unlinkat(r2, &(0x7f0000000600)='./bus\x00', 0x0) mlockall(0x1) lgetxattr(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)=@random={'osx.', 'pagemap\x00'}, &(0x7f0000000500)=""/211, 0xd3) r3 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00'}) sendfile(r3, r2, &(0x7f0000000380), 0x2000005) prctl$intptr(0x0, 0x80) 18:29:17 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001680)={&(0x7f0000000480)=@in={0x2, 0x0, @rand_addr=0xe0000000}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)='m', 0x1}], 0x1, &(0x7f00000016c0)}, 0x0) 18:29:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000ecffbfa30000000000000c03000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d400300000000006506000001ed00001c040000000000006f460000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:29:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x803, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000080)=""/119, 0x77}], 0x1) write$binfmt_aout(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x181) splice(r0, 0x0, r4, 0x0, 0x7, 0x0) 18:29:18 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000ecffbfa30000000000001c03000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000015d40030000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:29:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 18:29:18 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) accept4(r1, 0x0, &(0x7f0000000180), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) socketpair$inet(0x2, 0x0, 0x40000010001, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r4, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000004200)={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000004280)={r5, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000002bc0)=@assoc_id=r5, &(0x7f0000002b40)) mmap(&(0x7f0000f44000/0x4000)=nil, 0x50707c, 0x1000006, 0x2013, r4, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000002a00)=[{0x6, 0x8}, {0x2, 0x5}, {0x4, 0xcd0}, {0xc, 0xea94}, {0x0, 0x3}, {0x400000000000000a, 0x100000000}, {0xa}, {0x3, 0xffffffffffff5972}], 0x8) 18:29:18 executing program 4: r0 = socket$inet6(0xa, 0x805, 0x0) sendto$inet6(r0, &(0x7f0000000100)="90", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) 18:29:18 executing program 5: 18:29:18 executing program 2: 18:29:18 executing program 5: 18:29:18 executing program 4: 18:29:19 executing program 3: 18:29:19 executing program 2: 18:29:19 executing program 5: 18:29:19 executing program 4: 18:29:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 18:29:19 executing program 5: 18:29:19 executing program 2: 18:29:19 executing program 3: 18:29:19 executing program 4: 18:29:19 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) accept4(r1, 0x0, &(0x7f0000000180), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) socketpair$inet(0x2, 0x0, 0x40000010001, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r4, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000004200)={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000004280)={r5, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000002bc0)=@assoc_id=r5, &(0x7f0000002b40)) mmap(&(0x7f0000f44000/0x4000)=nil, 0x50707c, 0x1000006, 0x2013, r4, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000002a00)=[{0x6, 0x8}, {0x2, 0x5}, {0x4, 0xcd0}, {0xc, 0xea94}, {0x0, 0x3}, {0x400000000000000a, 0x100000000}, {0xa}, {0x3, 0xffffffffffff5972}], 0x8) 18:29:19 executing program 5: 18:29:19 executing program 5: 18:29:19 executing program 4: 18:29:19 executing program 2: 18:29:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x14) 18:29:20 executing program 3: 18:29:20 executing program 5: 18:29:20 executing program 4: 18:29:20 executing program 3: 18:29:20 executing program 2: 18:29:20 executing program 5: 18:29:20 executing program 1: 18:29:20 executing program 4: 18:29:20 executing program 3: 18:29:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000180), 0x0, 0x8080, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x40}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="a9", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 18:29:20 executing program 5: 18:29:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x14) 18:29:21 executing program 3: 18:29:21 executing program 4: 18:29:21 executing program 2: 18:29:21 executing program 5: 18:29:21 executing program 1: 18:29:21 executing program 3: 18:29:21 executing program 2: 18:29:21 executing program 4: 18:29:21 executing program 5: 18:29:21 executing program 3: 18:29:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x14) 18:29:21 executing program 2: 18:29:22 executing program 1: 18:29:22 executing program 5: 18:29:22 executing program 4: 18:29:22 executing program 3: 18:29:22 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f0ce1126285739070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1}}, 0x0) 18:29:22 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) 18:29:22 executing program 1: r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00') 18:29:22 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xffffffb1) fallocate(r1, 0x3, 0x0, 0xfff8) ioctl$FICLONE(r1, 0x40049409, r1) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000580)={0x0, 0x7}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000100)={0x0, @aes256, 0x2, "5b6d03faa58d5e91"}) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) semget$private(0x0, 0x2, 0x0) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000180)=""/24) 18:29:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/83, 0x3a2}], 0x1, 0x0) 18:29:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:22 executing program 1: ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000001200)) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001400)) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff9000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) 18:29:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"6e7230010100", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xac}, {0x16}]}) 18:29:23 executing program 3: socketpair(0x10, 0x3, 0x1, &(0x7f0000000000)) 18:29:23 executing program 4: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, &(0x7f0000000040)=0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:29:23 executing program 1: socketpair(0x80000000001, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000300)='0\x00') 18:29:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x200031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)) 18:29:24 executing program 3: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8953, &(0x7f0000000040)=0x2) 18:29:24 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(r0, 0x0, 0x0, 0x0) 18:29:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"6e7230010100", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50}, {0x16}]}) 18:29:24 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f0ce1126285739070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1}}, 0x0) 18:29:24 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0xc0189436, 0xffffffffffffffff) 18:29:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:25 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote={0xfe, 0x11c4}}, 0x80, &(0x7f0000000d80), 0x0, &(0x7f0000000100)=ANY=[]}, 0x0) 18:29:25 executing program 1: socketpair(0x80000000001, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000300)='0\x00') 18:29:25 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(r0, 0x0, 0x0, 0x0) 18:29:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x1800000000000006, 0xe, 0x29, &(0x7f0000000000)="b90703e69ebf08bb64879e100800", &(0x7f0000000300)=""/41, 0x68}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000007300)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x35, &(0x7f0000000140)=""/53, 0x0, 0x0, [], 0x0, 0x9}, 0x48) 18:29:25 executing program 2: add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000180), 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000080)='Y', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000000c0)='o', 0x1) 18:29:26 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f00000034c0)='./bus\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r3, &(0x7f00000000c0), 0x8000fffffffe) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 18:29:26 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(r0, 0x0, 0x0, 0x0) 18:29:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xe2}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18, 0xffffff85}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x3f, 0xac3b42bc00d7f9cc, &(0x7f0000000000)=""/251}, 0x31) 18:29:26 executing program 2: creat(&(0x7f0000001140)='./file0\x00', 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r0}]}, 0x2c, 0x0) 18:29:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000002880)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000200)}]) [ 548.349477] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:29:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mount(&(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f0000000140)='wlan0#!