[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 13.478100] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.474109] random: sshd: uninitialized urandom read (32 bytes read) [ 18.857826] random: sshd: uninitialized urandom read (32 bytes read) [ 19.487085] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.36' (ECDSA) to the list of known hosts. [ 25.180854] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/28 00:37:55 fuzzer started [ 26.562830] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/28 00:37:57 dialing manager at 10.128.0.26:38051 2018/08/28 00:37:59 syscalls: 1 2018/08/28 00:37:59 code coverage: enabled 2018/08/28 00:37:59 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/28 00:37:59 setuid sandbox: enabled 2018/08/28 00:37:59 namespace sandbox: enabled 2018/08/28 00:37:59 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/08/28 00:37:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/28 00:37:59 net packed injection: enabled 2018/08/28 00:37:59 net device setup: enabled [ 30.156745] random: crng init done 00:38:28 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4000, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) r1 = request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffe) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="407c4c0e550942fb26f38c9885513a60557731851653c744b3c1449778d246e2d8a4e2633303439f15e3bbba0c82b2b38af2cd1e1473edb316b2be9e881b3b4359568592ae389beba3aedc20c9878377f98de825c038bfdffaa2ce441aacb28d074fef7d5770cdd1adc69820", 0x6c, r1) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @mcast1, 0x81}, 0x1c) fstatfs(r0, &(0x7f0000000280)=""/65) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@ipv4={[], [], @dev}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) getgroups(0x6, &(0x7f0000000440)=[0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00]) write$FUSE_ATTR(r0, &(0x7f0000000480)={0x78, 0x0, 0x2, {0xaa9, 0x59, 0x0, {0x5, 0x7fff, 0x15d, 0xfe, 0x0, 0x1, 0x9, 0x5, 0xffff, 0x1, 0x47b, r3, r4, 0x9, 0x81}}}, 0x78) getsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000500), &(0x7f0000000540)=0x4) mq_notify(r0, &(0x7f0000000700)={0x0, 0x3b, 0x1, @thr={&(0x7f0000000580)="8db0abb3c78bf3ac8214a78cbf5dec352a26b502402e13a7dd9d0e6d1e700d0ced41b9e6db5f7fb93817d3245e48e0dcf9c2a1df1daf33a45b41f1fc43bea5931193cdc8b8e2bd4f8912f8fc096446eb8a396ce865a4329d81ac7ac48e271df4692020b9bfb9d85677edf733a8c00cde223de7685a437a399f45f5aa450493709326c83fe03b9fe37779d706f052536bac05610af444f398c8517b7175c9c5afc5fcb7ee5932097fb5531158c5cb65adcf35ffe182b1bb", &(0x7f0000000640)="996aa3253caed74ec51bf09bc07225d8171b20aaea874883855723dca6a9e38042c2f1389e83d7ad50c8822c314d71c83fb4d36c2bd12cd8320c39199c4d4b6c00ad4090c8f685f11f7a5d8cb2cd8d232ad321f4394f1d305ff78d8b6b6d57df855847a2a219a641acd9698d32fc31bb508bc283d02fac95097cfd3f32e5116870b2bfc80c2500a6814518d9ab9758649300d1f6e68deaaebd465acf07d23aa6f9e0caa9d0fd6639fc6c4af818f8"}}) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0x1010, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000740)={0x8, 0x7f}) sendto$packet(r0, &(0x7f0000000780)="833e97077aabec1896afe9d3fd515841ef04f18d8480a738bb87bfb94b3a3942f13c957412984c17a19ba43649483904b18bb4e619a1b25d75addbab68c1a66b5b37519c5ec18e47d8b6a7cfa5f877e64b511669cc2ae57ebde22bb1016d9db0040e7e1adc15533d36789b15e42bd86f8a86fb327234ff7fc479cc16734d125bbeee5733e78250", 0x87, 0x800, &(0x7f0000000840)={0x11, 0x17, r2, 0x1, 0xfffffffffffffff9}, 0x14) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000880)={0xe, 0xa, 0x2, 0xffffffffffffff80, 0xdc, "7c9d1a9a5a700de6c3b4544f4e859f279505288deeffac790cbfd544b2e4a062185d1f606b90d14de17a3f8b36a42f6e08f1bd02d10b414f2aedcf13be0c0c6873eb958da95c79ec5a5bea4c7511dadac224e9a10e6fe9e3c9a5fc5767dc25d707c7677279fbaebec9e4fb6e9e6c6347cc976d7720aa4c800faeb2dd42c1e6a038a7dd6e014392c654c9901a896465002e1714c60875507c453426120ab94d7f6c7e6bf42fd5a58420e8817ef7d782ae905fd1a29c9187c0395a8bafbee15bb549ed32f0f45f25466e584b4c1b9f6f63535ef6d3697e9a95001668c4"}, 0xe8) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000009c0)) preadv(r5, &(0x7f0000001e00)=[{&(0x7f0000000a00)=""/241, 0xf1}, {&(0x7f0000000b00)=""/156, 0x9c}, {&(0x7f0000000bc0)=""/56, 0x38}, {&(0x7f0000000c00)=""/199, 0xc7}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/238, 0xee}], 0x6, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000001e40)) r6 = syz_open_pts(r0, 0x404000) symlinkat(&(0x7f0000001e80)='./file0\x00', r0, &(0x7f0000001ec0)='./file0\x00') ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000001f00)=0x0) mq_notify(r0, &(0x7f0000001f40)={0x0, 0x3b, 0x2, @tid=r7}) r8 = dup(r5) remap_file_pages(&(0x7f0000f6d000/0x3000)=nil, 0x3000, 0xc, 0x9, 0x0) fcntl$setstatus(r0, 0x4, 0x4800) ppoll(&(0x7f0000001f80)=[{r6, 0x280}, {r0, 0x20}, {r5, 0x4024}, {r6}, {r0}, {r0, 0x2200}], 0x6, &(0x7f0000001fc0)={0x0, 0x1c9c380}, &(0x7f0000002000)={0x401}, 0x8) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000002040)="c96043e7487fe07f383f3c8e2b5c9f65", 0x10) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000002080)=""/27) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000023c0)={0xd4, 0x0, &(0x7f0000002280)=[@transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000020c0), &(0x7f0000002100)=[0x0, 0x20]}}, @reply={0x40406301, {0x1, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002140), &(0x7f0000002180)=[0x48, 0x40]}}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x28, 0x18, &(0x7f0000002200)=[@ptr={0x70742a85, 0x0, &(0x7f00000021c0), 0x1, 0x4, 0x2b}], &(0x7f0000002240)=[0x0, 0x40, 0x38]}, 0x83b0}}], 0x38, 0x0, &(0x7f0000002380)="cdb2550228bac02dcdaaf839f912dabdb8c6d9a2c44937c80c342ad7fef248881ccf90aae9e43050a892f29018040f2e269dc763d36743b9"}) 00:38:28 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r0, r1) 00:38:28 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2f8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x8}, 0x14) mkdir(&(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x10000, &(0x7f0000000780)={0x77359400}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000006c0)={{0x2, 0x4e23, @local}, {0x306, @local}, 0x28, {}, 'veth0_to_bond\x00'}) open(&(0x7f0000000340)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0, 0x4) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000180)={0x3fd}) timer_create(0x2, &(0x7f0000000600)={0x0, 0x3c, 0x0, @thr={&(0x7f00000003c0)="d09e566861415302d4b98aba791bdc724574aad556bad2d8cc776ae0c50023d41376", &(0x7f00000005c0)}}, &(0x7f0000000640)) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) gettid() ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000580)={'team_slave_0\x00', 0x200}) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000240)=ANY=[], 0x0) dup2(r2, r1) 00:38:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000140)=0x10) 00:38:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xfffb, 0x1b, 0x0, 0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) 00:38:28 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000596000)=0x9, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00009abffc), 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bridge\x00', 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 00:38:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x121043, 0x0) flock(r0, 0x0) 00:38:28 executing program 2: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f00000000c0)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000300000068000200cf", 0x1f) [ 58.451381] IPVS: Creating netns size=2536 id=1 [ 58.505746] IPVS: Creating netns size=2536 id=2 [ 58.552868] IPVS: Creating netns size=2536 id=3 [ 58.585360] IPVS: Creating netns size=2536 id=4 [ 58.633377] IPVS: Creating netns size=2536 id=5 [ 58.700526] IPVS: Creating netns size=2536 id=6 [ 58.760861] IPVS: Creating netns size=2536 id=7 [ 58.828159] IPVS: Creating netns size=2536 id=8 [ 59.110913] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.172777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.345113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.434349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.444839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.514832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.558664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.590711] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.673957] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.740436] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.751609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.764611] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.800819] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.816517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.857591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.868131] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.881013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.909866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.926053] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.949942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.958253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.978037] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.987660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.018416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.029407] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.043786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.060450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.094668] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.118251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.139590] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.167258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.182356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.230818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.238893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.260398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.274182] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.293823] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.314348] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.324008] ip (4376) used greatest stack depth: 22888 bytes left [ 60.342907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.351408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.358907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.367918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.377863] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.388219] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.398582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.409490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.417296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.424939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.434807] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.442400] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.456688] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.476330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.497961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.505442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.534522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.549378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.615468] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.637747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.648751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.682747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.690346] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.697649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.714569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.732802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.740268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.779606] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.788481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.808257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.820722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.829081] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.841584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.852865] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.860511] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.875142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.888011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.901912] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.910946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.925709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.933548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.953329] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.961228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.968705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.981110] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.990144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.997676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.015153] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.023714] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.041884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.049397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.064625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.072187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.081979] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.105429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.114939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.497209] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.638065] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.656336] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.715588] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.732425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.739175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.925286] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.938770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.946250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.961356] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.971639] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 63.984774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.994743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.016729] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.139081] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.159127] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.167993] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.176324] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 64.195674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.204853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.259561] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.266896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.274096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.360340] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.366504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.374852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.395093] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.402847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.409573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.434175] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 64.446092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.457130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.374725] mmap: syz-executor7 (5869) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 00:38:35 executing program 7: r0 = socket$inet6(0xa, 0x100000003, 0xff) sendto$inet6(r0, &(0x7f0000000000)="6d718bab41211a147b9402318501fa52dca387411d9900fe57d6e2b3e714290ce911601f5f9697e5", 0x28, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) 00:38:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) r1 = getpgrp(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r1) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000300)='E', 0x1, 0x1, 0x0, 0x0) 00:38:35 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001bfc8)={&(0x7f0000001540), 0xc, &(0x7f00004e1000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{0x0, 0x0, 0x1f}, 'syz1\x00', 0x24}) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000, 0x2100, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x5}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:38:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x400000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 00:38:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") clock_adjtime(0x0, &(0x7f0000f8d000)={0xfffffffffffffffd}) 00:38:36 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6eac1f47cb223ef7c700", 0x2}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[]) 00:38:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f}, 0x20}}, 0x0) 00:38:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000840)="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", 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000f80), &(0x7f0000000fc0)=0x14) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@ipv4={[], [], @loopback}, 0x4e24, 0x0, 0x4e23, 0xa07d, 0xa, 0xd2e26a9d6a60f3c4, 0x20, 0x2f}, {0x4, 0x3, 0x831, 0x2000000000, 0x1, 0x5, 0x5, 0x81}, {0x401, 0x7, 0x8, 0x7ee}, 0x8, 0x6e6bbc, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d3}, 0xa, @in6=@mcast2, 0x3503, 0x2, 0x1, 0x2, 0x0, 0x7, 0xe7c6}}, 0xe8) r1 = syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a0bcb98a3e1f46fd51b139d755efce9768b84ea75c2ff4b3c85caef374d126a56fa4743af7ef55c846bfe7dd16072d260ffddcc8a6d22e02f44d6a360524b86b51a4b58afca35f12201adb024bfb20fbd364e78a232fbef31595029f755740ab15e173dc73ba964a4189007c7c40db8fb4b64dd8ec4d366") epoll_create(0x4) fcntl$setstatus(r1, 0x4, 0x4000) sendfile(r0, r1, &(0x7f0000000040), 0x1080005000) 00:38:36 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x200400000000011, @broadcast, 0x0, 0x0, 'dh\x00'}, 0x2c) 00:38:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x4000000001c, &(0x7f00000001c0)={@remote}, 0x14) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000014000000003000000000000001f000001e0000001"], 0x1c) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000231000)={@multicast2, @loopback, @multicast1}, 0xc) 00:38:36 executing program 4: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x2000000141042, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000200)=0xc) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) r2 = gettid() ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000340)=[0x3, 0x8]) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000140)=""/60, 0x3c}], 0x2) sched_getattr(r2, &(0x7f0000000000), 0x30, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0xfffffffffffffff7) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000000c0)=0x8000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x38d) [ 65.820579] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:38:36 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x48000, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000100)=""/161) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r1 = gettid() memfd_create(&(0x7f0000000000)='\x00', 