", 0x7d, 0xfffffffffffffffc) request_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)='tunl0\x00', 0xfffffffffffffff9) keyctl$reject(0x13, r1, 0xffff, 0x20, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x40000, 0x0) accept4$packet(r2, 0x0, &(0x7f00000002c0), 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) getpgid(0x0) 15:48:29 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640)='/dev/sequencer2\x00', 0x2003, 0x0) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f0000002400)}], 0x1, 0x0) 15:48:29 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x5a6d8d97750cae5e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) readv(r0, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/159, 0x9f}], 0x1) 15:48:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001c40)=""/4096, 0xd0}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x3d2) sendto$inet(r0, &(0x7f0000000140)="c2", 0x1, 0x0, 0x0, 0x0) 15:48:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000008400)) 15:48:29 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x5a6d8d97750cae5e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) readv(r0, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/159, 0x9f}], 0x1) 15:48:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000008400)) 15:48:29 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x5a6d8d97750cae5e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) readv(r0, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/159, 0x9f}], 0x1) 15:48:29 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x5a6d8d97750cae5e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) readv(r0, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/159, 0x9f}], 0x1) 15:48:29 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x120, 0x36b) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x4000099, 0x2000, &(0x7f0000000e40)={0x0, 0x1c9c380}) 15:48:29 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000340)="240000005a001f00ff03f4f9002304001576f51108020100020804028001c9a800000000", 0x24) [ 826.202036] netlink: 16 bytes leftover after parsing attributes in process `syz-executor3'. 15:48:30 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040)) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 15:48:30 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 15:48:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x17, 0x0, &(0x7f00000000c0)}) 15:48:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"11ca0000300008000000ffff00", 0x2006}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x2000000030a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:48:30 executing program 1: execveat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f0000000540), &(0x7f0000000700), 0x100) 15:48:30 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 15:48:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2b}}) 15:48:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000740)="cf4cbb939c66fc546d0a1d7365bde051313d02ce47a92470d279030ebd8d43ec87b3de060544a61d661ee3", 0x2b}], 0x1, 0x0, 0x0, 0x4}, 0x0) 15:48:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001c40)=""/4096, 0xd0}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x3d2) sendto$inet(r0, &(0x7f0000000140)="c2", 0x1, 0x0, 0x0, 0x0) 15:48:30 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x1032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./control/file0\x00') mount(&(0x7f0000000100)='./control\x00', &(0x7f0000000640)='./control/file0\x00', &(0x7f0000000140)='proc\x00', 0x0, &(0x7f00000001c0)) lchown(&(0x7f0000000040)='./control/file0\x00', 0x0, 0x0) close(r0) 15:48:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6gretap0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa}}) 15:48:30 executing program 2: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000003500)={0x77359400}, &(0x7f0000000080), 0x0) 15:48:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000740)="cf4cbb939c66fc546d0a1d7365bde051313d02ce47a92470d279030ebd8d43ec87b3de060544a61d661ee3", 0x2b}], 0x1, 0x0, 0x0, 0x4}, 0x0) 15:48:30 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 826.515196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 826.527107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 826.559509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 15:48:30 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000001540)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x800, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fstatfs(r0, &(0x7f00000002c0)=""/4096) 15:48:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000740)="cf4cbb939c66fc546d0a1d7365bde051313d02ce47a92470d279030ebd8d43ec87b3de060544a61d661ee3", 0x2b}], 0x1, 0x0, 0x0, 0x4}, 0x0) [ 826.627143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 15:48:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"11ca0000300008000000ffff00", 0x2006}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x2000000030a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:48:30 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') 15:48:30 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 15:48:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000740)="cf4cbb939c66fc546d0a1d7365bde051313d02ce47a92470d279030ebd8d43ec87b3de060544a61d661ee3", 0x2b}], 0x1, 0x0, 0x0, 0x4}, 0x0) 15:48:30 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40), 0x0, 0x0, &(0x7f0000004b80)) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000340), 0x8000fffffffe) truncate(&(0x7f00000001c0)='./bus\x00', 0x0) rt_sigtimedwait(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) sendfile(r0, r1, &(0x7f0000000040), 0x100000001) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0x0, 0x4007, 0xc05a, 0x0, 0x7fffffff}) 15:48:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f00000002c0)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000340)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 15:48:30 executing program 0: setrlimit(0x0, &(0x7f0000000000)={0xffffffff}) 15:48:30 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 827.381824] binder: 7137:7138 got reply transaction with no transaction stack [ 827.406957] binder: 7137:7138 transaction failed 29201/-71, size 0-0 line 2927 15:48:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001c40)=""/4096, 0xd0}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x3d2) sendto$inet(r0, &(0x7f0000000140)="c2", 0x1, 0x0, 0x0, 0x0) 15:48:31 executing program 2: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000003500)={0x77359400}, &(0x7f0000000080), 0x0) 15:48:31 executing program 0: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bcsf0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3b0000000300000001010000faffffff00000000020000102009a10daa1101f7bc6f684beb1ac557000000090000001003"]}) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:48:31 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x1032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./control/file0\x00') mount(&(0x7f0000000100)='./control\x00', &(0x7f0000000640)='./control/file0\x00', &(0x7f0000000140)='proc\x00', 0x0, &(0x7f00000001c0)) lchown(&(0x7f0000000040)='./control/file0\x00', 0x0, 0x0) close(r0) 15:48:31 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0xa0b800, &(0x7f0000000000)) umount2(&(0x7f0000000200)='./file0\x00', 0x1) [ 827.459195] binder: undelivered death notification, 0000000000000000 [ 827.528424] binder: BINDER_SET_CONTEXT_MGR already set [ 827.549739] binder: 7137:7156 got reply transaction with no transaction stack [ 827.572011] binder: 7137:7138 ioctl 40046207 0 returned -16 15:48:31 executing program 7: setrlimit(0x7, &(0x7f0000a9cff8)) epoll_create(0xfc) 15:48:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f00000002c0)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000340)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 15:48:31 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/snapshot\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x80000) [ 827.594728] binder: 7137:7156 transaction failed 29201/-71, size 0-0 line 2927 [ 827.616904] binder: undelivered death notification, 0000000000000000 15:48:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"11ca0000300008000000ffff00", 0x2006}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x2000000030a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 827.675447] binder: 7169:7171 got reply transaction with no transaction stack [ 827.694990] binder: 7169:7171 transaction failed 29201/-71, size 0-0 line 2927 15:48:31 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x0, 0x0, @empty, 0xfffffffffffffffd}, 0x1c) listen(r0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x759, @mcast2={0xff, 0x2, [], 0x1}, 0x91}, 0x1c) listen(r0, 0xfb8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x80000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x40001, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9cc40ea3584f10ba6d9c049845b54b309ec885f52cea730a9e7f793451a67a8774f4124522f14eff084ea688aa99a33ea5174255f2b67ce71e7924da6e052ad2ee1b03b2b027e0d269344a9b4b53b11b9ba6c0e9ded74904f219c3e8f867f3bf810ab54ecafd0200000000000000951b13e50e3395b36c19374dce94d6e738c44c3119b665fbf0ae0bcb7a64b0b50418a9462cdc239ae7c0ada5e56212f07d0b5c993953f2d992ad7a127391ae99503057a8fb1cce0ad1924e686ffde6ee902b966e826c9a3185360d2f6aa6469ff6dd38758ed8a48a3980e362891bf61a0f7693b2b583973db33771f396eba05c298f99f82be79debaaf36bd04fbaf06bed4b8659107ff91bf766d6adec1d7e075b2448ebe1e7e0d4289100c1cb04190ffc93f5fb9b59d6f63a95159213bbc9f66d630676007648766efa4bdbb49101757acc8ea62504b711c97656656bd4bdad3e273b0901bd97c5794d28ee2a67a21342a2083aef314483a8f89f76c014752a181841c68381c678ed9c3d88c4e3022459e2162e694649d15424152f0ac5676a8165748afaeec0f4c75961159c0ef83ddc16f228723dc27ec6658c2c3aff0c7b2123df870c96dc1201c0f12b3dfd66721ef4f4cda6b1b1f1fd12b5749fc73663b2ccadfc4ab898cff56daf8d400bc3724fd09af7f0fd488b0e73c6118f4e4e3d0b6cf78a78e2a4f1e1a0db43f09d31fc128543c2d12c8bb19f4799645a247f0f94424a024086a9897f0ef161d37b441f4378f43b5cfb7974e8d1cd3215960b326021b6bfbb133df9d6522508d44238f19145e3fa875240bbff564dea83c564e9c1f67fec3ac6a61300000000000000000000000000000000"], 0x1}, 0x1}, 0x4) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) recvfrom$inet6(r1, &(0x7f00000004c0)=""/201, 0xc9, 0x20, 0x0, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x400, 0x0) [ 827.722606] binder: undelivered death notification, 0000000000000000 15:48:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f00000002c0)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000340)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 15:48:31 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/snapshot\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x80000) [ 827.836419] binder: 7185:7187 got reply transaction with no transaction stack [ 827.858864] binder: 7185:7187 transaction failed 29201/-71, size 0-0 line 2927 [ 827.882562] binder: undelivered death notification, 0000000000000000 15:48:32 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40), 0x0, 0x0, &(0x7f0000004b80)) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000340), 0x8000fffffffe) truncate(&(0x7f00000001c0)='./bus\x00', 0x0) rt_sigtimedwait(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) sendfile(r0, r1, &(0x7f0000000040), 0x100000001) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0x0, 0x4007, 0xc05a, 0x0, 0x7fffffff}) 15:48:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f00000002c0)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)}}}], 0x1, 0x0, &(0x7f0000000340)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 15:48:32 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/snapshot\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x80000) 15:48:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"11ca0000300008000000ffff00", 0x2006}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x2000000030a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:48:32 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) wait4(r1, &(0x7f0000000240), 0x0, 0x0) 15:48:32 executing program 2: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000003500)={0x77359400}, &(0x7f0000000080), 0x0) [ 828.427658] binder: 7202:7205 got reply transaction with no transaction stack [ 828.460069] binder: 7202:7205 transaction failed 29201/-71, size 0-0 line 2927 15:48:32 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x1032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./control/file0\x00') mount(&(0x7f0000000100)='./control\x00', &(0x7f0000000640)='./control/file0\x00', &(0x7f0000000140)='proc\x00', 0x0, &(0x7f00000001c0)) lchown(&(0x7f0000000040)='./control/file0\x00', 0x0, 0x0) close(r0) [ 828.487202] binder: undelivered death notification, 0000000000000000 15:48:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 15:48:32 executing program 5: futex(&(0x7f0000000ffc), 0x85, 0x0, &(0x7f0000000000), &(0x7f00000acffd), 0x0) 15:48:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 15:48:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f"], 0x1) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000200), 0x8) 15:48:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 15:48:32 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/snapshot\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x80000) 15:48:32 executing program 7: timer_create(0x3fffffffd, &(0x7f0000003fb0)={0x0, 0x3b, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000001000)={{}, {0x0, r0+30000000}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000100)) 15:48:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 15:48:32 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000280)=@generic, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/35, 0x23}}], 0x1, 0x40000001, &(0x7f0000000600)={0x77359400}) 15:48:32 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40), 0x0, 0x0, &(0x7f0000004b80)) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000340), 0x8000fffffffe) truncate(&(0x7f00000001c0)='./bus\x00', 0x0) rt_sigtimedwait(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) sendfile(r0, r1, &(0x7f0000000040), 0x100000001) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0x0, 0x4007, 0xc05a, 0x0, 0x7fffffff}) 15:48:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) socket$packet(0x11, 0x3, 0x300) close(r0) 15:48:32 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/178, 0x364}], 0x20000000000000c8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/83, 0x7fffffff}], 0xd7, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/100, 0x64}], 0x1, &(0x7f0000000280)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0) 15:48:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x49, &(0x7f0000000080)={@loopback={0x0, 0x1}}, 0x20) 15:48:32 executing program 7: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000040)='.\x00', 0x1) 15:48:32 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) setns(r0, 0x0) 15:48:33 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x1032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./control/file0\x00') mount(&(0x7f0000000100)='./control\x00', &(0x7f0000000640)='./control/file0\x00', &(0x7f0000000140)='proc\x00', 0x0, &(0x7f00000001c0)) lchown(&(0x7f0000000040)='./control/file0\x00', 0x0, 0x0) close(r0) 15:48:33 executing program 2: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000003500)={0x77359400}, &(0x7f0000000080), 0x0) 15:48:33 executing program 1: linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x3c9e43efd8341655) 15:48:33 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x2}) 15:48:33 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) setns(r0, 0x0) 15:48:33 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x20080522}, &(0x7f0000fea000)) 15:48:33 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) setns(r0, 0x0) 15:48:33 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r2, &(0x7f0000000040)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r3, &(0x7f0000000340)=0x102, 0x800009) 15:48:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) socket$packet(0x11, 0x3, 0x300) close(r0) 15:48:33 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000001380)) 15:48:33 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40), 0x0, 0x0, &(0x7f0000004b80)) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000340), 0x8000fffffffe) truncate(&(0x7f00000001c0)='./bus\x00', 0x0) rt_sigtimedwait(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) sendfile(r0, r1, &(0x7f0000000040), 0x100000001) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0x0, 0x4007, 0xc05a, 0x0, 0x7fffffff}) 15:48:33 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) setns(r0, 0x0) 15:48:33 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r2, &(0x7f0000000040)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r3, &(0x7f0000000340)=0x102, 0x800009) 15:48:33 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="ff8c03f68d8de00e3c3737ee94e87ccdc300d0bfaac7cb90aec4139c", 0x1c}, {&(0x7f00000000c0)="47e503eafb21bd0b0d61beede73fb5de11dbc08d1d4182ef1636c6be", 0x1c}], 0x2) 15:48:33 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/178, 0x364}], 0x20000000000000c8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/83, 0x7fffffff}], 0xd7, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/100, 0x64}], 0x1, &(0x7f0000000280)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0) 15:48:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) socket$packet(0x11, 0x3, 0x300) close(r0) 15:48:34 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/178, 0x364}], 0x20000000000000c8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/83, 0x7fffffff}], 0xd7, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/100, 0x64}], 0x1, &(0x7f0000000280)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0) 15:48:34 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/178, 0x364}], 0x20000000000000c8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/83, 0x7fffffff}], 0xd7, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/100, 0x64}], 0x1, &(0x7f0000000280)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0) 15:48:34 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r2, &(0x7f0000000040)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r3, &(0x7f0000000340)=0x102, 0x800009) 15:48:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000063fe900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a6e0892618cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 15:48:34 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f000000100aff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) 15:48:34 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r2, &(0x7f0000000040)=@abs={0x1}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r3, &(0x7f0000000340)=0x102, 0x800009) [ 830.507249] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 15:48:34 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f000000100aff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) 15:48:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x201e}) socket$packet(0x11, 0x3, 0x300) close(r0) 15:48:34 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) r1 = gettid() ftruncate(r0, 0xb76) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) r2 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r2, r0) 15:48:34 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x2, 0x0, 0x0, 0x4}}, 0x2e) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'team_slave_1\x00'}) [ 830.701024] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 15:48:34 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/178, 0x364}], 0x20000000000000c8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/83, 0x7fffffff}], 0xd7, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/100, 0x64}], 0x1, &(0x7f0000000280)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0) 15:48:34 executing program 5: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x40, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308}, @register_looper={0x630b}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x1, 0x2}, @clear_death={0x400c630f}], 0x0, 0x0, &(0x7f0000000080)}) 15:48:34 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f000000100aff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) 15:48:34 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x2, 0x0, 0x0, 0x4}}, 0x2e) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'team_slave_1\x00'}) 15:48:34 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/178, 0x364}], 0x20000000000000c8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/83, 0x7fffffff}], 0xd7, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/100, 0x64}], 0x1, &(0x7f0000000280)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0) 15:48:34 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/178, 0x364}], 0x20000000000000c8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/83, 0x7fffffff}], 0xd7, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/100, 0x64}], 0x1, &(0x7f0000000280)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0) 15:48:34 executing program 6: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1'}, 0x4) mknod$loop(&(0x7f0000000040)='./file0\x00', 0xe, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 15:48:34 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f000000100aff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) 15:48:35 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x2, 0x0, 0x0, 0x4}}, 0x2e) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'team_slave_1\x00'}) [ 831.326751] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 831.353081] binder: 7376:7386 BC_INCREFS_DONE node 373 has no pending increfs request [ 831.421630] binder: 7376:7386 ERROR: BC_REGISTER_LOOPER called without request [ 831.442660] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 831.469152] binder: 7376:7386 IncRefs 0 refcount change on invalid ref 1 ret -22 15:48:35 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x2, 0x0, 0x0, 0x4}}, 0x2e) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'team_slave_1\x00'}) 15:48:35 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x80004523, &(0x7f0000000080)) 15:48:35 executing program 3: ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000340)=0x110) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000fa4000)={0x0, r1}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 15:48:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf32(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x4, 0x20}, [{}]}, 0x58) [ 831.560875] binder: 7376:7386 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 831.604025] binder: 7376:7386 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 15:48:35 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)=@setlink={0x40, 0x13, 0x101, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x4, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x40}, 0x1}, 0x0) [ 831.659561] binder_alloc: binder_alloc_mmap_handler: 7376 20001000-20004000 already mapped failed -16 [ 831.678276] binder: BINDER_SET_CONTEXT_MGR already set [ 831.685295] binder: 7376:7416 BC_INCREFS_DONE u0000000000000000 no match [ 831.694435] binder: 7376:7386 ioctl 40046207 0 returned -16 [ 831.701048] binder: 7376:7416 ERROR: BC_REGISTER_LOOPER called without request [ 831.709318] binder: 7376:7416 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 831.728427] blk_update_request: I/O error, dev loop0, sector 0 [ 831.734756] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 831.742698] blk_update_request: I/O error, dev loop0, sector 8 [ 831.748721] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 831.756658] blk_update_request: I/O error, dev loop0, sector 16 [ 831.762725] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 831.770470] blk_update_request: I/O error, dev loop0, sector 24 [ 831.776742] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 831.784482] blk_update_request: I/O error, dev loop0, sector 32 [ 831.790547] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 831.798330] blk_update_request: I/O error, dev loop0, sector 40 [ 831.804425] Buffer I/O error on dev loop0, logical block 5, lost async page write 15:48:35 executing program 7: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x87}, {0x6}]}, 0x10) 15:48:35 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f5, &(0x7f0000000000)={'sit0\x00', @ifru_addrs=@in={0x2, 0x0, @rand_addr}}) [ 831.812094] blk_update_request: I/O error, dev loop0, sector 48 [ 831.818201] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 831.825911] blk_update_request: I/O error, dev loop0, sector 56 [ 831.831995] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 831.840762] blk_update_request: I/O error, dev loop0, sector 64 [ 831.846914] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 831.878089] binder: 7376:7416 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 15:48:35 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/178, 0x364}], 0x20000000000000c8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/83, 0x7fffffff}], 0xd7, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/100, 0x64}], 0x1, &(0x7f0000000280)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0) [ 831.935005] binder: 7376:7416 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 15:48:35 executing program 5: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x40, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308}, @register_looper={0x630b}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x1, 0x2}, @clear_death={0x400c630f}], 0x0, 0x0, &(0x7f0000000080)}) 15:48:35 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf32(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x20, 0x2}, [{}]}, 0x58) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x1) 15:48:35 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x102}) 15:48:35 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/178, 0x364}], 0x20000000000000c8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/83, 0x7fffffff}], 0xd7, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/100, 0x64}], 0x1, &(0x7f0000000280)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0) 15:48:35 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/178, 0x364}], 0x20000000000000c8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/83, 0x7fffffff}], 0xd7, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/100, 0x64}], 0x1, &(0x7f0000000280)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0) 15:48:35 executing program 3: ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000340)=0x110) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000fa4000)={0x0, r1}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 15:48:35 executing program 0: ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000340)=0x110) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000fa4000)={0x0, r1}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 15:48:35 executing program 6: r0 = socket(0x10, 0x803, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000240), 0x80000006) [ 832.101402] binder: 7445:7449 BC_INCREFS_DONE node 374 has no pending increfs request 15:48:35 executing program 7: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe000030a, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) [ 832.150305] binder: 7445:7449 ERROR: BC_REGISTER_LOOPER called without request 15:48:35 executing program 0: ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000340)=0x110) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000fa4000)={0x0, r1}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) [ 832.217246] binder: 7445:7449 IncRefs 0 refcount change on invalid ref 1 ret -22 15:48:35 executing program 6: r0 = socket(0x10, 0x803, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000240), 0x80000006) 15:48:35 executing program 0: ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000340)=0x110) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000fa4000)={0x0, r1}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) [ 832.260829] binder: 7445:7449 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 832.290432] binder: 7445:7449 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 15:48:35 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc0046d00, &(0x7f0000000040)={0x1}) 15:48:36 executing program 6: r0 = socket(0x10, 0x803, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000240), 0x80000006) 15:48:36 executing program 0: r0 = socket(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 15:48:36 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x8000000000000007, &(0x7f00000000c0)) fcntl$lock(r0, 0x24, &(0x7f000001d000)={0x8000000000000001}) 15:48:36 executing program 5: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x40, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308}, @register_looper={0x630b}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x1, 0x2}, @clear_death={0x400c630f}], 0x0, 0x0, &(0x7f0000000080)}) 15:48:36 executing program 6: r0 = socket(0x10, 0x803, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000240), 0x80000006) 15:48:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x2) [ 832.677429] binder: 7495:7498 BC_INCREFS_DONE node 375 has no pending increfs request 15:48:36 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000015ff8)={0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000abaff9)={0x3, 0xfff}, 0x10) [ 832.727610] binder: 7495:7498 ERROR: BC_REGISTER_LOOPER called without request [ 832.752781] binder: 7495:7498 IncRefs 0 refcount change on invalid ref 1 ret -22 15:48:36 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$UFFDIO_COPY(r0, 0x406855c9, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil}) 15:48:36 executing program 3: ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000340)=0x110) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000fa4000)={0x0, r1}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 15:48:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000480)) 15:48:36 executing program 7: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x4}, {0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) socket(0xa, 0x1, 0x0) 15:48:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x2) 15:48:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x2) 15:48:36 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1, 0x0) write$fuse(r0, &(0x7f0000000040)={0x12, 0x0, 0x0, @fuse_notify_poll_wakeup_out}, 0x3865) [ 832.778262] binder: 7495:7498 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 832.810647] binder: 7495:7498 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 15:48:36 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000015ff8)={0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000abaff9)={0x3, 0xfff}, 0x10) 15:48:36 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) 15:48:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x2) 15:48:36 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/psched\x00') readv(r0, &(0x7f0000001740)=[{&(0x7f00000016c0)=""/110, 0x6e}], 0x1) 15:48:36 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000015ff8)={0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000abaff9)={0x3, 0xfff}, 0x10) 15:48:36 executing program 5: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x40, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308}, @register_looper={0x630b}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x1, 0x2}, @clear_death={0x400c630f}], 0x0, 0x0, &(0x7f0000000080)}) 15:48:36 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0) 15:48:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x2) 15:48:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) poll(&(0x7f0000000040)=[{r0, 0x241}], 0x1, 0x401) write(r0, &(0x7f0000c34fff), 0xffffff0b) 15:48:36 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x200000000000043, &(0x7f0000f39000)=""/30, &(0x7f0000001000)=0x1e) [ 833.144217] binder: 7543:7553 BC_INCREFS_DONE node 376 has no pending increfs request [ 833.152237] binder: 7543:7553 ERROR: BC_REGISTER_LOOPER called without request 15:48:36 executing program 3: ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000340)=0x110) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000fa4000)={0x0, r1}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 15:48:36 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000015ff8)={0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000abaff9)={0x3, 0xfff}, 0x10) 15:48:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:48:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x2) 15:48:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x2) 15:48:36 executing program 7: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x80000002) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 833.212879] binder: 7543:7553 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 833.220683] binder: 7543:7553 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 15:48:36 executing program 6: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pwritev(r0, &(0x7f00000011c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, 0xfffffffffffffffc) [ 833.264980] binder: 7543:7553 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 15:48:36 executing program 1: socket(0x200, 0x0, 0x0) 15:48:37 executing program 7: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x80000002) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 15:48:37 executing program 0: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000b2d000)={0x0, 0x7fff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x19c1}) 15:48:37 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) timer_create(0x0, &(0x7f0000003980)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000039c0)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='tmpfs.', 0x0, &(0x7f0000000280)) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:48:37 executing program 5: r0 = epoll_create1(0x0) flock(r0, 0x2) r1 = epoll_create1(0x0) flock(r1, 0x1) flock(r0, 0x5) 15:48:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) 15:48:37 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1}) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ff5000/0x1000)=nil, 0x1000}) 15:48:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f0000000900)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=@dellink={0x28, 0x11, 0x103, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:48:37 executing program 7: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x80000002) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 15:48:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@loopback=0x7f000001, @loopback=0x7f000001}, 0x1) 15:48:37 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000e00)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000dc0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_UID={0x6, 0x19}]}, 0x24}, 0x1}, 0x0) 15:48:37 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) timer_create(0x0, &(0x7f0000003980)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000039c0)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='tmpfs.', 0x0, &(0x7f0000000280)) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:48:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') read(r0, &(0x7f0000000280)=""/186, 0xfffffe86) 15:48:37 executing program 7: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x80000002) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 15:48:37 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000e00)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000dc0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_UID={0x6, 0x19}]}, 0x24}, 0x1}, 0x0) 15:48:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f0000000900)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=@dellink={0x28, 0x11, 0x103, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:48:37 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340)="2400000021002551071c0165ff00fc020200000000100f000ee100f907000f0000000000", 0x24) 15:48:37 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) timer_create(0x0, &(0x7f0000003980)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000039c0)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='tmpfs.', 0x0, &(0x7f0000000280)) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:48:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') read(r0, &(0x7f0000000280)=""/186, 0xfffffe86) 15:48:37 executing program 7: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, &(0x7f0000001280), 0x80000007ffffffe) 15:48:38 executing program 5: r0 = epoll_create1(0x0) flock(r0, 0x2) r1 = epoll_create1(0x0) flock(r1, 0x1) flock(r0, 0x5) 15:48:38 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000e00)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000dc0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_UID={0x6, 0x19}]}, 0x24}, 0x1}, 0x0) 15:48:38 executing program 1: r0 = epoll_create1(0x0) flock(r0, 0x2) r1 = epoll_create1(0x0) flock(r1, 0x1) flock(r0, 0x5) 15:48:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f0000000900)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=@dellink={0x28, 0x11, 0x103, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:48:38 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924927e, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000001ac0)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) close(r0) 15:48:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') read(r0, &(0x7f0000000280)=""/186, 0xfffffe86) 15:48:38 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) timer_create(0x0, &(0x7f0000003980)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000039c0)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='tmpfs.', 0x0, &(0x7f0000000280)) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:48:38 executing program 7: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, &(0x7f0000001280), 0x80000007ffffffe) 15:48:38 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000e00)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000dc0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_UID={0x6, 0x19}]}, 0x24}, 0x1}, 0x0) 15:48:38 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)}}, {{0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f0000000100)=[{0x3a4, 0x29, 0x4, "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"}], 0x3a4}}], 0x2, 0x0) 15:48:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f0000000900)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=@dellink={0x28, 0x11, 0x103, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:48:38 executing program 7: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, &(0x7f0000001280), 0x80000007ffffffe) 15:48:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') read(r0, &(0x7f0000000280)=""/186, 0xfffffe86) 15:48:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}}) 15:48:38 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x28}, 0x1}, 0x0) 15:48:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x80045430, 0x20210001) 15:48:38 executing program 5: r0 = epoll_create1(0x0) flock(r0, 0x2) r1 = epoll_create1(0x0) flock(r1, 0x1) flock(r0, 0x5) 15:48:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000005f00)=[{{&(0x7f0000001580)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000002ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000001c00)=""/233, 0xe9}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000018c0)}}, {{0x0, 0x0, &(0x7f0000001a40), 0x379, &(0x7f0000001a80)}}, {{&(0x7f0000001e40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x80, &(0x7f0000004100), 0x0, &(0x7f0000004180)}}], 0x3, 0x0) 15:48:39 executing program 1: r0 = epoll_create1(0x0) flock(r0, 0x2) r1 = epoll_create1(0x0) flock(r1, 0x1) flock(r0, 0x5) 15:48:39 executing program 7: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, &(0x7f0000001280), 0x80000007ffffffe) 15:48:39 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924927e, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000001ac0)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) close(r0) 15:48:39 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x80000000) 15:48:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) munmap(&(0x7f0000000000/0x600000)=nil, 0x600000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)) 15:48:39 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80045400, &(0x7f0000000340)=""/4096) 15:48:39 executing program 4: r0 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) close(r0) 15:48:39 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xffffffffeffff00d}, {0x6}]}, 0x8) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=' ', 0x1}], 0x1) 15:48:39 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0), 0x7) 15:48:39 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @random="1b207f5c5eeb", [], {@mpls_uc={0x8864, {[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x57, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, @igmp={0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}}}}, &(0x7f0000000080)) [ 835.587681] device lo entered promiscuous mode 15:48:39 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80045400, &(0x7f0000000340)=""/4096) 15:48:39 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xffffffffeffff00d}, {0x6}]}, 0x8) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=' ', 0x1}], 0x1) [ 835.629546] device lo left promiscuous mode 15:48:39 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0), 0x7) 15:48:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0x40045567, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil}) [ 835.739382] device lo entered promiscuous mode [ 835.770644] device lo left promiscuous mode 15:48:39 executing program 5: r0 = epoll_create1(0x0) flock(r0, 0x2) r1 = epoll_create1(0x0) flock(r1, 0x1) flock(r0, 0x5) 15:48:39 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xffffffffeffff00d}, {0x6}]}, 0x8) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=' ', 0x1}], 0x1) 15:48:39 executing program 1: r0 = epoll_create1(0x0) flock(r0, 0x2) r1 = epoll_create1(0x0) flock(r1, 0x1) flock(r0, 0x5) 15:48:39 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x1c, 0x201, 0x0, 0x0, {0x7}, [@nested={0x8, 0x0, [@generic="a1"]}]}, 0x1c}, 0x1}, 0x0) [ 836.288781] PF_BRIDGE: RTM_NEWNEIGH with invalid address 15:48:40 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924927e, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000001ac0)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) close(r0) 15:48:40 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0), 0x7) 15:48:40 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80045400, &(0x7f0000000340)=""/4096) 15:48:40 executing program 4: r0 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) close(r0) 15:48:40 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xffffffffeffff00d}, {0x6}]}, 0x8) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=' ', 0x1}], 0x1) 15:48:40 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) 15:48:40 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='loginuid\x00') sendfile(r1, r1, &(0x7f00000000c0), 0x7) 15:48:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8b93, &(0x7f0000000000)={'sit0\x00', @ifru_mtu}) 15:48:40 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f00000019c0)=@ethtool_dump={0x49}}) [ 836.528802] device lo entered promiscuous mode [ 836.580608] device lo left promiscuous mode 15:48:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000004500), 0xe92bd5d83901ac, 0x0) 15:48:40 executing program 4: r0 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) close(r0) 15:48:40 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80045400, &(0x7f0000000340)=""/4096) [ 836.722056] device lo entered promiscuous mode [ 836.739676] device lo left promiscuous mode 15:48:40 executing program 4: r0 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) close(r0) 15:48:40 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x7fffffff, 0x0, 0x0, 0xe}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 837.009228] device lo entered promiscuous mode [ 837.019096] device lo left promiscuous mode 15:48:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000004500), 0xe92bd5d83901ac, 0x0) 15:48:40 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x15, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}, @sadb_x_sec_ctx={0x1, 0x18}]}, 0x20}, 0x1}, 0x0) 15:48:41 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924927e, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000001ac0)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) close(r0) 15:48:41 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000f72000)="9403", 0x2) 15:48:41 executing program 5: r0 = socket(0x18, 0x0, 0x3) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x2e) 15:48:41 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2812, r0, 0x0) 15:48:41 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket(0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)={0xfffffffe8000201f}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 15:48:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000004500), 0xe92bd5d83901ac, 0x0) 15:48:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000004500), 0xe92bd5d83901ac, 0x0) 15:48:41 executing program 3: clock_getres(0x4edfc63a37f03c38, &(0x7f0000007000)) 15:48:41 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x7ff, 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) recvmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000002440)=@can, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/53}, {&(0x7f00000000c0)=""/6}], 0x2d}}, {{&(0x7f0000002600)=@in6={0x0, 0x0, 0x0, @dev}, 0xbb, &(0x7f0000002700), 0x6e, &(0x7f0000002740)=""/223, 0xdf}}], 0x2, 0x12260, &(0x7f00000028c0)={0x0, 0x989680}) 15:48:41 executing program 3: rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00') 15:48:41 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket(0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)={0xfffffffe8000201f}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 15:48:41 executing program 6: r0 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) 15:48:41 executing program 5: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file1\x00', 0x400) 15:48:41 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0xcd, &(0x7f00000002c0)=""/203, &(0x7f0000000040)=0xcb) 15:48:41 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket(0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)={0xfffffffe8000201f}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 15:48:41 executing program 7: unshare(0x40000000) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 837.809294] IPVS: Creating netns size=2552 id=42 [ 837.983942] IPVS: Creating netns size=2552 id=43 15:48:42 executing program 7: unshare(0x40000000) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 15:48:42 executing program 6: r0 = socket$inet6(0xa, 0x202000000802, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0xfffffffffffffe80) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@mcast1={0xff, 0x1, [], 0x1}, 0x10, r1}) r2 = socket$inet6(0xa, 0xffffffffffffffff, 0x10000000000382) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000100)={0xffffffff, {{0xa, 0x4e22, 0x0, @empty, 0x5}}}, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@local={0xfe, 0x80, [], 0xaa}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x2}, 0x20) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x200400000) 15:48:42 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000310007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 15:48:42 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0xcd, &(0x7f00000002c0)=""/203, &(0x7f0000000040)=0xcb) 15:48:42 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket(0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)={0xfffffffe8000201f}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 