\x00') 18:29:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$alg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="d3", 0x1}], 0x1, &(0x7f0000000780)}, 0x0) 18:29:29 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(r0, 0x0, 0x0, 0x0) 18:29:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f0000001a00)=ANY=[@ANYBLOB="2c00000001040501ff0080fffdffff2e0a0000000c000100010000007f0000010c000200000022ff02f10000"], 0x2c}}, 0x0) 18:29:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f00000034c0)='./bus\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r3, &(0x7f00000000c0), 0x8000fffffffe) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 18:29:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) 18:29:29 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, "6e72303db4862c67c3da87001900", 0x1}, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) 18:29:29 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) 18:29:29 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) utimensat(r0, 0x0, 0x0, 0x0) 18:29:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xafa5b07, &(0x7f0000000440), 0x2c6, &(0x7f00000001c0)}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='L', 0x1) ioctl$sock_ifreq(r1, 0x100000000089f7, &(0x7f0000000180)={'sit0\x00', @ifru_flags}) 18:29:29 executing program 3: 18:29:29 executing program 2: 18:29:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:32 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) utimensat(r0, 0x0, 0x0, 0x0) 18:29:32 executing program 5: 18:29:32 executing program 1: 18:29:32 executing program 2: 18:29:32 executing program 3: 18:29:32 executing program 3: 18:29:32 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) utimensat(r0, 0x0, 0x0, 0x0) 18:29:32 executing program 1: 18:29:32 executing program 5: 18:29:32 executing program 2: 18:29:32 executing program 3: 18:29:35 executing program 1: 18:29:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:35 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) utimensat(r0, 0x0, 0x0, 0x0) 18:29:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x5e, 0x3ff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000300), &(0x7f0000002700)}, 0x20) 18:29:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="6f57d5f2d922c6d1d57c8b", 0xb) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) recvmmsg(r1, &(0x7f0000003600)=[{{&(0x7f00000008c0)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000940)=""/230, 0xe6}], 0x1, &(0x7f0000000b40)=""/137, 0x89}}], 0x1, 0x0, &(0x7f00000038c0)) 18:29:35 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600000000044110000000000000000000000000000000000000000000000000000000000000000000420880b0000000000000800505af4f0080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], &(0x7f0000000000)) 18:29:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x5e, 0x3ff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0}, 0x20) 18:29:35 executing program 1: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) 18:29:35 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) utimensat(r0, 0x0, 0x0, 0x0) 18:29:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x5e, 0x3ff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000080), 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000300), &(0x7f0000002700)}, 0x20) 18:29:35 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000180)={@random="77b0e1efedfa", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "1f5103", 0x30, 0x2f, 0x0, @ipv4={[], [], @rand_addr}, @empty, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "c907bf", 0x0, 0x0, 0x0, @empty, @mcast1}}}}}}}, &(0x7f0000aed000)) 18:29:35 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) readv(r0, &(0x7f0000001340), 0x0) 18:29:35 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) utimensat(r0, 0x0, 0x0, 0x0) [ 558.026505] audit: type=1326 audit(1541960976.074:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16919 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 558.771920] audit: type=1326 audit(1541960976.814:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16919 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:38 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x16, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000000c0)}, 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000080)=""/94}, 0x18) 18:29:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:38 executing program 5: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000001280)=[{&(0x7f0000001140)="72b7a9f451de254795ab456f42f885291099a0cef2c81bf7328209403f56e7caa34f54081e033295856ecc31de65d938c2d5deb2728ded81cff6ed6a63c12416434054817646b5efaaaa3ea056ba1c9a0888c5bbbea37ddd48ee82f819af7ae2a64ec8", 0x63}], 0x1, &(0x7f00000012c0)=[{0xe8, 0x114, 0x1, "32ed1ea5e2daeb94dae28cf9c7432e1f3267dc6da366d352cabfb3c687ffc637992989e90e417ad5f49904d6bcfcac6290847a21f7af2e3488c6f6c21415e70e7eaf6fa816be046af21b2269c99d20dedfb35c1e4225e8bf58b3fccd2e01acae51327d8ec1654a6a49f13c100b22018ed7e8c26fac3433a789e21aaace60ebcff84ec2caa7a643efdf46a9235866e2684361ec958660635c96edc6304c7d1a433ffa9799ff585f422dbb9281f67d119ffd2421da8f047acaf68246a36bf622f548635a42fd66448e3c2ec8f676a985a7059e4754f2"}], 0xe8, 0x40}, 0x0) 18:29:38 executing program 1: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3, 0x0, 0x9000000101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xa8) sendmsg(r0, &(0x7f0000002e40)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000002880), 0x0, &(0x7f0000002940)}, 0x0) 18:29:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:29:38 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote={0xfe, 0x11c4}}, 0x80, &(0x7f0000000d80), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]}, 0x0) 18:29:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x4000000006102) truncate(&(0x7f0000000240)='./bus\x00', 0x4a00) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000200)) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) 18:29:38 executing program 5: socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000900)) 18:29:38 executing program 1: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 18:29:38 executing program 3: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) tkill(r0, 0x1b) ptrace$cont(0x9, r0, 0x0, 0x7) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:38 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(r0, 0x0, 0x0, 0x0) 18:29:38 executing program 3: write$nbd(0xffffffffffffffff, &(0x7f0000001000)=ANY=[], 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) r0 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) request_key(&(0x7f0000000380)='encrypted\x00', &(0x7f0000000480)={'syz'}, &(0x7f00000004c0)='\x00', 0xfffffffffffffffe) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x2d) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$cgroup_type(r2, &(0x7f0000000340)='threaded\x00', 0xffffffc5) lsetxattr$security_selinux(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='security.selinux\x00', &(0x7f0000000980)='system_u:object_r:unconfined_execmem_exec_t:s0\x00', 0x2f, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000200)=@random={'user.', '}\x00'}, &(0x7f00000003c0)=""/167, 0xa7) [ 560.813518] ptrace attach of "/root/syz-executor3"[16958] was attempted by "/root/syz-executor3"[16960] 18:29:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 561.271656] binder: send failed reply for transaction 46 to 16971:16972 [ 561.283200] binder: 16971:16972 ioctl c0306201 20007000 returned -14 [ 561.293629] binder: 16971:16972 ioctl c0306201 204edfd0 returned -14 [ 561.294552] binder: 16971:16976 ioctl c0306201 20007000 returned -14 [ 561.308219] binder: undelivered TRANSACTION_ERROR: 29189 18:29:41 executing program 1: 18:29:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:41 executing program 2: 18:29:41 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(r0, 0x0, 0x0, 0x0) 18:29:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000016) tkill(r1, 0x14) 18:29:41 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="08010000000000002c894ba21f000000285264982d1cdcfc8ede2a8a861cdd3fa499676ec010944340cdce6a11a5034669a15a0a40c75cec96fc1b0e5d0eb3d3e8f5c96e4d2d59c961252d41ab67473f652027c87cd221ff5288579345ab177d635bef4f06e8331f911be2d6a0329133d80610cbc644acedf1f4365721714855640cbd3108851af5654881361468eabfd3ceacbede8bec709ffbd8c2ee20f0e075b14ef0f8eea63ebac26679a0e69df5757e35ea2832f677ff9ad0a000643d84eabff6690be5d7a3fc68ee73dde8389d239998aa63c0c6440f5b1efd7cf8e6a1b54b4794ef77a964daedbdb00046e657e6a85b57076767747f11780a21f6d4aa06dbed0000000000d8000000000000001f0100000300000061552fbdf7c1e41c66ddda0655da7a014a7a19b16c563467f09fcac8dbc09ce003851221ee480b74a5ab10bbba8fbb17152e50a06ab6946864065097a560d3445114c53531562d99071aa864250692bf2c8c4107c92ce38cc988a919a629d505c560012710751e94347a725a105faaf7d8fd7bb0cdbc7f5aa3550ead60dce5a961b08b8975349de6fad2dee54f0928d40bafc2bfe487adcd8b0d4a4c89c96696745d14a8daaea0f1d31e475ae417aaaaf057ff382de74d607494dc006f4549699cdf12a700000000"], 0x1e0}, 0x0) 18:29:41 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(r0, 0x0, 0x0, 0x0) 18:29:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 563.737654] binder: send failed reply for transaction 49 to 16985:16987 [ 563.745556] binder: 16985:16987 ioctl c0306201 20007000 returned -14 18:29:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 563.801159] binder: undelivered TRANSACTION_ERROR: 29189 18:29:41 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x0) 18:29:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 18:29:42 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) utimensat(r0, 0x0, 0x0, 0x0) [ 564.044163] binder: send failed reply for transaction 51 to 16998:17000 [ 564.051516] binder: 16998:17000 ioctl c0306201 20007000 returned -14 [ 564.118293] binder: undelivered TRANSACTION_ERROR: 29189 [ 564.176405] binder: send failed reply for transaction 53 to 17003:17005 [ 564.184238] binder: 17003:17005 ioctl c0306201 20007000 returned -14 [ 564.215022] binder: undelivered TRANSACTION_ERROR: 29189 18:29:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000016) tkill(r1, 0x14) 18:29:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x13, 0x10, 0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x2c) 18:29:42 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg(r1, &(0x7f0000004f80)={&(0x7f0000004c00)=@can, 0x80, &(0x7f0000004f00), 0x0, &(0x7f0000004f40)=""/13, 0xd}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000500), 0x12) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}}, 0x80, &(0x7f0000000000), 0x1000000000000241}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='rdma.