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) prctl$seccomp(0x16, 0x1, &(0x7f00000000c0)={0x0, &(0x7f0000000200)}) 00:38:36 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x40, 0x4, 0x5}}, 0x14) inotify_init() ioctl$UFFDIO_COPY(r0, 0x4004556e, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil}) 00:38:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) read(r0, &(0x7f0000000d00)=""/4096, 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@broadcast, @rand_addr, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001d00)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001e00)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000002040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000020c0)={'ip6gretap0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000002100)={0x0, @remote, @multicast2}, &(0x7f0000002140)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000002340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002300)={&(0x7f0000002180)={0x16c, r3, 0x129, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x104, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x1, 0x2, 0x8c, 0x6}, {0x6, 0x4, 0x20, 0x7}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r9}}}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) tkill(r1, 0x1000000000013) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 00:38:36 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r2, &(0x7f000000d000)=@abs={0x1}, 0x8) prctl$void(0x27) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockname$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x1}, 0x8) [ 66.049143] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 66.066173] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 66.098204] input: syz1 as /devices/virtual/input/input4 00:38:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x113, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x8, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0xbe5f19d277ad053f) r1 = memfd_create(&(0x7f0000000000)='[$[^+vmnet0vmnet0selfuser\\([\x00', 0xfffffffffffffffd) ftruncate(r1, 0x40001) sendfile(r0, r1, &(0x7f0000000180), 0xfffffffffffffb3d) 00:38:36 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={r0, 0x0, 0x3, 0xfffffffffffffffa, 0x8}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xfffffffffffffffd}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000013000)=0x221) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000000)=0x44) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 00:38:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="032000000000000008001b0000000000c3bd3964fff21d663ddc26d5a1b2bfd121c741081cf190265f3490e25fedffbb88e70001090c250043958bffca707a6caa6ad5002679bf7344372532404f0b9fb0b3fb649b0960ef36390fa5638cf5f46c3eff9e03cc11dfd7e1a13dfd1f8ce890a4162a5495e6"], 0x1}}, 0x0) dup2(r1, r0) 00:38:36 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000b4df0818d907a07cff546fa012dad46f58d36e673b083ec4876acf0b0399fbce14843d1d4d15a8d3154045c99a7f13888cb460885840164ebb0d095985d0eea92f37d4554019f204b1b61402ec997ef5173f5d"], 0x8) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=@dstopts, 0x8) 00:38:36 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x8c01, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000100)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 00:38:36 executing program 6: prctl$intptr(0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2000, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) fstatfs(r0, &(0x7f0000000080)=""/206) 00:38:36 executing program 2: clone(0x200, &(0x7f0000000100), &(0x7f0000000100), &(0x7f0000fef000), &(0x7f0000000180)) mknod(&(0x7f00000000c0)='./file0\x00', 0x103e, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') getuid() preadv(r0, &(0x7f00000027c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x8, 0x0) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 66.167464] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:38:36 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x8c01, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000100)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 00:38:36 executing program 7: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x3, 0x0, 0x4, 0x1, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000040)=[{0x24}, {0x6}]}, 0x8) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x4e21, 0x80000000, @local, 0x5}, {0xa, 0x2, 0x5d94, @empty, 0x7}, 0x7fffffff, [0x80, 0x1000, 0x8, 0x1, 0x3, 0x9, 0x0, 0xe2b]}, 0x5c) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x5) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000100)="4599d162", 0x4}, {&(0x7f0000000140)="b70501b9ce5f814ef1bb16d26f9b01de7a5e754d17244755d6f4741ef0bd4d313559d26ef61e971593edc62940ea7c2655e5d813068d5b7e690d0cc68b99ff21e37d58c500b4c9e4d30d23aeaaa12b6de1c678d3261743633459015765959ddd874ed1e77ad99ac35277e8e099427e7db6780b0a02eb79384974cb73fae068d878568a493965f9ebd63d52766e3e6336590d1ac61a30f5ff", 0x98}, {&(0x7f0000000200)="764b8a70fb3946", 0x7}], 0x3, 0x4) sysinfo(&(0x7f0000000340)=""/119) 00:38:36 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x6, 0x414100) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000004001400"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = geteuid() getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) lchown(&(0x7f0000000040)='./file0\x00', r2, r3) 00:38:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000db2000/0x2000)=nil, 0x2000, 0x2800000, 0x32, r0, 0x200000000000002) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/251) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000001c0)=""/5) 00:38:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc0000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) sendmsg$nl_generic(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)={0x344, 0x3c, 0x70b, 0x70bd25, 0x25dfdbfe, {0x1c}, [@generic="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", @typed={0x8, 0x61, @ipv4=@remote}, @nested={0x114, 0x8a, [@generic="59305ba8a1533b997faa5d143405de9f81132939de1bd50c42f90101a92ab72a7545e05beb97b94a16322445321f354b1b89f2f6e41eeef71056b3eb3c427fa508112ce84247d3d4946d53130398ae337ab083bc12d30e", @generic="8bb07314", @typed={0x4, 0x6f}, @typed={0x8, 0x7e, @pid=r2}, @typed={0x4, 0x46}, @typed={0xc, 0x2, @u64=0xff}, @generic="498b004c054bf9a75072061ce7c2068423f40647eb372dd371529cea97b588ec92d08855d298d68d52ada2c12d9b38192a894da75580398b81c7e8794118b2cb4ed8be72760fd6f02dd23d07b33e52171027caf59830327ef18126d64fe5ccd8b1a7e35c1cf80ca177d76eb63662d37a9fbdee351d5f4cfd560d9900963e6c0feea122c9b72d04c2fef85c870465fba1577af37ff2f73af4"]}, @nested={0x118, 0x2b, [@generic="7671e138", @generic="05fb4dc70b79bf678e1bae26d7c3043f8862897ecbe6633196e474cb7d35a6b20ac25008fddd441cd1d858b363f8752c66dd4fdeb925e4907ee97de2963ae7e8b4dd9f7c0462d930bad97316db8eef23c73e735637ee10e57d5c4186bf47891c8e728c989a58e6cd", @typed={0x8, 0x6e, @u32=0x6}, @generic="d4894eddf9e639d3bd6fb95cbaa1141862121f35ee1857dfb0ffb64aeeca69a59172ab63ad51e4a97eee472ccad8cfebcefedbc8925fbc0a49f14bf5be2bccbdafa6e03c5fe083490646ac100a45950ff1d7f032e4fcf41ea1877c55ac4404c9876998cecae85d48eaf0d74ec852f16e9f5cf5fc6bb41919e5c66f63384502e33d05ee5b401ac5f70d0a0408b124165b73ad5817fe9c15568bb9b8e54de4"]}]}, 0x344}, 0x1, 0x0, 0x0, 0x240008d5}, 0x40) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) sendmmsg(r0, &(0x7f0000009940)=[{{&(0x7f0000001940)=@un=@abs, 0x80, &(0x7f0000001c80), 0x0, &(0x7f0000001cc0)=[{0x344, 0x0, 0x0, "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"}], 0x344}}], 0x1, 0x0) 00:38:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x80000001, 0x521280) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x8) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x30000, 0x0) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f00000001c0)=0x100000000, 0x4) close(r0) 00:38:36 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:38:36 executing program 7: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x400, 0x4) 00:38:36 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x6, 0x7, 0x6e, 'queue0\x00', 0x9}) r1 = socket$inet(0x2, 0x2, 0x0) shutdown(r1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4004240b, &(0x7f00000000c0)={0x0, 0x70, 0x4, 0x8000, 0x4c2, 0x2, 0x0, 0xfff, 0x1000, 0x1, 0xfffffffffffffffc, 0x31c0c95d, 0xde71, 0xa27e, 0x3, 0x7, 0x3, 0x8c, 0x100000000, 0x1, 0x1, 0x5, 0xffffffffffffffc1, 0x80000000, 0x80000000, 0x1, 0x3b, 0x0, 0x7, 0xfff, 0xf59, 0xcfe4, 0x80000001, 0x99, 0x2000, 0x4, 0xff, 0x8000, 0x0, 0x400000000000, 0x2, @perf_config_ext={0xf0dd, 0x1}, 0x800, 0x1ff, 0x40, 0x0, 0x8f, 0x80, 0x80000000}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='ip_vti0\x00', 0x10) syncfs(0xffffffffffffffff) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)) symlinkat(&(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file0\x00') recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 00:38:36 executing program 6: fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f000074fffc)=0x200, 0x4) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x3) sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) 00:38:36 executing program 7: prctl$intptr(0x18, 0x20) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@empty, @multicast1}, 0x8) 00:38:36 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x222000, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18, 0x0, 0x4, {0x7f}}, 0x18) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffffffffffffffd}) [ 66.398489] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:38:36 executing program 5: prctl$intptr(0x1c, 0x337e000000000000) 00:38:36 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ioctl$void(r0, 0xc004587f) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) fcntl$notify(r0, 0x402, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00') ptrace$pokeuser(0x6, r1, 0x121, 0x0) 00:38:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x80000001, 0x521280) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x8) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x30000, 0x0) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f00000001c0)=0x100000000, 0x4) close(r0) [ 66.451310] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 66.462441] capability: warning: `syz-executor7' uses deprecated v2 capabilities in a way that may be insecure 00:38:36 executing program 2: clone(0x200, &(0x7f0000000100), &(0x7f0000000100), &(0x7f0000fef000), &(0x7f0000000180)) mknod(&(0x7f00000000c0)='./file0\x00', 0x103e, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') getuid() preadv(r0, &(0x7f00000027c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x8, 0x0) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:38:36 executing program 6: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/user\x00', 0x2, 0x0) lseek(r0, 0xfffffffffffffffd, 0x0) fcntl$setstatus(r0, 0x4, 0x6c00) r1 = dup3(r0, r0, 0x80000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000000)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) 00:38:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg(r1, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000000180)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000080)=[{0x10, 0x29, 0x8, "7b89"}], 0x10}}], 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000040)=0xe8) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, r3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x488201, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000100)={0x7, 0x80000000}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 00:38:36 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffffffffffff, @mcast1, 0x7fff}, 0x1c) 00:38:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000479000)="890528e4", 0x4) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x2f9a, 0x0, 0x0, 0x10, 0x18, "af81bb2a0b827e389160da34f3c13a9f4b8560a68e4fea58b3108d16c82bb7234a633916f1d50f3bc54b373c82c7f5f3531c1efceb2e0fc52e8211bc548b2250", "d9a101364dec29526accda77ae98923863215aeb1a0427c13ab02e1166d80dfc424fc1c4f69217693251d6e5f0de6299f6d7659847a98809724fa2c163b4188e", "162fbe1908566a24306431ef0094a1ca2c11d305d35ce2ec56ed79aeb64f5629", [0x40a, 0xba02]}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x2be, 0x4) keyctl$set_reqkey_keyring(0xe, 0x7) 00:38:36 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x108) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) sendfile(r1, r1, &(0x7f0000000100)=0x2, 0x2b) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000080)) 00:38:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) sendfile(r1, r0, &(0x7f0000000240), 0x2000005) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80000, 0x0) 00:38:37 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x17, 0x0, &(0x7f0000000040)}) 00:38:37 executing program 6: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e23, 0xb2a, @remote}}, 0x80, 0x4f6f, 0x5, "ab7ca74c7ac21ed0ebb949079ebce7c5c13ff242fce540a9d342e8f01960656c1793478cc8957940096bd77546b62d9983410390c8243f3b13f6cd218777df819939cf8bf7f8abbeee9ff5ec3b27b19c"}, 0xd8) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1, 0xa, 0xffffffffffffffff}, 0x14}}, 0x0) [ 66.561470] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:38:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000ac0)=@xdp, 0x80, &(0x7f0000000840)=[{&(0x7f0000000000)=""/140, 0x8c}, {&(0x7f0000000400)=""/218, 0xda}, {&(0x7f0000000100)=""/175, 0xaf}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/218, 0xda}], 0x6}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={&(0x7f00000001c0), 0xc, &(0x7f00000013c0)={&(0x7f0000000200)=@ipv6_getanyicast={0x14, 0x12, 0x105}, 0x14}}, 0x0) 00:38:37 executing program 6: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e23, 0xb2a, @remote}}, 0x80, 0x4f6f, 0x5, "ab7ca74c7ac21ed0ebb949079ebce7c5c13ff242fce540a9d342e8f01960656c1793478cc8957940096bd77546b62d9983410390c8243f3b13f6cd218777df819939cf8bf7f8abbeee9ff5ec3b27b19c"}, 0xd8) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1, 0xa, 0xffffffffffffffff}, 0x14}}, 0x0) 00:38:37 executing program 6: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000140)={0x1, 0x1000, 0x200, 0xd85}, 0x10) socketpair$inet(0x2, 0x3, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000080)=0x800, 0x4) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000200)=0x50) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000240)=0x10, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r3, &(0x7f00000000c0), 0xc) 00:38:37 executing program 2: clone(0x200, &(0x7f0000000100), &(0x7f0000000100), &(0x7f0000fef000), &(0x7f0000000180)) mknod(&(0x7f00000000c0)='./file0\x00', 0x103e, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') getuid() preadv(r0, &(0x7f00000027c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x8, 0x0) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:38:37 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x108) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) sendfile(r1, r1, &(0x7f0000000100)=0x2, 0x2b) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000080)) 00:38:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000100001010000e8ffffff000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000005001a0004000000"], 0x3}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x28) openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) 00:38:37 executing program 6: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000340)="f0252cf29e87c852f26894faef724e63aecb73e83c9a78b57b0a66e4a96579ce6d61cfb6aa17eeaa2d9d2b94ddaa013148cceafcfa6e16f774cdbba905c29cc09a7c75956f50dae6be9dc66c556f1c52896df51e06115f2031cf2f256142189fbce12e189d3a6fd7c00538ab360d7d9d43598d203a69582a02", 0x79, 0x0) fchdir(r0) 00:38:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) process_vm_writev(r1, &(0x7f0000000300)=[{&(0x7f0000000100)=""/23, 0x17}, {&(0x7f0000000180)=""/8, 0x8}, {&(0x7f00000001c0)=""/165, 0xa5}, {&(0x7f0000000280)=""/97, 0x61}], 0x4, &(0x7f0000002640)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/139, 0x8b}, {&(0x7f0000001580)=""/164, 0xa4}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x4, 0x0) fremovexattr(r0, &(0x7f0000000340)=@known='security.evm\x00') fallocate(r0, 0x8000039, 0x80000001, 0xfffffffffffffffe) readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/20, 0x227) connect$l2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e21, 0x101, @empty, 0xfffffffffffffff8}}}, 0x32) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0x80046601, &(0x7f00000000c0)=ANY=[]) write(r0, &(0x7f0000000380)="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", 0x117) 00:38:37 executing program 3: r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) futex(&(0x7f0000000040)=0x2, 0xd, 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) write(r0, &(0x7f0000000440)="0795040000000029a77ce74fb58ddf0000356317b447d19ecd38b972a4220aae9720fe2c59e090b66f8fc48c26002c72a757a85b0700000000000000023f0683a2aaa95f07af2c1e2f6d8908a5c49f3bab530e4f0c9cb2132921a990c280a0a51026fdf0bcbb42fe7d1cac2de0a2ac10a227215111cfda0f5da7859c1c642728f507011ebaa2595f08573737293465bf5ad2438acab8bef2f0", 0x99) sendfile(r0, r0, &(0x7f0000001000), 0x10002) dup2(r0, r0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100)=0x8001, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="39000000110009cdd19b012abd0000000000fd3f03000000450001070000001419001a00060000000000090000000000000000000000000000", 0x39}], 0x1) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000400)) 00:38:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1b, 0x0, 0x1, 0x2000000000, 0x6, @broadcast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r1 = dup(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4040840) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc), 0x4) 00:38:37 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @local}}, 0x0, 0x3, 0x0, "4317674f7c30abf6e5adab72e234887d1adba4dcf4080e2abb493f1f76e3b2ffde31b26d5eaab9210b8693c7d0863b0135acba35404711c5515db904436e30e2a4837f670a3e7bdbcbfaea4e357eb8da"}, 0xd8) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='ifb0\x00') sendto$inet(r0, &(0x7f0000a88f88), 0xa2007e93e7cabda7, 0x2000c000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 00:38:37 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1cc5bf02dc4f7bd4, 0x20) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg(r1, &(0x7f0000003580)={&(0x7f0000000200)=@can, 0x80, &(0x7f0000003480)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/205, 0xcd}, {&(0x7f0000001400)=""/112, 0x70}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x4, &(0x7f0000003500)=""/71, 0x47, 0x9}, 0x10000) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x65, 0x4) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000003d40)={0x31, 0x6, 0x0, {0x4, 0x2, 0x8, 0x0, 'vboxnet0'}}, 0x31) close(r1) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000003f40)='hybla\x00', 0xfffffffffffffeca) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000003b80)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)) mmap(&(0x7f00007fe000/0x3000)=nil, 0x3000, 0x0, 0x8132, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000800000/0x4000)=nil, 0x4000, 