15:48:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000004500), 0xe92bd5d83901ac, 0x0) 15:48:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000004500), 0xe92bd5d83901ac, 0x0) 15:48:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x5393, 0x824ffe4) 15:48:42 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = epoll_create(0x103) fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', '\x00'}) 15:48:42 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0xcd, &(0x7f00000002c0)=""/203, &(0x7f0000000040)=0xcb) 15:48:42 executing program 5: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f00000000c0)=""/237, &(0x7f00000001c0)=0xed) r1 = socket(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) 15:48:42 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000240), 0x4) 15:48:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x5393, 0x824ffe4) 15:48:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000280)=""/176, 0xb0}], 0x1) readv(r2, &(0x7f0000001840)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 15:48:42 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0xcd, &(0x7f00000002c0)=""/203, &(0x7f0000000040)=0xcb) 15:48:42 executing program 6: execve(&(0x7f0000000180)='\x00', &(0x7f0000000240), &(0x7f0000000380)) [ 839.579861] pktgen: kernel_thread() failed for cpu 0 [ 839.585050] pktgen: Cannot create thread for cpu 0 (-4) [ 839.590438] pktgen: kernel_thread() failed for cpu 1 [ 839.595582] pktgen: Cannot create thread for cpu 1 (-4) [ 839.600938] pktgen: Initialization failed for all threads 15:48:43 executing program 7: unshare(0x40000000) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 15:48:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x317, 0x0, &(0x7f000057bff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 15:48:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x5393, 0x824ffe4) 15:48:43 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) listen(r1, 0x5) 15:48:43 executing program 6: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x9}) 15:48:43 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r0, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x81, 0x8}, {}, @control}], 0x1c) 15:48:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000004500), 0xe92bd5d83901ac, 0x0) 15:48:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:48:43 executing program 6: clock_getres(0xdffffffffffffff4, &(0x7f0000000000)) 15:48:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') write$cgroup_pid(r0, &(0x7f0000000100)={[0x38, 0x33, 0x39, 0x34]}, 0x4) 15:48:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udp6\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x10400003) 15:48:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x5393, 0x824ffe4) 15:48:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0xff, 0x1000002b3) sendto$inet(r0, &(0x7f0000000180), 0xfffffffffffffccb, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x81, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) recvfrom$inet(r0, &(0x7f0000000140)=""/245, 0xf5, 0x0, 0x0, 0x0) 15:48:43 executing program 6: clock_getres(0xdffffffffffffff4, &(0x7f0000000000)) 15:48:43 executing program 2: syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{}, {0x0, 0x7530}}) 15:48:43 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) [ 841.157546] pktgen: kernel_thread() failed for cpu 0 [ 841.162691] pktgen: Cannot create thread for cpu 0 (-4) [ 841.168355] pktgen: kernel_thread() failed for cpu 1 [ 841.173520] pktgen: Cannot create thread for cpu 1 (-4) [ 841.178868] pktgen: Initialization failed for all threads 15:48:44 executing program 7: unshare(0x40000000) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 15:48:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0xff, 0x1000002b3) sendto$inet(r0, &(0x7f0000000180), 0xfffffffffffffccb, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x81, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) recvfrom$inet(r0, &(0x7f0000000140)=""/245, 0xf5, 0x0, 0x0, 0x0) 15:48:44 executing program 6: clock_getres(0xdffffffffffffff4, &(0x7f0000000000)) 15:48:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0xff, 0x1000002b3) sendto$inet(r0, &(0x7f0000000180), 0xfffffffffffffccb, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x81, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) recvfrom$inet(r0, &(0x7f0000000140)=""/245, 0xf5, 0x0, 0x0, 0x0) 15:48:44 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udp6\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x10400003) 15:48:44 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x0, 0x1, &(0x7f00000000c0)="fa"}) 15:48:44 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) listen(r1, 0x5) 15:48:44 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 15:48:44 executing program 6: clock_getres(0xdffffffffffffff4, &(0x7f0000000000)) 15:48:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0xff, 0x1000002b3) sendto$inet(r0, &(0x7f0000000180), 0xfffffffffffffccb, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x81, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) recvfrom$inet(r0, &(0x7f0000000140)=""/245, 0xf5, 0x0, 0x0, 0x0) 15:48:45 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 15:48:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0xff, 0x1000002b3) sendto$inet(r0, &(0x7f0000000180), 0xfffffffffffffccb, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x81, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) recvfrom$inet(r0, &(0x7f0000000140)=""/245, 0xf5, 0x0, 0x0, 0x0) 15:48:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0xff, 0x1000002b3) sendto$inet(r0, &(0x7f0000000180), 0xfffffffffffffccb, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x81, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) recvfrom$inet(r0, &(0x7f0000000140)=""/245, 0xf5, 0x0, 0x0, 0x0) 15:48:45 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000000)) [ 841.459564] IPVS: Creating netns size=2552 id=44 15:48:45 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udp6\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x10400003) 15:48:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0xff, 0x1000002b3) sendto$inet(r0, &(0x7f0000000180), 0xfffffffffffffccb, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x81, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) recvfrom$inet(r0, &(0x7f0000000140)=""/245, 0xf5, 0x0, 0x0, 0x0) 15:48:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x1b, &(0x7f0000000200)=""/27}, &(0x7f0000000440), &(0x7f00000003c0)=""/126, 0x0, 0x0, 0x0, &(0x7f0000000580)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) read(r0, &(0x7f0000000080)=""/42, 0x2a) 15:48:45 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000540)="6e730066827d7232f2f07c3c1485481cbab6064192f9cc848fd27e8c8472edcaea1539f07ba9c635d0adad1884ed220ce5026bcd6b1f4e63728dfd1b69b6af2a4c9a5f77228d3f448f5b30d9b8be5e899ff8eda1e7e1944afd2d8485d9a415cfad507e4eb3918f3a91e5bb8d1432947d65982a482f4243dd2c6c6dbd88f58575c74323267409a928583a3695f4cd8f77588fd3de55fd9a4a2cdb15aa64b34c528a586e13559342d838d5f0c0246fec9a7a84a133e1ab73e59b17fa4a00ac63ae3740e1028568aba3000dcef4495dc6a4a9dde93176c5dc3a4c5bc8e4ebe160fa6c8e") fchdir(r1) exit(0x0) syz_fuseblk_mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:48:45 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='afs\x00', 0x0, &(0x7f00000000c0)) r0 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) close(r1) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') mq_notify(r0, &(0x7f0000477fa0)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000589000)}}) close(r0) close(r0) 15:48:45 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udp6\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x10400003) 15:48:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x1b, &(0x7f0000000200)=""/27}, &(0x7f0000000440), &(0x7f00000003c0)=""/126, 0x0, 0x0, 0x0, &(0x7f0000000580)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) read(r0, &(0x7f0000000080)=""/42, 0x2a) 15:48:45 executing program 7: timer_create(0xb, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, r0+10000000}, {0x77359400}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) 15:48:45 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) listen(r1, 0x5) 15:48:45 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x18a}, 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) 15:48:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x1b, &(0x7f0000000200)=""/27}, &(0x7f0000000440), &(0x7f00000003c0)=""/126, 0x0, 0x0, 0x0, &(0x7f0000000580)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) read(r0, &(0x7f0000000080)=""/42, 0x2a) 15:48:45 executing program 5: socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x33c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r1, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 15:48:45 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 15:48:45 executing program 4: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000001000)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f000052bff0)={0x0, 0x0}) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000088e000)={0x0, r0}, &(0x7f0000e98ffc), 0x0) futex(&(0x7f000000cffc), 0x5, 0x80, &(0x7f0000049ff0)={0x0, 0x989680}, &(0x7f0000a2a000), 0x0) 15:48:45 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 15:48:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x1b, &(0x7f0000000200)=""/27}, &(0x7f0000000440), &(0x7f00000003c0)=""/126, 0x0, 0x0, 0x0, &(0x7f0000000580)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) read(r0, &(0x7f0000000080)=""/42, 0x2a) 15:48:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0xee, 0x0, &(0x7f0000000180)="1aa346327176417cc74d05cb8d732cb1f102fb4aee379940f1cd956ca70f629dd35512c0f4f0ac23f542c9d20d327b7522d6b8540bcdeaf8f36e8f8058aa14288c158dc61a1e9762fc104dfff5800964974d9e9fb08e57f0f14f7505cd018a451c48c4f856f7b6984a17875f7aecbfa58866610356aae21b9f3968dad04ed9128de7ad2c2a5f853b812a9210dd8894b83e0f07cbe319d29772609d0cb973e9e7d6059a8e2167d0a119cb3fc1a41728b34302b79158af887d035160fbf7f6a6f971fef33eca743b8718bbfb96fbd5b9983fc4c198b647eebd038c5ea000000000000000000000000000000050d3b1"}) 15:48:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046306}], 0x0, 0x0, &(0x7f0000008f37)}) 15:48:45 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\a\x00', 0xc1fd}) write$binfmt_aout(r0, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x38d, 0x33d}}, 0x20) [ 842.303465] binder: 8120:8125 ioctl c0306201 20000240 returned -14 [ 842.348989] binder: tried to use weak ref as strong ref [ 842.360710] binder: 8128:8129 Release 1 refcount change on invalid ref 0 ret -22 [ 842.371930] binder: BINDER_SET_CONTEXT_MGR already set [ 842.389881] binder: 8128:8129 ioctl 40046207 0 returned -16 [ 842.406200] binder: tried to use weak ref as strong ref [ 842.424050] binder: 8128:8135 Release 1 refcount change on invalid ref 0 ret -22 15:48:46 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f657865000000000004090030ddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f0000000140), 0x8402) 15:48:46 executing program 5: r0 = getpgrp(0x0) syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) sendmsg$unix(r2, &(0x7f0000000a00)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000003c0), 0x0, &(0x7f0000000980)=[@cred={0x18, 0x1, 0x2, r0}, @cred={0x18, 0x1, 0x2, r1}], 0x30}, 0x0) 15:48:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046306}], 0x0, 0x0, &(0x7f0000008f37)}) 15:48:46 executing program 7: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 15:48:46 executing program 5: prctl$seccomp(0x16, 0x1, &(0x7f0000000180)={0x0, &(0x7f0000000280)}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f342f76732f73654f68d4fc5f74637000", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 842.816406] binder: tried to use weak ref as strong ref [ 842.854219] binder: 8143:8145 Release 1 refcount change on invalid ref 0 ret -22 [ 842.878592] audit: type=1326 audit(1531064926.496:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=8153 comm="syz-executor5" exe="/root/syz-executor5" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf77acbe9 code=0x0 15:48:46 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) listen(r1, 0x5) 15:48:46 executing program 7: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000100)=@ethtool_dump={0x40}}) 15:48:46 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f657865000000000004090030ddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f0000000140), 0x8402) 15:48:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046306}], 0x0, 0x0, &(0x7f0000008f37)}) [ 843.072266] binder: tried to use weak ref as strong ref [ 843.088883] binder: 8162:8163 Release 1 refcount change on invalid ref 0 ret -22 15:48:46 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 15:48:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2205, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x7f, &(0x7f0000000040)=""/127}, &(0x7f0000000100), &(0x7f0000000180)=""/194, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 15:48:46 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 15:48:46 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f657865000000000004090030ddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f0000000140), 0x8402) 15:48:46 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 15:48:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046306}], 0x0, 0x0, &(0x7f0000008f37)}) 15:48:46 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mknod(&(0x7f0000000080)='./file0/file2\x00', 0x1040, 0x0) 15:48:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') renameat2(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='/\x00', 0x0) 15:48:46 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f657865000000000004090030ddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f0000000140), 0x8402) 15:48:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 15:48:46 executing program 7: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001380)=@broute={'broute\x00', 0x20, 0x4, 0xd55, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000001400)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000001d0000005000000086dd766c616e3000000000000000000000007663616e3000000000000000000000007465616d5f736c6176655f300000000079616d30000000000000000000000000aaaaaaaaaaaaffff00ffffffaaaaaaaaaabbffffffff00ff000070000000ac0000001c01000052415445455354000000000000000000000000000000000000000000000000001800000073797a3100000000000000000000000000030000010000006e666c6f670000000000000000000000000000000000000000000000000000004c000000ffffff7f3f000100000000005e071320171e84167c2b9e06b1ad5d8ca1a181fb09d5a2ba89ce47c1361cb9f867b380c9aa6c4a355f7c5bc7fad988f054c601d0904a40714adc25148f7298ab1700000008000000000c726f73653000000000000000000000006272696467655f736c6176655f3000006e72300000000000000000000000000079616d30000000000000000000000000aaaaaaaaaaaaff00ffffffffaaaaaaaaaabbff00000000ff0000b40800001c090000440900007533320000000000000000000000000000000000000000000000000000000000c007000001000000030000000800000001000000000000000300000000100000030000000100008000000000010000000300000000000000030000008e0000003f000000cb00000003000000040000000300000000fcffff0300000011f3000007000b7d8c54000000000100f7ffffff7f000000000400000300000081000000080000000200000001040000ff01000004000000ffffffff0700000002000000ffff000009000000ff01000000000000060000000b06000005000000030000010000000100000003000000430c0000030000004000000000000000e500000003000000040000000000000009000000000000000000000001000000e9000000000000000080000040000000050000000100000050df000001000000038000000101000008000000730000000700000007000000030000000200000008000000060000000100000003000000f004000020000000070000000100000003010000080000000300000001000000030000000000008003000000000000800300000001000000000000f807000000020000008100000002000000ebc80000030000006ed6000001000000000000000300000000000000030000000100000002000000080000000400000002000000080000000900000008000000a1a800000400000001000000000000000800000003000000d5000000060000000000000005000000d00100000700000000040000000100000b01000006000000000000000900000002000000060000000200000007000000030000000000010002000000030000000300000000000000030000000900000003000000bc0000000200000007000000030000000000a0000200000000088100fffeffff000000003f00000000000000080000002c0000005a00000000000000010000002f0b0000000000001f000000ffffffff070000000800000003000000070000001a2d0000b6be000005000000020000000b0a000000010000010000000900000000000000ff000000020000000600000003000000330f000003000000090000000300000004000000020000000400000001000000010000000000000009000000010000003500000003000000050000000400000001040000dae7ffff1709000006000000070000000000000003000000050000004a41000001000000030000008100000009000000090000000200000000000000010000800d000000090000000100008002020000040000000200000008000000030000000100000001000000040000000300000002000000000000000400000000000000020000000300000008000000030000000101000000000000060000000100000002000000030000008d8c0000050000009940000008000000faffffff07000000040000000900000000800000fbffffff84e5ffffff0f00000300000081000000040000000400000005000000fcffffff030000000f090000ff0f0000050000000004737706000000030000001e08000001000000ff07000001000000000800000300000079a9c679030000003d0300000000000008000000000000000100000a03000000ffff00000100000004000000000000000100000001000000b388834908000000070000007dca003adece0b93d705f1000300000003f9ffff0100000003000000030000000800000008000000ea0e0000840000000400000007000000010000000000000001000000ff010000ff000000060600000800000003000000010000000300000000000000000000000000000002000000800000000000000006000000030000000400000001000000090000000200000001000000010000001a0c00000300000008000000010000008000000000000080350000008fbf0000000000000300000001000000f8cf000001000000000200000900000001800000000000001f00000008000000ffffffff05000000070000000000000005000000ffffff7f120a00000a070000010100000000000000000100030000009e96e177020000000000000003000000067b00000000000003000000030000004000000003000000ff0f00000200000209000000030000002d00000000000000080000000300000000000000910000004000000030ae00000600000006000000810000000800000007000000060000000400000041950000010000001f000000020000004000000008000000ffff00004cff0000db050000010000008fe400000606000000000000030000006a0c0000000000000300000001000000070000000100000030030000030000000900000001000000bc00000003000000ff0f0000000000000000000001000000f9ffffff0000000002f6ffff02000000030000000000000080000000070000000300000008000000800000003806000005000000fe280000faffffff070000000000008067000000430000000100000001000000030000000200000004000000c60700009500000002060000800000000300000001000000030000000900000000000000be0b0000030000000800000001000000020000000000000005000000ad00000006000000030000002000000001000000070000000300000003000000030000007800000001ffffff0100000003000000da00000051f6c01d04000000040000000200000000000000020000000900000003000000ffffffff400000002000000006000000000200003f00000064090000980000003a0000000b0500000000000072617465657374000000000000000000000000000000000000000000000000003c00000076657468305f74685f62726964676500697036746e6c30000000000000000000200003000500000042f100000100000002000000ff030000010000006d61726b0000000000000000000000000000000000000000000000000000000008000000000000000000000052415445455354000000000000000000000000000000000000000000000000001800000073797a310000000000000000000000000200000000800000434c415353494659000000000000000000000000000000000000000000000000040000000400000000000000000000000000000000000001000000000000000000000000000000000000000002000000fcffffff020000000f00000058000000809b6272696467655f736c6176655f31000065727370616e3000000000000000000076657468300000000000000000000000726f73b09100000000000000000000002031e1c163850000ffffff00aaaaaaaaaa13ffff00ffff0000009c020000f00300002c04000062706600000000000000000000000000000000000000000000000000000000000802000005000000080006fc09000000040000027f0000008000050106000000ff0080020900000008000302510a0000800000ff07000000b90005c9ff030000d4e8010106000000090000060300000081000600ff07000005000478400000004c000004030000004900ec03ac0000000900ff010100000080000007960600000000070406000000090007fb00000000000080010600000009000220ff01000003003fff03000000008000000900000000000408ff0000000700640900000000040000f909000000ff07401cfeffffff08000000cb0e0000ab0b0909030000000000092edb0c00007e5fa70804000000030000060000000001000000030000000500ff08020000000400082c070000000100010302000000000000090600000007000609020000000300fc200200000004005008bd000000eda2074093ae0000feff0408010000000104000809000000060000017f0000000300026000000000060006c5080000000600150600fefffff8ff0720000000000080010001000000ffff02090400000000f00807ff0f000003004c0904000000ff0fffff00000000030020094000000083a7ff01080000000100ffd8c0ffffffaa0205d8000000000000ff0005000000020002010000008002000607ff0700000100000100010000ce2c0005ff01000006000101c30000000000ff01fd921142e523e4003ad08827bd242810c774e727773b3c6f0e768b7ea5fd"]}, 0xda5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4dff1)='/dev/sequencer\x00', 0xa202, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @time}], 0xfffffffffffffe1b) [ 843.271181] binder: tried to use weak ref as strong ref [ 843.293896] binder: 8186:8191 Release 1 refcount change on invalid ref 0 ret -22 15:48:47 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) unshare(0x28020400) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000180)=@random={'system.', '\'systemvboxnet0-eth1](posix_acl_access{#trusted+\x00'}, &(0x7f00000001c0)='\x00', 0x1, 0x0) [ 843.782632] audit: type=1326 audit(1531064927.396:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=8153 comm="syz-executor5" exe="/root/syz-executor5" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf77acbe9 code=0x0 15:48:47 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) clone(0x0, &(0x7f00000024c0), &(0x7f0000002540), &(0x7f0000002580), &(0x7f00000025c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) waitid(0x0, 0x0, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) 15:48:47 executing program 1: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) link(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file1\x00') 15:48:47 executing program 2: keyctl$join(0x1, &(0x7f00000001c0)={0x73, 0x79, 0x7a}) request_key(&(0x7f00000006c0)="646e735f7265736f6c7665720005083f7605beb89ebb55f56950196fd8b8a6ebddf637ee27ef0fabbbad7523dacb0ab4baaf14787b652566f6eaf50a9d4cff3e30f2d07fd0118cf06573e05f283ef26ec0cc75cf93fe4c95c7185cb70df302c4c08871883fc063c014d46b8b27fd88a01e760bee664a475d69d12e2fc7e3dc680e3bb87b71d301fbf92cadf5537bc8774141ee7d7152d16c9ee5ef389b527a9b31679b1560e4680fcfd95743ed5305a984645fb4371e5e363f7df35cb72f6d9c953cd2ea3167c037567f7f99399e92ba02db513f40a4d44e072bf5ea9495287934a503a032610a0235c3530cfc99e27a1e10e28ed49beb223bbe910fd417a48e64dbdf97edb9363e6b5853e1323d6f78d0fb80969de2f5fec97acbb11c1ae97f54cf4e3ef9d50e1fbc43cc27e537d18452001232814ac3970ee2938175a91f4e0ca28b803a350dbea3b68d6a71bc65b011a81834b809f86919e4499a53ff8a35993b333b9b2761a44bb4a888a90c078d0b923e28cdbf76aa3fb68394de930dddf27c48926ab9c66951b70ebd4063b510ae453059ff71853bcf5942b5140a111d4a2afbaf612c6415aceb9578cb0d1decc8001f6dfc9d6829dbed2a8dbbc4bc9391960c1bb3fb451d52778143fb3c2f4d17df3c295117e13889037aff061ff283cac330aa03e7d189f01bfd03e68532d5594ef0e4bf1d584c7eacfd53a7ae8ccecc1901c89f4db4a3f1925610f22dac4570169b7f9f4cbf3fa1376f0ce4ab31605a16aff95c1bda1b96b9ded911a38594c3d9b42e7712ac377f377cd30eda00efd15d718e20dba3e76c4850966353c04a178e3b857719f9d81dc0ef8776c46c47d38aad73498289bc0240", &(0x7f0000000040)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x10000000}, &(0x7f00000004c0)="af2019dcc2380b4623dc8c7a581973a96d57452035fca47b18e7992f4c82e608a92c747d6e80519f2f5a436783ee4e3264245238b946a4a11d39b7873e5f3296185625d49ae13974d13940d0c01a5029b35aec2234864afd4648", 0x0) 15:48:47 executing program 7: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001380)=@broute={'broute\x00', 0x20, 0x4, 