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f00000005c0)='hugetlb.2MB.usage_in_bytes\x00'}, 0x30) 18:29:42 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) utimensat(r0, 0x0, 0x0, 0x0) 18:29:42 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x0) [ 564.646985] binder: send failed reply for transaction 55 to 17016:17017 [ 564.654606] binder: 17016:17017 ioctl c0306201 20007000 returned -14 [ 564.689328] binder: undelivered TRANSACTION_ERROR: 29189 18:29:42 executing program 1: 18:29:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:42 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x0) 18:29:42 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) utimensat(r0, 0x0, 0x0, 0x0) 18:29:43 executing program 1: [ 565.146622] binder: send failed reply for transaction 57 to 17046:17048 [ 565.154872] binder: 17046:17048 ioctl c0306201 20007000 returned -14 18:29:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) utimensat(r0, 0x0, 0x0, 0x0) [ 565.222643] binder: undelivered TRANSACTION_ERROR: 29189 18:29:43 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x0) 18:29:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000016) tkill(r1, 0x14) 18:29:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) 18:29:43 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg(r1, &(0x7f0000004f80)={&(0x7f0000004c00)=@can, 0x80, &(0x7f0000004f00), 0x0, &(0x7f0000004f40)=""/13, 0xd}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000500), 0x12) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}}, 0x80, &(0x7f0000000000), 0x1000000000000241}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='rdma.max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f00000005c0)='hugetlb.2MB.usage_in_bytes\x00'}, 0x30) 18:29:43 executing program 1: 18:29:43 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) r0 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x0) 18:29:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 18:29:43 executing program 1: 18:29:44 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) r0 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x0) 18:29:44 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 18:29:44 executing program 1: 18:29:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) [ 566.313726] binder: release 17060:17062 transaction 59 out, still active [ 566.320987] binder: undelivered TRANSACTION_COMPLETE 18:29:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) 18:29:44 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) r0 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x0) [ 566.460739] binder: send failed reply for transaction 59, target dead 18:29:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000340)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') sendfile(r2, r0, &(0x7f0000000040)=0x5d, 0x239bffffffffffb) 18:29:44 executing program 1: 18:29:44 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:29:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:44 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="08010000000000002c894ba21f000000285264982d1cdcfc8ede2a8a861cdd3fa499676ec010944340cdce6a11a5034669a15a0a40c75cec96fc1b0e5d0eb3d3e8f5c96e4d2d59c961252d41ab67473f652027c87cd221ff5288579345ab177d635bef4f06e8331f911be2d6a0329133d80610cbc644acedf1f4365721714855640cbd3108851af5654881361468eabfd3ceacbede8bec709ffbd8c2ee20f0e075b14ef0f8eea63ebac26679a0e69df5757e35ea2832f677ff9ad0a000643d84eabff6690be5d7a3fc68ee73dde8389d239998aa63c0c6440f5b1efd7cf8e6a1b54b4794ef77a964daedbdb00046e657e6a85b57076767747f11780a21f6d4aa06dbed0000000000d8000000000000001f0100000300000061552fbdf7c1e41c66ddda0655da7a014a7a19b16c563467f09fcac8dbc09ce003851221ee480b74a5ab10bbba8fbb17152e50a06ab6946864065097a560d3445114c53531562d99071aa864250692bf2c8c4107c92ce38cc988a919a629d505c560012710751e94347a725a105faaf7d8fd7bb0cdbc7f5aa3550ead60dce5a961b08b8975349de6fad2dee54f0928d40bafc2bfe487adcd8b0d4a4c89c96696745d14a8daaea0f1d31e475ae417aaaaf057ff382de74d607494dc006f4549699cdf12a700000000"], 0x1e0}, 0x0) 18:29:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:45 executing program 1: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000001500)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev(r0, &(0x7f00000014c0)=[{&(0x7f00000012c0)="c0", 0x1}], 0x1, 0x0) 18:29:45 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'syzkaller0\x00', @ifru_names='ip6gretap0\x00'}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0xc200, 0x0) 18:29:45 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x8200) open(&(0x7f000000fffa)='./bus\x00', 0x14103e, 0x0) mlock2(&(0x7f000018b000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) close(r1) close(r0) [ 567.373558] binder: release 17099:17101 transaction 61 out, still active [ 567.492901] audit: type=1326 audit(1541960985.534:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17130 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) 18:29:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:45 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x0) 18:29:45 executing program 1: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000340)={0x0, 0x70, 0xc3dd, 0x8, 0x7f, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x43de7d8, 0x0, 0x0, 0x0, 0x7fffffff, 0x1f, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0xfffffffffffffff8, 0x9}, 0x8000, 0xffffffffffff2dde, 0x0, 0x5, 0x4, 0x0, 0x100000000}) clone(0x4008080400, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000003c0)='./file1\x00', 0x0, r1) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) fstat(0xffffffffffffffff, &(0x7f0000000180)) socket$inet(0x2, 0x0, 0x0) [ 567.551359] binder: send failed reply for transaction 61, target dead 18:29:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001340)='bbr\x00', 0x4) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x389756b1353686c0, 0x0, 0x0, 0xffffffffffffffeb) 18:29:45 executing program 1: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x4a, &(0x7f0000000280), 0x706) 18:29:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) [ 567.817658] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:29:45 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x0) 18:29:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"6e7230010100", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {}]}) 18:29:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(0x0, 0x14) [ 568.140463] audit: type=1326 audit(1541960986.184:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17130 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 568.170669] cgroup: fork rejected by pids controller in /syz0 18:29:46 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[{0x30, 0x0, 0x80000000, "384e33d6a94fa6a66f153d6642842316d73ee64cc78704da7f57"}], 0x30, 0x8000}, 0x8044) sendmsg$kcm(r0, &(0x7f0000001500)={&(0x7f0000001440)=@can, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001840)="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", 0x1000}], 0x1, &(0x7f0000002840)=[{0xe8, 0x0, 0x8, "caafbd54f7fce261dc151ffe3a5369bf1368d113a2e5abe476ac63bf689289c0564e053d6c52eaa5cd1a21fa66accbae0395f0889d94c605eaeae267f2d30c909f229fd954a1dcd8dfc3c180daf8b6d437cffbe2d0d3384fcfeaf80d089ae70c64a1c7df99bd210b0316a331082c29ded4b40a5dff87121ffa7a10f8d692f9af2a0ed8cbe6fde6e9641abfebcf423e27e0f08370231a2eecc3decff9373669799432a30b5c332275481e00061e091498f6c87a55cd808dbab7b646b951c9982f9a674c31c178e1d86965acb948837ab9ee81016d67a0"}], 0xe8, 0x4}, 0x0) 18:29:46 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="08010000000000002c894ba21f000000285264982d1cdcfc8ede2a8a861cdd3fa499676ec010944340cdce6a11a5034669a15a0a40c75cec96fc1b0e5d0eb3d3e8f5c96e4d2d59c961252d41ab67473f652027c87cd221ff5288579345ab177d635bef4f06e8331f911be2d6a0329133d80610cbc644acedf1f4365721714855640cbd3108851af5654881361468eabfd3ceacbede8bec709ffbd8c2ee20f0e075b14ef0f8eea63ebac26679a0e69df5757e35ea2832f677ff9ad0a000643d84eabff6690be5d7a3fc68ee73dde8389d239998aa63c0c6440f5b1efd7cf8e6a1b54b4794ef77a964daedbdb00046e657e6a85b57076767747f11780a21f6d4aa06dbed0000000000d8000000000000001f0100000300000061552fbdf7c1e41c66ddda0655da7a014a7a19b16c563467f09fcac8dbc09ce003851221ee480b74a5ab10bbba8fbb17152e50a06ab6946864065097a560d3445114c53531562d99071aa864250692bf2c8c4107c92ce38cc988a919a629d505c560012710751e94347a725a105faaf7d8fd7bb0cdbc7f5aa3550ead60dce5a961b08b8975349de6fad2dee54f0928d40bafc2bfe487adcd8b0d4a4c89c96696745d14a8daaea0f1d31e475ae417aaaaf057ff382de74d607494dc006f4549699cdf12a700000000"], 0x1e0}, 0x0) [ 568.480136] binder: release 17152:17155 transaction 63 out, still active [ 568.487277] binder: undelivered TRANSACTION_COMPLETE 18:29:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(0x0, 0x14) 18:29:46 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@in6={0xa, 0x4e22, 0x0, @mcast1}, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001880)=[{0x10}], 0x10, 0x1}, 0x8000) 18:29:46 executing program 5: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1, &(0x7f0000000000)}, 0x0) recvmsg$kcm(r0, &(0x7f0000001200)={&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000f80)=""/203, 0xcb}, {&(0x7f0000001080)=""/188, 