0x1000000) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000140)=0x1) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000300)=0x4, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendfile(r3, r4, &(0x7f0000000040), 0x8001) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000003c00)={0x5, 0x6}, 0x2) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000003b40)={&(0x7f00000035c0)=@xdp, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003740)=""/213, 0xd5}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/208, 0xd0}], 0x3, &(0x7f0000003a80)=""/155, 0x9b, 0x10000}, 0x10140) socket$inet(0x2, 0x80000, 0x7) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000180)={0x7, 0x3f, 0x80, 0x4, 0x3}) 00:38:37 executing program 2: clone(0x200, &(0x7f0000000100), &(0x7f0000000100), &(0x7f0000fef000), &(0x7f0000000180)) mknod(&(0x7f00000000c0)='./file0\x00', 0x103e, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') getuid() preadv(r0, &(0x7f00000027c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x8, 0x0) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:38:37 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$TIOCSTI(r0, 0x80247009, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz1\x00', {0x8, 0x1, 0x3, 0x5}, 0x1b, [0x0, 0x40, 0x2, 0xffffffffffffff7f, 0x1, 0x401, 0x80000000, 0x3, 0xfffffffffffffffa, 0x7ff, 0x9, 0x0, 0x3, 0x9, 0x9, 0x1ff, 0x5, 0x56, 0x5, 0x90000000000, 0x20, 0x3f, 0x20, 0x8, 0x5, 0x80000001, 0x3, 0x3, 0x8, 0xfffffffffffffa0b, 0x6, 0xfffffffffffffffe, 0x5, 0x174e809c, 0x7ff, 0x6, 0x5, 0x5, 0x8, 0xffff, 0x1f, 0x8, 0x8, 0x7, 0x833, 0x2, 0x5, 0x2, 0xffffffffffffffc1, 0x3ff, 0x200, 0x7ff, 0x4, 0x3, 0x400, 0x800, 0x2, 0x2, 0x7, 0x80000000, 0x9, 0xffffffff, 0x4, 0x8], [0x4, 0x0, 0x6, 0xfffffffffffffffb, 0x9a4, 0x1, 0x7, 0x1, 0xd5a, 0x3ff, 0xae, 0x7bee, 0x4, 0x6, 0x1, 0x80, 0x9, 0x7, 0x0, 0xffffffffffffff81, 0x0, 0x1e, 0x11, 0xfe40, 0x38c161db, 0x6, 0x1000, 0x0, 0xd2, 0x9, 0x7ff, 0x5, 0x8, 0x5, 0x4, 0x9, 0x7fffffff, 0x2, 0xed, 0xfffffffffffffff8, 0x5, 0x790d, 0x3, 0x2, 0x100, 0xfffffffffffffff8, 0x9, 0x5, 0x5, 0x6, 0x4, 0x8, 0x40000000000cb18, 0x101, 0xfffffffffffffff9, 0x8001, 0x8, 0xffffffffffffff80, 0x6, 0x5, 0x7f, 0x7fff, 0x80000001, 0x8], [0x9, 0x7, 0x1f, 0x80, 0x3, 0x7, 0x0, 0x3, 0x7, 0x6, 0x100000000, 0x4, 0x9, 0xc8e, 0x800, 0x8, 0x3, 0xffffffff, 0x4, 0x1f, 0x100, 0x9, 0x101, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x6, 0xfffffffffffffffb, 0xd79, 0x4, 0xd6bc, 0x5, 0x4, 0x3e74, 0x2, 0xa48, 0x3, 0x7fff, 0x1, 0x6, 0x6, 0x3f, 0x0, 0x7ff, 0x0, 0x8, 0x3, 0x9, 0x0, 0x6a, 0x1, 0xf8de, 0x1, 0x3, 0x3, 0x10001, 0x4, 0x1, 0x4000], [0x4, 0x2, 0x20, 0x9, 0x9, 0x8001, 0x6, 0x100000000, 0x4, 0xfffffffffffffffd, 0x8, 0x1, 0xfffffffffffff5e1, 0x9, 0x9, 0x7, 0xc000000000000000, 0x2, 0x0, 0x5, 0x400, 0x100000000, 0x256, 0x6e29a6d5, 0x6, 0x1, 0x1, 0x4050, 0x5, 0x101, 0xa71, 0x0, 0x7fffffff, 0x5aa, 0x7, 0x594424ea, 0xfffffffffffffff8, 0x0, 0x4f3d, 0x400040, 0x80, 0xe9b, 0x7ff, 0x8001, 0x3, 0x8, 0x81, 0x2, 0x7fff, 0x6618, 0x7, 0xd20d, 0xd76d, 0x200, 0x5, 0x110d, 0x100000001, 0x2, 0x1000, 0x0, 0xff, 0xffff, 0x3198, 0x8]}, 0x45c) ioctl$RTC_WIE_OFF(r0, 0x7010) 00:38:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) fchdir(r1) sendto$unix(r2, &(0x7f0000000080)="6ee9a88a8522b8b8be4397fc25798e73e4", 0x11, 0x4010, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setstatus(r2, 0x4, 0x2c00) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)) 00:38:37 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000580)="b2", 0x1}], 0x1) fcntl$setpipe(r1, 0x407, 0x0) vmsplice(r1, &(0x7f0000000040), 0x1, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) write$P9_RGETLOCK(r1, &(0x7f0000000080)={0x24, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6, 'cgroup'}}, 0x24) read$FUSE(r0, &(0x7f00000015c0), 0x12a5) 00:38:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) sendfile(r1, r0, &(0x7f0000000240), 0x2000005) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80000, 0x0) 00:38:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x1f) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)=0x5) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000001031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 00:38:37 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0xa) sched_yield() ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 00:38:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8, &(0x7f00000009c0)="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") setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp-reno\x00', 0xb) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x22100, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000280)={'icmp\x00'}, &(0x7f0000000300)=0x1e) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000003c0)=ANY=[@ANYBLOB="890e03b000000000fe800000d7c22a0f4b9600000ffe800010988adfac3aa600000000000000000000000020fe8000000019b606a007a9469abd00000000000000000000bbff0200000000f9a100000000000000010000248c000000000000000000000001fe80faff358aefe45bc0f349c43f179ebce1a2001b0000000000000000001f5db10000000000000000020000000001b5e438c86dceeb03"], 0x1) ioctl(r0, 0x8912, &(0x7f00000002c0)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfffffffffffffffe, 0x44031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x4002, 0x60) mlockall(0x1) fsetxattr(r2, &(0x7f0000000080)=@random={'user.', 'dctcp-reno\x00'}, &(0x7f00000000c0)='dctcp-reno\x00', 0xb, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_IFNAME={0x14, 0x3, '/pq0\x00'}]}, 0x34}}, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000340)) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x6587200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv6_getmulticast={0x14, 0x3a, 0x219, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x4e24, @loopback}}) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) r5 = dup2(r0, r0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040)=0x5, 0xffffffffffffff52) getsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000100)=""/45, &(0x7f0000000140)=0x2d) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00') getrandom(&(0x7f0000000000)=""/19, 0x13, 0x3) ioctl$RTC_AIE_ON(r6, 0x7001) 00:38:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000)="68882be25f39f6853f1bf52520812eabbed0559dd9992b1c8ac3b2a38d", 0x1d, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0xffffffffffffffff}, 0x10) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffff1d3cfbd1220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe80900f800fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 00:38:37 executing program 1: write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x15) r0 = open(&(0x7f0000000000)='./file0\x00', 0x280080, 0x0) ioctl$BLKBSZSET(r0, 0x40041271, &(0x7f0000000040)=0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000000000005f00000c348414bd11cbbc76fa0000006f3f8c26a5547fa94a5b6b2972ce372b64004b92cced789bc01f64d92e4ca28d3d1962ad5cdd0000000000003debaa21c3b06774858cf4919473291d5ffa8154f9b8a7e272236b7cd392d02181d51be8e938445da0ac785361c4ba7c57ea867f938f72e999f4e868e93b312c9049ef5d899368e6ff57ed94a2459b7317e1234b13d48bfea2060e459f4d9803ad0e3a78b77c97a16052ffa178aea2e3f76a0000c2926c6a6c00e81278d6350391fcc7d07f70c908da655e8f662cdea1e337da820d05d08e6ffdff1107128dca", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) 00:38:37 executing program 2: r0 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) unshare(0x8000200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000007c0)='./file1\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)="18765468f7c38d", 0x0, &(0x7f0000000400)) setns(r1, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) write(r0, &(0x7f0000000080)="a85883156f794c05e0b02a03983b5addde9e46e1145c5c3fcb185a36d20d52d097399fd15648c6641aa80f04", 0x2c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x4a4, 0x280, 0x140, 0x280, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000000), {[{{@arp={@local, @broadcast, 0xffffffff, 0xff000000, @empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}, 0x3, 0x4, 0x100000001, 0x0, 0x2, 0xd3, 'veth0\x00', 'ip_vti0\x00', {0xff}, {}, 0x0, 0x100}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @mac=@broadcast, @broadcast, @multicast2, 0x1, 0xffffffff}}}, {{@arp={@multicast2, @broadcast, 0xffffffff, 0x0, @empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}, 0x8, 0x0, 0x3, 0x3, 0x100000001, 0x3, 'gretap0\x00', 'veth0\x00', {}, {0xff}, 0x0, 0x20a}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @multicast1, @rand_addr=0xffffffff, 0x8, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1f}, @remote, 0x0, 0xff000000, @empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x9, 0x4, 0x4, 0x654d579d, 0x6, 0x4, 'rose0\x00', 'ip6_vti0\x00', {}, {}, 0x0, 0x8}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @mac=@random="7ae5f4c62afa", @remote, @local, 0xd359da4101a3aa38}}}], {{[], 0xc0, 0xe4}, {0x24}}}}, 0x4f0) quotactl(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, &(0x7f0000000100)) 00:38:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8, &(0x7f00000009c0)="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") setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp-reno\x00', 0xb) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x22100, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000280)={'icmp\x00'}, &(0x7f0000000300)=0x1e) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000003c0)=ANY=[@ANYBLOB="890e03b000000000fe800000d7c22a0f4b9600000ffe800010988adfac3aa600000000000000000000000020fe8000000019b606a007a9469abd00000000000000000000bbff0200000000f9a100000000000000010000248c000000000000000000000001fe80faff358aefe45bc0f349c43f179ebce1a2001b0000000000000000001f5db10000000000000000020000000001b5e438c86dceeb03"], 0x1) ioctl(r0, 0x8912, &(0x7f00000002c0)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xfffffffffffffffe, 0x44031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x4002, 0x60) mlockall(0x1) fsetxattr(r2, &(0x7f0000000080)=@random={'user.', 'dctcp-reno\x00'}, &(0x7f00000000c0)='dctcp-reno\x00', 0xb, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_IFNAME={0x14, 0x3, '/pq0\x00'}]}, 0x34}}, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000340)) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x6587200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv6_getmulticast={0x14, 0x3a, 0x219, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x4e24, @loopback}}) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) r5 = dup2(r0, r0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040)=0x5, 0xffffffffffffff52) getsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000100)=""/45, &(0x7f0000000140)=0x2d) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00') getrandom(&(0x7f0000000000)=""/19, 0x13, 0x3) ioctl$RTC_AIE_ON(r6, 0x7001) 00:38:37 executing program 5: r0 = socket$inet6(0x10, 0x803, 0x3) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000080)={@mcast1, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@ipv4={[], [], @remote}, 0x5c, r1}) r2 = memfd_create(&(0x7f0000000140)='$vmnet0\x00', 0x2) sendmmsg$unix(r2, &(0x7f0000001740)=[{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="71477bd526b13cc17e3fb125d590b3992c5b2cdcc1530ca27f377769b742d42f5025821aa36ad60f2fd7cc0b8726f2175f1e139cf61525b35dda4640badcbbab3c756aa63fa9f069d82e31d75d05c7c9b79ef9912554", 0x56}, {&(0x7f0000001280)="fc215850fb2414e9093f9bb75a0c0d8c24ca58982a86b14440f6f4a139f2de818728d632b1f6a33a3e9023695cb14cfc11778dd779e776670927db2c79ca5470c05cdba6f9adb387c43f5499f9c923f829d8b4e9cb909a0791f2b90b011a038d95bf46dca541feed31e0a6f8189ff6658bbbcada00f5ff9c8cc346277d252ef6e89bcf01b9d63b1882bb95c96e8513145376cc27532c5f41dd3b043744ec5ae712a5d3d95a703c6a28bd650e2110a805e22044d4c5677ee21383b879579024e2b89feeb219", 0xc5}, {&(0x7f0000001380)="85d34c3c1cc82e2b910a30ff0c8fdc8f37616a8f17985fcd8b7e59e1ad258ba38f2ac0fdd9cb940ac80498fc598b45d21a70b7bac93ee9e9b3fc697ca592a5a3dd8fd1749dce83b10d82e09c0335a2dfaaf4abe2b023b09be054bb11198a6f614cb8156e8d7b1d4ed458b3badb6d2fcc11426bd480b5cf6b48003e71d531332bd21cd905a09d42ac5fffb5f7d5c9fa815ff7db41d635ebe5c872bde9c889b573046d1cacc76b3b2ac7d0c2f7cfe4482ff255623c2bc175bc7deed5792a387a70af1c68fe71d79fd0926064dd487bda5fbaa59a16bd2dcb9de4", 0xd9}, {&(0x7f0000001480)="4db01c14d268d174391764eb7c3353b81a0a9a1f0e32724cd855e3e3f0eef08461e0e179e37391079197273991d226c1a38281f06332a74e131395ceda3b07fe233c0057f3e0ba5f5e5e67d9d8a75cda3b", 0x51}, {&(0x7f0000001500)="285c38dc1df11942a5e1d91f671bb87fd69b4461ec8ce17a7aaa67f2ad8e5135453fcf38bbae35f1da2631", 0x2b}, {&(0x7f0000001540)="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", 0xfa}, {&(0x7f0000001640)="5d6206e060a8590ecb121c75d776631c6c30624506da30d642339b5e8d5ee4e8843e249aceec25e40cb18169a57df9ad69d543abf87fba8a424bc142764ffc135835acf2d7a8747ed68bb4e5b339aea66989891e5b3b95da87d8368043b54b7d23ccc5a5e4df83b087b2c969f03903081e1665aa8161d79399c5d957f981684756720c6551de263d82fe53dc9831bbe88c0f46e612d4d1768e59ff3bcf68fc", 0x9f}], 0x8, 0x0, 0x0, 0x1}], 0x1, 0x8000) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000019007f5300fe01b2a4a280930a06000000a84308910000003900090020000c00060000001900a30700000000000000dc1338d54400009b84136ef75a1500de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400), 0x2f9}, 0x0) 00:38:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge_slave_1\x00', 0x2000}) [ 67.599450] IPVS: Creating netns size=2536 id=9 [ 67.661532] IPVS: Creating netns size=2536 id=10 00:38:38 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75c670ba0095b14662043d9ca53c702f73797a3100", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) ftruncate(r1, 0x8000) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f627573202e2f6367726f75702e63707500202e2f6367726f75702e63707500202e2f6367726f75702e637075000a4ff4775ab2675a1208cf4c0a7c690f84d3c5c8c333ea4ccd709b1e0077367c6606e836697c6c768cd5ff02c84698497f9bb6f34e785d2ddec3ac6856b4166131a1567f5afeaee84fb60e95cb7c8183eab3ff67083395bb1e1a19204bb2c16606bba2c3b18f9eebca1911f700307248639005960dfe1f1d9b773e73b8c9"], 0xb0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) pwrite64(r0, &(0x7f0000000140)="5b20a980cd0f6bd4f3d5c9b45a7dc99a02b7321f21087acf5f91581334b91f30adf2bc12c016c20fb7ca6e506a978ea385cf0abe776e1176d6de7f74df2e4435f65f1f3e906d97b8dddfafd49bf2d096080a8c840bb110915b5ac271aa08bb116039072e74e271e1a5f9c0bb4ad13b0f59f862a81bf9501eb40d3b27c3e248fda112f033d2bdf6492179f7dca442d823619c94ae0301faf5974c8c3d2190856169903db576c7b2056ded9ca7a60340ab0683357a929fda782f738dda0a6a5c53f3c34a99ce05bd160949b17bca9d86d9ffd01110384104ad36e41c29", 0xdc, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fsync(r0) 00:38:38 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x800000000, @remote, 0x4}, 0xffffffe2) sendmmsg(r0, &(0x7f000000ac80)=[{{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2000000029000000020000004bbf97414cf004cac333b8595a865187d700000004000000"], 0x20}}], 0x1, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 00:38:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) signalfd4(r0, &(0x7f0000000140)={0x5}, 0x8, 0x80800) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r2 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x2) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f00000000c0)="5497261c", 0x4}], 0x2) write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) 00:38:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x125}, 0x20) [ 68.089741] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 68.089741] program syz-executor5 not setting count and/or reply_len properly [ 68.124222] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 68.124222] program syz-executor5 not setting count and/or reply_len properly 00:38:38 executing program 4: r0 = userfaultfd(0x0) clock_adjtime(0x4, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x3, 0x4b4, 0x7, 0x2, 0x9, 0x4a, 0x8, 0x4, 0x80, 0x7f, 0xfffffffffffffff8, 0x71, 0x2, 0x8, 0x7, 0xf1, 0x4, 0x120000000000, 0x563f, 0x3, 0x3ff, 0x36c9, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 00:38:38 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x2000000000000005, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x4) dup2(r0, r0) write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0xcf0, 0x0, 0x0, @tick, {0xfffffffffffffffd}, {0x2}, @queue}], 0x1c) 00:38:38 executing program 0: unshare(0x40000000) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/create\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x2, 0x0, 0x5, 0x5, 0x0, 0x3, 0x0, 0x0, 0x8, 0x401, 0x8000, 0x29080000000, 0xa9, 0x1, 0x4, 0x4572, 0x8, 0x80000000, 0x2, 0x9, 0x5, 0x3ff, 0x2, 0x0, 0x1, 0x9, 0x7fffffff, 0x40, 0xd7, 0x80, 0x80000001, 0x7fffffff, 0x4, 0x0, 0x9, 0x2e0, 0x0, 0x8000, 0x2, @perf_config_ext={0x2, 0xc3dd}, 0x8, 0xfffffffffffffffa, 0x10001, 0x7, 0x4, 0x5}, 0x0, 0xd, 0xffffffffffffff9c, 0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x4040, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @multicast2}, &(0x7f0000000400)=0x10, 0x80800) openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000440)='rdma.max\x00', 0x2, 0x0) memfd_create(&(0x7f00000004c0)='\'\x00', 0x2) creat(&(0x7f0000000500)='./file0\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000580)) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndtimer(&(0x7f00000029c0)='/dev/snd/timer\x00', 0x0, 0x200) open(&(0x7f00000002c0)='./file0\x00', 0x203, 0x3) openat$urandom(0xffffffffffffff9c, &(0x7f0000002a40)='/dev/urandom\x00', 0x200800, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000002a80)='/dev/full\x00', 0x20000, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) syz_open_procfs(r1, &(0x7f0000000180)='net/ip_vs\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'lo\x00'}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x8) keyctl$join(0x1, &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000005c0)={0x1, 'lo\x00'}, 0x18) 00:38:38 executing program 2: ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000200)={0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd6}}) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x131080, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r2, 0x2000000fffc, 0x2) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) pread64(r0, &(0x7f0000000140)=""/188, 0xbc, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x2}) creat(&(0x7f0000000280)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x1c) fdatasync(0xffffffffffffffff) 00:38:38 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioperm(0xffffffffffff02e2, 0x5, 0x200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="11e400000a004e210200000000000000000000000000000000000001ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a7dc5b2f00000000000000000000000000000001000000080000000a004e2305000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2402000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2009000000000000000000000000000000000000003cf9ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006b00000000000000000000000000000000000a004e21ff010000fe8000000000000000000000000000bb74000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2108000000ff01000000000000000000000000000109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2208000000fe8000000000000000000000000000aa07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000000fe80000000000000000000000000001609000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x48c) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x2000000b, &(0x7f00008d4fe4)={0xa, 