0xd55, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000001400)=ANY=[@ANYBLOB="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"]}, 0xda5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4dff1)='/dev/sequencer\x00', 0xa202, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @time}], 0xfffffffffffffe1b) 15:48:47 executing program 1: personality(0x8) uname(&(0x7f00000006c0)=""/176) 15:48:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x3, 0x2f, 0x0, 0x13, 0x5, 0xfffffffffffffffc}}) fcntl$setown(0xffffffffffffffff, 0x8, r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400082, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000001c0)={'veth1_to_bond\x00', {0x2, 0x4e23, @loopback=0x7f000001}}) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000007e00), 0x8000289, 0x0) 15:48:47 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000001600)=[{&(0x7f0000001540)='W', 0x1}], 0x1, 0x0) 15:48:47 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000440)="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", 0xfc) 15:48:47 executing program 7: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001380)=@broute={'broute\x00', 0x20, 0x4, 0xd55, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000001400)=ANY=[@ANYBLOB="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"]}, 0xda5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4dff1)='/dev/sequencer\x00', 0xa202, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @time}], 0xfffffffffffffe1b) 15:48:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@loopback=0x7f000001, @empty]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 15:48:47 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x0, 0x22d}) 15:48:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r0, 0x0, 0x5, &(0x7f0000000000), 0x0) 15:48:47 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) 15:48:47 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) clone(0x0, &(0x7f00000024c0), &(0x7f0000002540), &(0x7f0000002580), &(0x7f00000025c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) waitid(0x0, 0x0, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) 15:48:47 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087705, 0x0) 15:48:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x30b, 0x8000) 15:48:47 executing program 7: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001380)=@broute={'broute\x00', 0x20, 0x4, 0xd55, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000001400)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000001d0000005000000086dd766c616e3000000000000000000000007663616e3000000000000000000000007465616d5f736c6176655f300000000079616d30000000000000000000000000aaaaaaaaaaaaffff00ffffffaaaaaaaaaabbffffffff00ff000070000000ac0000001c01000052415445455354000000000000000000000000000000000000000000000000001800000073797a3100000000000000000000000000030000010000006e666c6f670000000000000000000000000000000000000000000000000000004c000000ffffff7f3f000100000000005e071320171e84167c2b9e06b1ad5d8ca1a181fb09d5a2ba89ce47c1361cb9f867b380c9aa6c4a355f7c5bc7fad988f054c601d0904a40714adc25148f7298ab1700000008000000000c726f73653000000000000000000000006272696467655f736c6176655f3000006e72300000000000000000000000000079616d30000000000000000000000000aaaaaaaaaaaaff00ffffffffaaaaaaaaaabbff00000000ff0000b40800001c090000440900007533320000000000000000000000000000000000000000000000000000000000c007000001000000030000000800000001000000000000000300000000100000030000000100008000000000010000000300000000000000030000008e0000003f000000cb00000003000000040000000300000000fcffff0300000011f3000007000b7d8c54000000000100f7ffffff7f000000000400000300000081000000080000000200000001040000ff01000004000000ffffffff0700000002000000ffff000009000000ff01000000000000060000000b06000005000000030000010000000100000003000000430c0000030000004000000000000000e500000003000000040000000000000009000000000000000000000001000000e9000000000000000080000040000000050000000100000050df000001000000038000000101000008000000730000000700000007000000030000000200000008000000060000000100000003000000f004000020000000070000000100000003010000080000000300000001000000030000000000008003000000000000800300000001000000000000f807000000020000008100000002000000ebc80000030000006ed6000001000000000000000300000000000000030000000100000002000000080000000400000002000000080000000900000008000000a1a800000400000001000000000000000800000003000000d5000000060000000000000005000000d00100000700000000040000000100000b01000006000000000000000900000002000000060000000200000007000000030000000000010002000000030000000300000000000000030000000900000003000000bc0000000200000007000000030000000000a0000200000000088100fffeffff000000003f00000000000000080000002c0000005a00000000000000010000002f0b0000000000001f000000ffffffff070000000800000003000000070000001a2d0000b6be000005000000020000000b0a000000010000010000000900000000000000ff000000020000000600000003000000330f000003000000090000000300000004000000020000000400000001000000010000000000000009000000010000003500000003000000050000000400000001040000dae7ffff1709000006000000070000000000000003000000050000004a41000001000000030000008100000009000000090000000200000000000000010000800d000000090000000100008002020000040000000200000008000000030000000100000001000000040000000300000002000000000000000400000000000000020000000300000008000000030000000101000000000000060000000100000002000000030000008d8c0000050000009940000008000000faffffff07000000040000000900000000800000fbffffff84e5ffffff0f00000300000081000000040000000400000005000000fcffffff030000000f090000ff0f0000050000000004737706000000030000001e08000001000000ff07000001000000000800000300000079a9c679030000003d0300000000000008000000000000000100000a03000000ffff00000100000004000000000000000100000001000000b388834908000000070000007dca003adece0b93d705f1000300000003f9ffff0100000003000000030000000800000008000000ea0e0000840000000400000007000000010000000000000001000000ff010000ff000000060600000800000003000000010000000300000000000000000000000000000002000000800000000000000006000000030000000400000001000000090000000200000001000000010000001a0c00000300000008000000010000008000000000000080350000008fbf0000000000000300000001000000f8cf000001000000000200000900000001800000000000001f00000008000000ffffffff05000000070000000000000005000000ffffff7f120a00000a070000010100000000000000000100030000009e96e177020000000000000003000000067b00000000000003000000030000004000000003000000ff0f00000200000209000000030000002d00000000000000080000000300000000000000910000004000000030ae00000600000006000000810000000800000007000000060000000400000041950000010000001f000000020000004000000008000000ffff00004cff0000db050000010000008fe400000606000000000000030000006a0c0000000000000300000001000000070000000100000030030000030000000900000001000000bc00000003000000ff0f0000000000000000000001000000f9ffffff0000000002f6ffff02000000030000000000000080000000070000000300000008000000800000003806000005000000fe280000faffffff070000000000008067000000430000000100000001000000030000000200000004000000c60700009500000002060000800000000300000001000000030000000900000000000000be0b0000030000000800000001000000020000000000000005000000ad00000006000000030000002000000001000000070000000300000003000000030000007800000001ffffff0100000003000000da00000051f6c01d04000000040000000200000000000000020000000900000003000000ffffffff400000002000000006000000000200003f00000064090000980000003a0000000b0500000000000072617465657374000000000000000000000000000000000000000000000000003c00000076657468305f74685f62726964676500697036746e6c30000000000000000000200003000500000042f100000100000002000000ff030000010000006d61726b0000000000000000000000000000000000000000000000000000000008000000000000000000000052415445455354000000000000000000000000000000000000000000000000001800000073797a310000000000000000000000000200000000800000434c415353494659000000000000000000000000000000000000000000000000040000000400000000000000000000000000000000000001000000000000000000000000000000000000000002000000fcffffff020000000f00000058000000809b6272696467655f736c6176655f31000065727370616e3000000000000000000076657468300000000000000000000000726f73b09100000000000000000000002031e1c163850000ffffff00aaaaaaaaaa13ffff00ffff0000009c020000f00300002c04000062706600000000000000000000000000000000000000000000000000000000000802000005000000080006fc09000000040000027f0000008000050106000000ff0080020900000008000302510a0000800000ff07000000b90005c9ff030000d4e8010106000000090000060300000081000600ff07000005000478400000004c000004030000004900ec03ac0000000900ff010100000080000007960600000000070406000000090007fb00000000000080010600000009000220ff01000003003fff03000000008000000900000000000408ff0000000700640900000000040000f909000000ff07401cfeffffff08000000cb0e0000ab0b0909030000000000092edb0c00007e5fa70804000000030000060000000001000000030000000500ff08020000000400082c070000000100010302000000000000090600000007000609020000000300fc200200000004005008bd000000eda2074093ae0000feff0408010000000104000809000000060000017f0000000300026000000000060006c5080000000600150600fefffff8ff0720000000000080010001000000ffff02090400000000f00807ff0f000003004c0904000000ff0fffff00000000030020094000000083a7ff01080000000100ffd8c0ffffffaa0205d8000000000000ff0005000000020002010000008002000607ff0700000100000100010000ce2c0005ff01000006000101c30000000000ff01fd921142e523e4003ad08827bd242810c774e727773b3c6f0e768b7ea5fd"]}, 0xda5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4dff1)='/dev/sequencer\x00', 0xa202, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @time}], 0xfffffffffffffe1b) 15:48:47 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) 15:48:47 executing program 2: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x80805, 0x0) 15:48:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@loopback=0x7f000001, @empty]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 15:48:47 executing program 1: r0 = memfd_create(&(0x7f0000000200)='ramfs\x00', 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x9012, r0, 0x0) 15:48:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x3, 0x2f, 0x0, 0x13, 0x5, 0xfffffffffffffffc}}) fcntl$setown(0xffffffffffffffff, 0x8, r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400082, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000001c0)={'veth1_to_bond\x00', {0x2, 0x4e23, @loopback=0x7f000001}}) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000007e00), 0x8000289, 0x0) 15:48:48 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) clone(0x0, &(0x7f00000024c0), &(0x7f0000002540), &(0x7f0000002580), &(0x7f00000025c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) waitid(0x0, 0x0, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) 15:48:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0xff, 0x8012, r0, 0x0) 15:48:48 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 15:48:48 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) 15:48:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x30b, 0x8000) 15:48:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@loopback=0x7f000001, @empty]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 15:48:48 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='GPLbdevvmnet0\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) read(r0, &(0x7f00000004c0)=""/244, 0x604e5e66) 15:48:48 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) 15:48:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0xff, 0x8012, r0, 0x0) 15:48:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@loopback=0x7f000001, @empty]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 15:48:48 executing program 2: getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockname(r0, &(0x7f00000009c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f0000000a40)=0x80) r2 = dup(r1) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x280080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000140)) 15:48:48 executing program 7: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000001180)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='posix_acl_access/@}bdevself\x00', 0x0) 15:48:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x30b, 0x8000) 15:48:48 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) clone(0x0, &(0x7f00000024c0), &(0x7f0000002540), &(0x7f0000002580), &(0x7f00000025c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) waitid(0x0, 0x0, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) 15:48:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) flistxattr(r0, &(0x7f0000000040)=""/19, 0x13) 15:48:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x3, 0x2f, 0x0, 0x13, 0x5, 0xfffffffffffffffc}}) fcntl$setown(0xffffffffffffffff, 0x8, r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400082, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000001c0)={'veth1_to_bond\x00', {0x2, 0x4e23, @loopback=0x7f000001}}) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000007e00), 0x8000289, 0x0) 15:48:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0xff, 0x8012, r0, 0x0) 15:48:49 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) 15:48:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x802c542a, 0x0) 15:48:49 executing program 2: r0 = getpgrp(0x0) tgkill(0x0, r0, 0x0) 15:48:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x30b, 0x8000) 15:48:49 executing program 4: mlockall(0x80000000006) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000fe3)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) munlockall() 15:48:49 executing program 5: open(&(0x7f0000000100)='./file1\x00', 0x8040, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000700)='fuse\x00', 0x9000, 0x0) mount(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='.', &(0x7f0000753000)='mslos\x00', 0x3002480, &(0x7f0000000700)) 15:48:49 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x16}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f00000003c0)={0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv6_getnetconf={0x14, 0x52, 0x601, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 15:48:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fsetxattr(r0, &(0x7f0000000040)=@random={'os2.', 'vboxnet1cpuset-\\\x00'}, &(0x7f0000000080)='@wlan0{cpuset\x00', 0xe, 0x0) 15:48:49 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000240)=""/250) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r2) fdatasync(r2) 15:48:49 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) tkill(r0, 0x1000000000016) 15:48:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x120, 0x36b) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[], 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) close(r0) 15:48:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0xff, 0x8012, r0, 0x0) 15:48:49 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000002500)='net/protocols\x00') readv(r0, &(0x7f0000002480)=[{&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f0000000280)=""/188, 0xbc}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x3) 15:48:49 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f00000c7000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x1) 15:48:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x3, 0x2f, 0x0, 0x13, 0x5, 0xfffffffffffffffc}}) fcntl$setown(0xffffffffffffffff, 0x8, r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400082, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000001c0)={'veth1_to_bond\x00', {0x2, 0x4e23, @loopback=0x7f000001}}) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000007e00), 0x8000289, 0x0) 15:48:49 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x16}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f00000003c0)={0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv6_getnetconf={0x14, 0x52, 0x601, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 15:48:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x4001) shutdown(r0, 0xfffffffffffffffe) 15:48:49 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 15:48:49 executing program 0: madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4) 15:48:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) munmap(&(0x7f0000000000/0x600000)=nil, 0x600000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)) 15:48:49 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = dup(r0) renameat(r0, &(0x7f0000000280)='./file1\x00', r1, &(0x7f00000002c0)='./file1\x00') 15:48:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x2a, &(0x7f0000000280), &(0x7f0000000200)=0x382) 15:48:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)=[{0xc, 0x1}], 0xc}}], 0x2, 0x0) 15:48:49 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x16}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f00000003c0)={0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv6_getnetconf={0x14, 0x52, 0x601, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 15:48:49 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) 15:48:49 executing program 1: mkdir(&(0x7f0000000100)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) read(r0, &(0x7f0000000040)=""/41, 0x29) 15:48:50 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1000000007, &(0x7f0000000640)=0x6, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000200), &(0x7f0000000180)=0x4) 15:48:50 executing program 0: timer_create(0x3fffffffc, &(0x7f0000000180)={0x0, 0x3b, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000300)}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000001000)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) 15:48:50 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x1, 0x1, [@rand_addr]}, 0x14) 15:48:50 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x16}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f00000003c0)={0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv6_getnetconf={0x14, 0x52, 0x601, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 15:48:50 executing program 7: syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="c5aaaaaaaaaaaaaaaaaaaa0086dd8ddec59cb1579d746050a09c00080000fe80000000000000000002"], &(0x7f0000000040)) r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff00000000000000000000000000000000000060"]}) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) 15:48:50 executing program 6: r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/relabel\x00', 0x2, 0x0) lseek(r0, 0x0, 0x4) 15:48:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000100)=""/4, &(0x7f0000000140)=0x4) 15:48:50 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000180)=@buf={0x0, &(0x7f00000000c0)}) 15:48:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x0, 0x2aaaaaaaaaaaab5e}) 15:48:50 executing program 4: r0 = getpgid(0x0) ioprio_get$pid(0x2, r0) 15:48:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@gettaction={0x14, 0x32, 0x1}, 0x14}, 0x1}, 0x0) 15:48:50 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:48:50 executing program 5: r0 = socket(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) 15:48:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendmmsg(r0, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)}}, {{&(0x7f0000001e40)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "2f91fa30ccb7750f566ffe64609635047fc52ad2a08594f69b25006bf6e57f1d6feb65761ddc6bd71ace3d36c8917f6968c5bb721d53dd5adf83860c07405b"}, 0x80, &(0x7f0000004180), 0x0, &(0x7f00000041c0)}}], 0x2, 0x0) 15:48:50 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) [ 846.886772] tc_ctl_action: received NO action attribs 15:48:50 executing program 1: r0 = gettid() setpriority(0x1, r0, 0x0) 15:48:50 executing program 6: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 15:48:50 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x8004510b, &(0x7f0000000000)) 15:48:50 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x25, 0x0, 0x0, 0xffffffffffffffff}, {0x6}]}, 0x8) sendto$unix(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 15:48:50 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x1000, 0xfffffffffffffc88) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 15:48:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x20, 0x0, 0x300) 15:48:50 executing program 2: prctl$seccomp(0x2f, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 15:48:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x80046d03, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, @scatter, &(0x7f0000000500), &(0x7f00000005c0)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000080)}) 15:48:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00') fcntl$lock(r0, 0x7, &(0x7f0000000000)) close(r0) 15:48:51 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008000a00020000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d40000000000000000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:48:51 executing program 3: setrlimit(0x0, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) 15:48:51 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r3, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x1}, 0x18) write$sndseq(r3, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 15:48:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x20, 0x2, 0x2, 0x3, 0x0, 0x0, {}, [@nested={0x4, 0x2}, @nested={0x8, 0x7, [@generic='%']}]}, 0x20}, 0x1}, 0x0) 15:48:51 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, [@dev={0xac, 0x14, 0x14}, @multicast2=0xe0000002]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 15:48:51 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) mmap(&(0x7f0000a93000/0x8000)=nil, 0x8000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a93000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000a95000/0x1000)=nil) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 15:48:51 executing program 6: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x488d, 0xfffffffffffffffe) 15:48:51 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x2) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x4c9}) 15:48:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0x0) [ 847.550928] IPv6: Can't replace route, no match found 15:48:51 executing program 3: mprotect(&(0x7f0000103000/0x4000)=nil, 0x4000, 0x0) msync(&(0x7f0000104000/0x4000)=nil, 0x4000, 0x0) 15:48:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) 15:48:51 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, [@dev={0xac, 0x14, 0x14}, @multicast2=0xe0000002]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 15:48:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 15:48:51 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) mmap(&(0x7f0000a93000/0x8000)=nil, 0x8000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a93000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000a95000/0x1000)=nil) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 15:48:51 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8946, &(0x7f0000000000)) 15:48:51 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4217, 0x0) tkill(r1, 0x37) ptrace$getenv(0x4201, r1, 0x0, &(0x7f0000000140)) [ 847.744822] ALSA: seq fatal error: cannot create timer (-22) 15:48:51 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, [@dev={0xac, 0x14, 0x14}, @multicast2=0xe0000002]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 15:48:51 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)) [ 847.835141] ALSA: seq fatal error: cannot create timer (-22) 15:48:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r3, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x1}, 0x18) write$sndseq(r3, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 15:48:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000e0e281ab42fb897c0d554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a984237d092ef1c00b517026f8bd7f2b0436a4c40960ab3f6bc482809f6bd82caa34799193b35445293b992ab5e44573eef5fd0f423a5cfb386f9cc996c6effde7e603fdeab448671b63bec6e9395aabab4d045f1ad982a2a897fafa710be9e681f3c6a45db03d9e6cb58fbec3d8397005f17d6f7afa102ded1837bcb805600000000000000000000") pread64(r0, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1, 0x0) 15:48:52 executing program 6: pipe(&(0x7f0000eb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x8000, 0x0) mkdir(&(0x7f000002b000)='./file0\x00', 0x0) creat(&(0x7f0000b9a000)='./file0/bus\x00', 