0xbc}, {&(0x7f0000001600)=""/4096, 0x1100}, {&(0x7f0000000200)=""/128, 0x80}], 0x5, &(0x7f00000011c0)=""/40, 0x28}, 0x0) recvmsg(r0, &(0x7f0000005c00)={&(0x7f0000004900)=@can, 0x80, &(0x7f0000005b80)}, 0x0) [ 568.654748] binder: send failed reply for transaction 63, target dead 18:29:46 executing program 4: r0 = socket$kcm(0x2, 0x1000000000000805, 0x84) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000006c0)=@in={0x2, 0x0, @loopback=0xa1414aa}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400), 0x1ecac}], 0x1, &(0x7f0000002a40)}, 0x0) 18:29:46 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="08010000000000002c894ba21f000000285264982d1cdcfc8ede2a8a861cdd3fa499676ec010944340cdce6a11a5034669a15a0a40c75cec96fc1b0e5d0eb3d3e8f5c96e4d2d59c961252d41ab67473f652027c87cd221ff5288579345ab177d635bef4f06e8331f911be2d6a0329133d80610cbc644acedf1f4365721714855640cbd3108851af5654881361468eabfd3ceacbede8bec709ffbd8c2ee20f0e075b14ef0f8eea63ebac26679a0e69df5757e35ea2832f677ff9ad0a000643d84eabff6690be5d7a3fc68ee73dde8389d239998aa63c0c6440f5b1efd7cf8e6a1b54b4794ef77a964daedbdb00046e657e6a85b57076767747f11780a21f6d4aa06dbed0000000000d8000000000000001f0100000300000061552fbdf7c1e41c66ddda0655da7a014a7a19b16c563467f09fcac8dbc09ce003851221ee480b74a5ab10bbba8fbb17152e50a06ab6946864065097a560d3445114c53531562d99071aa864250692bf2c8c4107c92ce38cc988a919a629d505c560012710751e94347a725a105faaf7d8fd7bb0cdbc7f5aa3550ead60dce5a961b08b8975349de6fad2dee54f0928d40bafc2bfe487adcd8b0d4a4c89c96696745d14a8daaea0f1d31e475ae417aaaaf057ff382de74d607494dc006f4549699cdf12a700000000"], 0x1e0}, 0x0) [ 568.825451] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor5'. [ 568.834874] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor5'. [ 568.893257] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor5'. [ 568.910107] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor5'. [ 568.974504] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor5'. [ 568.983718] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor5'. [ 568.997804] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor5'. [ 569.008299] binder: send failed reply for transaction 65 to 17197:17200 18:29:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(0x0, 0x14) [ 569.021152] binder: undelivered TRANSACTION_ERROR: 29189 18:29:47 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) set_robust_list(&(0x7f0000000180)={&(0x7f0000000040)={&(0x7f0000000500)}, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)}}, 0xc) [ 569.102786] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor5'. 18:29:47 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 18:29:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:47 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)) 18:29:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:47 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x0) [ 569.430915] audit: type=1326 audit(1541960987.474:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17210 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:47 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) wait4(0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)) [ 569.615131] audit: type=1326 audit(1541960987.664:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17217 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 569.680989] binder: send failed reply for transaction 67 to 17226:17227 [ 569.693132] binder: undelivered TRANSACTION_ERROR: 29189 18:29:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:47 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="08010000000000002c894ba21f000000285264982d1cdcfc8ede2a8a861cdd3fa499676ec010944340cdce6a11a5034669a15a0a40c75cec96fc1b0e5d0eb3d3e8f5c96e4d2d59c961252d41ab67473f652027c87cd221ff5288579345ab177d635bef4f06e8331f911be2d6a0329133d80610cbc644acedf1f4365721714855640cbd3108851af5654881361468eabfd3ceacbede8bec709ffbd8c2ee20f0e075b14ef0f8eea63ebac26679a0e69df5757e35ea2832f677ff9ad0a000643d84eabff6690be5d7a3fc68ee73dde8389d239998aa63c0c6440f5b1efd7cf8e6a1b54b4794ef77a964daedbdb00046e657e6a85b57076767747f11780a21f6d4aa06dbed0000000000d8000000000000001f0100000300000061552fbdf7c1e41c66ddda0655da7a014a7a19b16c563467f09fcac8dbc09ce003851221ee480b74a5ab10bbba8fbb17152e50a06ab6946864065097a560d3445114c53531562d99071aa864250692bf2c8c4107c92ce38cc988a919a629d505c560012710751e94347a725a105faaf7d8fd7bb0cdbc7f5aa3550ead60dce5a961b08b8975349de6fad2dee54f0928d40bafc2bfe487adcd8b0d4a4c89c96696745d14a8daaea0f1d31e475ae417aaaaf057ff382de74d607494dc006f4549699cdf12a700000000"], 0x1e0}, 0x0) 18:29:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) [ 569.914607] audit: type=1326 audit(1541960987.964:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17229 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 570.121623] binder: send failed reply for transaction 69 to 17234:17238 [ 570.131163] audit: type=1326 audit(1541960988.184:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17210 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 570.133012] binder: undelivered TRANSACTION_ERROR: 29189 18:29:48 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="08010000000000002c894ba21f000000285264982d1cdcfc8ede2a8a861cdd3fa499676ec010944340cdce6a11a5034669a15a0a40c75cec96fc1b0e5d0eb3d3e8f5c96e4d2d59c961252d41ab67473f652027c87cd221ff5288579345ab177d635bef4f06e8331f911be2d6a0329133d80610cbc644acedf1f4365721714855640cbd3108851af5654881361468eabfd3ceacbede8bec709ffbd8c2ee20f0e075b14ef0f8eea63ebac26679a0e69df5757e35ea2832f677ff9ad0a000643d84eabff6690be5d7a3fc68ee73dde8389d239998aa63c0c6440f5b1efd7cf8e6a1b54b4794ef77a964daedbdb00046e657e6a85b57076767747f11780a21f6d4aa06dbed0000000000d8000000000000001f0100000300000061552fbdf7c1e41c66ddda0655da7a014a7a19b16c563467f09fcac8dbc09ce003851221ee480b74a5ab10bbba8fbb17152e50a06ab6946864065097a560d3445114c53531562d99071aa864250692bf2c8c4107c92ce38cc988a919a629d505c560012710751e94347a725a105faaf7d8fd7bb0cdbc7f5aa3550ead60dce5a961b08b8975349de6fad2dee54f0928d40bafc2bfe487adcd8b0d4a4c89c96696745d14a8daaea0f1d31e475ae417aaaaf057ff382de74d607494dc006f4549699cdf12a700000000"], 0x1e0}, 0x0) 18:29:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:48 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)) [ 570.331966] audit: type=1326 audit(1541960988.374:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17217 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:48 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) symlink(&(0x7f0000000180)='./control\x00', &(0x7f00000001c0)='./control\x00') unlink(&(0x7f0000000040)='./control\x00') [ 570.577009] binder: release 17248:17250 transaction 71 out, still active [ 570.589795] binder: send failed reply for transaction 71, target dead [ 570.605069] audit: type=1326 audit(1541960988.654:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17251 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:48 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="08010000000000002c894ba21f000000285264982d1cdcfc8ede2a8a861cdd3fa499676ec010944340cdce6a11a5034669a15a0a40c75cec96fc1b0e5d0eb3d3e8f5c96e4d2d59c961252d41ab67473f652027c87cd221ff5288579345ab177d635bef4f06e8331f911be2d6a0329133d80610cbc644acedf1f4365721714855640cbd3108851af5654881361468eabfd3ceacbede8bec709ffbd8c2ee20f0e075b14ef0f8eea63ebac26679a0e69df5757e35ea2832f677ff9ad0a000643d84eabff6690be5d7a3fc68ee73dde8389d239998aa63c0c6440f5b1efd7cf8e6a1b54b4794ef77a964daedbdb00046e657e6a85b57076767747f11780a21f6d4aa06dbed0000000000d8000000000000001f0100000300000061552fbdf7c1e41c66ddda0655da7a014a7a19b16c563467f09fcac8dbc09ce003851221ee480b74a5ab10bbba8fbb17152e50a06ab6946864065097a560d3445114c53531562d99071aa864250692bf2c8c4107c92ce38cc988a919a629d505c560012710751e94347a725a105faaf7d8fd7bb0cdbc7f5aa3550ead60dce5a961b08b8975349de6fad2dee54f0928d40bafc2bfe487adcd8b0d4a4c89c96696745d14a8daaea0f1d31e475ae417aaaaf057ff382de74d607494dc006f4549699cdf12a700000000"], 0x1e0}, 0x0) 18:29:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(r0, 0x14) [ 570.859352] audit: type=1326 audit(1541960988.904:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17258 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x4000000006102) truncate(&(0x7f0000000240)='./bus\x00', 0x4a00) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) 18:29:49 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x0) [ 571.085446] binder: release 17267:17269 transaction 73 out, still active [ 571.096947] binder: send failed reply for transaction 73, target dead 18:29:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(r0, 0x14) 18:29:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4000000006102) truncate(&(0x7f0000000240)='./bus\x00', 0x4a00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) 18:29:49 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="08010000000000002c894ba21f000000285264982d1cdcfc8ede2a8a861cdd3fa499676ec010944340cdce6a11a5034669a15a0a40c75cec96fc1b0e5d0eb3d3e8f5c96e4d2d59c961252d41ab67473f652027c87cd221ff5288579345ab177d635bef4f06e8331f911be2d6a0329133d80610cbc644acedf1f4365721714855640cbd3108851af5654881361468eabfd3ceacbede8bec709ffbd8c2ee20f0e075b14ef0f8eea63ebac26679a0e69df5757e35ea2832f677ff9ad0a000643d84eabff6690be5d7a3fc68ee73dde8389d239998aa63c0c6440f5b1efd7cf8e6a1b54b4794ef77a964daedbdb00046e657e6a85b57076767747f11780a21f6d4aa06dbed0000000000d8000000000000001f0100000300000061552fbdf7c1e41c66ddda0655da7a014a7a19b16c563467f09fcac8dbc09ce003851221ee480b74a5ab10bbba8fbb17152e50a06ab6946864065097a560d3445114c53531562d99071aa864250692bf2c8c4107c92ce38cc988a919a629d505c560012710751e94347a725a105faaf7d8fd7bb0cdbc7f5aa3550ead60dce5a961b08b8975349de6fad2dee54f0928d40bafc2bfe487adcd8b0d4a4c89c96696745d14a8daaea0f1d31e475ae417aaaaf057ff382de74d607494dc006f4549699cdf12a700000000"], 