0x4000004e20, 0x0, @loopback, 0xfffffffffffffffd}, 0x1c) write$P9_RREADDIR(r1, &(0x7f0000000800)={0xf9, 0x29, 0x2, {0x94, [{{0x20, 0x2, 0x1}, 0x2d, 0x6, 0x5, './bus'}, {{0x14, 0x4}, 0xffffffffffffffff, 0x101, 0x5, './bus'}, {{0x58, 0x0, 0x4}, 0x1, 0x6, 0x5, './bus'}, {{0x92, 0x0, 0x6}, 0x7, 0x100000001, 0x5, './bus'}, {{0x1, 0x3, 0x7}, 0x7ff, 0x4, 0x5, './bus'}, {{0x14, 0x1, 0x5}, 0x20, 0x5967, 0xb, './bus/file0'}, {{0x48, 0x4}, 0xffffffffffff5da6, 0x7f, 0x5, './bus'}, {{0x0, 0x1, 0x6}, 0x1, 0x8, 0x5, './bus'}]}}, 0xf9) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='bridge_slave_1\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000000300), 0x8000fffffffe) 00:38:38 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4020000000000002, &(0x7f0000000000)=0x5a9, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40) 00:38:38 executing program 7: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000040), 0x4) r1 = dup3(r0, r0, 0x80000) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000000)=0x5ac) 00:38:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000000)={0x7, 0x8, 0x10001, 0x4e, 0x2, 0xffffffff, 0x1, 0x1}, &(0x7f0000000180)={0x80000001, 0x4, 0xe7, 0x10001, 0x3ff, 0x450e, 0x800}, &(0x7f00000001c0)={0x8, 0x2, 0xff, 0xfe00000000000000, 0x6, 0x80000001, 0x1, 0xfffffffffffffffe}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240), 0x8}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0)={0x1, 0x10000, 0x20, 0x2, 0x5, 0x401, 0x7, 0x9}, &(0x7f0000000300)={0xfffffffffffffff8, 0x2, 0xfff, 0xdd6, 0x6, 0xfffffffffffffffe, 0x3f, 0x10000}, &(0x7f0000000340)={0x3, 0x0, 0x3, 0x9, 0x7c, 0xcb, 0x8, 0x1}, &(0x7f00000003c0)={r1, r2+10000000}, &(0x7f0000000440)={&(0x7f0000000400)={0x2}, 0x8}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="0401000000c000ddb8460900ff755b4202938207d9fb3780398d4375000000007911301ee616d5c01843f56590080053c0e385472da7222a2bb42f2d3b3fa60720c5f3516697bef45ef000ddf412f88334506bc62dd33b4c8d5c7b8db5321078151e305d2d9249b42554f4e4c92c30f2ca887463d40740778ef21637ab860e3fab52ffa94ddc2fb2cb2e8a5cdf79a0da3978695575e235124fe2d83906e904", 0x9f, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @ipv4={[], [], @multicast2}, 0x3}, 0x1c) 00:38:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x120, &(0x7f0000001600), 0x0, &(0x7f0000001640), 0x0, 0xfffffffffffffffd}}, {{0x0, 0xfffffdc0, &(0x7f0000002bc0), 0x0, &(0x7f0000000000)=ANY=[], 0x2e}}], 0x2, 0x0) 00:38:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) write$input_event(r0, &(0x7f0000000000)={{}, 0x15, 0x89, 0x800}, 0x10) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) write$binfmt_elf32(r0, &(0x7f0000000d00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x5, 0x0, 0x80000001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0xf281}, [{0x70000005}]}, 0x58) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {0xca86, 0xffff, 0x3f, 0x93a9}, 0x2c, [0x6, 0x100000001, 0x1, 0x2, 0x9, 0x3, 0x2, 0x273d, 0x5, 0x7, 0x7fff, 0x2, 0x2, 0x5, 0x3, 0x40, 0xffffffff, 0x8, 0x1, 0x2, 0xbb4d, 0x7, 0x5, 0x7, 0x7, 0x7, 0x2, 0x1, 0x101, 0x7, 0x4, 0x3, 0x2, 0x3b4d, 0x2421, 0x5a, 0x80000000, 0x0, 0x3, 0x6, 0x9, 0x0, 0x7, 0x45e, 0xffffffffffffffff, 0x2e, 0x1, 0x494c, 0x3, 0x10000, 0x1, 0x6, 0x1000, 0xc27, 0x101, 0x40, 0xa, 0x40, 0x2, 0x4, 0xfffffffffffffbaa, 0x1, 0x6, 0xa7c7], [0x1f8000, 0x1000, 0x1, 0xab2, 0xd9, 0x7fff, 0x20, 0x3f, 0xe29, 0x0, 0x4, 0xfffffffffffffffa, 0xff, 0x5, 0x1, 0x7ffe, 0x0, 0x101, 0x0, 0x40, 0x5, 0x68bd, 0x5, 0x40, 0x7ff, 0x100, 0x1061, 0x8, 0x5, 0x20de, 0x800, 0x2, 0x80000000, 0x2dd2, 0xffff, 0x4, 0x3f, 0x3, 0x1f, 0x6, 0x2, 0x722e20f6, 0x10000, 0x400, 0x4, 0x3, 0x0, 0x1, 0x3, 0x1, 0x400, 0x2, 0x1, 0x1, 0x3, 0x3, 0xfffffe0000000000, 0x4, 0x8f86, 0x4, 0xfffffffffffffffa, 0x4, 0x5, 0xfffffffffffffff9], [0x1, 0x2362, 0x7fff, 0x80000000, 0x5, 0xa59, 0x8b9, 0x6, 0x8, 0x7d, 0xe182, 0x800, 0x6, 0x4, 0x20, 0x5, 0x9, 0x7, 0x9, 0x8, 0x8, 0x4, 0x20, 0x7fffffff, 0xd19, 0x5, 0x1, 0xfffffffffffffffb, 0x3, 0x8, 0x3, 0x1, 0x4, 0x4, 0x100000000, 0x200, 0x100, 0x1af, 0x2, 0xa3, 0x8, 0x6395, 0x0, 0x8001, 0x5, 0xffff, 0x7, 0x6, 0x9, 0x653, 0x3229, 0x4, 0x0, 0x10000, 0x6a6, 0xffffffff, 0x1, 0x8, 0x2, 0x4a19, 0x4, 0x100000001, 0x8, 0x7ff], [0x4b, 0x9, 0x7fff, 0x7, 0x401, 0x0, 0xab9, 0x0, 0xff, 0x100000001, 0x100000000, 0x80000001, 0x5, 0x1, 0x5, 0x8, 0x3, 0x24d, 0xffffffffffffa90a, 0xabcf, 0x401, 0x3, 0x9, 0xfffffffffffffff7, 0x7ff, 0x1, 0x400, 0x0, 0x3f, 0x2a, 0x5, 0x7, 0x4, 0x83a, 0x0, 0x1, 0x31, 0x7, 0x7, 0xff, 0x80000001, 0x428, 0x3, 0x8, 0x5, 0x1ff, 0xe2, 0x8, 0x9, 0x3, 0x7, 0xd94, 0x7f, 0x800, 0x1, 0xba39, 0x60, 0x2, 0xe000000000000000, 0x3, 0x0, 0x4, 0x9, 0x1000000020000]}, 0x45c) 00:38:38 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4020000000000002, &(0x7f0000000000)=0x5a9, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0xffff, 0x8, '9P2000.L'}, 0x15) 00:38:38 executing program 7: getrlimit(0x1, &(0x7f0000000180)) 00:38:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000052000100ba36ef3b2bfdf8b392aec2680e0100188a66ed528fd3391d3f39da0ffcdf57589406098e55c70a21d02c2f92e4e571e81fdba7cb26c93a10cb1130d525eab1a348de7658e5ec2cb74fce3a71ad30d293cb413b3fd4c1e97e70195caef9314491f8dfcfa79bf390ae8a49f135", @ANYRES32=0x0], 0x1c}}, 0x0) [ 68.283536] input: syz1 as /devices/virtual/input/input8 [ 68.293786] input: syz1 as /devices/virtual/input/input9 00:38:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 00:38:38 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000140)=@in6={0xa, 0x4e21}, 0x6b3, &(0x7f0000001200), 0x100}, 0x8000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xc4400, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x2) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=',', 0x1}], 0x1, &(0x7f0000000740)}, 0x0) 00:38:38 executing program 7: mlockall(0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r3, &(0x7f0000000040), 0x80000001) ftruncate(r2, 0x0) [ 68.333427] device lo entered promiscuous mode [ 68.343721] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 00:38:38 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000140)) r1 = dup3(r0, r0, 0x80000) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x2, 0x6]) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) r2 = gettid() ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x400, 0x3f62000000000000]) sched_setscheduler(r2, 0x3, &(0x7f0000000040)=0x7) 00:38:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000280)={0x74d, 0x6, 0x7, 0x5, 0x0, 0x50183c3f, 0x6, 0x40, 0x4000000000000, 0x40, 0x9, 0x7}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x4, 0x0, "9f11ebcd0bf1474bb0954572c05b609c9d1c109d76a2c8d72747b2efce0db5948594ddd4a3b3dffbc73aedc4e460f3d4d0b4b164473122804ccc4a017a3d5bf06d81ee4c7aae0ce430974dc836f33bc4"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x5, 0x0, "06e93bb662a48cf8b6f5d4822147e0a6685ce50b04a3f6fb2bdb42352d8445d654034abd49827c461c21464fd87ebc4910ef639d0bf0787e006aaeade22a2e9000"}, 0xd8) close(r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000002c0)="004f4ff900", 0xfffffffffffffff5) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000300)) [ 68.541764] IPVS: Creating netns size=2536 id=11 [ 69.314995] pktgen: kernel_thread() failed for cpu 0 [ 69.320271] pktgen: Cannot create thread for cpu 0 (-4) [ 69.325828] pktgen: kernel_thread() failed for cpu 1 [ 69.331582] pktgen: Cannot create thread for cpu 1 (-4) [ 69.336945] pktgen: Initialization failed for all threads 00:38:39 executing program 0: unshare(0x40000000) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/create\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x2, 0x0, 0x5, 0x5, 0x0, 0x3, 0x0, 0x0, 0x8, 0x401, 0x8000, 0x29080000000, 0xa9, 0x1, 0x4, 0x4572, 0x8, 0x80000000, 0x2, 0x9, 0x5, 0x3ff, 0x2, 0x0, 0x1, 0x9, 0x7fffffff, 0x40, 0xd7, 0x80, 0x80000001, 0x7fffffff, 0x4, 0x0, 0x9, 0x2e0, 0x0, 0x8000, 0x2, @perf_config_ext={0x2, 0xc3dd}, 0x8, 0xfffffffffffffffa, 0x10001, 0x7, 0x4, 0x5}, 0x0, 0xd, 0xffffffffffffff9c, 0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x4040, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @multicast2}, &(0x7f0000000400)=0x10, 0x80800) openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000440)='rdma.max\x00', 0x2, 0x0) memfd_create(&(0x7f00000004c0)='\'\x00', 0x2) creat(&(0x7f0000000500)='./file0\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000580)) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndtimer(&(0x7f00000029c0)='/dev/snd/timer\x00', 0x0, 0x200) open(&(0x7f00000002c0)='./file0\x00', 0x203, 0x3) openat$urandom(0xffffffffffffff9c, &(0x7f0000002a40)='/dev/urandom\x00', 0x200800, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000002a80)='/dev/full\x00', 0x20000, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) syz_open_procfs(r1, &(0x7f0000000180)='net/ip_vs\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'lo\x00'}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x8) keyctl$join(0x1, &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000005c0)={0x1, 'lo\x00'}, 0x18) 00:38:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900400000ff7f000000002a031b030006000000000002000000e0000054d81458186fe8b90002000100000002000000000000000000030005000000000002000000e00000010000000000000000"], 0x60}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 00:38:39 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000019c0)=0x0) ptrace$getsig(0x4202, r1, 0x40, &(0x7f0000001a00)) sendmmsg(r0, &(0x7f0000001900)=[{{&(0x7f0000000000)=@ipx={0x4, 0x8, 0x3f, "99bc6c94efdc", 0x7fff}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000100)="5006bc177c84f9a14eedece5d736c77797ab0ac95fe92b6a8bcd2f9b9f14be7792b7aedf7a2944d2fc63a6d92f50e7ed036b2c8e5a06d0320e3eb80b219cbb801a285b2661cf4ba83a0e52103b55c4b3615f7c848e632c875a3683a70d6f24ac7a56325a6745c79da52621a70ff1c88becb7b8be", 0x74}, {&(0x7f0000000080)="f77735e7e8c8c456569c77f32f0a3fdbdd89687ba7820a995a4b068cc0d9a291b89073", 0x23}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000180)="45e2caa4a9f3e3ad0effeb4aae025926fc4cd9491b4b58be7e1a94a6779ff106ffa784ca2510411484166e1f1eae33d8e49549bdf02156307ec27290e16a9363b61bd52f642b2b79180cbd9a8dae87eb0aa4", 0x52}, {&(0x7f0000000200)="bd7006def8b722353fd89bf3ff6442382547df65b9b845825de8ed45cb6edd336440f1809f79de483ef40cd1afe0574e5b362302ca3dd94b17d9040ee1943c977c8e83c7ec8fc4bb293ee56f68c696048caa87ba188fde4d7933d3f6e60a6319f91ab6ac9dd2ed2c2ab1fa95aaff8c96115aa170ec6e", 0x76}, {&(0x7f0000000280)="bb579f6774befa6c007991591422b9c51e9ebbe0c2015c2ac6625e42eb6b5ac44f7674f6e50d1a87436997e616f682321e819293406437a05527e88ac0f99c38042e8ead4053431f200cabe78fede3379b8fee3b289c7701ce2e9cdc99578bde60e9475be2f7abe01b6074bd0c072f07744e3532100965daf27066fe1d859e1a6230fdfc17a5d8b84ef4c7e4adeea5cd2c41cc5f5323652cce429ad9216f2e3bc366cc42", 0xa4}, {&(0x7f0000000340)="888e7493ae15a47c65c2884dac9b7cb8ebecc94c9eb68164b2ffe2bee4aee637668c43b227531170f951b88f8a8a14324feea0ea30394a320e0042d4f02952a795a7e4661d4d73428da5edd44d812c3e7a4df813782b3e25131ec31d5dceb9efa8510b3968ecc487ee659a090ac406b5d597867147edb179130e202b9cbaa45fc026f2cd5c41aa61bd49ae4bd2c7501ccebbb461cd68cb28e747b7c73847f0a61c1763dfdfa2c7", 0xa7}, {&(0x7f0000001440)="5b554961a55dc83539d36d66035fa7981ef2bae7a2fb17eafdcd7e94adf1d75931e75e8ffce1cf0c93f7b688fc7653b4cd06a96ee67d3ed0f192d2a4b9b238b2ffd8178242de", 0x46}], 0x8, &(0x7f0000001500)=[{0xd8, 0x84, 0x783c, "ab2d6c8077270019f3b616a5dab46dcbe92871ae9fb5a7332b129b8470bc259030c676dc0d1f7d1d79f4f4946976219bc9bb66cab76e2c405fce0a86ff407a942f81a80d5ea6c828f06c674ed9ddc8f08d94e0baeec3cbd705b9c5ea8eda1919ef0a71df8ee99417a41c6e5112cfef0caf103e04872e3b33299dd3053f9e18eb58424c52260a39347d76353d4c059b04813a644cd0798775d088af377c8241b8d1b436c8d66a0d6a3bb95511f9b15de3467c3d2d720550cb10eb7202b2f4b0d664583536b264c77a26"}, {0x64, 0x100, 0x2, "42b15f2bc180184c9ca8a75b547509fc5750fc8f9d9ef2f885d24e993cae4bb4de26187b5c65b34e71b62d66c5c39522006a8e571930c3c7d0d4e3bdc29065222e3aaf140399707f94778f22104fc295088d0f1373b43b"}, {0xa4, 0x105, 0x8, "a0684c741e9aa3170f57c466733841a273b5be7f52d92f059c37c8cc9fceb794ad774ff880ea981ea72bb4a5206c971623554d9dd870546a7b4e373a7596d1dbf63a2c2d9f157c571b500ff77dd543159c81b7af824ca423ee8c95c9282c1da830ec3d564383678b7777123c2fedac16e248b3eec6fbb75d2e9d0bca036ef74b022edb4e964c904ed7192f568016d3efcd4866dbf215"}, {0xb4, 0xff, 0x2, "fa5279f33a278de259693e08647e347ebc6c6be2d6954af47922a591d7b80bb1caf769c7d9403d9a86e02d5567cc4206f81d2432f9a9c6008f0c238ccb5bd4d7f45b79d85ce5c38fca60bda85020fbb944c1f570cab17bd51e1ef11fcf2800439710e907ef2820b9408c6c746a87323af02dd0d35516e76e47a9511a8b241ee76056367268586bbd31954bfc2415259e4f1274a0afc482df2271099509c4c20af5d00483efefec"}, {0x68, 0x119, 0x0, "a94a180a70eb85c731924790aadf54f0e3f0e21baeaaeecd105e57adc6b58f93067f33f0cfd95054da2cbc828dd0d00b7fc5ccb47d47bd7824e3f378682a90176f663b69fea0eae91e632f2711f35577a20e1bb3270491aa23a8"}, {0x80, 0x100, 0x8000, "927e5eea796cb04eae06313cf4920e12cd3532f35ac7a08e76bf3433221deb39eef86927a992953e4857c42d0fa4fc5bbbb065717bc1010e399f6e81934413a2722a730415eb0280277ac4da410c7358d72a9327ee761f258fe03602e28dc277b9f6efd8205391a0ad9656e11f450c434e340b"}, {0x48, 0x113, 0x100000000, "2980c1fb6e2b5ec539a2e982f3352653a4ef72349e9e96d3d67ea90b609d00c192f993643dfcb003787844ed2f19c7b0ec3a6ad3e903609ed443bd1f"}], 0x3c4, 0x4000}}], 0x1, 0x4044050) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001940)={0x7, 0x8001, 0x2, 0x0, 0x0, [{r0, 0x0, 0x8}, {r0, 0x0, 0x7}]}) r2 = socket$inet6(0xa, 0x6, 0xffffffbffffffffc) fchdir(r2) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendto$inet6(r2, &(0x7f0000000440), 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 00:38:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x700, &(0x7f0000000080)) 00:38:39 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000bfcffc), &(0x7f0000000100)=0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x800000000004e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xffffffff00000000]}, 0x10) setpriority(0x1, 0x0, 0x3e) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000180)=0x2) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x3, 0x3bc, [0x200001c0, 0x0, 0x0, 0x20000320, 0x2000054c], 0x0, &(0x7f0000000000), &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x524) 00:38:39 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x2000, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="290000000400000022bff3d1ecf80a00000b80f78fc454029e000000000180000000000000010000000000000008"], 0x29) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') r5 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x80000, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r8 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000300)=[{r0, 0x5008}, {r2, 0x200}, {r3, 0x4080}, {r4, 0x8410}, {r5, 0x4}, {r6, 0x21}, {r7, 0x4200}, {r8, 0x1210}], 0x8, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x7) clock_settime(0xdefd34099be171c1, &(0x7f0000000040)={0x77359400}) 00:38:39 executing program 2: r0 = socket(0x10, 0x20001000000003, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) write(r0, &(0x7f0000000000)="220000001400070000e80000000003000208030001000000080002004100fff0f055", 0x22) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bridge0\x00') 00:38:39 executing program 6: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x20400, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x10000) sync_file_range(r0, 0xfffffffffffffffc, 0x80000004, 0x4000000000008) 00:38:39 executing program 1: unshare(0x40000000) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/create\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x2, 0x0, 0x5, 0x5, 0x0, 0x3, 0x0, 0x0, 0x8, 0x401, 0x8000, 0x29080000000, 0xa9, 0x1, 0x4, 0x4572, 0x8, 0x80000000, 0x2, 0x9, 0x5, 0x3ff, 0x2, 0x0, 0x1, 0x9, 0x7fffffff, 0x40, 0xd7, 0x80, 0x80000001, 0x7fffffff, 0x4, 0x0, 0x9, 0x2e0, 0x0, 0x8000, 0x2, @perf_config_ext={0x2, 0xc3dd}, 0x8, 0xfffffffffffffffa, 0x10001, 0x7, 0x4, 0x5}, 0x0, 0xd, 0xffffffffffffff9c, 0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x4040, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @multicast2}, &(0x7f0000000400)=0x10, 0x80800) openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000440)='rdma.max\x00', 0x2, 0x0) memfd_create(&(0x7f00000004c0)='\'\x00', 0x2) creat(&(0x7f0000000500)='./file0\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000580)) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndtimer(&(0x7f00000029c0)='/dev/snd/timer\x00', 0x0, 0x200) open(&(0x7f00000002c0)='./file0\x00', 0x203, 0x3) openat$urandom(0xffffffffffffff9c, &(0x7f0000002a40)='/dev/urandom\x00', 0x200800, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000002a80)='/dev/full\x00', 0x20000, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) syz_open_procfs(r1, &(0x7f0000000180)='net/ip_vs\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'lo\x00'}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x8) keyctl$join(0x1, &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000005c0)={0x1, 'lo\x00'}, 0x18) 00:38:39 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000580)=""/140, 0x34d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000000)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000000000000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2e5}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000340)={0x0, 0x0, 'client0\x00', 0x0, "501c576f0b5356be", "f42b0cf94610d33072a61b7fbeada1c341b5bf2c00ba817240d60980ad63fdd3"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x0, 0x0) 00:38:39 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000340)=0x110) r1 = creat(&(0x7f000002bff8)='./file0\x00', 0x0) r2 = inotify_init1(0x0) r3 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)={0x0, r3}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x4e24, @dev}, 'team0\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000003c0), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x1, 0x82) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="1379288abd06b0474b7ce53997c692fed921d2d569380000000000000001ec737824508608010e5aff5891348b8d6a0f62e0d77bb92237a24dc7c5760ea616fb83ec37e44c6688a243f79909997d053cb254b1145e516319be1b815cd433baedbc92107fa545807045991f201d16c0597d0b2d4a80bf66bcbe663131c920000000c09dbf0ffa1f2bafcf874ed5fce36de3e058c1d05892ee76fcf942b4345ee1f7dd56f798c549a68020e720e8ca6806f8786c2405fbbd175bd64cc9623d8a70097c32e65d5a7be9be041ad894c7c5599e0918500b3dc7f953000000001d"]) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0x8) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000080)={0x8, 0x401, 0x4, 0x8}) 00:38:39 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100ffc, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"0000000000000000000000000200", 0x5002}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000140)={0x9, 0x3, {0xffffffffffffffff, 0x1, 0xf8ad, 0x3, 0x1}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f00000000c0)={0x3e5, 0x800, 0x4, 0x7fffffff}) 00:38:39 executing program 4: r0 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') readv(r1, &(0x7f0000000080), 0x2000000000000066) 00:38:39 