0x0) r3 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2011, r4, 0x0) writev(r1, &(0x7f000078a000)=[{&(0x7f0000000000)='\f', 0x1}], 0x1) close(r1) 15:48:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) 15:48:52 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) mmap(&(0x7f0000a93000/0x8000)=nil, 0x8000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a93000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000a95000/0x1000)=nil) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 15:48:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c) sendto$inet6(r0, &(0x7f00001e2000), 0x0, 0x0, &(0x7f0000f14000)={0xa, 0x4e21}, 0x1c) 15:48:52 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x2, [@dev={0xac, 0x14, 0x14}, @multicast2=0xe0000002]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 15:48:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0x0) 15:48:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c) sendto$inet6(r0, &(0x7f00001e2000), 0x0, 0x0, &(0x7f0000f14000)={0xa, 0x4e21}, 0x1c) 15:48:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r3, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x1}, 0x18) write$sndseq(r3, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 15:48:52 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) mmap(&(0x7f0000a93000/0x8000)=nil, 0x8000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a93000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000a95000/0x1000)=nil) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 848.575032] ALSA: seq fatal error: cannot create timer (-22) 15:48:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000e0e281ab42fb897c0d554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a984237d092ef1c00b517026f8bd7f2b0436a4c40960ab3f6bc482809f6bd82caa34799193b35445293b992ab5e44573eef5fd0f423a5cfb386f9cc996c6effde7e603fdeab448671b63bec6e9395aabab4d045f1ad982a2a897fafa710be9e681f3c6a45db03d9e6cb58fbec3d8397005f17d6f7afa102ded1837bcb805600000000000000000000") pread64(r0, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1, 0x0) 15:48:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) 15:48:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c) sendto$inet6(r0, &(0x7f00001e2000), 0x0, 0x0, &(0x7f0000f14000)={0xa, 0x4e21}, 0x1c) 15:48:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000e0e281ab42fb897c0d554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a984237d092ef1c00b517026f8bd7f2b0436a4c40960ab3f6bc482809f6bd82caa34799193b35445293b992ab5e44573eef5fd0f423a5cfb386f9cc996c6effde7e603fdeab448671b63bec6e9395aabab4d045f1ad982a2a897fafa710be9e681f3c6a45db03d9e6cb58fbec3d8397005f17d6f7afa102ded1837bcb805600000000000000000000") pread64(r0, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1, 0x0) 15:48:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r3, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x1}, 0x18) write$sndseq(r3, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) [ 848.748136] ALSA: seq fatal error: cannot create timer (-22) 15:48:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r3, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x1}, 0x18) write$sndseq(r3, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 15:48:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c) sendto$inet6(r0, &(0x7f00001e2000), 0x0, 0x0, &(0x7f0000f14000)={0xa, 0x4e21}, 0x1c) 15:48:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) 15:48:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000e0e281ab42fb897c0d554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a984237d092ef1c00b517026f8bd7f2b0436a4c40960ab3f6bc482809f6bd82caa34799193b35445293b992ab5e44573eef5fd0f423a5cfb386f9cc996c6effde7e603fdeab448671b63bec6e9395aabab4d045f1ad982a2a897fafa710be9e681f3c6a45db03d9e6cb58fbec3d8397005f17d6f7afa102ded1837bcb805600000000000000000000") pread64(r0, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1, 0x0) 15:48:53 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r3, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x1}, 0x18) write$sndseq(r3, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 15:48:53 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r3, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x1}, 0x18) write$sndseq(r3, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 15:48:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0x0) 15:48:53 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r3, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x1}, 0x18) write$sndseq(r3, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 15:48:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x7ff) [ 849.485292] ALSA: seq fatal error: cannot create timer (-22) 15:48:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r3, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x1}, 0x18) write$sndseq(r3, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 15:48:53 executing program 3: r0 = memfd_create(&(0x7f0000034ffe)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000480)) 15:48:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xfffffffffffffffc}, 0x1c) 15:48:53 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r3, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x1}, 0x18) write$sndseq(r3, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 15:48:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x7ff) 15:48:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 15:48:53 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r3, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x1}, 0x18) write$sndseq(r3, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 15:48:53 executing program 2: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0xffffffffffffffff, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x202, @time={0x0, 0x989680}}) 15:48:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000042c0)=[{{&(0x7f0000001d80)=@pptp={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000041c0), 0x0, &(0x7f0000004240)=""/102, 0x66}}], 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000072c0)={{{@in=@dev, @in=@rand_addr}}, {{@in6=@mcast2}}}, &(0x7f00000073c0)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f000000a0c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f000000a100)={'team0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000180)=@deltfilter={0x23, 0x2e, 0x535}, 0x24}, 0x1}, 0x0) 15:48:53 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3}}]}]}, 0x28}, 0x1}, 0x0) 15:48:53 executing program 1: r0 = memfd_create(&(0x7f0000000000)="7472300000000000000000001f603644fd95c4c2498b5bdcc815785f0d5432e7c0984f2cc349da6dcfb4b68f72de4937377cc957147c88ac5e5b0772a74053f5f055e9b2f22d36d0e1000000e5cc83d8db4c58b9694b147e8ed5648174482f04ffffffff0000000bd4ac6ab018afea3b36f5d13c6301211de4b7c6874e4fb1abc7992e14332d001144908110d4c53b4161c06b748ee63900000000000000000000000000", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) write$sndseq(r2, &(0x7f0000e6ffd0)=[{0x1000001f, 0x0, 0x0, 0x80000003fd, @tick, {}, {}, @raw32}], 0x1c) [ 850.092506] binder: 8700:8702 transaction failed 29201/-28, size 0-0 line 3142 [ 850.175199] binder_alloc: binder_alloc_mmap_handler: 8700 20001000-20004000 already mapped failed -16 [ 850.185873] binder: BINDER_SET_CONTEXT_MGR already set [ 850.197064] binder: 8700:8702 ioctl 40046207 0 returned -16 [ 850.229413] netlink: 12 bytes leftover after parsing attributes in process `syz-executor6'. [ 850.259422] binder_alloc: 8700: binder_alloc_buf, no vma [ 850.268337] binder: 8700:8719 transaction failed 29189/-3, size 0-0 line 3142 [ 850.273531] tc_dump_action: action bad kind [ 850.342093] binder: undelivered TRANSACTION_ERROR: 29189 [ 850.352486] binder: undelivered TRANSACTION_ERROR: 29201 15:48:54 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r3, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x1}, 0x18) write$sndseq(r3, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 15:48:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYPTR=&(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES64, @ANYRES32], @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="d034e0a5ed1f3fb596445aae6f457a63e3444afdb3130ef068a4532cb1b99f37dc80092ca08dfde55caa9abff263e156afba4d13652b83589a64d2b01da256c009c3131e3de2674f4c4d109c8c25f92b4048d4fa845f80c36a069d5fd458a8ec7a19d7e3c3a1e4f0e4790835e6a31e"]], 0xc) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000180)) 15:48:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0x0) 15:48:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x7ff) 15:48:54 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x400300}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}, 0x1}, 0x0) 15:48:54 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1044, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000775000)) clone(0xf01f00, &(0x7f00000000c0), &(0x7f0000000380), &(0x7f00000003c0), &(0x7f00000001c0)) 15:48:54 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="02") mremap(&(0x7f0000895000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100), 0x0) 15:48:54 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3, 0x3}) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 15:48:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000e40)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8, 0x1c}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x3c}, 0x1}, 0x0) 15:48:54 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3, 0x3}) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 15:48:54 executing program 6: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000800)={0x10, 0x10}, 0x10}], 0x1}, 0x0) 15:48:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@mpls_getnetconf={0x14, 0x52, 0x0, 0x0, 0x0, {0x1c}}, 0x1}, 0x1}, 0x0) 15:48:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x7ff) 15:48:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x3, 0x4) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) 15:48:54 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3, 0x3}) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 15:48:54 executing program 6: listxattr(&(0x7f0000000040)='/\x00', &(0x7f00000000c0)=""/193, 0xfc7b) 15:48:54 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r3, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x1}, 0x18) write$sndseq(r3, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 15:48:54 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000006fa8)={{0x50f}, 0x1}) 15:48:54 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 'wlc\x00'}, 0x2c) 15:48:54 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@setlink={0x3c, 0x13, 0x311, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xa}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x3c}, 0x1}, 0x0) 15:48:54 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3, 0x3}) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 15:48:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@rand_addr, @multicast1=0xe0000001}, 0xc) 15:48:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x3, 0x4) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) 15:48:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x3, 0x4) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) 15:48:55 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 'wlc\x00'}, 0x2c) 15:48:55 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c5de02abe6f4bbf89c08e2398c1b938be9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad6", 0xc9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0xffffffffffffff0a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 15:48:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper={0x630b}], 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x0, 0x0, &(0x7f0000fedffe)}) 15:48:55 executing program 6: r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{r2, r3+10000000}}, &(0x7f0000000180)) 15:48:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x3, 0x4) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) 15:48:55 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 'wlc\x00'}, 0x2c) 15:48:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x140042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005100)=[{{&(0x7f0000004fc0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x80, &(0x7f00000050c0)}}], 0x1, 0x0) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000100)={0x0, 0x7, 0x1}) 15:48:55 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc7bb9650b5de56946c568f95d22467190ba3b6d59a5958d6fa9259c8a2ac4677b00000000000000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) dup3(r1, r2, 0x0) [ 851.538767] binder: 8807:8812 ERROR: BC_REGISTER_LOOPER called without request 15:48:55 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc7bb9650b5de56946c568f95d22467190ba3b6d59a5958d6fa9259c8a2ac4677b00000000000000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) dup3(r1, r2, 0x0) 15:48:55 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) fcntl$setstatus(r1, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000001440)='./bus\x00', 0x7) 15:48:55 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 'wlc\x00'}, 0x2c) 15:48:55 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c5de02abe6f4bbf89c08e2398c1b938be9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad6", 0xc9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0xffffffffffffff0a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 15:48:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x3, 0x4) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) 15:48:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x3, 0x4) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) 15:48:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x140042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005100)=[{{&(0x7f0000004fc0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x80, &(0x7f00000050c0)}}], 0x1, 0x0) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000100)={0x0, 0x7, 0x1}) 15:48:55 executing program 0: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) keyctl$link(0x8, r1, r0) [ 852.332564] binder: undelivered transaction 390, put_user failed [ 852.342569] binder: 8807:8812 ioctl c0306201 200000c0 returned -14 15:48:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0x3, 0x4) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) 15:48:56 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c5de02abe6f4bbf89c08e2398c1b938be9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad6", 0xc9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0xffffffffffffff0a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) [ 852.436496] binder: BINDER_SET_CONTEXT_MGR already set [ 852.442293] binder: 8807:8844 ioctl 40046207 0 returned -16 [ 852.466347] binder: 8807:8812 ERROR: BC_REGISTER_LOOPER called without request 15:48:56 executing program 3: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000) 15:48:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc7bb9650b5de56946c568f95d22467190ba3b6d59a5958d6fa9259c8a2ac4677b00000000000000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) dup3(r1, r2, 0x0) 15:48:56 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x140042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005100)=[{{&(0x7f0000004fc0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x80, &(0x7f00000050c0)}}], 0x1, 0x0) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000100)={0x0, 0x7, 0x1}) 15:48:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) write$sndseq(r4, &(0x7f00000001c0)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @connect}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000003c0)={0x0, 0x7f, 0x8, {0x77359400}}) 15:48:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xffffffffffffff41) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xfffffffffffffda1, 0x3f00, &(0x7f0000000100)=@abs, 0xa) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 15:48:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) keyctl$link(0x8, r1, r0) 15:48:56 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c5de02abe6f4bbf89c08e2398c1b938be9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad6", 0xc9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0xffffffffffffff0a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) [ 852.551097] binder: undelivered TRANSACTION_COMPLETE 15:48:56 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) fcntl$setstatus(r1, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000001440)='./bus\x00', 0x7) 15:48:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc7bb9650b5de56946c568f95d22467190ba3b6d59a5958d6fa9259c8a2ac4677b00000000000000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) dup3(r1, r2, 0x0) 15:48:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1fff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:48:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) keyctl$link(0x8, r1, r0) 15:48:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f0000000280)={0x1c, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x12, [@generic="b2"]}]}, 0x1c}, 0x1}, 0x0) 15:48:56 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x140042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005100)=[{{&(0x7f0000004fc0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x80, &(0x7f00000050c0)}}], 0x1, 0x0) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000100)={0x0, 0x7, 0x1}) 15:48:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r4 = socket$inet(0x2, 0x1, 0x0) getsockname$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'nat\x00'}, &(0x7f0000000300)=0x78) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)=0x0) sched_getparam(r5, &(0x7f0000000480)) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000680)={'icmp6\x00'}, &(0x7f00000006c0)=0x1e) sendto$inet(r4, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x4000000000000003, 0x0, &(0x7f0000044ff8)) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) r7 = request_key(&(0x7f0000000780)='logon\x00', &(0x7f00000007c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000800)='filter\x00', 0xfffffffffffffff8) r8 = request_key(&(0x7f0000000540)="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", &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='$user{\x00', r7) setsockopt$inet_int(r3, 0x0, 0x3f, &(0x7f00000003c0)=0x2, 0x4) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="8379e1b4d5aab3ece32ff181a2107d05de647f5edd1d924e86db92cce4fdc9c2932f973149ee61ac47df0ae4ceb49039ae149c0919d0fe4321dcec527b87c1804c8f85015d40", 0x46, r8) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000500)={0x2, &(0x7f0000000380)=[{0x20, 0x101}, {0x7fffffff, 0x3c621aac}]}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000400)=0x3) r9 = socket$inet(0x2, 0x2, 0xfffffffffffffffd) getsockopt(r9, 0x20000000000088, 0x1, &(0x7f0000000080)=""/203, &(0x7f0000000000)=0x85) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000440)="132ba68a8b76bbe5bdcbf78ab980b7ba", 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r4, r10, &(0x7f0000000080), 0x80000003) 15:48:56 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) fcntl$setstatus(r1, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000001440)='./bus\x00', 0x7) 15:48:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) keyctl$link(0x8, r1, r0) [ 853.241033] device lo left promiscuous mode [ 853.283938] device bridge_slave_0 left promiscuous mode 15:48:57 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) fcntl$setstatus(r1, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000001440)='./bus\x00', 0x7) 15:48:57 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r4 = socket$inet(0x2, 0x1, 0x0) getsockname$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'nat\x00'}, &(0x7f0000000300)=0x78) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)=0x0) sched_getparam(r5, &(0x7f0000000480)) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000680)={'icmp6\x00'}, &(0x7f00000006c0)=0x1e) sendto$inet(r4, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x4000000000000003, 0x0, &(0x7f0000044ff8)) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) r7 = request_key(&(0x7f0000000780)='logon\x00', &(0x7f00000007c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000800)='filter\x00', 0xfffffffffffffff8) r8 = request_key(&(0x7f0000000540)="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", &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='$user{\x00', r7) setsockopt$inet_int(r3, 0x0, 0x3f, &(0x7f00000003c0)=0x2, 0x4) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="8379e1b4d5aab3ece32ff181a2107d05de647f5edd1d924e86db92cce4fdc9c2932f973149ee61ac47df0ae4ceb49039ae149c0919d0fe4321dcec527b87c1804c8f85015d40", 0x46, r8) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000500)={0x2, &(0x7f0000000380)=[{0x20, 0x101}, {0x7fffffff, 0x3c621aac}]}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000400)=0x3) r9 = socket$inet(0x2, 0x2, 0xfffffffffffffffd) getsockopt(r9, 0x20000000000088, 0x1, &(0x7f0000000080)=""/203, &(0x7f0000000000)=0x85) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000440)="132ba68a8b76bbe5bdcbf78ab980b7ba", 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r4, r10, &(0x7f0000000080), 0x80000003) 15:48:57 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r4 = socket$inet(0x2, 0x1, 0x0) getsockname$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'nat\x00'}, &(0x7f0000000300)=0x78) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)=0x0) sched_getparam(r5, &(0x7f0000000480)) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000680)={'icmp6\x00'}, &(0x7f00000006c0)=0x1e) sendto$inet(r4, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x4000000000000003, 0x0, &(0x7f0000044ff8)) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) r7 = request_key(&(0x7f0000000780)='logon\x00', &(0x7f00000007c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000800)='filter\x00', 0xfffffffffffffff8) r8 = request_key(&(0x7f0000000540)="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", &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='$user{\x00', r7) setsockopt$inet_int(r3, 0x0, 0x3f, &(0x7f00000003c0)=0x2, 0x4) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="8379e1b4d5aab3ece32ff181a2107d05de647f5edd1d924e86db92cce4fdc9c2932f973149ee61ac47df0ae4ceb49039ae149c0919d0fe4321dcec527b87c1804c8f85015d40", 0x46, r8) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000500)={0x2, &(0x7f0000000380)=[{0x20, 0x101}, {0x7fffffff, 0x3c621aac}]}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000400)=0x3) r9 = socket$inet(0x2, 0x2, 0xfffffffffffffffd) getsockopt(r9, 0x20000000000088, 0x1, &(0x7f0000000080)=""/203, &(0x7f0000000000)=0x85) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000440)="132ba68a8b76bbe5bdcbf78ab980b7ba", 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r4, r10, &(0x7f0000000080), 0x80000003) 15:48:57 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r4 = socket$inet(0x2, 0x1, 0x0) getsockname$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'nat\x00'}, &(0x7f0000000300)=0x78) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)=0x0) sched_getparam(r5, &(0x7f0000000480)) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000680)={'icmp6\x00'}, &(0x7f00000006c0)=0x1e) sendto$inet(r4, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x4000000000000003, 0x0, &(0x7f0000044ff8)) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) r7 = request_key(&(0x7f0000000780)='logon\x00', &(0x7f00000007c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000800)='filter\x00', 0xfffffffffffffff8) r8 = request_key(&(0x7f0000000540)="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", &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='$user{\x00', r7) setsockopt$inet_int(r3, 0x0, 0x3f, &(0x7f00000003c0)=0x2, 0x4) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="8379e1b4d5aab3ece32ff181a2107d05de647f5edd1d924e86db92cce4fdc9c2932f973149ee61ac47df0ae4ceb49039ae149c0919d0fe4321dcec527b87c1804c8f85015d40", 