0x1e0}, 0x0) [ 571.442898] audit: type=1326 audit(1541960989.484:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17251 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 571.463165] binder: release 17279:17280 transaction 75 out, still active [ 571.475087] binder: send failed reply for transaction 75, target dead 18:29:49 executing program 1: setitimer(0x0, &(0x7f0000000200)={{0x0, 0x2710}}, &(0x7f0000000240)) 18:29:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 571.847487] binder: 17297:17298 transaction failed 29189/-22, size 0-0 line 2855 18:29:50 executing program 5: rt_sigaction(0x0, &(0x7f00000000c0)={&(0x7f0000000000)="8f2830861a0b66470f3a14bf0000804108c461a8588100000000c441fc52bf0f000000c40225983ec42125f2a0b5f358923689357900000026f046f69200000100c422e99625a9d4860266430f3a0f1009", {}, 0x0, &(0x7f0000000080)="0ff151006741d9ee3ef2410f10eb2ed0b8b2090000640fdc0a400f9675a2c4c37d052f000f8e00800000c4627d32ad71b200000f840c000080"}, &(0x7f00000001c0)={&(0x7f0000000240)="660f3a0f3f00400f1d9a00000000260f38cb7110c402313fa90000008065f08085008000000cc46221be70ab0fb2aad02b8b4b430fd9ee6566400f73d4cb653e46d9f6", {}, 0x0, &(0x7f0000000180)="c44299ac2f6426430f38cad467f2a200000100c4012611e14519c50feea0ff82000008f066470f381c9e008000003646d9f8c4e3c95cb169000000e2"}, 0x36f, &(0x7f0000000200)) 18:29:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(r0, 0x14) 18:29:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x801}, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3e3, 0x400000000000) 18:29:50 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="08010000000000002c894ba21f000000285264982d1cdcfc8ede2a8a861cdd3fa499676ec010944340cdce6a11a5034669a15a0a40c75cec96fc1b0e5d0eb3d3e8f5c96e4d2d59c961252d41ab67473f652027c87cd221ff5288579345ab177d635bef4f06e8331f911be2d6a0329133d80610cbc644acedf1f4365721714855640cbd3108851af5654881361468eabfd3ceacbede8bec709ffbd8c2ee20f0e075b14ef0f8eea63ebac26679a0e69df5757e35ea2832f677ff9ad0a000643d84eabff6690be5d7a3fc68ee73dde8389d239998aa63c0c6440f5b1efd7cf8e6a1b54b4794ef77a964daedbdb00046e657e6a85b57076767747f11780a21f6d4aa06dbed0000000000d8000000000000001f0100000300000061552fbdf7c1e41c66ddda0655da7a014a7a19b16c563467f09fcac8dbc09ce003851221ee480b74a5ab10bbba8fbb17152e50a06ab6946864065097a560d3445114c53531562d99071aa864250692bf2c8c4107c92ce38cc988a919a629d505c560012710751e94347a725a105faaf7d8fd7bb0cdbc7f5aa3550ead60dce5a961b08b8975349de6fad2dee54f0928d40bafc2bfe487adcd8b0d4a4c89c96696745d14a8daaea0f1d31e475ae417aaaaf057ff382de74d607494dc006f4549699cdf12a700000000"], 0x1e0}, 0x0) 18:29:50 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='Y', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000300)="aa", 0x1) 18:29:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 572.263359] binder: 17312:17320 transaction failed 29189/-22, size 0-0 line 2855 18:29:50 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(r0, 0x14) 18:29:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x70}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfffffea6) 18:29:50 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote={0xfe, 0x11c4}}, 0x80, &(0x7f0000000d80), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000000000002900000002000000000000000000000000000000000000000000000000000000"], 0x28}, 0x0) 18:29:50 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x0, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="08010000000000002c894ba21f000000285264982d1cdcfc8ede2a8a861cdd3fa499676ec010944340cdce6a11a5034669a15a0a40c75cec96fc1b0e5d0eb3d3e8f5c96e4d2d59c961252d41ab67473f652027c87cd221ff5288579345ab177d635bef4f06e8331f911be2d6a0329133d80610cbc644acedf1f4365721714855640cbd3108851af5654881361468eabfd3ceacbede8bec709ffbd8c2ee20f0e075b14ef0f8eea63ebac26679a0e69df5757e35ea2832f677ff9ad0a000643d84eabff6690be5d7a3fc68ee73dde8389d239998aa63c0c6440f5b1efd7cf8e6a1b54b4794ef77a964daedbdb00046e657e6a85b57076767747f11780a21f6d4aa06dbed0000000000d8000000000000001f0100000300000061552fbdf7c1e41c66ddda0655da7a014a7a19b16c563467f09fcac8dbc09ce003851221ee480b74a5ab10bbba8fbb17152e50a06ab6946864065097a560d3445114c53531562d99071aa864250692bf2c8c4107c92ce38cc988a919a629d505c560012710751e94347a725a105faaf7d8fd7bb0cdbc7f5aa3550ead60dce5a961b08b8975349de6fad2dee54f0928d40bafc2bfe487adcd8b0d4a4c89c96696745d14a8daaea0f1d31e475ae417aaaaf057ff382de74d607494dc006f4549699cdf12a700000000"], 0x1e0}, 0x0) 18:29:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000940)=[{0x10}], 0x10, 0x20000841}, 0x80) 18:29:50 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(r0, 0x14) [ 572.845984] binder: 17337:17338 transaction failed 29189/-22, size 0-0 line 2855 18:29:50 executing program 1: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000ec0)={&(0x7f0000000e80)='./file0\x00'}, 0x186) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x800000000002, 0x0) recvmsg$kcm(r0, &(0x7f0000002c00)={&(0x7f00000017c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001900)=""/210, 0xd2}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000001380)={&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001280)=""/243, 0xf3}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1, &(0x7f0000002c40)=ANY=[]}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x28, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x100, 0x0, 0x6, 0x0, 0x100000000, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x6, 0x2, 0x4, 0x75, 0x0, 0xba7c, 0x0, 0x0, 0x600000, 0x0, 0x6e, 0x0, 0x7, 0x0, 0xae54, 0x0, 0x8, 0x0, 0x40000, 0x4, 0x1f, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x20000000d, 0x7, @perf_bp={&(0x7f0000000280)}, 0x1, 0x7, 0x0, 0x6, 0x5, 0x2fd, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)="6370757365342e6566666563746976037e4921be13655f6d656d7300", 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0xfffffffffffffffe) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0494e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000200), 0xd14cc5addfad2f5d) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$kcm(0x10, 0x1000000000000002, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000480)={'team0\x00', 0x4110}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) socketpair(0x1, 0x5, 0x1, &(0x7f0000000500)={0xffffffffffffffff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r1, 0x5, 0x10}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1b, 0x4004, 0x2, &(0x7f00000004c0)) write$cgroup_int(r4, &(0x7f0000000100)=0x7, 0x12) close(r7) 18:29:51 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$kcm(0x11, 0x800000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x0) 18:29:51 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x18, 0x9}}, &(0x7f0000000240)=""/172, 0x1a, 0xac}, 0x20) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x541b, 0x70effd) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) 18:29:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:51 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(r0, 0x14) 18:29:51 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x0) 18:29:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x70}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) [ 573.465622] binder: 17358:17359 transaction failed 29189/-22, size 0-0 line 2855 18:29:51 executing program 5: 18:29:51 executing program 1: 18:29:51 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:52 executing program 5: 18:29:52 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[]}, 0x0) 18:29:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:52 executing program 1: 18:29:52 executing program 4: 18:29:52 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) [ 574.345070] binder: 17388:17390 transaction failed 29189/-22, size 0-0 line 2855 18:29:52 executing program 5: 18:29:52 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[]}, 0x0) 18:29:52 executing program 1: 18:29:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:52 executing program 4: 18:29:52 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:52 executing program 5: [ 574.938733] binder: 17406:17408 transaction failed 29189/-22, size 0-0 line 2855 18:29:53 executing program 1: 18:29:53 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[]}, 0x0) 18:29:53 executing program 4: 18:29:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:53 executing program 5: 18:29:53 executing program 1: 18:29:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(r0, 0x14) [ 575.453697] binder: 17425:17427 transaction failed 29189/-22, size 0-0 line 2855 18:29:53 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB]}, 0x0) 18:29:53 executing program 4: 18:29:53 executing program 5: 18:29:53 executing program 1: 18:29:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:54 executing program 1: [ 575.996004] binder: 17445:17446 transaction failed 29189/-22, size 0-0 line 2855 18:29:54 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB]}, 0x0) 18:29:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(r0, 0x14) 18:29:54 executing program 4: 18:29:54 executing program 5: 18:29:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:54 executing program 4: 18:29:54 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB]}, 0x0) [ 576.538246] binder: 17461:17462 transaction failed 29189/-22, size 0-0 line 2855 18:29:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) tkill(r0, 0x14) 18:29:54 executing program 5: 18:29:54 executing program 1: 18:29:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:54 executing program 4: 18:29:55 