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)="2e2f6367727f75b22e637075001cf935088be00ca25491bfe96088d436aa2c20bb5b18727268ab2c856c66f660882c80e93bd3571b0fc368600c01ef3c6b95a9561427e8a43cc307b75926b8734b2727f65beb1ab6284a43cd881fb0f5cae96a0b69756613d5e68a69c9d83eddaaa429bce380778bbd39b0b3fe58480bbaa9d3c8e52da34f50e7a8e2a33cc59682630dec4c3072c2e82fcb7f373a1668dca2e600ea999f85587bf544f04c3c78087a635dee3edcdad5356b7d7cc07fe4079873a6afe724932dcc9580bf37fd27144c9143bc1a7911e628b9bed74a1e26", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000000004, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xfffffffffffffff8, 0x10000) write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0x2710}}, {{0x77359400}}, {}], 0xfffffffffffffdc6) memfd_create(&(0x7f0000000080)='/dev/usbmon#\x00', 0x2) 00:38:40 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000340)=0x110) r1 = creat(&(0x7f000002bff8)='./file0\x00', 0x0) r2 = inotify_init1(0x0) r3 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)={0x0, r3}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x4e24, @dev}, 'team0\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000003c0), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x1, 0x82) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="1379288abd06b0474b7ce53997c692fed921d2d569380000000000000001ec737824508608010e5aff5891348b8d6a0f62e0d77bb92237a24dc7c5760ea616fb83ec37e44c6688a243f79909997d053cb254b1145e516319be1b815cd433baedbc92107fa545807045991f201d16c0597d0b2d4a80bf66bcbe663131c920000000c09dbf0ffa1f2bafcf874ed5fce36de3e058c1d05892ee76fcf942b4345ee1f7dd56f798c549a68020e720e8ca6806f8786c2405fbbd175bd64cc9623d8a70097c32e65d5a7be9be041ad894c7c5599e0918500b3dc7f953000000001d"]) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0x8) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000080)={0x8, 0x401, 0x4, 0x8}) 00:38:40 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet(r1, 0x0, &(0x7f0000000180), 0x800) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2) inotify_rm_watch(r2, r3) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000001400)=@alg, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f00000024c0)=""/16, 0x10}, {&(0x7f0000002500)=""/83, 0x53}, {&(0x7f0000002580)=""/69, 0x45}, {&(0x7f0000002600)=""/147, 0x93}], 0x6, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x0, &(0x7f0000002e40)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000042009cb953000012ea50cfbe3107e52a"], 0x14}}, 0x0) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x800a100}, 0xc) [ 69.638483] device lo entered promiscuous mode [ 69.653558] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 69.715175] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=66 sclass=netlink_tcpdiag_socket pig=6491 comm=syz-executor6 [ 69.796806] blk_update_request: I/O error, dev loop1, sector 0 [ 69.803348] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=66 sclass=netlink_tcpdiag_socket pig=6483 comm=syz-executor6 [ 69.815710] Buffer I/O error on dev loop1, logical block 0, lost async page write [ 69.823407] blk_update_request: I/O error, dev loop1, sector 8 [ 69.829396] Buffer I/O error on dev loop1, logical block 1, lost async page write [ 69.837179] blk_update_request: I/O error, dev loop1, sector 16 [ 69.843280] Buffer I/O error on dev loop1, logical block 2, lost async page write [ 69.850958] blk_update_request: I/O error, dev loop1, sector 24 [ 69.857069] Buffer I/O error on dev loop1, logical block 3, lost async page write [ 69.864754] blk_update_request: I/O error, dev loop1, sector 32 [ 69.870849] Buffer I/O error on dev loop1, logical block 4, lost async page write [ 69.878500] blk_update_request: I/O error, dev loop1, sector 40 [ 69.884608] Buffer I/O error on dev loop1, logical block 5, lost async page write [ 69.892276] blk_update_request: I/O error, dev loop1, sector 48 [ 69.898351] Buffer I/O error on dev loop1, logical block 6, lost async page write [ 69.906020] blk_update_request: I/O error, dev loop1, sector 56 [ 69.912255] Buffer I/O error on dev loop1, logical block 7, lost async page write [ 69.919938] blk_update_request: I/O error, dev loop1, sector 64 [ 69.926018] Buffer I/O error on dev loop1, logical block 8, lost async page write [ 69.933728] blk_update_request: I/O error, dev loop1, sector 72 [ 69.939804] Buffer I/O error on dev loop1, logical block 9, lost async page write [ 70.389233] pktgen: kernel_thread() failed for cpu 0 [ 70.394457] pktgen: Cannot create thread for cpu 0 (-4) [ 70.399849] pktgen: kernel_thread() failed for cpu 1 [ 70.405262] pktgen: Cannot create thread for cpu 1 (-4) [ 70.410864] pktgen: Initialization failed for all threads 00:38:40 executing program 6: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x15, 0x4, @tid=r0}, &(0x7f0000000080)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write$P9_RLCREATE(r1, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x50, 0x4, 0x2}, 0x3}}, 0x18) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x0, r2+30000000}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00004f3ff8)={0xffffffffffffffff}, &(0x7f0000ec8ff0), &(0x7f0000685000)={0x77359400}, 0x8) 00:38:40 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x2223c0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r0, 0x0) fgetxattr(r0, &(0x7f0000000000)=@random={'user.', '&\x00'}, &(0x7f0000000040)=""/108, 0x6c) sched_setscheduler(0x0, 0x0, &(0x7f00000003c0)) 00:38:40 executing program 2: r0 = socket(0x8, 0xa, 0x3) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000040)={0x9, 0x7, 0x1}, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) 00:38:40 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) r2 = memfd_create(&(0x7f00000001c0)="23656d31232b02e1507c6fb601248ffb79434523c443f59953fdd310df4bf1655103adba547345820ca6f3350e215bd399da10e9297f6a9b8e45de937792e812296f45da72d76cb3c465f2bcfd9e3c2dbb5dcf9e504506f55b60ea64873ea56264329ef9d74ed8f9d536acbf81a79881f636ebe5869990d27d90e3b9ea96d9cedb492126e5ef6687b40458b0eecebc26b339ed5c40cbc16635f08c35021a6ae5c7bfd7b8ecdfc14c537c795fe04cf9c7", 0x0) write(r2, &(0x7f0000000140)="32c11e476eda901b93ff32403596307e42d8e0c739ae2510460313bcf2c34a97571d822b2ace4f2acb5098ec2c663a9614b85839e36251d80560860facdd148e9b7b181355bfe7b4960691b518e40b53836343236e2def94da2e", 0x2e7) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000280)) clock_settime(0x0, &(0x7f0000000000)) 00:38:40 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$FICLONE(r0, 0x40049409, r0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[]}}, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x18, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 00:38:40 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) sendto$packet(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 00:38:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000280), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x8000, 0x1, 0xe8}]}, 0x8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000180)={0x0, 0xfffffffffffffffd, 0x0, 0x0, @scatter={0x8, 0x0, &(0x7f0000001880)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f00000004c0)=""/74, 0x4a}, {&(0x7f0000000380)=""/5, 0x5}, {&(0x7f0000000540)=""/52, 0x34}, {&(0x7f0000001740)=""/173, 0xad}, {&(0x7f0000001800)=""/91, 0x5b}, {&(0x7f0000000640)=""/25, 0x19}]}, &(0x7f00000004c0), &(0x7f0000000680)=""/91, 0x0, 0x1, 0x0, &(0x7f00000003c0)}) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = gettid() ptrace$poke(0x5, r1, &(0x7f0000000000), 0x601) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000400), 0x4) shutdown(r0, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/81, 0x51}, 0x0) mq_unlink(&(0x7f00000000c0)='securityprocvboxnet0\x00') 00:38:40 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)='\r', 0x1}], 0x1, 0x0) syz_open_procfs(r0, &(0x7f0000000180)='net/ptype\x00') memfd_create(&(0x7f0000000000)='veth1_to_team\x00', 0x2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={0x50000000, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e20, @broadcast}, 0x200, 0x40, 0x4, 0x10001, 0xe3, &(0x7f0000000140)='veth1_to_team\x00', 0x7fff, 0x81, 0x2}) [ 70.522010] pktgen: kernel_thread() failed for cpu 0 [ 70.527185] pktgen: Cannot create thread for cpu 0 (-4) [ 70.556163] pktgen: kernel_thread() failed for cpu 1 [ 70.567411] pktgen: Cannot create thread for cpu 1 (-4) [ 70.589998] pktgen: Initialization failed for all threads 00:38:41 executing program 1: unshare(0x40000000) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/create\x00', 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x2, 0x0, 0x5, 0x5, 0x0, 0x3, 0x0, 0x0, 0x8, 0x401, 0x8000, 0x29080000000, 0xa9, 0x1, 0x4, 0x4572, 0x8, 0x80000000, 0x2, 0x9, 0x5, 0x3ff, 0x2, 0x0, 0x1, 0x9, 0x7fffffff, 0x40, 0xd7, 0x80, 0x80000001, 0x7fffffff, 0x4, 0x0, 0x9, 0x2e0, 0x0, 0x8000, 0x2, @perf_config_ext={0x2, 0xc3dd}, 0x8, 0xfffffffffffffffa, 0x10001, 0x7, 0x4, 0x5}, 0x0, 0xd, 0xffffffffffffff9c, 0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x4040, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @multicast2}, &(0x7f0000000400)=0x10, 0x80800) openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000440)='rdma.max\x00', 0x2, 0x0) memfd_create(&(0x7f00000004c0)='\'\x00', 0x2) creat(&(0x7f0000000500)='./file0\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000580)) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndtimer(&(0x7f00000029c0)='/dev/snd/timer\x00', 0x0, 0x200) open(&(0x7f00000002c0)='./file0\x00', 0x203, 0x3) openat$urandom(0xffffffffffffff9c, &(0x7f0000002a40)='/dev/urandom\x00', 0x200800, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000002a80)='/dev/full\x00', 0x20000, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) syz_open_procfs(r1, &(0x7f0000000180)='net/ip_vs\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'lo\x00'}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x8) keyctl$join(0x1, &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000005c0)={0x1, 'lo\x00'}, 0x18) 00:38:41 executing program 3: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pktcdvd/control\x00', 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x30, 0x12, 0x301, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x4, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) 00:38:41 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x20) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x20011, r1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x800) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000040)=""/45) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80100, 0x0) 00:38:41 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) r5 = geteuid() stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) r8 = getegid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getresgid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000540)={0x320, 0xfffffffffffffff5, 0x8, [{{0x2, 0x1, 0x2, 0xfffffffffffff000, 0x40, 0x1, {0x6, 0x200, 0x2, 0x7ff, 0x9, 0x1000, 0xfffffffffffffffb, 0xa5, 0xb700, 0x5, 0x8, r1, r2, 0x6, 0x80000001}}, {0x0, 0x9, 0x0, 0x200}}, {{0x2, 0x1, 0x8001, 0xef, 0x1ff, 0x5, {0x0, 0x0, 0x8001, 0x1, 0x1, 0x81, 0x9, 0x3, 0x9, 0xb908, 0x4, r3, r4, 0x800, 0x3}}, {0x1, 0xffff, 0x7, 0x1, 'eth1)$#'}}, {{0x5, 0x0, 0x7fffffff, 0xfffffffffffffffd, 0x7f, 0x2, {0x4, 0x80000001, 0x87db, 0x100, 0xfffffffffffffffa, 0x0, 0x5, 0xffffffff, 0x2, 0x2, 0x2, r5, r6, 0x2, 0x9}}, {0x2, 0xff, 0x6, 0x9, '-user&'}}, {{0x6, 0x3, 0x7, 0x8000, 0xccd, 0x2210, {0x6, 0x3ff, 0xfffffffffffffff8, 0x7, 0x4, 0x738, 0x5, 0x9, 0x4, 0x3325, 0x7, r7, r8, 0x4}}, {0x0, 0x3b4f, 0x0, 0x6}}, {{0x4, 0x3, 0xffffffffffff0001, 0x3, 0x80, 0x0, {0x4, 0xa8, 0x35e, 0x1ff, 0x87a, 0x81, 0x57b, 0x7, 0x9eb, 0x3, 0xb9, r9, r10, 0x3, 0xdb93}}, {0x3, 0x20, 0x3, 0x2, 'lo)'}}]}, 0x320) keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0xfffffffffffffe98) 00:38:41 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1, &(0x7f00000017c0)=""/116, 0x74}}], 0x1, 0x0, &(0x7f0000004a40)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x0, 0x989680}}) preadv(r0, &(0x7f0000000140), 0x391, 0x0) 00:38:41 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) sendto$packet(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 00:38:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000280), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x8000, 0x1, 0xe8}]}, 0x8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000180)={0x0, 0xfffffffffffffffd, 0x0, 0x0, @scatter={0x8, 0x0, &(0x7f0000001880)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f00000004c0)=""/74, 0x4a}, {&(0x7f0000000380)=""/5, 0x5}, {&(0x7f0000000540)=""/52, 0x34}, {&(0x7f0000001740)=""/173, 0xad}, {&(0x7f0000001800)=""/91, 0x5b}, {&(0x7f0000000640)=""/25, 0x19}]}, &(0x7f00000004c0), &(0x7f0000000680)=""/91, 0x0, 0x1, 0x0, &(0x7f00000003c0)}) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = gettid() ptrace$poke(0x5, r1, &(0x7f0000000000), 0x601) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000400), 0x4) shutdown(r0, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/81, 0x51}, 0x0) mq_unlink(&(0x7f00000000c0)='securityprocvboxnet0\x00') 00:38:41 executing program 0: r0 = memfd_create(&(0x7f00000001c0)="736563757269747d917617cb0e3dbe4574656f00", 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000100)={{0x6, 0x7}, {0x0, 0x5}, 0x0, 0x0, 0x6}) write(r0, &(0x7f0000000040)='6', 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000280)) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xbd0a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x80000008031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000297000/0x3000)=nil, 0x3000) 00:38:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x80000, 0x0) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0x10, 0x800) ioctl$KDENABIO(r1, 0x4b36) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000040)="ff55d36cffba04365d0000000000000101000000", 0x14) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="ff55d36cffba04365d0000000000000101000000", 0x14) 00:38:41 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f00000000c0)=0x54) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc, 0x20011, r1, 0x0) pkey_mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)={0x2, 0xba, "03ca0cecad7643b38f56ed586880cd6948fb51edb1f3becb37318b03bb337309feb8f53e163f3e310fc2ac276793e9f469201b7d2d1e848506ee284b7da61f57bf4391c26cb7a9e08e20aba2d860bce615e7f6e2b452e2df91faf1360f2dbcceb365ea0d32e758d76a4458611628935b2035c594c8d9774114519135e48c4461e459ff246be2664e4f3ff97b6e98ebaea9ba7755f21f997a724b250bdcee77d95936420ff3c41bdf19ed776a0f325a946980ad1ecbeaf34325b6"}) [ 70.768282] binder_alloc: binder_alloc_mmap_handler: 6553 20001000-20004000 already mapped failed -16 00:38:41 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) sendto$packet(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 00:38:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x121080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0\x00', 0x400}) close(r0) [ 70.815133] binder: BINDER_SET_CONTEXT_MGR already set [ 70.820616] binder: 6553:6557 ioctl 40046207 0 returned -16 [ 70.826530] binder_alloc: 6553: binder_alloc_buf, no vma 00:38:41 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) sendto$packet(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 00:38:41 executing program 4: r0 = socket$inet(0x2, 0x4002000000000001, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x10001, 0x1100082) fcntl$notify(r0, 0x402, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x3, 0x0) rt_sigsuspend(&(0x7f00000000c0), 0x8) r3 = dup2(r2, 0xffffffffffffffff) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0xffffffcc) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f00000002c0)) keyctl$invalidate(0x15, 0x0) r5 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) r6 = getpgid(0x0) getpriority(0x3, r6) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)) pwritev(r5, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000480)=""/117) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@local, @in=@remote}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000180)=0xe8) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r5) pwritev(r4, &(0x7f0000000280)=[{&(0x7f0000002880)="e85fc006129f60aac065b20f5ba2ab7a4ac9f4724cd187018bb3215be9e4fcaf0398a0d5560d4960ec634a8814fb8b17d842500c66968fc2176fde36f8ffdad545d544f1e85a4b485e6d94fd0a4e3a9274875fd8a2752b928995131c918f4a6fcd9c5537f45495b4d57a9c3e57e44f54df8828a7be7691cdbfbcac6918d2bdfcd1373b292acdbbef9375c6b11b7c25c1ef0da72d", 0x94}], 0x1, 0x0) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 70.826552] binder: 6553:6564 transaction failed 29189/-3, size 0-0 line 3136 [ 70.826954] binder: send failed reply for transaction 2 to 6553:6557 [ 70.827115] binder: undelivered TRANSACTION_COMPLETE 00:38:41 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) 00:38:41 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1, &(0x7f00000017c0)=""/116, 0x74}}], 0x1, 0x0, &(0x7f0000004a40)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x0, 0x989680}}) preadv(r0, &(0x7f0000000140), 0x391, 0x0) [ 70.827122] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.850323] binder: undelivered TRANSACTION_ERROR: 29189 [ 70.870142] IPVS: Creating netns size=2536 id=12 00:38:41 executing program 1: r0 = getpgrp(0xffffffffffffffff) setpgid(r0, r0) 00:38:41 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) [ 71.026848] SELinux: policydb magic number 0x6c05fe8 does not match expected magic number 0xf97cff8c 00:38:41 executing program 6: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x103}) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x185000, 0x0) getpriority(0x0, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000100)=""/91, 0x5b, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x8c, 0x3, 0x6}}, 0x14) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6, @in=@remote}}, {{@in6=@ipv4}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000300)=0xe8) 00:38:41 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40200, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000180)=0x10001) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/187) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write$P9_RLERROR(r2, &(0x7f0000000040)={0x1b, 0x7, 0x2, {0x12, '/dev/input/event#\x00'}}, 0x1b) 00:38:41 executing program 5: clone(0x0, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="ba") mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 00:38:41 executing program 1: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x8000020a01) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, 'client0\x00', 0xffffffff80000004, "000000000100", "88e7ed00007fff051eaa961ef6c6992b6900000000f9ffff7711be18a3d918e0"}) r3 = request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)='\x00', 0x0) r4 = add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)="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", 0xfd, 0x0) keyctl$unlink(0x9, r3, r4) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{0x9650}}}], 0x1c) 00:38:41 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) 00:38:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000740)="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") fsetxattr(r0, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="01", 