0x46, r8) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000500)={0x2, &(0x7f0000000380)=[{0x20, 0x101}, {0x7fffffff, 0x3c621aac}]}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000400)=0x3) r9 = socket$inet(0x2, 0x2, 0xfffffffffffffffd) getsockopt(r9, 0x20000000000088, 0x1, &(0x7f0000000080)=""/203, &(0x7f0000000000)=0x85) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000440)="132ba68a8b76bbe5bdcbf78ab980b7ba", 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r4, r10, &(0x7f0000000080), 0x80000003) 15:48:57 executing program 5: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/81) 15:48:57 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r4 = socket$inet(0x2, 0x1, 0x0) getsockname$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'nat\x00'}, &(0x7f0000000300)=0x78) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)=0x0) sched_getparam(r5, &(0x7f0000000480)) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000680)={'icmp6\x00'}, &(0x7f00000006c0)=0x1e) sendto$inet(r4, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x4000000000000003, 0x0, &(0x7f0000044ff8)) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) r7 = request_key(&(0x7f0000000780)='logon\x00', &(0x7f00000007c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000800)='filter\x00', 0xfffffffffffffff8) r8 = request_key(&(0x7f0000000540)="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", &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='$user{\x00', r7) setsockopt$inet_int(r3, 0x0, 0x3f, &(0x7f00000003c0)=0x2, 0x4) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="8379e1b4d5aab3ece32ff181a2107d05de647f5edd1d924e86db92cce4fdc9c2932f973149ee61ac47df0ae4ceb49039ae149c0919d0fe4321dcec527b87c1804c8f85015d40", 0x46, r8) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000500)={0x2, &(0x7f0000000380)=[{0x20, 0x101}, {0x7fffffff, 0x3c621aac}]}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000400)=0x3) r9 = socket$inet(0x2, 0x2, 0xfffffffffffffffd) getsockopt(r9, 0x20000000000088, 0x1, &(0x7f0000000080)=""/203, &(0x7f0000000000)=0x85) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000440)="132ba68a8b76bbe5bdcbf78ab980b7ba", 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r4, r10, &(0x7f0000000080), 0x80000003) 15:48:57 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r4 = socket$inet(0x2, 0x1, 0x0) getsockname$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'nat\x00'}, &(0x7f0000000300)=0x78) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)=0x0) sched_getparam(r5, &(0x7f0000000480)) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000680)={'icmp6\x00'}, &(0x7f00000006c0)=0x1e) sendto$inet(r4, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x4000000000000003, 0x0, &(0x7f0000044ff8)) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) r7 = request_key(&(0x7f0000000780)='logon\x00', &(0x7f00000007c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000800)='filter\x00', 0xfffffffffffffff8) r8 = request_key(&(0x7f0000000540)="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", &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='$user{\x00', r7) setsockopt$inet_int(r3, 0x0, 0x3f, &(0x7f00000003c0)=0x2, 0x4) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="8379e1b4d5aab3ece32ff181a2107d05de647f5edd1d924e86db92cce4fdc9c2932f973149ee61ac47df0ae4ceb49039ae149c0919d0fe4321dcec527b87c1804c8f85015d40", 0x46, r8) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000500)={0x2, &(0x7f0000000380)=[{0x20, 0x101}, {0x7fffffff, 0x3c621aac}]}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000400)=0x3) r9 = socket$inet(0x2, 0x2, 0xfffffffffffffffd) getsockopt(r9, 0x20000000000088, 0x1, &(0x7f0000000080)=""/203, &(0x7f0000000000)=0x85) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000440)="132ba68a8b76bbe5bdcbf78ab980b7ba", 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r4, r10, &(0x7f0000000080), 0x80000003) 15:48:57 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) fcntl$setstatus(r1, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000001440)='./bus\x00', 0x7) 15:48:57 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r4 = socket$inet(0x2, 0x1, 0x0) getsockname$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'nat\x00'}, &(0x7f0000000300)=0x78) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)=0x0) sched_getparam(r5, &(0x7f0000000480)) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000680)={'icmp6\x00'}, &(0x7f00000006c0)=0x1e) sendto$inet(r4, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x4000000000000003, 0x0, &(0x7f0000044ff8)) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) r7 = request_key(&(0x7f0000000780)='logon\x00', &(0x7f00000007c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000800)='filter\x00', 0xfffffffffffffff8) r8 = request_key(&(0x7f0000000540)="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", &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='$user{\x00', r7) setsockopt$inet_int(r3, 0x0, 0x3f, &(0x7f00000003c0)=0x2, 0x4) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="8379e1b4d5aab3ece32ff181a2107d05de647f5edd1d924e86db92cce4fdc9c2932f973149ee61ac47df0ae4ceb49039ae149c0919d0fe4321dcec527b87c1804c8f85015d40", 0x46, r8) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000500)={0x2, &(0x7f0000000380)=[{0x20, 0x101}, {0x7fffffff, 0x3c621aac}]}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000400)=0x3) r9 = socket$inet(0x2, 0x2, 0xfffffffffffffffd) getsockopt(r9, 0x20000000000088, 0x1, &(0x7f0000000080)=""/203, &(0x7f0000000000)=0x85) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000440)="132ba68a8b76bbe5bdcbf78ab980b7ba", 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r4, r10, &(0x7f0000000080), 0x80000003) 15:48:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1fff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:48:57 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 15:48:57 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r4 = socket$inet(0x2, 0x1, 0x0) getsockname$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'nat\x00'}, &(0x7f0000000300)=0x78) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)=0x0) sched_getparam(r5, &(0x7f0000000480)) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000680)={'icmp6\x00'}, &(0x7f00000006c0)=0x1e) sendto$inet(r4, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x4000000000000003, 0x0, &(0x7f0000044ff8)) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) r7 = request_key(&(0x7f0000000780)='logon\x00', &(0x7f00000007c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000800)='filter\x00', 0xfffffffffffffff8) r8 = request_key(&(0x7f0000000540)="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", &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='$user{\x00', r7) setsockopt$inet_int(r3, 0x0, 0x3f, &(0x7f00000003c0)=0x2, 0x4) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="8379e1b4d5aab3ece32ff181a2107d05de647f5edd1d924e86db92cce4fdc9c2932f973149ee61ac47df0ae4ceb49039ae149c0919d0fe4321dcec527b87c1804c8f85015d40", 0x46, r8) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000500)={0x2, &(0x7f0000000380)=[{0x20, 0x101}, {0x7fffffff, 0x3c621aac}]}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000400)=0x3) r9 = socket$inet(0x2, 0x2, 0xfffffffffffffffd) getsockopt(r9, 0x20000000000088, 0x1, &(0x7f0000000080)=""/203, &(0x7f0000000000)=0x85) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000440)="132ba68a8b76bbe5bdcbf78ab980b7ba", 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r4, r10, &(0x7f0000000080), 0x80000003) 15:48:57 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r4 = socket$inet(0x2, 0x1, 0x0) getsockname$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'nat\x00'}, &(0x7f0000000300)=0x78) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)=0x0) sched_getparam(r5, &(0x7f0000000480)) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000680)={'icmp6\x00'}, &(0x7f00000006c0)=0x1e) sendto$inet(r4, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x4000000000000003, 0x0, &(0x7f0000044ff8)) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) r7 = request_key(&(0x7f0000000780)='logon\x00', &(0x7f00000007c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000800)='filter\x00', 0xfffffffffffffff8) r8 = request_key(&(0x7f0000000540)="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", &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='$user{\x00', r7) setsockopt$inet_int(r3, 0x0, 0x3f, &(0x7f00000003c0)=0x2, 0x4) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="8379e1b4d5aab3ece32ff181a2107d05de647f5edd1d924e86db92cce4fdc9c2932f973149ee61ac47df0ae4ceb49039ae149c0919d0fe4321dcec527b87c1804c8f85015d40", 0x46, r8) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000500)={0x2, &(0x7f0000000380)=[{0x20, 0x101}, {0x7fffffff, 0x3c621aac}]}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000400)=0x3) r9 = socket$inet(0x2, 0x2, 0xfffffffffffffffd) getsockopt(r9, 0x20000000000088, 0x1, &(0x7f0000000080)=""/203, &(0x7f0000000000)=0x85) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000440)="132ba68a8b76bbe5bdcbf78ab980b7ba", 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r4, r10, &(0x7f0000000080), 0x80000003) 15:48:57 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@mcast1={0xff, 0x1, [], 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x807}, 0x1c) sendmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[{0x44, 0x29, 0x4, "4d06472e58acad4c9492e144adbb1195b36962e95936d013921f8804cc2f3532d18c838fb9887edbdcf3900fb800c2c27026ce9f27"}], 0x44}}], 0x1, 0x0) 15:48:57 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) fcntl$setstatus(r1, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000001440)='./bus\x00', 0x7) 15:48:57 executing program 0: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)="83", 0x1, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r0) 15:48:58 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) fcntl$setstatus(r1, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000001440)='./bus\x00', 0x7) 15:48:58 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 15:48:58 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r4 = socket$inet(0x2, 0x1, 0x0) getsockname$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'nat\x00'}, &(0x7f0000000300)=0x78) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)=0x0) sched_getparam(r5, &(0x7f0000000480)) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000680)={'icmp6\x00'}, &(0x7f00000006c0)=0x1e) sendto$inet(r4, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x4000000000000003, 0x0, &(0x7f0000044ff8)) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) r7 = request_key(&(0x7f0000000780)='logon\x00', &(0x7f00000007c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000800)='filter\x00', 0xfffffffffffffff8) r8 = request_key(&(0x7f0000000540)="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", &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000700)='$user{\x00', r7) setsockopt$inet_int(r3, 0x0, 0x3f, &(0x7f00000003c0)=0x2, 0x4) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="8379e1b4d5aab3ece32ff181a2107d05de647f5edd1d924e86db92cce4fdc9c2932f973149ee61ac47df0ae4ceb49039ae149c0919d0fe4321dcec527b87c1804c8f85015d40", 0x46, r8) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000500)={0x2, &(0x7f0000000380)=[{0x20, 0x101}, {0x7fffffff, 0x3c621aac}]}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000400)=0x3) r9 = socket$inet(0x2, 0x2, 0xfffffffffffffffd) getsockopt(r9, 0x20000000000088, 0x1, &(0x7f0000000080)=""/203, &(0x7f0000000000)=0x85) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000440)="132ba68a8b76bbe5bdcbf78ab980b7ba", 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r4, r10, &(0x7f0000000080), 0x80000003) 15:48:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001fc0)={&(0x7f0000000ac0)={0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000000000)={0x14, 0x19, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/164, 0xa4}, {&(0x7f0000000280)=""/133, 0x85}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000500)=""/29, 0x1d}], 0x5) 15:48:58 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) 15:48:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1b, 0x10, 0x829, 0x0, 0x0, {0x3}}, 0x1c}, 0x1}, 0x0) 15:48:58 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) [ 854.658410] netlink: 7 bytes leftover after parsing attributes in process `syz-executor5'. 15:48:58 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) fcntl$setstatus(r1, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000001440)='./bus\x00', 0x7) 15:48:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1fff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:48:58 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) 15:48:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001fc0)={&(0x7f0000000ac0)={0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000000000)={0x14, 0x19, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/164, 0xa4}, {&(0x7f0000000280)=""/133, 0x85}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000500)=""/29, 0x1d}], 0x5) 15:48:58 executing program 6: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x0, 0x21]) 15:48:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1b, 0x10, 0x829, 0x0, 0x0, {0x3}}, 0x1c}, 0x1}, 0x0) 15:48:58 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) [ 854.955494] netlink: 7 bytes leftover after parsing attributes in process `syz-executor5'. 15:48:58 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) fcntl$setstatus(r1, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000001440)='./bus\x00', 0x7) 15:48:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1b, 0x10, 0x829, 0x0, 0x0, {0x3}}, 0x1c}, 0x1}, 0x0) [ 855.210712] netlink: 7 bytes leftover after parsing attributes in process `syz-executor5'. 15:48:59 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) fcntl$setstatus(r1, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000001440)='./bus\x00', 0x7) 15:48:59 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x4048080, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000000)={0xa}, 0x1c) 15:48:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001fc0)={&(0x7f0000000ac0)={0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000000000)={0x14, 0x19, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/164, 0xa4}, {&(0x7f0000000280)=""/133, 0x85}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000500)=""/29, 0x1d}], 0x5) 15:48:59 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001100)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f00000002c0), 0x4000562, 0x0) 15:48:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1b, 0x10, 0x829, 0x0, 0x0, {0x3}}, 0x1c}, 0x1}, 0x0) 15:48:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1fff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 855.384283] netlink: 7 bytes leftover after parsing attributes in process `syz-executor5'. 15:48:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) [ 855.562501] device veth0_to_bridge entered promiscuous mode [ 855.714443] device veth0_to_bridge left promiscuous mode 15:48:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001fc0)={&(0x7f0000000ac0)={0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000000000)={0x14, 0x19, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/164, 0xa4}, {&(0x7f0000000280)=""/133, 0x85}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000500)=""/29, 0x1d}], 0x5) 15:48:59 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x4048080, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000000)={0xa}, 0x1c) 15:48:59 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001100)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f00000002c0), 0x4000562, 0x0) 15:48:59 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001100)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f00000002c0), 0x4000562, 0x0) 15:48:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) 15:48:59 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x4048080, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000000)={0xa}, 0x1c) 15:48:59 executing program 7: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x5) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000004, "7fd82d5e02ca3901", "88e7ed00007fff051eaa961ef6c6992b6900000000f9ffff7711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x6}, @addr}], 0x1c) [ 855.866333] device veth0_to_bridge entered promiscuous mode [ 855.947928] device veth0_to_bridge left promiscuous mode 15:48:59 executing program 2: madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb) 15:48:59 executing program 7: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x5) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000004, "7fd82d5e02ca3901", "88e7ed00007fff051eaa961ef6c6992b6900000000f9ffff7711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x6}, @addr}], 0x1c) 15:48:59 executing program 7: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x5) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000004, "7fd82d5e02ca3901", "88e7ed00007fff051eaa961ef6c6992b6900000000f9ffff7711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x6}, @addr}], 0x1c) 15:48:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) 15:48:59 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x4048080, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000000)={0xa}, 0x1c) 15:48:59 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001100)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f00000002c0), 0x4000562, 0x0) 15:48:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0x1fd}]}}) 15:48:59 executing program 4: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) dup3(r0, r1, 0x0) 15:48:59 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001100)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f00000002c0), 0x4000562, 0x0) 15:48:59 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)=[{0x10, 0x29, 0xb, "f1"}], 0x10}, 0x0) 15:48:59 executing program 6: prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) clone(0x0, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)) 15:48:59 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0x0) close(r1) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) [ 856.300216] device veth0_to_bridge entered promiscuous mode [ 856.336647] device veth0_to_bridge left promiscuous mode 15:49:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKBSZSET(r0, 0x40041271, &(0x7f0000000140)) 15:49:00 executing program 1: socket(0x11, 0x3, 0x7fff) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x7ffffffd) 15:49:00 executing program 7: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x5) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000004, "7fd82d5e02ca3901", "88e7ed00007fff051eaa961ef6c6992b6900000000f9ffff7711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x6}, @addr}], 0x1c) 15:49:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) 15:49:00 executing program 6: r0 = socket(0x18, 0x0, 0x1000000000000001) connect(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000280)) 15:49:00 executing program 2: linkat(0xffffffffffffffff, &(0x7f0000000040)='/\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 15:49:00 executing program 4: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="006400ecff0345") getdents64(r0, &(0x7f0000000480)=""/66, 0x156) getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) [ 856.528368] device veth0_to_bridge entered promiscuous mode 15:49:00 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001100)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f00000002c0), 0x4000562, 0x0) 15:49:00 executing program 7: r0 = userfaultfd(0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x8000, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x8d264d94b88cc547) ftruncate(r2, 0x8008200) write$evdev(r2, &(0x7f0000000000)=[{{0x0, 0x2710}}, {{0x77359400}}, {}], 0xfffffffffffffdc6) gettid() epoll_wait(0xffffffffffffffff, &(0x7f0000000200)=[{}], 0x1, 0x4) process_vm_writev(0x0, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) close(r0) 15:49:00 executing program 1: socket(0x11, 0x3, 0x7fff) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x7ffffffd) 15:49:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) sendto$inet6(r0, &(0x7f00000000c0)="6a725a5f62d02a6be55afd02d999", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x8, @dev={0xfe, 0x80}}, 0x1c) recvmsg(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f00000002c0)}, 0x2000) [ 856.590354] device veth0_to_bridge left promiscuous mode 15:49:00 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x14, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 15:49:00 executing program 4: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000300000010d10200cf", 0x1f) 15:49:00 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0f85403, &(0x7f0000000000)={0x1}) clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 15:49:00 executing program 1: socket(0x11, 0x3, 0x7fff) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x7ffffffd) 15:49:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x200000088) connect$inet6(r0, &(0x7f0000000280)={0xa}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 15:49:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f0000d7efec)={0x14, 0xe501, 0x2, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 15:49:00 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001100)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f00000002c0), 0x4000562, 0x0) 15:49:00 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000007c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000005700)=@setlink={0x34, 0x13, 0x31f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@nested={0xc, 0x6, [@generic="4afcb300a1"]}]}]}]}, 0x34}, 0x1}, 0x0) 15:49:00 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x3, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x3a) getsockopt$packet_buf(r0, 0x111, 0x0, &(0x7f0000000200)=""/162, &(0x7f0000000300)=0xa2) 15:49:00 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) [ 856.902566] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 15:49:00 executing program 1: socket(0x11, 0x3, 0x7fff) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x7ffffffd) [ 856.961826] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 15:49:00 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, @cond}) 15:49:00 executing program 4: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000300000010d10200cf", 0x1f) [ 857.111280] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 15:49:01 executing program 7: r0 = userfaultfd(0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x8000, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x8d264d94b88cc547) ftruncate(r2, 0x8008200) write$evdev(r2, &(0x7f0000000000)=[{{0x0, 0x2710}}, {{0x77359400}}, {}], 0xfffffffffffffdc6) gettid() epoll_wait(0xffffffffffffffff, &(0x7f0000000200)=[{}], 0x1, 0x4) process_vm_writev(0x0, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) close(r0) 15:49:01 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x3, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x3a) getsockopt$packet_buf(r0, 0x111, 0x0, &(0x7f0000000200)=""/162, &(0x7f0000000300)=0xa2) 15:49:01 executing program 4: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000300000010d10200cf", 0x1f) 15:49:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x24, 0x1d, 0x305, 0x0, 0x0, {0xc}, [@NDA_DST_IPV4={0x8, 0x1, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) 15:49:01 executing program 1: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) [ 857.672668] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 15:49:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 15:49:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000240), 0x1) 15:49:01 