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="08010000000000002c894ba21f000000285264982d1cdcfc8ede2a8a861cdd3fa499676ec010944340cdce6a11a5034669a15a0a40c75cec96fc1b0e5d0eb3d3e8f5c96e4d2d59c961252d41ab67473f652027c87cd221ff5288579345ab177d635bef4f06e8331f911be2d6a0329133d80610cbc644acedf1f4365721714855640cbd3108851af5654881361468eabfd3ceacbede8bec709ffbd8c2ee20f0e075b14ef0f8eea63ebac26679a0e69df5757e35ea2832f677ff9ad0a000643d84eabff6690be5d7a3fc68ee73dde8389d239998aa63c0c6440f5b1efd7cf8e6a1b54b4794ef77a964daedbdb00046e657"], 0xf0}, 0x0) 18:29:55 executing program 1: 18:29:55 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 18:29:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000440)="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") r1 = openat$cgroup_ro(r0, &(0x7f0000000140)="6d656d0001792f060000000000000016d442abe3fa72656e7400", 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 18:29:55 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="08010000000000002c894ba21f000000285264982d1cdcfc8ede2a8a861cdd3fa499676ec010944340cdce6a11a5034669a15a0a40c75cec96fc1b0e5d0eb3d3e8f5c96e4d2d59c961252d41ab67473f652027c87cd221ff5288579345ab177d635bef4f06e8331f911be2d6a0329133d80610cbc644acedf1f4365721714855640cbd3108851af5654881361468eabfd3ceacbede8bec709ffbd8c2ee20f0e075b14ef0f8eea63ebac26679a0e69df5757e35ea2832f677ff9ad0a000643d84eabff6690be5d7a3fc68ee73dde8389d239998aa63c0c6440f5b1efd7cf8e6a1b54b4794ef77a964daedbdb00046e657e6a85b57076767747f11780a21f6d4aa06dbed0000000000d8000000000000001f0100000300000061552fbdf7c1e41c66ddda0655da7a014a7a19b16c563467f09fcac8dbc09ce003851221ee480b74a5ab10bbba8fbb17152e50a06ab6946864065097a560d3445114c53531562d99071aa864250692bf"], 0x168}, 0x0) 18:29:55 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4000010004002) read(r1, &(0x7f0000000100)=""/210, 0xd2) [ 577.433526] kauditd_printk_skb: 1 callbacks suppressed [ 577.433656] audit: type=1326 audit(1541960995.484:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17486 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:55 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fchmod(r0, 0x0) 18:29:55 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1a4}, 0x0) 18:29:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) [ 578.044232] audit: type=1326 audit(1541960996.094:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17486 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 578.238770] audit: type=1326 audit(1541960996.284:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17519 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:56 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) mkdir(&(0x7f0000000040)='./control\x00', 0x0) chdir(&(0x7f0000000180)='./control\x00') 18:29:56 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="08010000000000002c894ba21f000000285264982d1cdcfc8ede2a8a861cdd3fa499676ec010944340cdce6a11a5034669a15a0a40c75cec96fc1b0e5d0eb3d3e8f5c96e4d2d59c961252d41ab67473f652027c87cd221ff5288579345ab177d635bef4f06e8331f911be2d6a0329133d80610cbc644acedf1f4365721714855640cbd3108851af5654881361468eabfd3ceacbede8bec709ffbd8c2ee20f0e075b14ef0f8eea63ebac26679a0e69df5757e35ea2832f677ff9ad0a000643d84eabff6690be5d7a3fc68ee73dde8389d239998aa63c0c6440f5b1efd7cf8e6a1b54b4794ef77a964daedbdb00046e657e6a85b57076767747f11780a21f6d4aa06dbed0000000000d8000000000000001f0100000300000061552fbdf7c1e41c66ddda0655da7a014a7a19b16c563467f09fcac8dbc09ce003851221ee480b74a5ab10bbba8fbb17152e50a06ab6946864065097a560d3445114c53531562d99071aa864250692bf2c8c4107c92ce38cc988a919a629d505c560012710751e94347a725a105faaf7d8fd7bb0cdbc7f5aa3550ead60dce5a961b08b8975349de6fad2dee54f0928d40bafc2bfe487adcd8b0d4a4c89c96696745d14a8daaea0f1d31e"], 0x1c2}, 0x0) 18:29:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) [ 578.449843] binder: 17529:17531 transaction failed 29189/-22, size 0-0 line 2855 18:29:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000440)="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") r1 = openat$cgroup_ro(r0, &(0x7f0000000140)="6d656d0001792f060000000000000016d442abe3fa72656e7400", 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 578.593677] audit: type=1326 audit(1541960996.644:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17532 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:56 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1d1}, 0x0) [ 578.970296] binder: 17549:17551 transaction failed 29189/-22, size 0-0 line 2855 18:29:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:57 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000100)={0x2}, 0x8, 0x0) 18:29:57 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1d9}, 0x0) 18:29:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 579.442212] audit: type=1326 audit(1541960997.484:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17532 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 579.517840] audit: type=1326 audit(1541960997.524:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17559 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:57 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1dd}, 0x0) [ 579.606857] binder: 17570:17571 transaction failed 29189/-22, size 0-0 line 2855 18:29:57 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) unlinkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) 18:29:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000300)="76626f786e65743070726f636370757365747d73797374146d7070703123657468312b00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"}) 18:29:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:29:58 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x800000002, 0x0) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000840)=@in6={0xa, 0x0, 0x5, @local}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1df}, 0x0) [ 579.971902] audit: type=1326 audit(1541960998.014:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17577 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 580.043049] binder: 17582:17583 transaction failed 29189/-22, size 0-0 line 2855 18:29:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 580.235255] audit: type=1326 audit(1541960998.284:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17559 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:58 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) setrlimit(0x0, &(0x7f0000000000)) 18:29:58 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000900)) [ 580.541223] binder: 17600:17602 transaction failed 29189/-22, size 0-0 line 2855 [ 580.586108] audit: type=1326 audit(1541960998.634:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17603 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:58 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:29:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) [ 580.727513] audit: type=1326 audit(1541960998.774:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17605 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:29:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:58 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) 18:29:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0xffffffffffffffff, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) [ 581.081331] binder: 17621:17623 transaction failed 29189/-22, size 0-0 line 2855 18:29:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0xffffffffffffffff, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) [ 581.344751] binder: 17630:17631 transaction failed 29189/-22, size 0-0 line 2855 18:29:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:29:59 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'dummy0\x00', 0x5}, 0xfffffffffffffe7d) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x100000008936, &(0x7f0000000000)) 18:29:59 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'dummy0\x00', 0x5}, 0xfffffffffffffe7d) ioctl(r1, 0x8916, &(0x7f0000000000)) 18:29:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0xffffffffffffffff, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) [ 581.771229] binder_alloc: 17642: binder_alloc_buf, no vma [ 581.777239] binder: 17642:17643 transaction failed 29189/-3, size 0-0 line 2970 18:30:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x8000) 18:30:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:30:00 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'dummy0\x00', 0x5}, 0xfffffffffffffe7d) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x100000008936, &(0x7f0000000000)) [ 582.258061] binder: BINDER_SET_CONTEXT_MGR already set [ 582.263663] binder: 17665:17667 ioctl 40046207 0 returned -16 18:30:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) [ 582.317880] binder_alloc: 17642: binder_alloc_buf, no vma [ 582.323941] binder: 17665:17667 transaction failed 29189/-3, size 0-0 line 2970 18:30:00 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)) getgroups(0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff]) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file2\x00', &(0x7f0000000280)='fuseblk\x00', 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="2c6d61785f726561643d307830303061785fe0d6e546062c9126ae4dbbebc26b6a11e94f45eff524f419161e25ecf068f257bf78c797cf43c0a512d6566e98c73ec613f2602af8448398126fab509534e6058c771a48802222b79caab51120c2a8c691ef13e21d24b3027825c01d6d26c2592c18e6d26ae74caf9bd625aceecb426f7125527d767d27b1d853f3033946d75269df394c997391033d57804601f439f542a9719a411f5621196be4029b2b5b15f5fc88bf9ecc"]) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x8000, @mcast1}, 