0x1, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1) 00:38:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, '$'}, {0x20, 'mime_typeuser'}, {0x20, '/dev/full\x00'}], 0xa, "c974426bc1038fec60c4ad69aba252947af09aa4d21c79e63361d896f975928a35c0acc57126dcfa13d3c6862d99e4fae2b5d24c8cdb95c2f2c94e2f7b863e8c8d03ef4decceb76e2bbede27e064c83e9d7d1f42895769fe68"}, 0x7f) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101201, 0x0) r6 = fcntl$getown(r4, 0x9) write$FUSE_LK(r5, &(0x7f00000000c0)={0x28, 0xfffffffffffffff5, 0x6, {{0x6, 0xd5, 0x1, r6}}}, 0x28) setrlimit(0x8, &(0x7f0000a9cff8)) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000100)={0x2, {0x46, 0x100, 0x6898, 0x6cc1}}) sendmsg$unix(r4, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) r7 = dup2(r1, r3) sendmsg$netlink(r7, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000000000), 0x200000000000002f, &(0x7f0000000040)=[@rights={0x10, 0x1, 0x1, [r0]}], 0xfffffffffffffe3a}, 0x0) 00:38:42 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) 00:38:42 executing program 2: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0x80000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', 0x8a01}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000001c0), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000340)={0x7, &(0x7f0000000300)=[{0x5, 0x7, 0x100, 0x9}, {0x9a9c, 0x3, 0x100000, 0x1}, {0x0, 0x5, 0x143, 0x1ff}, {0x800, 0xffffffffffffb2a8, 0x5, 0x3e8d07a5}, {0x962, 0x0, 0x7677, 0x4}, {0x9, 0x8001, 0x1, 0x1000}, {0x7690, 0x164c57f9, 0x3ff, 0xf5}]}, 0x8) r3 = socket$inet(0x2, 0x2, 0x2000000088) bind(r3, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000027c0)={@loopback, @remote, 0x0}, &(0x7f0000002800)=0xc) renameat2(r0, &(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000440)='./file0\x00', 0x1) ioctl$UI_END_FF_UPLOAD(r1, 0x406055c9, &(0x7f0000000380)={0x10, 0x0, {0x0, 0x5, 0x80000002a, {0x7, 0x8384}, {0x6, 0x28}, @const={0x20, {0x1ff, 0x3, 0x3ff, 0x92}}}, {0x57, 0x8, 0x6, {0x101, 0x3}, {0xf04cb83, 0x6}, @rumble={0x40, 0xfffffffffffffffc}}}) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002840)={@rand_addr=0x5, @empty, r4}, 0xc) setsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) recvfrom$inet(r3, &(0x7f0000000140)=""/110, 0x6e, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000100)="b5", 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20, @local}, 0x10) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) 00:38:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100), 0x0, 0x100) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000140)={'security\x00', 0x7f, "39f343c13f2e4e23d8bab087be7473ec52728f58f6082b2fb4b454ab8215af722651763d7b652d739a6f3cef0dc13c3daca1b3a921217576172946731a6303916a9d0940a96ffed8fe9555d6e6f8cf02841137a89b472ba2933a746d812dc10c6528767dca557a8f963e46bd08eb69535827314aab67d44fdf311d9397c06c"}, &(0x7f0000000200)=0xa3) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000100)) write$P9_ROPEN(r1, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x21, 0x2, 0x7}, 0x9}}, 0x18) 00:38:42 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/llc\x00') fchmod(r0, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000000c0)={0x2b, 0x9, 0x7, 0xf, 0xb, 0x5, 0x5, 0x57, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000040)={{0x2, 0x0, @rand_addr}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @dev}, 'syz_tun\x00'}) [ 71.736218] SELinux: policydb magic number 0x6c05fe8 does not match expected magic number 0xf97cff8c 00:38:42 executing program 4: r0 = socket$inet(0x2, 0x4002000000000001, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x10001, 0x1100082) fcntl$notify(r0, 0x402, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x3, 0x0) rt_sigsuspend(&(0x7f00000000c0), 0x8) r3 = dup2(r2, 0xffffffffffffffff) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0xffffffcc) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f00000002c0)) keyctl$invalidate(0x15, 0x0) r5 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) r6 = getpgid(0x0) getpriority(0x3, r6) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)) pwritev(r5, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000480)=""/117) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@local, @in=@remote}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000180)=0xe8) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r5) pwritev(r4, &(0x7f0000000280)=[{&(0x7f0000002880)="e85fc006129f60aac065b20f5ba2ab7a4ac9f4724cd187018bb3215be9e4fcaf0398a0d5560d4960ec634a8814fb8b17d842500c66968fc2176fde36f8ffdad545d544f1e85a4b485e6d94fd0a4e3a9274875fd8a2752b928995131c918f4a6fcd9c5537f45495b4d57a9c3e57e44f54df8828a7be7691cdbfbcac6918d2bdfcd1373b292acdbbef9375c6b11b7c25c1ef0da72d", 0x94}], 0x1, 0x0) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:38:42 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='tagemap\x00') write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x7}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) 00:38:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@setlink={0x2c, 0x13, 0x311, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) 00:38:42 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000001380)=ANY=[@ANYBLOB="8cff7c03090000005345204c696e75781b000000000000000002ab0800826f00400000000000000000000007"], 0x2c) signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) connect(0xffffffffffffffff, &(0x7f0000001440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001340)={'ip6gre0\x00'}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x800) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 00:38:42 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000200)={0x90, 0x7, 0x9, 'queue0\x00', 0x9}) sendto$inet(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000000), 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x200, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000100)) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x65, 0x40000002, 0x0, 0x0) 00:38:42 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080), 0x14) 00:38:42 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xfffffffffffffdac, 0x83d9, 0x200, 0x8, 0x0, 0x9, 0x0, 0x9, 0xc717, 0x6, 0x800, 0x0, 0x4, 0x0, 0x2ed21c01, 0x4, 0x627, 0x800, 0x7d, 0x3f, 0x0, 0x400, 0x3, 0x401, 0x5, 0x1, 0x80000000, 0x101, 0x5, 0x7, 0x2, 0x40, 0x0, 0x4, 0xffffffff, 0x2, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x8, 0x9, 0x1, 0x7, 0x9, 0x7, 0xffffffffffffff81}, 0xffffffffffffffff, 0x7, 0xffffffffffffff9c, 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x10000, 0x0) r3 = signalfd(0xffffffffffffff9c, &(0x7f0000000100)={0x3}, 0x8) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r0, 0x8020}, {r1, 0x1410}, {r2, 0x10}, {r3, 0x1}], 0x4, &(0x7f00000001c0)={r4, r5+30000000}, &(0x7f0000000200)={0x65}, 0x8) r6 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$getflags(r3, 0x408) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x3012, r6, 0x0) 00:38:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x8, 0x1, 0x5}]}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x18032, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000000c0)="d9", 0x15f) 00:38:42 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000000c0)=""/87, 0x57}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000140)=""/8, &(0x7f0000000080)=0x8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x101000, 0x0) connect$l2tp(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x1, 0x2, {0xa, 0x4e22, 0x10000, @local, 0x3}}}, 0x3a) 00:38:42 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080), 0x14) 00:38:42 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x31d, 0x0) r0 = gettid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)) r3 = getegid() ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000180)={0x0}) r5 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r2, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x90, 0x0, &(0x7f0000000280)=[@acquire_done={0x40106309, r4}, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x28, 0x28, &(0x7f0000000200)=[@ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1, 0x4, 0x1b}], &(0x7f0000000240)=[0x78, 0x18, 0x40, 0x28, 0x30]}, 0x2}}, @free_buffer={0x40086303, r5}, @free_buffer={0x40086303, r6}, @request_death={0x400c630e, 0x2}], 0xc9, 0x0, &(0x7f0000000340)="c26f66d5a00c0e9eceea5d9f07003955311a967795f3ebafba8f7ebdd3a643e1f588fd65b626e4c47b43a08df0012a1e010fe26b7cbcc1d047fb790d1eab03d34773dac7bdd358fe1f1ac81926ba8ad0f9bc2a62df73fb654444525cb9ee607f311168e5cb69a2e2962409f96e1ab70fc60498b00503d6563bd3c023d7552f88b3daafc2fe2520a1e8a905ac95aa9489fc7d0282cc3a9dcc012d8ddbeb5885dc9e60fad673d3db21895095e01a2d94b1d389ce5df863778b0502333efd27f1adb7a710fa4be6f65421"}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={r0, 0x0, r3}, 0xc) r7 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') preadv(r7, &(0x7f0000000700), 0x31f, 0x10400003) sendfile(r7, r7, 0x0, 0x4) 00:38:42 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x101480, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0xfffffffffffffffc) tkill(r0, 0xd) clock_gettime(0x3, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000100)={{r3, r4+30000000}, {r5, r6+10000000}}, &(0x7f0000000140)) r7 = syz_open_pts(r2, 0x200200) r8 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x8, &(0x7f0000000200)) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x0, 0x0) faccessat(r9, &(0x7f00000001c0)='./file0\x00', 0x100, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x14) tkill(r8, 0x23) dup3(r7, r2, 0x0) tkill(r0, 0x1000000000016) 00:38:42 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000000c0)=""/87, 0x57}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000140)=""/8, &(0x7f0000000080)=0x8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x101000, 0x0) connect$l2tp(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x1, 0x2, {0xa, 0x4e22, 0x10000, @local, 0x3}}}, 0x3a) [ 71.868762] SELinux: policydb magic number 0x37cff8c does not match expected magic number 0xf97cff8c 00:38:42 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080), 0x14) 00:38:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000000100)=0x1e) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a5c0), 0x0, 0x0, &(0x7f000000a840)={0x77359400}) 00:38:42 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x8000, 0x0) r1 = geteuid() fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000140)={0xa0, 0x0, 0x8, {{0x5, 0x1, 0x38000000000, 0x7f, 0x7fff, 0x8, {0x0, 0x100000000, 0x4, 0x80000001, 0x200, 0x5, 0x4, 0x7367f689, 0x4, 0x41, 0x60f, r1, r2, 0x2, 0x6}}, {0x0, 0x2}}}, 0xa0) [ 72.140443] SELinux: policydb magic number 0x6c05fe8 does not match expected magic number 0xf97cff8c [ 72.221732] SELinux: policydb magic number 0x37cff8c does not match expected magic number 0xf97cff8c 00:38:43 executing program 1: mkdir(&(0x7f0000000340)='./control/file0\x00', 0x140) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) close(r1) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) getdents64(r2, &(0x7f0000000000)=""/188, 0xffffffff00000018) rename(&(0x7f00000001c0)='./control\x00', &(0x7f0000000200)='./control/file0\x00') close(r0) unlinkat(r2, &(0x7f0000000100)='./control/file0\x00', 0x200) 00:38:43 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000001380)=ANY=[@ANYBLOB="8cff7c03090000005345204c696e75781b000000000000000002ab0800826f00400000000000000000000007"], 0x2c) signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) connect(0xffffffffffffffff, &(0x7f0000001440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000001340)={'ip6gre0\x00'}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x800) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 00:38:43 executing program 6: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() fchownat(r1, &(0x7f0000000440)='./file0\x00', r2, r3, 0x1c00) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x408901, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x8) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) write$P9_RAUTH(r4, &(0x7f00000001c0)={0x14, 0x67, 0x1, {0x0, 0x3, 0x7}}, 0x14) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffea3) timer_create(0x3, &(0x7f00000003c0)={0x0, 0x12, 0x2, @thr={&(0x7f0000000280)="aac2c432c369b8f76ef61626149664bb93dc6078c995cda1f3f4d5f44da5682d7077373ac5f8d00bbd5d670de70e7649fc4183381f005df48affdaf5e2b7d1a90f96d2c459b9585fc2b24868486ac7cd761295b281d568a6518ae24d6e5e44236dd89409c0f722ece10a47ce601dc1dd14b909500cab4af25278342bf691b856a32d7b2f4031e2081d484da273b635f611112b2c23dbb5095f4c36149a8b50fda0f1cb6a9f46aa6f8248b5c899cc2a0d4b14f5c8156e4babfd", &(0x7f0000000340)="dfd0f79cba292a0fafad03d9085eb247a80bbdcfc4904925340c78b6cb029e598470c22414d62af522d36f7a6f54bef58058b1af8d09857f4fb5af4461ed416ddf577e004b840a8316d2f197831d9aa94cbaee2e209edf044477c37167e8756b7dc8d7e22dc3a252fd0e350acfed047195520359587bf94f"}}, &(0x7f0000000400)) 00:38:43 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r0}, 0x14) 00:38:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x44) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000140)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x210000, 0x0) splice(r0, &(0x7f0000000340), r0, &(0x7f0000000380), 0xf3f, 0x1) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x62}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x1) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000000020300ffbf00000000fcffffff0000040002000800030025000000"], 0x20}}, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x2}) 00:38:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x28}}, 0x0) getsockname(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000001c0)=0x80) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$void(r1, 0xc0045c77) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000040)="957ce3a4866828943047e03fd3fcd385db5defc98fbf0514d453b697a9c3d0033c2f478f2a504398eefef5760159a92747011ceef1d8fa29a92b856b8a122005823583ea8040cd9ab7d0e73173c2d2b2a9f9dbd9d9aeb8bdc1a4ebe5a6227bf6f0c9bf322616575c3c2890acdc9e2482a14e6b5d78254f07f660595aa39433ecc221a5f8e2850e102c50fa1d1a38827853bcd3309fccee37565ef251ea413bdaca82969ece403fd6016e45006ce314373da375041eb8dac5ac4d3201c0c57c1677c731ef59982cd7b113617f6d50d1416328ef4e7975d0ca96980af8591ab4f493cee26883b65bce", 0xe8) 00:38:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'veth1_to_team\x00', @dev}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x441, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) inotify_rm_watch(r1, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7f) ptrace$getsig(0x4202, 0x0, 0x0, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x8000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 00:38:43 executing program 4: r0 = socket(0x18, 0x0, 0x1) r1 = dup(r0) ioctl$UI_SET_PHYS(r1, 0x4004556c, &(0x7f0000000000)='syz1\x00') ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x7336, 0x3f, 0x8, 0x2, 0x7, 0x2}) connect(r0, &(0x7f0000dcd000)=@un=@file={0x1, './file0\x00'}, 0x100000103) sendmmsg(r0, &(0x7f00000002c0), 0x8000049, 0x0) 00:38:43 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r0}, 0x14) 00:38:43 executing program 1: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101000, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000100)) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000003c0)=0xac, 0x4) 00:38:43 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r0}, 0x14) 00:38:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000180), 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x40, 0x7, 0x1000, 0x9}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x83) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x7, 0x3, 0x9, 0x8, 0x1, 0x8000, 0x101, 0x9, 0x81, 0x7, 0x2000000000000000}) [ 72.694290] SELinux: policydb magic number 0x37cff8c does not match expected magic number 0xf97cff8c 00:38:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300090a0000000000000000008000030006000000000002000000e0e72d0100000000000000000200010000000000000000681b000000030005000000000002000000e00000010000000000000000"], 0x50}}, 0x400000000000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x10, 0xffffffffffffffd2) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000003300)=@generic, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f00000001c0)=""/182, 0xb6}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f0000000400)=""/15, 0xf}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f00000004c0)=""/96, 0x60}, {&(0x7f0000000540)=""/109, 0x6d}, {&(0x7f00000005c0)=""/209, 0xd1}], 0xa, &(0x7f0000003540)=""/122, 0x7a}}], 0x1, 0x0, &(0x7f0000003780)={0x77359400}) 00:38:43 executing program 2: fcntl$getown(0xffffffffffffffff, 0x9) getpid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000440)) gettid() getpgrp(0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000480)) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000540)="6cca54693c2dc2af00") ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/146) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)="6d656d0001792e737761532e63757272656e7400", 0x0, 0x0) pread64(r2, &(0x7f0000000300)=""/184, 0xa, 0x75f4f000) 00:38:43 executing program 7: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) 00:38:43 executing program 3: r0 = socket(0x400000000010, 0x2, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 00:38:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3) mincore(&(0x7f00009fd000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/49) ioctl$UFFDIO_COPY(r0, 0x400c55cb, &(0x7f0000000000)={&(0x7f00002b9000/0x3000)=nil}) 00:38:43 executing program 0: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc0043, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040)=0x1, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) setregid(0x0, r1) 00:38:43 executing program 6: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() fchownat(r1, &(0x7f0000000440)='./file0\x00', r2, r3, 0x1c00) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x408901, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x8) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) write$P9_RAUTH(r4, &(0x7f00000001c0)={0x14, 0x67, 0x1, {0x0, 0x3, 0x7}}, 0x14) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffea3) timer_create(0x3, &(0x7f00000003c0)={0x0, 0x12, 0x2, @thr={&(0x7f0000000280)="aac2c432c369b8f76ef61626149664bb93dc6078c995cda1f3f4d5f44da5682d7077373ac5f8d00bbd5d670de70e7649fc4183381f005df48affdaf5e2b7d1a90f96d2c459b9585fc2b24868486ac7cd761295b281d568a6518ae24d6e5e44236dd89409c0f722ece10a47ce601dc1dd14b909500cab4af25278342bf691b856a32d7b2f4031e2081d484da273b635f611112b2c23dbb5095f4c36149a8b50fda0f1cb6a9f46aa6f8248b5c899cc2a0d4b14f5c8156e4babfd", &(0x7f0000000340)="dfd0f79cba292a0fafad03d9085eb247a80bbdcfc4904925340c78b6cb029e598470c22414d62af522d36f7a6f54bef58058b1af8d09857f4fb5af4461ed416ddf577e004b840a8316d2f197831d9aa94cbaee2e209edf044477c37167e8756b7dc8d7e22dc3a252fd0e350acfed047195520359587bf94f"}}, &(0x7f0000000400)) 00:38:43 executing program 2: mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mlock2(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r1, 0x310, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbc8e}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) 