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 15:49:01 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x3, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x3a) getsockopt$packet_buf(r0, 0x111, 0x0, &(0x7f0000000200)=""/162, &(0x7f0000000300)=0xa2) 15:49:01 executing program 0: getrlimit(0xe, &(0x7f0000000180)) 15:49:01 executing program 4: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000300000010d10200cf", 0x1f) 15:49:01 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14}, @multicast1=0xe0000001}, 0x10) 15:49:01 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x3, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x3a) getsockopt$packet_buf(r0, 0x111, 0x0, &(0x7f0000000200)=""/162, &(0x7f0000000300)=0xa2) 15:49:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005a40)=[{{&(0x7f0000000980)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001b40), 0x0, &(0x7f0000001b80)}}, {{0x0, 0x0, &(0x7f0000001e80), 0x0, &(0x7f0000001ec0)=[{0x18, 0x1, 0x2, "0200080000000000d6"}], 0x18}}], 0x2, 0x0) 15:49:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000100)=0x91) [ 857.828716] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 15:49:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd) [ 857.976166] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:49:02 executing program 7: r0 = userfaultfd(0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x8000, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x8d264d94b88cc547) ftruncate(r2, 0x8008200) write$evdev(r2, &(0x7f0000000000)=[{{0x0, 0x2710}}, {{0x77359400}}, {}], 0xfffffffffffffdc6) gettid() epoll_wait(0xffffffffffffffff, &(0x7f0000000200)=[{}], 0x1, 0x4) process_vm_writev(0x0, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) close(r0) 15:49:02 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x28}, 0x1}, 0x0) 15:49:02 executing program 3: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000004000)) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000080)) 15:49:02 executing program 2: getrandom(&(0x7f0000000000)=""/4096, 0x1000, 0x0) 15:49:02 executing program 1: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) 15:49:02 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 15:49:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005a40)=[{{&(0x7f0000000980)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001b40), 0x0, &(0x7f0000001b80)}}, {{0x0, 0x0, &(0x7f0000001e80), 0x0, &(0x7f0000001ec0)=[{0x18, 0x1, 0x2, "0200080000000000d6"}], 0x18}}], 0x2, 0x0) 15:49:02 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) 15:49:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd) 15:49:02 executing program 3: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000004000)) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000080)) 15:49:02 executing program 6: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) 15:49:02 executing program 3: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000004000)) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000080)) 15:49:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005a40)=[{{&(0x7f0000000980)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001b40), 0x0, &(0x7f0000001b80)}}, {{0x0, 0x0, &(0x7f0000001e80), 0x0, &(0x7f0000001ec0)=[{0x18, 0x1, 0x2, "0200080000000000d6"}], 0x18}}], 0x2, 0x0) 15:49:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000000180)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=[{0xc, 0x29, 0x8}], 0xc}}], 0x2, 0x0) 15:49:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd) 15:49:02 executing program 3: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000004000)) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000080)) [ 858.987437] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:49:03 executing program 7: r0 = userfaultfd(0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x8000, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x8d264d94b88cc547) ftruncate(r2, 0x8008200) write$evdev(r2, &(0x7f0000000000)=[{{0x0, 0x2710}}, {{0x77359400}}, {}], 0xfffffffffffffdc6) gettid() epoll_wait(0xffffffffffffffff, &(0x7f0000000200)=[{}], 0x1, 0x4) process_vm_writev(0x0, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) close(r0) 15:49:03 executing program 2: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) ioprio_set$uid(0x3, 0x0, 0x0) 15:49:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005a40)=[{{&(0x7f0000000980)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001b40), 0x0, &(0x7f0000001b80)}}, {{0x0, 0x0, &(0x7f0000001e80), 0x0, &(0x7f0000001ec0)=[{0x18, 0x1, 0x2, "0200080000000000d6"}], 0x18}}], 0x2, 0x0) 15:49:03 executing program 3: r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0xffffffffffffff16) lseek(r0, 0x0, 0x4) 15:49:03 executing program 1: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) 15:49:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 15:49:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd) 15:49:03 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_dump={0xa}}) 15:49:03 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r0, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x0, 0x0) sendto$unix(r0, &(0x7f00000000c0), 0x0, 0x8001, 0x0, 0x0) 15:49:03 executing program 6: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) 15:49:03 executing program 3: r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0xffffffffffffff16) lseek(r0, 0x0, 0x4) 15:49:03 executing program 2: r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0xffffffffffffff16) lseek(r0, 0x0, 0x4) 15:49:03 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_dump={0xa}}) [ 859.945887] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:49:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x15, &(0x7f0000000000), 0x4) 15:49:03 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_dump={0xa}}) 15:49:03 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_dump={0xa}}) 15:49:04 executing program 3: r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0xffffffffffffff16) lseek(r0, 0x0, 0x4) 15:49:04 executing program 0: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3) 15:49:04 executing program 2: r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0xffffffffffffff16) lseek(r0, 0x0, 0x4) 15:49:04 executing program 0: r0 = socket$inet(0x11, 0x80a, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @loopback=0x7f000001}, {0x2}}) 15:49:04 executing program 1: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) 15:49:04 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000140), &(0x7f0000013000)=0xd3) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 15:49:04 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, &(0x7f0000001280)=0x8000000000000c, 0x80000007ffffffe) 15:49:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 15:49:04 executing program 3: r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0xffffffffffffff16) lseek(r0, 0x0, 0x4) 15:49:04 executing program 6: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) 15:49:04 executing program 2: r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0xffffffffffffff16) lseek(r0, 0x0, 0x4) 15:49:04 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, &(0x7f0000001280)=0x8000000000000c, 0x80000007ffffffe) [ 860.969920] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:49:04 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, &(0x7f0000001280)=0x8000000000000c, 0x80000007ffffffe) 15:49:04 executing program 4: r0 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000ff000)={0x0, r0}) recvmmsg(r2, &(0x7f0000002680)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000002580)=""/220, 0xdc}}], 0x1, 0x0, &(0x7f00000026c0)={0x77359400}) r3 = dup2(r1, r2) recvmmsg(r3, &(0x7f0000005a00)=[{{&(0x7f0000002280)=@ax25, 0x80, &(0x7f0000000200), 0x0, &(0x7f00000059c0)}}], 0x1, 0x0, &(0x7f0000000000)) r4 = gettid() recvfrom$unix(r1, &(0x7f00000000c0)=""/226, 0xe2, 0x0, 0x0, 0x0) tkill(r4, 0x1000000000016) 15:49:04 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, &(0x7f0000001280)=0x8000000000000c, 0x80000007ffffffe) 15:49:04 executing program 0: r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/context\x00', 0x2, 0x0) write(r0, &(0x7f0000000180), 0x0) 15:49:04 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:49:04 executing program 0: nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00001a8000/0x1000)=nil, 0x7fffdfe57000, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000100)}}, &(0x7f0000000200)) 15:49:05 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:49:05 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:49:05 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xb) 15:49:05 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:49:05 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:49:05 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080), 0x4) 15:49:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x280080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x33c) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 15:49:05 executing program 7: r0 = socket$inet6(0xa, 0x800, 0xc270) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x100000000, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) fcntl$getflags(r2, 0x401) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 15:49:05 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:49:05 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:49:05 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc8) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x4) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xffffffa0) close(r1) 15:49:06 executing program 4: r0 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000ff000)={0x0, r0}) recvmmsg(r2, &(0x7f0000002680)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000002580)=""/220, 0xdc}}], 0x1, 0x0, &(0x7f00000026c0)={0x77359400}) r3 = dup2(r1, r2) recvmmsg(r3, &(0x7f0000005a00)=[{{&(0x7f0000002280)=@ax25, 0x80, &(0x7f0000000200), 0x0, &(0x7f00000059c0)}}], 0x1, 0x0, &(0x7f0000000000)) r4 = gettid() recvfrom$unix(r1, &(0x7f00000000c0)=""/226, 0xe2, 0x0, 0x0, 0x0) tkill(r4, 0x1000000000016) 15:49:06 executing program 2: r0 = epoll_create1(0x0) r1 = dup2(r0, r0) r2 = epoll_create1(0x0) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) 15:49:06 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x18, r1) 15:49:06 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc8) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x4) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xffffffa0) close(r1) 15:49:06 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000200), 0x4) 15:49:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x280080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x33c) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 15:49:06 executing program 0: nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00001a8000/0x1000)=nil, 0x7fffdfe57000, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000100)}}, &(0x7f0000000200)) 15:49:06 executing program 7: r0 = socket$inet6(0xa, 0x800, 0xc270) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x100000000, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) fcntl$getflags(r2, 0x401) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 15:49:06 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000ff000)={0x0, r0}) recvmmsg(r2, &(0x7f0000002680)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000002580)=""/220, 0xdc}}], 0x1, 0x0, &(0x7f00000026c0)={0x77359400}) r3 = dup2(r1, r2) recvmmsg(r3, &(0x7f0000005a00)=[{{&(0x7f0000002280)=@ax25, 0x80, &(0x7f0000000200), 0x0, &(0x7f00000059c0)}}], 0x1, 0x0, &(0x7f0000000000)) r4 = gettid() recvfrom$unix(r1, &(0x7f00000000c0)=""/226, 0xe2, 0x0, 0x0, 0x0) tkill(r4, 0x1000000000016) 15:49:06 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc8) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x4) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xffffffa0) close(r1) 15:49:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x280080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x33c) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 15:49:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x280080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x33c) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 15:49:06 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc8) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x4) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xffffffa0) close(r1) 15:49:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000001800190000003fffffffda060200000000e800010000000000000000000000000000000000", 0x29}], 0x1) 15:49:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x280080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x33c) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 15:49:06 executing program 6: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 15:49:07 executing program 4: r0 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000ff000)={0x0, r0}) recvmmsg(r2, &(0x7f0000002680)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000002580)=""/220, 0xdc}}], 0x1, 0x0, &(0x7f00000026c0)={0x77359400}) r3 = dup2(r1, r2) recvmmsg(r3, &(0x7f0000005a00)=[{{&(0x7f0000002280)=@ax25, 0x80, &(0x7f0000000200), 0x0, &(0x7f00000059c0)}}], 0x1, 0x0, &(0x7f0000000000)) r4 = gettid() recvfrom$unix(r1, &(0x7f00000000c0)=""/226, 0xe2, 0x0, 0x0, 0x0) tkill(r4, 0x1000000000016) 15:49:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x280080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x33c) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 15:49:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x280080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x33c) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 15:49:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x280080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x33c) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 15:49:07 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt(r0, 0x0, 0x8, &(0x7f0000000180)="82", 0x1) recvmsg(r0, &(0x7f00000014c0)={&(0x7f00000001c0)=@ax25, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000001480)=""/35, 0x23}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f000070aef1)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) 15:49:07 executing program 7: r0 = socket$inet6(0xa, 0x800, 0xc270) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x100000000, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) fcntl$getflags(r2, 0x401) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 15:49:07 executing program 0: nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00001a8000/0x1000)=nil, 0x7fffdfe57000, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000100)}}, &(0x7f0000000200)) 15:49:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'syz_tun\x00', {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}) 15:49:07 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000ff000)={0x0, r0}) recvmmsg(r2, &(0x7f0000002680)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000002580)=""/220, 0xdc}}], 0x1, 0x0, &(0x7f00000026c0)={0x77359400}) r3 = dup2(r1, r2) recvmmsg(r3, &(0x7f0000005a00)=[{{&(0x7f0000002280)=@ax25, 0x80, &(0x7f0000000200), 0x0, &(0x7f00000059c0)}}], 0x1, 0x0, &(0x7f0000000000)) r4 = gettid() recvfrom$unix(r1, &(0x7f00000000c0)=""/226, 0xe2, 0x0, 0x0, 0x0) tkill(r4, 0x1000000000016) 15:49:07 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x6, 0xffffffffffffff71) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) 15:49:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x280080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x33c) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 15:49:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x280080) sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x33c) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 15:49:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000940)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) 15:49:07 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f00000000c0)=""/125, &(0x7f0000000140)=0x7d) 15:49:07 executing program 7: r0 = socket$inet6(0xa, 0x800, 0xc270) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x100000000, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) fcntl$getflags(r2, 0x401) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 15:49:07 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) 15:49:08 executing program 4: r0 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000ff000)={0x0, r0}) recvmmsg(r2, &(0x7f0000002680)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000002580)=""/220, 0xdc}}], 0x1, 0x0, &(0x7f00000026c0)={0x77359400}) r3 = dup2(r1, r2) recvmmsg(r3, &(0x7f0000005a00)=[{{&(0x7f0000002280)=@ax25, 0x80, &(0x7f0000000200), 0x0, &(0x7f00000059c0)}}], 0x1, 0x0, &(0x7f0000000000)) r4 = gettid() recvfrom$unix(r1, &(0x7f00000000c0)=""/226, 0xe2, 0x0, 0x0, 0x0) tkill(r4, 0x1000000000016) 15:49:08 executing program 3: r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80}, 0x800, 0x2}, 0x20) 15:49:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f0000dc5f98)) 15:49:08 executing program 2: r0 = gettid() unshare(0x40000000) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/fib_trie\x00') sendfile(r1, r1, &(0x7f0000000000)=0x10, 0x5) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000140)) 15:49:08 executing program 6: socket(0x10, 0x0, 0x40000c9) 15:49:08 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x2001) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0) [ 864.640783] IPVS: Creating netns size=2552 id=45 [ 864.770553] IPVS: Creating netns size=2552 id=46 15:49:08 executing program 0: nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00001a8000/0x1000)=nil, 0x7fffdfe57000, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000100)}}, &(0x7f0000000200)) 15:49:08 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) write$binfmt_elf32(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) 15:49:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000009840)=[{{&(0x7f00000072c0)=@ipx, 0x80, &(0x7f0000008380)=[{&(0x7f0000007340)=""/4096, 0x1000}, {&(0x7f0000008340)=""/52, 0x34}], 0x2, &(0x7f00000083c0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f00000099c0)) sendmmsg(r0, &(0x7f0000007e00), 0x30b, 0x8000) 15:49:08 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000000100)='./file2\x00', &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:49:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x21, &(0x7f0000000100)={@broadcast=0xffffffff, @multicast2=0xe0000002}, 0xffffffffffffffb5) 15:49:08 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000ff000)={0x0, r0}) recvmmsg(r2, &(0x7f0000002680)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000002580)=""/220, 0xdc}}], 0x1, 0x0, &(0x7f00000026c0)={0x77359400}) r3 = dup2(r1, r2) recvmmsg(r3, &(0x7f0000005a00)=[{{&(0x7f0000002280)=@ax25, 0x80, &(0x7f0000000200), 0x0, &(0x7f00000059c0)}}], 0x1, 0x0, &(0x7f0000000000)) r4 = gettid() recvfrom$unix(r1, &(0x7f00000000c0)=""/226, 0xe2, 0x0, 0x0, 0x0) tkill(r4, 0x1000000000016) 15:49:08 executing program 2: r0 = gettid() unshare(0x40000000) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/fib_trie\x00') sendfile(r1, r1, &(0x7f0000000000)=0x10, 0x5) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000140)) 15:49:08 executing program 5: getrusage(0x0, &(0x7f0000000140)) 15:49:08 executing program 3: r0 = gettid() unshare(0x40000000) r1 = syz_open_procfs(r0, &(0x7f0000000080)="6e65742f69665f696e65743600689d001e363b6c264fa887a26fda3eca58373161f13a12a92be6a993b4720d86396a9b1cc039d178e14492de97786eb30b86bb0ae2163b7ed177ff87e312d09bd390ce2ce4d13622dbc9d6b533c3f99225e401466f9ef8a9ea53c0f11c5a10cf9677596ce7721105a3ac3b287b2ca64a5ad4aad7c941387ab5acedea8f64c584562f2a3eb7aac4df59716b44156fd857da4ad2") sendfile(r1, r1, &(0x7f0000000000)=0x10, 0x5) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f00000001c0)) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000140)) 15:49:08 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x3) ioctl$TCSETAF(r1, 0x80047437, &(0x7f00000000c0)) 15:49:09 executing program 6: setrlimit(0x0, &(0x7f0000000180)) setrlimit(0x0, &(0x7f0000000000)={0x0, 0x80000003}) 15:49:09 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000016c0), &(0x7f0000000800)=0x30) 15:49:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 15:49:09 executing program 6: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="480000001400ff09fffefd956fa283b70aa6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc88", 0x48}], 0x1}, 0x0) 15:49:09 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r1, 0xfffefffffffffffe, 0x2) getdents64(r1, &(0x7f0000000200)=""/54, 0x36) 15:49:09 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 15:49:09 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 15:49:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 15:49:09 executing program 5: sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="03092cfd70"], 0x1}, 0x1}, 0x0) r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/247, 0xf7}], 0x1, &(0x7f0000001340)=[{&(0x7f0000000200)=""/145}, {&(0x7f00000002c0)=""/4096}, {&(0x7f00000012c0)=""/87}], 0x359, 0x0) 15:49:09 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) write$binfmt_elf32(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) 15:49:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) dup2(r0, r1) 15:49:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffff82) dup2(r0, r2) tkill(r1, 0x1000000000016) [ 866.535139] pktgen: kernel_thread() failed for cpu 0 [ 866.540311] pktgen: Cannot create thread for cpu 0 (-4) [ 866.545775] pktgen: kernel_thread() failed for cpu 1 [ 866.550902] pktgen: Cannot create thread for cpu 1 (-4) [ 866.556307] pktgen: Initialization failed for all threads 15:49:10 executing program 2: r0 = gettid() unshare(0x40000000) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/fib_trie\x00') sendfile(r1, r1, &(0x7f0000000000)=0x10, 0x5) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000140)) 15:49:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 866.648930] pktgen: kernel_thread() failed for cpu 0 [ 866.657563] pktgen: Cannot create thread for cpu 0 (-4) [ 866.676839] pktgen: kernel_thread() failed for cpu 1 [ 866.687835] pktgen: Cannot create thread for cpu 1 (-4) [ 866.693420] pktgen: Initialization failed for all threads [ 866.787194] pktgen: kernel_thread() failed for cpu 0 [ 866.792361] pktgen: Cannot create thread for cpu 0 (-4) [ 866.798955] pktgen: kernel_thread() failed for cpu 1 [ 866.804265] pktgen: Cannot create thread for cpu 1 (-4) [ 866.809623] pktgen: Initialization failed for all threads 15:49:10 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) dup2(r0, r1) 15:49:10 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f00000041c0)=0x4) 15:49:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) dup2(r0, r1) 15:49:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffff82) dup2(r0, r2) tkill(r1, 0x1000000000016) 15:49:10 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 15:49:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 15:49:10 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) write$binfmt_elf32(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) 15:49:10 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) r1 = socket(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 15:49:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) dup2(r0, r1) 15:49:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffff82) dup2(r0, r2) tkill(r1, 0x1000000000016) 15:49:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) dup2(r0, r1) 15:49:10 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) dup2(r0, r1) 15:49:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) dup2(r0, r1) 15:49:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) dup2(r0, r1) [ 868.387174] pktgen: kernel_thread() failed