0x1c) chroot(&(0x7f0000000040)='./file2\x00') sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) execve(&(0x7f0000000440)='./file1\x00', &(0x7f0000000540)=[&(0x7f0000000480)='\x00', &(0x7f00000004c0)='wlan0eth1\x00', &(0x7f0000000500)='mime_type&+security\x00'], &(0x7f00000005c0)=[&(0x7f0000000580)='/proc/self/net/pfkey\x00']) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x0, &(0x7f0000001880), 0x1c) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000780)=@known='trusted.overlay.upper\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x20, 0x0, 0x102, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc}]}, 0x20}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 18:30:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) connect(r0, &(0x7f0000000080)=@hci, 0x80) 18:30:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$setstatus(r0, 0x4, 0x42000) 18:30:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:30:00 executing program 5: 18:30:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) [ 582.916718] binder: release 17685:17688 transaction 106 out, still active [ 582.933562] binder: send failed reply for transaction 106, target dead 18:30:01 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000940)="f87f8e77105e8703d47c3dbf0724162f624b2ac5dc0df3f69c6def6917fc26eab5875f74809ab876d641c6fbc322fe12e4dec84fc955c93594320f9d8c15"}, 0x20) r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f00000000c0)='cpuset\\self$\'\x00', 0x0}, 0x30) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x4, 0xa, 0xfff, &(0x7f00000004c0)) socketpair(0x0, 0x0, 0x400, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000740)={0x5, 0x70, 0x401, 0x4, 0x8, 0x101, 0x0, 0x7e9, 0x0, 0x8, 0x0, 0x7, 0x6, 0x8001, 0x7f, 0x8001, 0x80000000, 0x8, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x10001, 0x7, 0x5, 0x400, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x9, 0x6, 0x0, 0x0, 0xbb35, 0x5, @perf_bp={&(0x7f0000000200), 0x9}, 0x20, 0x0, 0x8, 0x7, 0x6, 0x4, 0x8}, r0, 0x8, r2, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)={&(0x7f0000000100)='./file0\x00'}, 0x10) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() close(r3) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000600)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) getpid() ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x811}) socketpair(0x9, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'\x00', 0x400}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)=r1, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) write$cgroup_type(r4, &(0x7f0000001900)="746888646164656400", 0xfdef) 18:30:01 executing program 5: getpid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49794de18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3ec4d2e8d443c82fc3435bed4de5d69409a781c863e0fd8a6f868925be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a441a2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0cf816930de3675d34117a44eb0e4f832936da44e63e1160af1acf45db1cdf4bcbbede795db798c61db61e23f") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"6e72300100", 0x2101}) 18:30:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:30:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:30:01 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000940)="f87f8e77105e8703d47c3dbf0724162f624b2ac5dc0df3f69c6def6917fc26eab5875f74809ab876d641c6fbc322fe12e4dec84fc955c93594320f9d8c15"}, 0x20) r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f00000000c0)='cpuset\\self$\'\x00'}, 0x30) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x4, 0xa, 0xfff, &(0x7f00000004c0)) socketpair(0x0, 0x0, 0x400, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000740)={0x5, 0x70, 0x401, 0x4, 0x8, 0x101, 0x0, 0x7e9, 0x800, 0x8, 0x0, 0x7, 0x6, 0x8001, 0x7f, 0x8001, 0x80000000, 0x8, 0x2, 0x7, 0x1, 0x1, 0x8, 0x1ff, 0x10001, 0x7, 0x0, 0x400, 0x4, 0x20, 0x1, 0x0, 0x80000001, 0x3, 0x0, 0x9, 0x6, 0x0, 0x0, 0xbb35, 0x5, @perf_bp={&(0x7f0000000200), 0x9}, 0x20, 0x0, 0x8, 0x7, 0x6, 0x4, 0x8}, r0, 0x8, r2, 0x1) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000005c0)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)={&(0x7f0000000100)='./file0\x00'}, 0x10) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() close(r3) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000600)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x811}) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000007c0)) recvmsg$kcm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)=""/57, 0x39}], 0x1, &(0x7f0000001a40)=""/4096, 0x1000}, 0x0) socketpair(0x9, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) write$cgroup_type(r5, &(0x7f0000001900)="746888646164656400", 0xfdef) [ 583.461149] binder: release 17706:17711 transaction 108 out, still active [ 583.473611] binder: send failed reply for transaction 108, target dead 18:30:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 583.800154] binder: release 17726:17727 transaction 110 out, still active [ 583.813332] binder: send failed reply for transaction 110, target dead [ 584.441965] ¹á6›Íaï~IyMá‡ì: renamed from nr0 18:30:02 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x7, 0x3}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=@raw, &(0x7f00000001c0)='GPL\x00', 0x0, 0xfb, &(0x7f0000000080)=""/251}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 18:30:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:30:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:30:02 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e0"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f00000009c0)='./file0/file0\x00'}, 0x2) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x34, 0x29, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", &(0x7f00000000c0)=""/41, 0x100}, 0x28) socketpair(0x7, 0x0, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'rose0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) socketpair(0x3, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'eql\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x0, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="b702002000001f00bfa3ff954df0fff8ff6f0100000000000000b2590ae8f64fd3478aed22b470ab0f570295ffffffff2d640500006504040011000000e9040000f200000000000000000000000000"], &(0x7f0000000340)='GPL\x00'}, 0x48) recvmsg(r4, &(0x7f0000000700)={&(0x7f0000000540)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000780)=""/137, 0x89}, {&(0x7f0000000840)=""/138, 0x8a}, {&(0x7f0000000600)=""/29, 0x1d}, {&(0x7f0000000900)=""/173, 0xad}], 0x4, 0x0, 0x0, 0xfffffffffffffeff}, 0x10000) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36b, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0x6}, 0x0, 0x0, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f75702e7374617400e9d7453f32b909f6a8", 0x2761, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) ioctl$TUNSETLINK(r2, 0x400454cd, 0x20d) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)='cpuacct.usage\x00', 0x2, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000b80)) [ 584.813893] binder: release 17750:17753 transaction 112 out, still active [ 584.825731] binder: send failed reply for transaction 112, target dead 18:30:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:30:03 executing program 5: 18:30:03 executing program 3: 18:30:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:30:03 executing program 4: [ 585.403450] binder: release 17772:17773 transaction 114 out, still active [ 585.417716] binder: send failed reply for transaction 114, target dead 18:30:03 executing program 5: 18:30:03 executing program 3: 18:30:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x14) 18:30:03 executing program 4: 18:30:03 executing program 1: 18:30:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:30:03 executing program 5: 18:30:04 executing program 3: 18:30:04 executing program 4: 18:30:04 executing program 1: [ 586.132712] binder: release 17793:17795 transaction 116 out, still active [ 586.143746] binder: send failed reply for transaction 116, target dead 18:30:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000016) tkill(r1, 0x14) 18:30:04 executing program 5: 18:30:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:30:04 executing program 4: 18:30:04 executing program 1: 18:30:04 executing program 3: 18:30:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000016) tkill(r1, 0x14) 18:30:04 executing program 5: [ 586.773444] binder: send failed reply for transaction 118 to 17812:17814 [ 586.802176] binder: undelivered TRANSACTION_ERROR: 29189 18:30:05 executing program 3: 18:30:05 executing program 4: 18:30:05 executing program 1: 18:30:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:30:05 executing program 5: 18:30:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000016) tkill(r1, 0x14) 18:30:05 executing program 3: 18:30:05 executing program 1: [ 587.458900] binder: send failed reply for transaction 120 to 17832:17836 [ 587.470662] binder: undelivered TRANSACTION_ERROR: 29189 18:30:05 executing program 5: 18:30:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x0) tkill(r1, 0x14) 18:30:05 executing program 4: 18:30:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:30:05 executing program 3: 18:30:05 executing program 5: 18:30:06 executing program 1: [ 587.977889] binder: send failed reply for transaction 122 to 17848:17851 [ 588.002493] binder: undelivered TRANSACTION_ERROR: 29189 18:30:06 executing program 4: 18:30:06 executing program 3: 18:30:06 executing program 5: 18:30:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x0) tkill(r1, 0x14) 18:30:06 executing program 3: 18:30:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:30:06 executing program 1: 18:30:06 executing program 4: 18:30:06 executing program 5: 18:30:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x0) tkill(r1, 0x14) 18:30:06 executing program 3: 18:30:06 executing program 1: 18:30:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100)) 18:30:07 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/150, 0x96) 18:30:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:30:07 executing program 3: 18:30:07 executing program 1: 18:30:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(0x0, 0x14) [ 589.370740] kauditd_printk_skb: 5 callbacks suppressed [ 589.370778] audit: type=1326 audit(1541961007.414:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17893 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:30:07 executing program 5: 18:30:07 executing program 3: 18:30:07 executing program 1: timer_create(0x2, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) timer_gettime(0x0, &(0x7f0000000040)) 18:30:07 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x800007) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) removexattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)=@random={'system.', '[,.