00:38:43 executing program 3: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x4000) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@local, @loopback, 0x0}, &(0x7f0000000100)=0xc) setsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000300)="0e89ed900f794c93454c26c19519b9b099ead1e104d24065549a331e8e32ba79f0934ed7a583c02376ec801d8c2f1555e8405fb982856011fbf740563bf50859424fcf21e872dd4a005718ca008798e7", 0x50) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000800)) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x7fffffff, 0xc7e5, 0x8, 0xb3}, 0x7, [0x1ff, 0x80000001, 0x7784, 0x4f, 0x6, 0x100000001, 0xad9c, 0x5, 0x8, 0x3, 0x9, 0xf8, 0xffffffffffffffff, 0x7ff, 0x8001, 0x1, 0x56f, 0x4, 0xe21a, 0x401, 0x4, 0x5d2, 0x9, 0xfffffffffffffffe, 0x5, 0x401, 0x200, 0x4, 0x0, 0xfffffffffffffffd, 0x6, 0xffffffffffffffff, 0x80000000, 0x401, 0x0, 0x7, 0x81, 0x3, 0x10001, 0x1, 0x400, 0x0, 0x3ff, 0x4d4, 0x0, 0x0, 0x5, 0x10000, 0x9, 0x20, 0x6, 0xffffffffffff8000, 0x0, 0x5, 0x3f, 0x8, 0x4, 0x3, 0x8, 0x8, 0x8, 0x1ff, 0xfffffffffffffff9, 0x100], [0xa10f, 0x3ff, 0xf0, 0x3, 0x72f, 0x9, 0xd036, 0x0, 0xfffffffffffffffc, 0x200, 0x21a, 0x9, 0x80, 0x7fffffff, 0x8, 0xfffffffffffffff8, 0x68e, 0x4, 0x0, 0x6, 0xfffffffffffffff9, 0x5, 0x1ff, 0x200, 0xc19, 0x1, 0x1f, 0x5, 0x36502aca, 0x8bfe, 0x6, 0xff, 0x4, 0x5, 0xffff, 0xce, 0xfffffffffffffe01, 0x8000, 0x781, 0x3, 0xac6, 0x1000, 0x8, 0x4, 0x9, 0x6e, 0xd65, 0x0, 0x4, 0x9, 0x2078, 0x1000, 0x7f, 0xffffffffffffffad, 0x7, 0x8, 0x7, 0x87, 0x0, 0xfffffffffffff923, 0x3a, 0x200, 0x6, 0x4], [0xffffffffffff20f6, 0x16a4, 0x9, 0x1, 0x5, 0x1, 0x1, 0x5, 0x1a5, 0x5, 0x9, 0x8, 0xc1c, 0x0, 0xdb9, 0x4, 0x12000000000, 0x1, 0x39c, 0x0, 0x2, 0x6, 0x8001, 0x90000000000000, 0x1, 0xd4, 0x2, 0x4, 0x6, 0x6, 0x100, 0x8, 0x3f, 0x4, 0x2, 0x10000, 0x4, 0x401, 0x9, 0x7ff, 0xde6, 0x7, 0xffffffffffffffc0, 0x80, 0x9, 0x240000000000, 0x7f, 0xd07, 0xfff, 0x1, 0x9, 0x4, 0x0, 0x5, 0x2, 0x6, 0x9, 0xffff, 0x3, 0x6, 0x1ff, 0x81, 0x5, 0x9], [0x64, 0xab, 0xff, 0x8, 0x1, 0x9, 0xfffffffffffffff8, 0x8, 0x0, 0x3, 0x7fffffff, 0xfffffffffffffff9, 0xba65, 0x20, 0x4, 0x9, 0x36a, 0x9, 0x6, 0x4, 0xff, 0x10001, 0x1ff, 0x7fffffff, 0x2, 0x89, 0x0, 0x495, 0x4a, 0x3, 0xfffffffffffffffe, 0x8, 0x7fffffff, 0x8001, 0x942, 0x1, 0x7, 0xf71, 0x200, 0x2, 0xff, 0x0, 0x10000, 0x9, 0x6, 0x7, 0x4002, 0x8001, 0x0, 0x64ce79c2, 0x2, 0x8d, 0xffffffff, 0x100, 0x40, 0x9, 0x5, 0x2, 0x9, 0x8, 0x3, 0x80, 0xb0, 0x10000000000000]}, 0x45c) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000200)={@multicast2, @loopback, @multicast1}, 0xc) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 00:38:43 executing program 7: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) 00:38:43 executing program 5: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000980)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000200)) timerfd_settime(r0, 0x0, &(0x7f0000000380), &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000340)={0x0, @broadcast, @dev}, &(0x7f0000000300)=0xfffffffffffffd88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000f40)={0x0, @multicast1, @dev}, &(0x7f0000000f80)=0xc) recvmmsg(r2, &(0x7f0000003c80)=[{{&(0x7f0000000fc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001040)=""/42, 0x2a}, {&(0x7f0000001080)=""/196, 0xc4}], 0x2, &(0x7f00000011c0)=""/44, 0x2c, 0x1}, 0x80}, {{&(0x7f0000001200)=@nfc_llcp, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001280)=""/216, 0xd8}, {&(0x7f0000001380)=""/230, 0xe6}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/49, 0x31}], 0x4, &(0x7f0000002500)=""/134, 0x86, 0x1}, 0x10001}, {{&(0x7f00000025c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002640)=""/115, 0x73}, {&(0x7f00000026c0)}], 0x2, &(0x7f0000002740)=""/39, 0x27, 0x8001}, 0x7fff}, {{&(0x7f0000002780)=@sco, 0x80, &(0x7f0000003b40)=[{&(0x7f0000002800)=""/35, 0x23}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/101, 0x65}, {&(0x7f00000038c0)=""/27, 0x1b}, {&(0x7f0000003900)=""/242, 0xf2}, {&(0x7f0000003a00)=""/48, 0x30}, {&(0x7f0000003a40)=""/205, 0xcd}], 0x7, &(0x7f0000003b80)=""/232, 0xe8, 0x1000}}], 0x4, 0x40002020, &(0x7f0000003d00)={0x0, 0x989680}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000003d40)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000003e40)=0xe8) recvmmsg(r1, &(0x7f0000007380)=[{{&(0x7f0000003ec0)=@generic, 0x80, &(0x7f0000004000)=[{&(0x7f0000003f40)=""/189, 0xbd}], 0x1, &(0x7f0000004040)=""/138, 0x8a, 0x551d}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000004100)=""/17, 0x11}, {&(0x7f0000004140)=""/171, 0xab}, {&(0x7f0000004200)=""/59, 0x3b}, {&(0x7f0000004240)=""/2, 0x2}, {&(0x7f0000004280)=""/185, 0xb9}, {&(0x7f0000004340)=""/21, 0x15}, {&(0x7f0000004380)=""/23, 0x17}], 0x7, &(0x7f0000004400)=""/4096, 0x1000, 0xdd6b}, 0x7fff}, {{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000005400)=""/239, 0xef}, {&(0x7f0000005500)=""/112, 0x70}], 0x2, 0x0, 0x0, 0x8}, 0x101}, {{&(0x7f00000055c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005640)=""/154, 0x9a}, {&(0x7f0000005700)=""/127, 0x7f}, {&(0x7f0000005780)=""/15, 0xf}, {&(0x7f00000057c0)=""/140, 0x8c}, {&(0x7f0000005880)=""/29, 0x1d}, {&(0x7f00000058c0)=""/45, 0x2d}], 0x6, &(0x7f0000005940)=""/243, 0xf3}, 0x4}, {{&(0x7f0000005a40)=@can, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000005ac0)=""/69, 0x45}, {&(0x7f0000005b40)=""/163, 0xa3}, {&(0x7f0000005c00)=""/185, 0xb9}], 0x3, 0x0, 0x0, 0xe00000000000}, 0x7}, {{&(0x7f0000005d00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000006340)=[{&(0x7f0000005d80)=""/220, 0xdc}, {&(0x7f0000005e80)=""/70, 0x46}, {&(0x7f0000005f00)=""/209, 0xd1}, {&(0x7f0000006000)=""/240, 0xf0}, {&(0x7f0000006100)=""/91, 0x5b}, {&(0x7f0000006180)=""/154, 0x9a}, {&(0x7f0000006240)=""/30, 0x1e}, {&(0x7f0000006280)=""/134, 0x86}], 0x8, &(0x7f0000006380)=""/4096, 0x1000, 0x10000}, 0x401}], 0x6, 0x1, 0x0) accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f0000008e40)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000008f40)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000009040)=0xe8) getpeername$packet(r2, &(0x7f000000a5c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000000a600)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f000000e840)={@multicast1, @remote, 0x0}, &(0x7f000000e880)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f000000e8c0)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f000000e9c0)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f000000ea00)={0x0, @rand_addr, @rand_addr}, &(0x7f000000ea40)=0xc) socket$inet6(0xa, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f000000ef40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9400100}, 0xc, &(0x7f000000ef00)={&(0x7f000000ea80)={0x450, r3, 0xa559dc1da6165db2, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x7, 0x3, 0x97a, 0x1f}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xa7}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0xbc, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1b3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x21c, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x9, 0x0, 0x5, 0x2}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffc}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xb14}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x7c, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2545}}}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x1}, 0x20004040) 00:38:43 executing program 1: r0 = memfd_create(&(0x7f0000000040)='!em1\x00', 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x5, 0xfff, 0x2, 0x10000, 0x2, 0x3, 0x101, 0x2, 0x1, 0x64e900000000000}) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000180)=""/254) ioctl$TIOCGPTPEER(r1, 0x5414, 0xfffffffffffff985) 00:38:43 executing program 0: prctl$void(0x20000000000005) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) openat$cgroup_type(r0, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x3, 0x0) flock(r1, 0x0) 00:38:43 executing program 0: unshare(0x2000400) r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x14b, 0x80000) r1 = signalfd(r0, &(0x7f00007d0ff8)={0x7}, 0x8) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000e80ff4)) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x2) signalfd(r1, &(0x7f0000e82000), 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs(r3, &(0x7f0000000080)='net/icmp\x00') 00:38:43 executing program 7: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) 00:38:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect(r0, &(0x7f0000000040)=@in={0x2, 0x0, @multicast2}, 0x80) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) 00:38:44 executing program 3: mkdir(&(0x7f0000000100)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') r2 = open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) lseek(r2, 0x20000, 0x0) rename(&(0x7f00000001c0)='./control/file0\x00', &(0x7f0000000200)='./control\x00') close(r0) 00:38:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="a23c82ebdcef0b0a200966192837000000002e1eedaa14d92f960d234e4f54c488175317228f2dc7b3a196e4deb881"], 0xc}}], 0x1, 0x0) 00:38:44 executing program 0: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ffddfc43540a2f9e861ef305010008000100010423dcffdf00", 0xfca9) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{0x8, 0xffffffff}, {0x6, 0xfffffffffffffffe}, {0x3, 0x93a7}, {0xa, 0x1}, {0x3, 0x4}, {0x0, 0x7fffffff}, {0x2, 0x2}, {0x8, 0x7}], 0x8) write(r0, &(0x7f0000000200)="1f0000000104fffffd3b54c007110000f30501000b0002001f0000b1aedfb5", 0x1f) 00:38:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f00000001c0), 0xffffffffffffff6b, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) 00:38:44 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) 00:38:44 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)={0xa7f, 0x4, 0x2, 0x3, 0x2, [{0xfffffffffffffffd, 0x8, 0x7, 0x0, 0x0, 0x1004}, {0x3, 0x400, 0x2, 0x0, 0x0, 0x2000}]}) sendto$inet(r0, &(0x7f000029b000), 0x287, 0x0, &(0x7f0000778000)={0x2, 0x1, @loopback}, 0x10) [ 73.665328] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 73.718579] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 00:38:44 executing program 6: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) readlinkat(r0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000440)=""/192, 0xc0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000040)="00008000983ca3cac3c5fa8b80da952581898ad5f2f639a29cfac77b715be981ef1dbabc0c756a6a0ef9a894cf4f1ae151988830dbb3b14081ec", 0x100000, &(0x7f00000002c0)) syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000100), 0x200000000000026a, 0x10400003) lseek(r1, 0x0, 0x3) mkdir(&(0x7f0000001500)='./file0/file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000f80)) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='overlay\x00', 0x20000, &(0x7f00000001c0)) mount(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)="62012600", 0x2000, 0x0) 00:38:44 executing program 1: r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x110) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1003c, 0x0) syz_open_pts(r0, 0x400000) ppoll(&(0x7f0000000080)=[{r1, 0x8}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={0x3}, 0x8) 00:38:44 executing program 2: openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0xa) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xffea) ioctl$TCSBRK(r1, 0x5409, 0x4) write$P9_RRENAME(r1, &(0x7f0000000000)={0xfffffffffffffe56}, 0x7) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a45321, &(0x7f00000001c0)={{0x1, 0x3af}, 'port0\x00', 0x5d, 0x20404, 0x1, 0x200, 0x6, 0x0, 0x9, 0x0, 0x7, 0x7f}) sendmsg$unix(r1, &(0x7f0000001b00)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f00000003c0)="c0", 0x1}], 0x1, &(0x7f0000001ac0)}, 0x0) 00:38:44 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000c) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x14}) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x15555555555555ae, 0x46) close(r1) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="79699358c42972e0e823d0e01badf9f5b200", 0x12}], 0x1, 0x0) 00:38:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0xfffffffffffffe6f, &(0x7f0000000440), 0x0, &(0x7f00000000c0)=[{0x0, 0x10f, 0x4, "26f4c427369e4064b281a987179f2666"}, {0x0, 0x13d, 0xfffffffffffffff8, "f81bc170478e2fb2ef84a5938fc1afbf8315f501c86e8b270f15a3732064510583abc2843639e20abfed674e029923f5945cdf1421af49a62fdae1487c655faff35502ab670cf2ac69cea2a4c8998e3c27acd53495d9cb6388352095693d937fa55a285904074fb0ca9b187579d9790d41c97e3e561f5fbee96a9dfd729866a4fc9ac2ca0d69f594273e2173ea7d64cd8b523932a031adc0aa0f70d894e54d3f7a3580d57c7e4e083eb0cfc39b6a2fcfeb81491884c678d20500af3a3ea327ac1a25484dd241dd634ba624850b3aa19d7d4d4df7cc5aa7fb27367585ba7359f43f200ad70d4670f7c928e1c26b129b53c6740e9ebad98f"}, {0x0, 0x119, 0xff, "654435a31eda432a6daec7ff94e3387c42762c7b38a74aa2fcb3e1985ec7b02f2fb9193673b5709c802521e8c4c937cba3b3b560031eaac9f8ab599102dfb476dfd417fb23c36e90da3e8bda9227bd4a9479c47f8946c78cbf0e881a7069e65eb9cbf44219bcac1652a4f7c6d8cadc0719f5e1a5151b9516f2197f32f956de28b035bc61ab4157f9e9e0319c181af1"}], 0x1f2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:38:44 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) 00:38:44 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000140)={0x10000000}) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'bpq0\x00', 0x8801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x6000}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$TUNSETPERSIST(r1, 0x400454ce, 0xffffffffffffffff) 00:38:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setpriority(0x0, 0x0, 0x40) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x80, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x1c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c630000c27f698d1efdc304b985bfda6dddc698cc30b37021fc326f"], 0x0, 0x0, &(0x7f0000008f37)}) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000140)=""/4096) 00:38:44 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) write$FUSE_ENTRY(r0, &(0x7f0000000280)={0x90, 0xfffffffffffffffe, 0x3, {0x3, 0x1, 0x0, 0x0, 0x34, 0x1f, {0x2, 0x401, 0xc71, 0x81e, 0xb3, 0x7f, 0x1a, 0x100000000, 0x401, 0x6, 0x22d7, r1, r2, 0x8, 0x5}}}, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000000), 0x8) 00:38:44 executing program 3: r0 = memfd_create(&(0x7f0000000000)=')\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) rt_sigaction(0xa, &(0x7f0000000040)={0x1, {0xfbfb}, 0x80000000, 0x5}, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x1a100) 00:38:44 executing program 2: openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0xa) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xffea) ioctl$TCSBRK(r1, 0x5409, 0x4) write$P9_RRENAME(r1, &(0x7f0000000000)={0xfffffffffffffe56}, 0x7) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a45321, &(0x7f00000001c0)={{0x1, 0x3af}, 'port0\x00', 0x5d, 0x20404, 0x1, 0x200, 0x6, 0x0, 0x9, 0x0, 0x7, 0x7f}) sendmsg$unix(r1, &(0x7f0000001b00)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f00000003c0)="c0", 0x1}], 0x1, &(0x7f0000001ac0)}, 0x0) 00:38:44 executing program 6: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) readlinkat(r0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000440)=""/192, 0xc0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000040)="00008000983ca3cac3c5fa8b80da952581898ad5f2f639a29cfac77b715be981ef1dbabc0c756a6a0ef9a894cf4f1ae151988830dbb3b14081ec", 0x100000, &(0x7f00000002c0)) syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000100), 0x200000000000026a, 0x10400003) lseek(r1, 0x0, 0x3) mkdir(&(0x7f0000001500)='./file0/file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000f80)) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='overlay\x00', 0x20000, &(0x7f00000001c0)) mount(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)="62012600", 0x2000, 0x0) 00:38:44 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) [ 74.403693] binder: 6900:6903 unknown command -1922465854 [ 74.412365] binder: 6900:6903 ioctl c0306201 2000dfd0 returned -22 00:38:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x40) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ftruncate(r1, 0x8000001) lseek(r1, 0x0, 0x4) 00:38:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000100)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000200)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 00:38:44 executing program 0: mkdir(&(0x7f0000001ff8)='./file0\x00', 0x0) mount(&(0x7f0000005000)='./file0/file0\x00', &(0x7f0000009ff8)='./file0\x00', &(0x7f0000008ffb)='fuse.', 0x0, &(0x7f0000009000)) mkdir(&(0x7f0000000000)='./file0\x00', 0x68) 00:38:44 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x80, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="8902", 0x2) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) 00:38:45 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x484000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000005f000000b10262cfe9d3bf99785aa4399cb24f0168ce9426ded59c14d2468e05ccd31a83e2238b100c6aebcefa380281aa69698764ea0a5f317c8a4c37d271cee3b61e6e0d9ab866f7daf2efab06b40df1de224a0847c113e9d048dedd45bb8340a522"], &(0x7f0000000240)=0x83) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x6) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x800, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x104) r2 = add_key(&(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000340)="7e51ab51fd5165eadc2963dc7d9a7c19c78bd023815d5558951a4ce3d40b626143ddcddaeeb379842e2b937ace3fc141850be882cef72fc144397b181e5aab62f3cbc8fb14556f5369f0cd64e09c18b6db092050c6676113c041518e8a50c5ad5c4bfec065924f2c8510e64059dcf2219f2eec4c43a4d8e82d8c3e60ca6f77f67f9c535ed52491e298c3", 0x8a, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x1ff) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x141000, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000400)) 00:38:45 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000000)='autogroup\x00') setpgid(0x0, r1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r3) fcntl$getown(r2, 0x9) setpgid(0x0, 0x0) 00:38:45 executing program 4: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)="5670730000000000000000cfec4eabed1b86cf5d99be575d32", 0x101000, &(0x7f0000000380)="bc5852af4118c124470a90d894e576c62ebd644843f79a8c6b9902e96a208bf362f51b0373e344a4fbb272d4a1071fc4b73b60d4ede37bb1fe467a7969d5027b76d5a073576f783ceff5147fcdcb60591aff70122bc595ad86309a8a43973eb28d5182cbe1a9fbcdfd6d5d30d45f") umount2(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=""/87, 0x57}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'security.', "2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828"}) 00:38:45 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000080)="2400000058001f00ff07f4f9002304000a04f51108000100020100020800038001000000", 0x24) fallocate(r1, 0xa, 0x8f0, 0x5) write$input_event(r1, &(0x7f0000000000)={{0x0, 0x7530}, 0x15, 0x6, 0x9}, 0x10) write$cgroup_int(r1, &(0x7f0000000040)=0x79, 0x12) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000200)={'brouta\x00'}, &(0x7f00000002c0)=0x3) 00:38:45 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) 00:38:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x2, 0x7, @mcast2, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, 0x2, 0xffffffffffff8000, 0x5}, 0xa) 00:38:45 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @rand_addr}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x5, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '}\fwlan1{vboxnet0]}{em1#eth0\x00'}) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb48}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40c67079}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40080c0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 00:38:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x83000000003, 0x0) write(r2, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000000000003d6a36a9b412297140028", 0x22) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x494180, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0xc) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x4001, 0x0) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x20000000, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 00:38:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4400, 0x11) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x80000, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x40, 0x0) ioctl$TCGETA(r1, 0x8004552d, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000000)={{r2, r3/1000+30000}, 0x200000000000003, 0x7c, 0x4000000008}, 0x10) 00:38:45 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000400)) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:38:45 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) 00:38:45 executing program 1: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x400000) tee(r1, r1, 0x8, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @result}], 0x1c) pipe(&(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000100)={0x8, 0x9, 0x1, {r3, r4+10000000}, 0x1, 0x4}) 00:38:45 executing program 5: exit(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000001300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000014c0)=0x80, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000040)="af366c3fc1f82abf6ed5976f1eb21aab777731e55ea6be4046a41157a198a70c248f6ec101d7540677c55c5b85531ea34d05e3c33bf17c556ccad07c586be8ff20d111b7ee19da51b6bf203bb5bee889bd0694f28eaf20c4c1e1314cf30a5604765c2a655dd80f07a2ef14635fd4f7eb691ecde4943c3804ff82d466bb8aec44", 0x80) recvmmsg(0xffffffffffffff9c, &(0x7f0000002240)=[{{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001380), 0x0, &(0x7f0000000300)=""/100, 0x64, 0x4}, 0xffffffffffffffff}], 0x1, 0x0, &(0x7f0000000240)) readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) userfaultfd(0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 75.247674] netlink: 6 bytes leftover after parsing attributes in process `syz-executor3'. [ 75.275261] netlink: 6 bytes leftover after parsing attributes in process `syz-executor3'. 00:38:45 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) 00:38:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x2, 0x7, @mcast2, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, 0x2, 0xffffffffffff8000, 0x5}, 0xa) [ 75.308982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30000 sclass=netlink_route_socket pig=6993 comm=syz-executor2 [ 75.333662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=6979 comm=syz-executor2 00:38:45 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x4) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) ptrace$poke(0xffffffffffffffff, r1, &(0x7f0000000340), 0x4) poll(&(0x7f0000000000), 0x145, 0xfffffffffffffffb) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06055c8, &(0x7f00000000c0)={0xd, 0x800, {0x53, 0x800, 0x2, {0x3f, 0x7}, {0x6, 0xffffffffffffffff}, @period={0x5f, 0xfff, 0x6, 0x7, 0x2f, {0x4, 0x4, 0x5, 0x1000}, 0x8, &(0x7f0000000000)=[0x4, 0x1, 0x7fffffff, 0x2, 0x3, 0x9, 0xffffffff, 0x101]}}, {0x51, 0x100000000, 0x6, {0x8, 0x8}, {0x7f, 0x3}, @ramp={0x7, 0x79, {0x8, 0x100000000, 0x6, 0x5}}}}) fcntl$setown(r0, 0x8, r1) r5 = memfd_create(&(0x7f0000000040)=':\x00', 0x2) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x8, "a7f1bcee7e1f558578e2de74a9f0d34cf8af20809933509b87353238e9455ebb41f16823ed3e894c6204d9ae94c9f88da4b122a342a49b583cddfa1885f9a595", "960b2d3379bbbb78f1d2b5f071a11b652e06c3cc733a0f92085caf65f6ac15ed", [0x0, 0xc]}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000240)) tkill(r1, 0x16) 00:38:45 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x200440) prctl$seccomp(0x16, 0x3, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x88, 0xd7d7, 0x6, 0xffffffffffffff00}, {0x5d, 0x80000, 0x39400000, 0x7fff}, {0xe1, 0x0, 0x1, 0x100}, {0x5, 0x51, 0x8001, 0x7ff}, {0x9, 0xe, 0x55}, {0x3, 0x7fffffff, 0x81, 0x1}]}) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) socketpair(0x9, 0x1, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8932, &(0x7f00000000c0)="766574683100d47f87") 00:38:45 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1}}, 0x2e) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80002, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @multicast1}, 0x0, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)) [ 75.351837] netlink: 6 bytes leftover after parsing attributes in process `syz-executor3'. [ 75.351870] netlink: 6 bytes leftover after parsing attributes in process `syz-executor3'. [ 75.370188] BUG: sleeping function called from invalid context at net/core/sock.c:2502 [ 75.370192] in_atomic(): 1, irqs_disabled(): 0, pid: 7009, name: syz-executor0 [ 75.370197] 1 lock held by syz-executor0/7009: [ 75.370219] #0: (rcu_callback){......}, at: [] rcu_process_callbacks+0x98e/0x12b0 [ 75.370229] Preemption disabled at: [ 75.370230] [] pppol2tp_sendmsg+0x4a1/0x790 [ 75.370239] CPU: 0 PID: 7009 Comm: syz-executor0 Not tainted 4.9.124-g09eb2ba #35 [ 75.370243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.370254] ffff8801db207d10 ffffffff81eb95e9 ffffffff836cf871 0000000000000000 [ 75.370264] 0000000000000101 ffff8801a50a4800 ffff8801a50a4800 ffff8801db207d48 [ 75.370273] ffffffff81426851 ffff8801a50a4800 ffffffff840f88a0 00000000000009c6 [ 75.370275] Call Trace: [ 75.370286] [ 75.370286] [] dump_stack+0xc1/0x128 [ 75.370293] [] ? pppol2tp_sendmsg+0x4a1/0x790 [ 75.370303] [] ___might_sleep.cold.123+0x1bc/0x1f5 [ 75.370311] [] __might_sleep+0x95/0x1a0 [ 75.370319] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 75.370327] [] lock_sock_nested+0x34/0x120 [ 75.370335] [] inet_shutdown+0x69/0x360 [ 75.370341] [] ? pppol2tp_recvmsg+0x280/0x280 [ 75.370348] [] pppol2tp_session_close+0xa0/0xe0 [ 75.370355] [] l2tp_tunnel_closeall+0x231/0x350 [ 75.370362] [] l2tp_tunnel_destruct+0x2f2/0x590 [ 75.370368] [] ? l2tp_tunnel_destruct+0x1aa/0x590 [ 75.370375] [] ? l2tp_tunnel_del_work+0x470/0x470 [ 75.370381] [] __sk_destruct+0x55/0x590 [ 75.370389] [] rcu_process_callbacks+0x8ae/0x12b0 [ 75.370396] [] ? rcu_process_callbacks+0x98e/0x12b0 [ 75.370402] [] ? sock_set_timeout+0x210/0x210 [ 75.370410] [] __do_softirq+0x210/0x940 [ 75.370418] [] ? pppol2tp_sendmsg+0x4cf/0x790 [ 75.370424] [] do_softirq_own_stack+0x1c/0x30 [ 75.370436] [ 75.370436] [] do_softirq.part.14+0x62/0x70 [ 75.370443] [] __local_bh_enable_ip+0xc8/0xd0 [ 75.370450] [] pppol2tp_sendmsg+0x4f6/0x790 [ 75.370458] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 75.370465] [] ? pppol2tp_release+0x2e0/0x2e0 [ 75.370473] [] sock_sendmsg+0xcc/0x110 [ 75.370481] [] ___sys_sendmsg+0x47a/0x840 [ 75.370489] [] ? copy_msghdr_from_user+0x560/0x560 [ 75.370497] [] ? futex_wake+0x146/0x450 [ 75.370507] [] ? check_preemption_disabled+0x3b/0x170 [ 75.370513] [] ? __fget+0x20a/0x3b0 [ 75.370519] [] ? __fget+0x231/0x3b0 [ 75.370524] [] ? __fget+0x47/0x3b0 [ 75.370531] [] __sys_sendmmsg+0x23c/0x3d0 [ 75.370538] [] ? SyS_sendmsg+0x50/0x50 [ 75.370546] [] ? security_socket_connect+0x8f/0xc0 [ 75.370553] [] ? fput+0xd2/0x140 [ 75.370561] [] ? SYSC_connect+0x22a/0x300 [ 75.370569] [] ? SYSC_bind+0x280/0x280 [ 75.370576] [] ? compat_SyS_futex+0x1e1/0x2f0 [ 75.370584] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 75.370591] [] ? SyS_socket+0x121/0x1b0 [ 75.370598] [] ? move_addr_to_kernel+0x50/0x50 [ 75.370607] [] compat_SyS_sendmmsg+0x32/0x40 [ 75.370614] [] ? compat_SyS_sendmsg+0x40/0x40 [ 75.370621] [] do_fast_syscall_32+0x2f7/0x870 [ 75.370628] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.370635] [] entry_SYSENTER_compat+0x90/0xa2 [ 75.370644] [ 75.370646] ================================= [ 75.370647] [ INFO: inconsistent lock state ] [ 75.370652] 4.9.124-g09eb2ba #35 Tainted: G W [ 75.370653] --------------------------------- [ 75.370656] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 75.370662] syz-executor0/7009 [HC0[0]:SC1[3]:HE1:SE0] takes: [ 75.370674] (sk_lock-AF_PPPOX){+.?.+.}, at: [] inet_shutdown+0x69/0x360 {SOFTIRQ-ON-W} state was registered at: [ 75.370684] mark_held_locks+0xc7/0x130 [ 75.370690] trace_hardirqs_on_caller+0x38b/0x590 [ 75.370696] trace_hardirqs_on+0xd/0x10 [ 75.370702] __local_bh_enable_ip+0x6a/0xd0 [ 75.370708] lock_sock_nested+0xdc/0x120 [ 75.370714] pppol2tp_release+0x50/0x2e0 [ 75.370720] __sock_release+0xd7/0x260 [ 75.370726] sock_close+0x19/0x20 [ 75.370732] __fput+0x263/0x700 [ 75.370737] ____fput+0x15/0x20 [ 75.370744] task_work_run+0x10c/0x180 [ 75.370749] exit_to_usermode_loop+0xfc/0x120 [ 75.370754] do_fast_syscall_32+0x5c3/0x870 [ 75.370759] entry_SYSENTER_compat+0x90/0xa2 [ 75.370762] irq event stamp: 1152 [ 75.370769] hardirqs last enabled at (1152): [] dump_stack+0x100/0x128 [ 75.370775] hardirqs last disabled at (1151): [] dump_stack+0x2c/0x128 [ 75.370782] softirqs last enabled at (704): [] pppol2tp_sendmsg+0x4cf/0x790 [ 75.370790] softirqs last disabled at (705): [] do_softirq_own_stack+0x1c/0x30 [ 75.370791] [ 75.370791] other info that might help us debug this: [ 75.370793] Possible unsafe locking scenario: [ 75.370793] [ 75.370795] CPU0 [ 75.370796] ---- [ 75.370801] lock(sk_lock-AF_PPPOX); [ 75.370802] [ 75.370806] lock(sk_lock-AF_PPPOX); [ 75.370808] [ 75.370808] *** DEADLOCK *** [ 75.370808] [ 75.370812] 1 lock held by syz-executor0/7009: [ 75.370825] #0: (rcu_callback){......}, at: [] rcu_process_callbacks+0x98e/0x12b0 [ 75.370826] [ 75.370826] stack backtrace: [ 75.370834] CPU: 0 PID: 7009 Comm: syz-executor0 Tainted: G W 4.9.124-g09eb2ba #35 [ 75.370837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.370849] ffff8801db207a88 ffffffff81eb95e9 ffff8801a50a4800 ffffffff856124d0 [ 75.370859] ffff8801a50a50f0 ffff8801a50a5110 0000000000000000 ffff8801db207af8 [ 75.370868] ffffffff81429ccd 0000000000000003 0000000000000001 ffff880100000000 [ 75.370870] Call Trace: [ 75.370879] [ 75.370879] [] dump_stack+0xc1/0x128 [ 75.370888] [] print_usage_bug.cold.57+0x327/0x421 [ 75.370895] [] ? save_stack_trace+0x16/0x20 [ 75.370902] [] mark_lock+0xcc6/0x1280 [ 75.370910] [] ? check_usage_backwards+0x2e0/0x2e0 [ 75.370917] [] __lock_acquire+0xd40/0x4070 [ 75.370925] [] ? trace_hardirqs_on+0x10/0x10 [ 75.370932] [] ? put_task_stack+0x21/0x2c0 [ 75.370938] [] ? dump_stack+0x100/0x128 [ 75.370946] [] lock_acquire+0x130/0x3e0 [ 75.370952] [] ? inet_shutdown+0x69/0x360 [ 75.370960] [] lock_sock_nested+0xc6/0x120 [ 75.370966] [] ? inet_shutdown+0x69/0x360 [ 75.370973] [] inet_shutdown+0x69/0x360 [ 75.370980] [] ? pppol2tp_recvmsg+0x280/0x280 [ 75.370987] [] pppol2tp_session_close+0xa0/0xe0 [ 75.370994] [] l2tp_tunnel_closeall+0x231/0x350 [ 75.371001] [] l2tp_tunnel_destruct+0x2f2/0x590 [ 75.371008] [] ? l2tp_tunnel_destruct+0x1aa/0x590 [ 75.371015] [] ? l2tp_tunnel_del_work+0x470/0x470 [ 75.371021] [] __sk_destruct+0x55/0x590 [ 75.371029] [] rcu_process_callbacks+0x8ae/0x12b0 [ 75.371081] [] ? rcu_process_callbacks+0x98e/0x12b0 [ 75.371089] [] ? sock_set_timeout+0x210/0x210 [ 75.371096] [] __do_softirq+0x210/0x940 [ 75.371103] [] ? pppol2tp_sendmsg+0x4cf/0x790 [ 75.371110] [] do_softirq_own_stack+0x1c/0x30 [ 75.371120] [ 75.371120] [] do_softirq.part.14+0x62/0x70 [ 75.371128] [] __local_bh_enable_ip+0xc8/0xd0 [ 75.371134] [] pppol2tp_sendmsg+0x4f6/0x790 [ 75.371142] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 75.371149] [] ? pppol2tp_release+0x2e0/0x2e0 [ 75.371156] [] sock_sendmsg+0xcc/0x110 [ 75.371164] [] ___sys_sendmsg+0x47a/0x840 [ 75.371172] [] ? copy_msghdr_from_user+0x560/0x560 [ 75.371179] [] ? futex_wake+0x146/0x450 [ 75.371187] [] ? check_preemption_disabled+0x3b/0x170 [ 75.371193] [] ? __fget+0x20a/0x3b0 [ 75.371199] [] ? __fget+0x231/0x3b0 [ 75.371205] [] ? __fget+0x47/0x3b0 [ 75.371212] [] __sys_sendmmsg+0x23c/0x3d0 [ 75.371219] [] ? SyS_sendmsg+0x50/0x50 [ 75.371226] [] ? security_socket_connect+0x8f/0xc0 [ 75.371233] [] ? fput+0xd2/0x140 [ 75.371241] [] ? SYSC_connect+0x22a/0x300 [ 75.371248] [] ? SYSC_bind+0x280/0x280 [ 75.371256] [] ? compat_SyS_futex+0x1e1/0x2f0 [ 75.371264] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 75.371271] [] ? SyS_socket+0x121/0x1b0 [ 75.371279] [] ? move_addr_to_kernel+0x50/0x50 [ 75.371287] [] compat_SyS_sendmmsg+0x32/0x40 [ 75.371294] [] ? compat_SyS_sendmsg+0x40/0x40 [ 75.371301] [] do_fast_syscall_32+0x2f7/0x870 [ 75.371308] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.371315] [] entry_SYSENTER_compat+0x90/0xa2 [ 75.388497] ================================================================== [ 75.388513] BUG: KASAN: use-after-free in pppol2tp_sendmsg+0x681/0x790 [ 75.388521] Read of size 8 at addr ffff8801b6076550 by task syz-executor0/7009 [ 75.388523] [ 75.388534] CPU: 0 PID: 7009 Comm: syz-executor0 Tainted: G W 4.9.124-g09eb2ba #35 [ 75.388540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.388557] ffff8801cb82f8d0 ffffffff81eb95e9 ffffea0006d81c00 ffff8801b6076550 [ 75.388570] 0000000000000000 ffff8801b6076550 ffff8801b6076180 ffff8801cb82f908 [ 75.388582] ffffffff8156c35e ffff8801b6076550 0000000000000008 0000000000000000 [ 75.388585] Call Trace: [ 75.388597] [] dump_stack+0xc1/0x128 [ 75.388609] [] print_address_description+0x6c/0x234 [ 75.388618] [] kasan_report.cold.6+0x242/0x2fe [ 75.388629] [] ? pppol2tp_sendmsg+0x681/0x790 [ 75.388641] [] __asan_report_load8_noabort+0x14/0x20 [ 75.388650] [] pppol2tp_sendmsg+0x681/0x790 [ 75.388659] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 75.388667] [] ? pppol2tp_release+0x2e0/0x2e0 [ 75.388677] [] sock_sendmsg+0xcc/0x110 [ 75.388690] [] ___sys_sendmsg+0x47a/0x840 [ 75.388702] [] ? copy_msghdr_from_user+0x560/0x560 [ 75.388712] [] ? futex_wake+0x146/0x450 [ 75.388722] [] ? check_preemption_disabled+0x3b/0x170 [ 75.388730] [] ? __fget+0x20a/0x3b0 [ 75.388737] [] ? __fget+0x231/0x3b0 [ 75.388744] [] ? __fget+0x47/0x3b0 [ 75.388752] [] __sys_sendmmsg+0x23c/0x3d0 [ 75.388760] [] ? SyS_sendmsg+0x50/0x50 [ 75.388769] [] ? security_socket_connect+0x8f/0xc0 [ 75.388777] [] ? fput+0xd2/0x140 [ 75.388786] [] ? SYSC_connect+0x22a/0x300 [ 75.388795] [] ? SYSC_bind+0x280/0x280 [ 75.388805] [] ? compat_SyS_futex+0x1e1/0x2f0 [ 75.388814] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 75.388823] [] ? SyS_socket+0x121/0x1b0 [ 75.388832] [] ? move_addr_to_kernel+0x50/0x50 [ 75.388843] [] compat_SyS_sendmmsg+0x32/0x40 [ 75.388851] [] ? compat_SyS_sendmsg+0x40/0x40 [ 75.388860] [] do_fast_syscall_32+0x2f7/0x870 [ 75.388868] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.388877] [] entry_SYSENTER_compat+0x90/0xa2 [ 75.388879] [ 75.388883] Allocated by task 6980: [ 75.388892] save_stack_trace+0x16/0x20 [ 75.388900] save_stack+0x43/0xd0 [ 75.388907] kasan_kmalloc+0xc7/0xe0 [ 75.388914] kasan_slab_alloc+0x12/0x20 [ 75.388924] kmem_cache_alloc+0xbe/0x290 [ 75.388931] sk_prot_alloc+0x69/0x290 [ 75.388937] sk_alloc+0x3a/0x3a0 [ 75.388946] inet6_create+0x2d9/0xd80 [ 75.388953] __sock_create+0x2f1/0x5f0 [ 75.388960] SyS_socket+0xf0/0x1b0 [ 75.388966] do_fast_syscall_32+0x2f7/0x870 [ 75.388973] entry_SYSENTER_compat+0x90/0xa2 [ 75.388975] [ 75.388978] Freed by task 7009: [ 75.388985] save_stack_trace+0x16/0x20 [ 75.388991] save_stack+0x43/0xd0 [ 75.388999] kasan_slab_free+0x72/0xc0 [ 75.389008] kmem_cache_free+0xbe/0x310 [ 75.389015] __sk_destruct+0x3b9/0x590 [ 75.389026] rcu_process_callbacks+0x8ae/0x12b0 [ 75.389076] __do_softirq+0x210/0x940 [ 75.389079] [ 75.389086] The buggy address belongs to the object at ffff8801b6076180 [ 75.389086] which belongs to the cache UDPv6 of size 1496 [ 75.389094] The buggy address is located 976 bytes inside of [ 75.389094] 1496-byte region [ffff8801b6076180, ffff8801b6076758) [ 75.389096] The buggy address belongs to the page: [ 75.389109] page:ffffea0006d81c00 count:1 mapcount:0 mapping: (null) index:0xffff8801b6070680 compound_mapcount: 0 [ 75.389115] flags: 0x8000000000004080(slab|head) [ 75.389118] page dumped because: kasan: bad access detected [ 75.389120] [ 75.389122] Memory state around the buggy address: [ 75.389130] ffff8801b6076400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.389138] ffff8801b6076480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.389146] >ffff8801b6076500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.389150] ^ [ 75.389157] ffff8801b6076580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.389163] ffff8801b6076600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.389165] ================================================================== [ 75.389169] Kernel panic - not syncing: panic_on_warn set ... [ 75.389169] [ 75.389178] CPU: 0 PID: 7009 Comm: syz-executor0 Tainted: G B W 4.9.124-g09eb2ba #35 [ 75.389182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.389199] ffff8801cb82f830 ffffffff81eb95e9 ffffffff843c828b 00000000ffffffff [ 75.389212] 0000000000000000 0000000000000000 ffff8801b6076180 ffff8801cb82f8f0 [ 75.389226] ffffffff81423eb5 0000000041b58ab3 ffffffff843bb8e8 ffffffff81423cf6 [ 75.389228] Call Trace: [ 75.389240] [] dump_stack+0xc1/0x128 [ 75.389250] [] panic+0x1bf/0x3bc [ 75.389261] [] ? add_taint.cold.6+0x16/0x16 [ 75.389272] [] ? kasan_end_report+0x32/0x4f [ 75.389282] [] kasan_end_report+0x47/0x4f [ 75.389292] [] kasan_report.cold.6+0x76/0x2fe [ 75.389301] [] ? pppol2tp_sendmsg+0x681/0x790 [ 75.389310] [] __asan_report_load8_noabort+0x14/0x20 [ 75.389319] [] pppol2tp_sendmsg+0x681/0x790 [ 75.389328] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 75.389336] [] ? pppol2tp_release+0x2e0/0x2e0 [ 75.389345] [] sock_sendmsg+0xcc/0x110 [ 75.389355] [] ___sys_sendmsg+0x47a/0x840 [ 75.389365] [] ? copy_msghdr_from_user+0x560/0x560 [ 75.389373] [] ? futex_wake+0x146/0x450 [ 75.389384] [] ? check_preemption_disabled+0x3b/0x170 [ 75.389391] [] ? __fget+0x20a/0x3b0 [ 75.389398] [] ? __fget+0x231/0x3b0 [ 75.389405] [] ? __fget+0x47/0x3b0 [ 75.389414] [] __sys_sendmmsg+0x23c/0x3d0 [ 75.389422] [] ? SyS_sendmsg+0x50/0x50 [ 75.389431] [] ? security_socket_connect+0x8f/0xc0 [ 75.389440] [] ? fput+0xd2/0x140 [ 75.389449] [] ? SYSC_connect+0x22a/0x300 [ 75.389458] [] ? SYSC_bind+0x280/0x280 [ 75.389468] [] ? compat_SyS_futex+0x1e1/0x2f0 [ 75.389478] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 75.389487] [] ? SyS_socket+0x121/0x1b0 [ 75.389496] [] ? move_addr_to_kernel+0x50/0x50 [ 75.389506] [] compat_SyS_sendmmsg+0x32/0x40 [ 75.389515] [] ? compat_SyS_sendmsg+0x40/0x40 [ 75.389523] [] do_fast_syscall_32+0x2f7/0x870 [ 75.389541] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.389555] [] entry_SYSENTER_compat+0x90/0xa2 [ 75.389980] Dumping ftrace buffer: [ 75.389986] (ftrace buffer empty) [ 75.389991] Kernel Offset: disabled [ 77.050314] Rebooting in 86400 seconds..