-%)^^bdev\x00'}) 18:30:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(0x0, 0x14) 18:30:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:30:08 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) getitimer(0x0, &(0x7f0000000000)) [ 590.144391] audit: type=1326 audit(1541961008.194:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17893 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 590.230235] audit: type=1326 audit(1541961008.224:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17925 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:30:08 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) prlimit64(0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)) 18:30:08 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 18:30:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(0x0, 0x14) 18:30:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 590.521922] audit: type=1326 audit(1541961008.564:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17942 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:30:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 18:30:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x0) 18:30:08 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)={{}, {0x77359400}}) 18:30:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 591.053217] audit: type=1326 audit(1541961009.094:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17957 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:30:09 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x800007) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) removexattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)=@random={'system.', '[,.-%)^^bdev\x00'}) 18:30:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x0) 18:30:09 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = getpgid(0x0) r1 = getpid() kcmp(r0, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 18:30:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x0, 0x0, &(0x7f0000003fe8)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 591.331475] audit: type=1326 audit(1541961009.374:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17942 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 591.512680] audit: type=1326 audit(1541961009.554:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17972 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 18:30:09 executing program 4: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) rt_sigreturn() 18:30:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000180)) ptrace(0x10, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) tkill(r1, 0x0) [ 591.756808] PANIC: double fault, error_code: 0x0 [ 591.761686] CPU: 1 PID: 17987 Comm: syz-executor4 Not tainted 4.19.0+ #82 [ 591.768650] ================================================================== [ 591.776035] BUG: KMSAN: uninit-value in irq_work_claim+0x153/0x390 [ 591.782383] CPU: 1 PID: 17987 Comm: syz-executor4 Not tainted 4.19.0+ #82 [ 591.789303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.798656] Call Trace: [ 591.801232] <#DF> [ 591.803384] dump_stack+0x32d/0x480 [ 591.807009] ? irq_work_claim+0x153/0x390 [ 591.811167] kmsan_report+0x19f/0x300 [ 591.814975] kmsan_internal_check_memory+0x35f/0x450 [ 591.820080] ? __msan_poison_alloca+0x1e0/0x2b0 [ 591.824762] kmsan_check_memory+0xd/0x10 [ 591.828824] irq_work_claim+0x153/0x390 [ 591.832807] irq_work_queue+0x44/0x280 [ 591.836699] vprintk_emit+0x693/0x790 [ 591.840509] vprintk_default+0x90/0xa0 [ 591.844397] vprintk_func+0x26b/0x2a0 [ 591.848206] printk+0x1a3/0x1f0 [ 591.851506] dump_stack_print_info+0x2c4/0x3c0 [ 591.856096] show_regs_print_info+0x37/0x40 [ 591.860423] show_regs+0x38/0x170 [ 591.863878] df_debug+0x86/0xb0 [ 591.867158] do_double_fault+0x362/0x480 [ 591.871221] double_fault+0x1e/0x30 [ 591.874848] RIP: 0010:kmsan_get_origin_address+0xa/0x370 [ 591.880293] Code: eb fe 0f 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 <41> 54 53 48 83 ec 10 48 89 75 c8 48 89 fb 49 bc 00 00 00 00 00 78 [ 591.899192] RSP: 0018:fffffe000003d000 EFLAGS: 00010086 [ 591.904555] RAX: 00000000000001a8 RBX: 0000000000000000 RCX: 0000000000000001 [ 591.911818] RDX: 0000000000000001 RSI: 0000000000000088 RDI: fffffe000003d150 [ 591.919086] RBP: fffffe000003d018 R08: 0000000000000000 R09: 0000000000000000 [ 591.926359] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000088 [ 591.933624] R13: fffffe000003d1c0 R14: fffffe000003d1a8 R15: fffffe000003d1a8 [ 591.940901] [ 591.943128] [ 591.946415] kmsan_memmove_origins+0xbd/0x1d0 [ 591.950913] ? kmsan_memmove_shadow+0xad/0xe0 [ 591.955406] __msan_memmove+0x6c/0x80 [ 591.959204] fixup_bad_iret+0x9b/0x130 [ 591.963097] error_entry+0xad/0xc0 [ 591.966633] RIP: 0000: (null) [ 591.970529] Code: Bad RIP value. [ 591.973887] RSP: a3fb7f:00007f7087b429c0 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 591.981768] RAX: 0000000000000000 RBX: ffffffff8ae00e58 RCX: 000000000040393c [ 591.989031] RDX: 04e84cb58c568700 RSI: 0000000000000000 RDI: 0000000000000000 [ 591.996294] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000072bf08 [ 592.003561] R10: 000000000072bf00 R11: 000000000072bf0c R12: 0000000000000000 [ 592.010833] R13: 000000000072bf08 R14: 000000000072bf00 R15: 000000000072bf0c [ 592.018113] ? general_protection+0x8/0x30 [ 592.022347] ? general_protection+0x8/0x30 [ 592.026586] [ 592.029952] [ 592.031573] Local variable description: ----__ai_ptr@irq_work_claim [ 592.037999] Variable was created at: [ 592.041713] irq_work_claim+0x4b/0x390 [ 592.045605] irq_work_queue+0x44/0x280 [ 592.049482] [ 592.051099] Byte 7 of 8 is uninitialized [ 592.055156] Memory access of size 8 starts at fffffe0000045a38 [ 592.061118] ================================================================== [ 592.068467] Disabling lock debugging due to kernel taint [ 592.073999] Kernel panic - not syncing: panic_on_warn set ... [ 592.073999] [ 592.081366] CPU: 1 PID: 17987 Comm: syz-executor4 Tainted: G B 4.19.0+ #82 [ 592.089674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.099035] Call Trace: [ 592.101621] <#DF> [ 592.103778] dump_stack+0x32d/0x480 [ 592.107459] panic+0x57e/0xb28 [ 592.110674] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 592.116134] kmsan_report+0x300/0x300 [ 592.119941] kmsan_internal_check_memory+0x35f/0x450 [ 592.125047] ? __msan_poison_alloca+0x1e0/0x2b0 [ 592.129722] kmsan_check_memory+0xd/0x10 [ 592.133781] irq_work_claim+0x153/0x390 [ 592.137762] irq_work_queue+0x44/0x280 [ 592.141666] vprintk_emit+0x693/0x790 [ 592.145480] vprintk_default+0x90/0xa0 [ 592.149365] vprintk_func+0x26b/0x2a0 [ 592.153167] printk+0x1a3/0x1f0 [ 592.156477] dump_stack_print_info+0x2c4/0x3c0 [ 592.161077] show_regs_print_info+0x37/0x40 [ 592.165401] show_regs+0x38/0x170 [ 592.168855] df_debug+0x86/0xb0 [ 592.172139] do_double_fault+0x362/0x480 [ 592.176203] double_fault+0x1e/0x30 [ 592.179833] RIP: 0010:kmsan_get_origin_address+0xa/0x370 [ 592.185282] Code: eb fe 0f 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 <41> 54 53 48 83 ec 10 48 89 75 c8 48 89 fb 49 bc 00 00 00 00 00 78 [ 592.204198] RSP: 0018:fffffe000003d000 EFLAGS: 00010086 [ 592.209560] RAX: 00000000000001a8 RBX: 0000000000000000 RCX: 0000000000000001 [ 592.216826] RDX: 0000000000000001 RSI: 0000000000000088 RDI: fffffe000003d150 [ 592.224115] RBP: fffffe000003d018 R08: 0000000000000000 R09: 0000000000000000 [ 592.231381] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000088 [ 592.238648] R13: fffffe000003d1c0 R14: fffffe000003d1a8 R15: fffffe000003d1a8 [ 592.245921] [ 592.248150] [ 592.251429] kmsan_memmove_origins+0xbd/0x1d0 [ 592.255925] ? kmsan_memmove_shadow+0xad/0xe0 [ 592.260418] __msan_memmove+0x6c/0x80 [ 592.264221] fixup_bad_iret+0x9b/0x130 [ 592.268116] error_entry+0xad/0xc0 [ 592.271648] RIP: 0000: (null) [ 592.275539] Code: Bad RIP value. [ 592.278898] RSP: a3fb7f:00007f7087b429c0 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 592.286782] RAX: 0000000000000000 RBX: ffffffff8ae00e58 RCX: 000000000040393c [ 592.294055] RDX: 04e84cb58c568700 RSI: 0000000000000000 RDI: 0000000000000000 [ 592.301321] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000072bf08 [ 592.308585] R10: 000000000072bf00 R11: 000000000072bf0c R12: 0000000000000000 [ 592.315859] R13: 000000000072bf08 R14: 000000000072bf00 R15: 000000000072bf0c [ 592.323130] ? general_protection+0x8/0x30 [ 592.327364] ? general_protection+0x8/0x30 [ 592.331607] [ 592.336174] Kernel Offset: disabled [ 592.339806] Rebooting in 86400 seconds..