for cpu 0 [ 868.392325] pktgen: Cannot create thread for cpu 0 (-4) [ 868.398360] pktgen: kernel_thread() failed for cpu 1 [ 868.403509] pktgen: Cannot create thread for cpu 1 (-4) [ 868.408857] pktgen: Initialization failed for all threads 15:49:12 executing program 2: r0 = gettid() unshare(0x40000000) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/fib_trie\x00') sendfile(r1, r1, &(0x7f0000000000)=0x10, 0x5) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000140)) 15:49:12 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) dup2(r0, r1) 15:49:12 executing program 4: exit(0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001004800"], 0x8) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'rdma', 0x20}]}, 0x6) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) write(r0, &(0x7f0000000040)="f1fa259221f2", 0x6) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x0, 0x0, 0x2, 0x0, 0x3, 0x3f, 0x81, 0xeb, 0x40, 0x2c9, 0x7, 0x4, 0x38, 0x0, 0x2, 0x0, 0x8}, [{0x0, 0x7, 0x2, 0xffffffff, 0x1a7, 0x1, 0x100000000, 0x1ff}], "598dc65993c6f61dcfd24cfba1b1d0319a21ba2db0cd49e2fb4656e615a8940bbf18efedcc0813bf24d3373d9a396a9fb2ce9752c9f89c725f5042dfcfc8dc4f3a9e7b5986ca493828f91466f7c3e940f51b382cda401b92b6e6", [[], [], [], []]}, 0x4d2) 15:49:12 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=@bridge_setlink={0x28, 0x13, 0x9, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x7}]}]}, 0x28}, 0x1}, 0x0) 15:49:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffff82) dup2(r0, r2) tkill(r1, 0x1000000000016) 15:49:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) dup2(r0, r1) 15:49:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x1b, &(0x7f0000000200)=""/27}, &(0x7f0000000440)="ea571ee726b1", &(0x7f00000003c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) 15:49:12 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) write$binfmt_elf32(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) 15:49:12 executing program 1: r0 = socket(0xa, 0x802, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) sendto(r0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bcsf0\x00'}}, 0x80) 15:49:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "71756575653100000000000000a21701000000000000000000000004000000000000000010000100000000000000e60000000000e400"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x4}}) 15:49:12 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mknod(&(0x7f0000000200)='./file0/file1\x00', 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 15:49:12 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) setns(r0, 0x0) [ 868.638279] IPVS: Creating netns size=2552 id=47 15:49:12 executing program 1: futex(&(0x7f0000000000), 0x5, 0x0, &(0x7f0000000000), &(0x7f0000000ffc), 0xc7fda99635440eee) 15:49:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0xfffffffffffffffd) 15:49:12 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=@bridge_setlink={0x28, 0x13, 0x9, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x7}]}]}, 0x28}, 0x1}, 0x0) 15:49:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000180)={0xaa72, 0x0, 'client0\x00', 0x0, "f05c79cf9dfb8b6c", "a9e372a7404f19c9201b75b0ca7dcd53959ff4129239f90a30bc366fea91accc"}) 15:49:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic) 15:49:12 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mknod(&(0x7f0000000200)='./file0/file1\x00', 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') [ 869.335590] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 869.434029] keychord: Insufficient bytes present for keycount 0 [ 869.440528] keychord: unsupported version 17791 [ 869.445394] keychord: Insufficient bytes present for keycount 0 [ 869.575613] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 869.590784] keychord: Insufficient bytes present for keycount 0 [ 869.597489] keychord: unsupported version 17791 15:49:13 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=@bridge_setlink={0x28, 0x13, 0x9, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x7}]}]}, 0x28}, 0x1}, 0x0) 15:49:13 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000e25000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 15:49:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa}, 0x1c) connect(r0, &(0x7f0000000140)=@nl=@unspec, 0x80) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x1c) 15:49:13 executing program 4: exit(0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001004800"], 0x8) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'rdma', 0x20}]}, 0x6) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) write(r0, &(0x7f0000000040)="f1fa259221f2", 0x6) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x0, 0x0, 0x2, 0x0, 0x3, 0x3f, 0x81, 0xeb, 0x40, 0x2c9, 0x7, 0x4, 0x38, 0x0, 0x2, 0x0, 0x8}, [{0x0, 0x7, 0x2, 0xffffffff, 0x1a7, 0x1, 0x100000000, 0x1ff}], "598dc65993c6f61dcfd24cfba1b1d0319a21ba2db0cd49e2fb4656e615a8940bbf18efedcc0813bf24d3373d9a396a9fb2ce9752c9f89c725f5042dfcfc8dc4f3a9e7b5986ca493828f91466f7c3e940f51b382cda401b92b6e6", [[], [], [], []]}, 0x4d2) 15:49:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900400000ff7f000000002a031b030006000000000002000000e0000054d81458186fe8b90002000100000002000000000000000000030005000000000002000000e00000010000000000000000"], 0x60}, 0x1}, 0x0) 15:49:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000005efff)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f6bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x62) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 15:49:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mknod(&(0x7f0000000200)='./file0/file1\x00', 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 15:49:13 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f000000a240)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}], 0x1, 0x0) [ 869.663214] keychord: Insufficient bytes present for keycount 0 15:49:13 executing program 5: exit(0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001004800"], 0x8) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'rdma', 0x20}]}, 0x6) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) write(r0, &(0x7f0000000040)="f1fa259221f2", 0x6) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x0, 0x0, 0x2, 0x0, 0x3, 0x3f, 0x81, 0xeb, 0x40, 0x2c9, 0x7, 0x4, 0x38, 0x0, 0x2, 0x0, 0x8}, [{0x0, 0x7, 0x2, 0xffffffff, 0x1a7, 0x1, 0x100000000, 0x1ff}], "598dc65993c6f61dcfd24cfba1b1d0319a21ba2db0cd49e2fb4656e615a8940bbf18efedcc0813bf24d3373d9a396a9fb2ce9752c9f89c725f5042dfcfc8dc4f3a9e7b5986ca493828f91466f7c3e940f51b382cda401b92b6e6", [[], [], [], []]}, 0x4d2) 15:49:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mknod(&(0x7f0000000200)='./file0/file1\x00', 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 15:49:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000005efff)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f6bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x62) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 15:49:13 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=@bridge_setlink={0x28, 0x13, 0x9, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x7}]}]}, 0x28}, 0x1}, 0x0) 15:49:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa}, 0x1c) connect(r0, &(0x7f0000000140)=@nl=@unspec, 0x80) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x1c) 15:49:13 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000005efff)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f6bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x62) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 15:49:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900400000ff7f000000002a031b030006000000000002000000e0000054d81458186fe8b90002000100000002000000000000000000030005000000000002000000e00000010000000000000000"], 0x60}, 0x1}, 0x0) 15:49:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa}, 0x1c) connect(r0, &(0x7f0000000140)=@nl=@unspec, 0x80) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x1c) 15:49:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000005efff)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f6bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x62) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 15:49:13 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000005efff)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f6bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x62) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 15:49:13 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000aa8000)="070a0722084fff00b1", 0x9) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)=""/64, &(0x7f0000000100)=0x40) [ 870.575826] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 870.653275] keychord: Insufficient bytes present for keycount 0 [ 870.653321] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 870.666757] keychord: Insufficient bytes present for keycount 0 [ 870.672899] keychord: unsupported version 17791 [ 870.713269] keychord: Insufficient bytes present for keycount 0 [ 870.719445] keychord: unsupported version 17791 [ 870.724253] keychord: Insufficient bytes present for keycount 0 15:49:14 executing program 4: exit(0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001004800"], 0x8) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'rdma', 0x20}]}, 0x6) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) write(r0, &(0x7f0000000040)="f1fa259221f2", 0x6) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x0, 0x0, 0x2, 0x0, 0x3, 0x3f, 0x81, 0xeb, 0x40, 0x2c9, 0x7, 0x4, 0x38, 0x0, 0x2, 0x0, 0x8}, [{0x0, 0x7, 0x2, 0xffffffff, 0x1a7, 0x1, 0x100000000, 0x1ff}], "598dc65993c6f61dcfd24cfba1b1d0319a21ba2db0cd49e2fb4656e615a8940bbf18efedcc0813bf24d3373d9a396a9fb2ce9752c9f89c725f5042dfcfc8dc4f3a9e7b5986ca493828f91466f7c3e940f51b382cda401b92b6e6", [[], [], [], []]}, 0x4d2) 15:49:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900400000ff7f000000002a031b030006000000000002000000e0000054d81458186fe8b90002000100000002000000000000000000030005000000000002000000e00000010000000000000000"], 0x60}, 0x1}, 0x0) 15:49:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda={0x66646185}, @fd={0x66642a85}, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000300)={r2}) 15:49:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa}, 0x1c) connect(r0, &(0x7f0000000140)=@nl=@unspec, 0x80) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x1c) 15:49:14 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000040)=""/137, 0x89, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000000)="96", 0x1, 0x0, &(0x7f0000001000)={0xa, 0x4e23, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 15:49:14 executing program 5: exit(0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001004800"], 0x8) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'rdma', 0x20}]}, 0x6) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) write(r0, &(0x7f0000000040)="f1fa259221f2", 0x6) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x0, 0x0, 0x2, 0x0, 0x3, 0x3f, 0x81, 0xeb, 0x40, 0x2c9, 0x7, 0x4, 0x38, 0x0, 0x2, 0x0, 0x8}, [{0x0, 0x7, 0x2, 0xffffffff, 0x1a7, 0x1, 0x100000000, 0x1ff}], "598dc65993c6f61dcfd24cfba1b1d0319a21ba2db0cd49e2fb4656e615a8940bbf18efedcc0813bf24d3373d9a396a9fb2ce9752c9f89c725f5042dfcfc8dc4f3a9e7b5986ca493828f91466f7c3e940f51b382cda401b92b6e6", [[], [], [], []]}, 0x4d2) 15:49:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000005efff)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f6bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x62) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 15:49:14 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000005efff)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f6bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x62) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 15:49:14 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) 15:49:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900400000ff7f000000002a031b030006000000000002000000e0000054d81458186fe8b90002000100000002000000000000000000030005000000000002000000e00000010000000000000000"], 0x60}, 0x1}, 0x0) [ 870.826261] binder: 9930:9938 ERROR: BC_REGISTER_LOOPER called without request [ 870.860481] binder_alloc: binder_alloc_mmap_handler: 9930 20001000-20004000 already mapped failed -16 15:49:14 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0xa0802) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000840)=""/52, 0x34}], 0x1) 15:49:14 executing program 7: unshare(0x24020400) socket$inet6(0xa, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) 15:49:14 executing program 2: futex(&(0x7f000012cfff), 0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000f42000), 0x0) [ 870.887438] binder: BINDER_SET_CONTEXT_MGR already set [ 870.893000] binder: 9930:9938 ioctl 40046207 0 returned -16 15:49:14 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 870.949044] binder: 9930:9945 ERROR: BC_REGISTER_LOOPER called without request [ 870.957354] binder_alloc: 9930: binder_alloc_buf, no vma [ 870.977281] binder: 9930:9938 transaction failed 29189/-3, size 0-0 line 3142 15:49:14 executing program 0: r0 = socket(0x10, 0x803, 0xa) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f0000000000000000") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) [ 870.992326] binder: 9930:9945 got reply transaction with no transaction stack 15:49:14 executing program 7: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000002200)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100), 0x1fa, &(0x7f0000000200)}, 0x0) [ 871.026704] binder: 9930:9945 transaction failed 29201/-71, size 80-8 line 2927 [ 871.075697] binder: undelivered TRANSACTION_ERROR: 29201 [ 871.089533] binder: undelivered TRANSACTION_COMPLETE [ 871.105547] binder: undelivered transaction 393, process died. [ 871.128141] binder: undelivered TRANSACTION_COMPLETE [ 871.148249] binder: undelivered TRANSACTION_ERROR: 29189 [ 871.596940] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 871.683347] keychord: Insufficient bytes present for keycount 0 [ 871.684084] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 871.697001] keychord: unsupported version 17791 [ 871.701727] keychord: Insufficient bytes present for keycount 0 15:49:15 executing program 4: exit(0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001004800"], 0x8) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'rdma', 0x20}]}, 0x6) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) write(r0, &(0x7f0000000040)="f1fa259221f2", 0x6) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x0, 0x0, 0x2, 0x0, 0x3, 0x3f, 0x81, 0xeb, 0x40, 0x2c9, 0x7, 0x4, 0x38, 0x0, 0x2, 0x0, 0x8}, [{0x0, 0x7, 0x2, 0xffffffff, 0x1a7, 0x1, 0x100000000, 0x1ff}], "598dc65993c6f61dcfd24cfba1b1d0319a21ba2db0cd49e2fb4656e615a8940bbf18efedcc0813bf24d3373d9a396a9fb2ce9752c9f89c725f5042dfcfc8dc4f3a9e7b5986ca493828f91466f7c3e940f51b382cda401b92b6e6", [[], [], [], []]}, 0x4d2) 15:49:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x100000) 15:49:15 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xffffffffffffff2e) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1d2, @time={0x77359400}}) 15:49:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda={0x66646185}, @fd={0x66642a85}, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000300)={r2}) 15:49:15 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda={0x66646185}, @fd={0x66642a85}, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000300)={r2}) [ 871.763268] keychord: Insufficient bytes present for keycount 0 [ 871.769428] keychord: unsupported version 17791 [ 871.774321] keychord: Insufficient bytes present for keycount 0 15:49:15 executing program 5: exit(0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001004800"], 0x8) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'rdma', 0x20}]}, 0x6) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) write(r0, &(0x7f0000000040)="f1fa259221f2", 0x6) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x0, 0x0, 0x2, 0x0, 0x3, 0x3f, 0x81, 0xeb, 0x40, 0x2c9, 0x7, 0x4, 0x38, 0x0, 0x2, 0x0, 0x8}, [{0x0, 0x7, 0x2, 0xffffffff, 0x1a7, 0x1, 0x100000000, 0x1ff}], "598dc65993c6f61dcfd24cfba1b1d0319a21ba2db0cd49e2fb4656e615a8940bbf18efedcc0813bf24d3373d9a396a9fb2ce9752c9f89c725f5042dfcfc8dc4f3a9e7b5986ca493828f91466f7c3e940f51b382cda401b92b6e6", [[], [], [], []]}, 0x4d2) 15:49:15 executing program 0: r0 = socket(0x10, 0x803, 0xa) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f0000000000000000") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 15:49:15 executing program 6: r0 = socket(0x10, 0x803, 0xa) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f0000000000000000") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 15:49:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda={0x66646185}, @fd={0x66642a85}, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000300)={r2}) [ 871.842559] binder: 9997:10001 ERROR: BC_REGISTER_LOOPER called without request [ 871.854217] binder: BINDER_SET_CONTEXT_MGR already set [ 871.866295] binder: 9998:10002 ioctl 40046207 0 returned -16 15:49:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda={0x66646185}, @fd={0x66642a85}, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000300)={r2}) [ 871.899729] binder: unexpected work type, 4, not freed [ 871.905888] binder: 9998:10002 transaction failed 29189/-22, size 0-0 line 3019 [ 871.921153] binder: undelivered TRANSACTION_COMPLETE [ 871.946129] binder: 9998:10002 ERROR: BC_REGISTER_LOOPER called without request 15:49:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda={0x66646185}, @fd={0x66642a85}, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000300)={r2}) [ 871.971526] binder: 10006:10013 ERROR: BC_REGISTER_LOOPER called without request [ 871.981570] binder: undelivered TRANSACTION_COMPLETE [ 871.990400] binder: BINDER_SET_CONTEXT_MGR already set [ 872.005568] binder: 10014:10016 ioctl 40046207 0 returned -16 [ 872.012877] binder: undelivered transaction 400, process died. [ 872.042971] binder_alloc: 10006: binder_alloc_buf, no vma [ 872.049037] binder: unexpected work type, 4, not freed [ 872.063474] binder: 10014:10016 transaction failed 29189/-3, size 0-0 line 3142 [ 872.071235] binder: undelivered TRANSACTION_COMPLETE [ 872.085083] binder: undelivered TRANSACTION_COMPLETE [ 872.101161] binder: 10014:10016 ERROR: BC_REGISTER_LOOPER called without request [ 872.109466] binder: 10018:10019 ERROR: BC_REGISTER_LOOPER called without request [ 872.112386] binder: undelivered transaction 406, process died. 15:49:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda={0x66646185}, @fd={0x66642a85}, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000300)={r2}) 15:49:15 executing program 0: r0 = socket(0x10, 0x803, 0xa) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f0000000000000000") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 15:49:15 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xffffffffffffff2e) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1d2, @time={0x77359400}}) 15:49:15 executing program 6: r0 = socket(0x10, 0x803, 0xa) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f0000000000000000") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) [ 872.160107] binder: unexpected work type, 4, not freed [ 872.171918] binder: undelivered TRANSACTION_COMPLETE [ 872.182814] binder: undelivered TRANSACTION_COMPLETE [ 872.198698] binder: undelivered transaction 412, process died. [ 872.247223] binder: 10023:10026 ERROR: BC_REGISTER_LOOPER called without request 15:49:15 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="020b04010200000000000000053d0000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) [ 872.309558] binder: unexpected work type, 4, not freed [ 872.338127] binder: undelivered TRANSACTION_COMPLETE [ 872.356921] binder: undelivered TRANSACTION_COMPLETE [ 872.375633] binder: undelivered transaction 417, process died. [ 872.628540] binder: 9998:10041 got reply transaction with no transaction stack [ 872.636122] binder: 9998:10041 transaction failed 29201/-71, size 80-8 line 2927 [ 872.648588] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 872.743201] keychord: Insufficient bytes present for keycount 0 [ 872.749462] keychord: unsupported version 17791 [ 872.754400] keychord: Insufficient bytes present for keycount 0 [ 872.762059] binder: 10014:10046 got reply transaction with no transaction stack [ 872.767502] binder: undelivered TRANSACTION_ERROR: 29201 [ 872.767668] binder: undelivered TRANSACTION_ERROR: 29189 [ 872.781031] binder: 10014:10046 transaction failed 29201/-71, size 80-8 line 2927 [ 872.789030] keychord: using input dev AT Translated Set 2 keyboard for fevent 15:49:16 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda={0x66646185}, @fd={0x66642a85}, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000300)={r2}) 15:49:16 executing program 0: r0 = socket(0x10, 0x803, 0xa) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f0000000000000000") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 15:49:16 executing program 6: r0 = socket(0x10, 0x803, 0xa) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f0000000000000000") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 15:49:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000400)}}, {{&(0x7f0000000000)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)}}], 0x2, 0x0) 15:49:16 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xffffffffffffff2e) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1d2, @time={0x77359400}}) [ 872.868917] keychord: Insufficient bytes present for keycount 0 [ 872.878280] keychord: Insufficient bytes present for keycount 0 [ 872.888338] keychord: unsupported version 17791 [ 872.896151] binder: 10049:10054 ERROR: BC_REGISTER_LOOPER called without request [ 872.912572] binder: undelivered TRANSACTION_ERROR: 29201 [ 872.926705] binder: undelivered TRANSACTION_ERROR: 29189 15:49:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda={0x66646185}, @fd={0x66642a85}, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000300)={r2}) 15:49:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000040)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="1f0000000203193b000007000200068100023b050900050000004000020058", 0x1f}], 0x1) 15:49:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000400)}}, {{&(0x7f0000000000)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)}}], 0x2, 0x0) 15:49:16 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda={0x66646185}, @fd={0x66642a85}, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000300)={r2}) 15:49:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) [ 872.984033] binder: unexpected work type, 4, not freed [ 872.990906] binder: undelivered TRANSACTION_COMPLETE [ 873.053051] binder: undelivered TRANSACTION_COMPLETE 15:49:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000400)}}, {{&(0x7f0000000000)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)}}], 0x2, 0x0) 15:49:16 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000040)=0x20) [ 873.080529] binder: undelivered transaction 424, process died. [ 873.095118] binder: 10064:10072 ERROR: BC_REGISTER_LOOPER called without request [ 873.097451] binder: BINDER_SET_CONTEXT_MGR already set [ 873.097460] binder: 10073:10075 ioctl 40046207 0 returned -16 15:49:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000400)}}, {{&(0x7f0000000000)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)}}], 0x2, 0x0) 15:49:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040), &(0x7f0000000000)=0x4) 15:49:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) [ 873.251096] binder: unexpected work type, 4, not freed [ 873.262305] binder: undelivered TRANSACTION_COMPLETE [ 873.457917] binder: 10073:10075 ERROR: BC_REGISTER_LOOPER called without request [ 873.489567] binder: send failed reply for transaction 429 to 10073:10075 15:49:17 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000, 0x100000000000000}) [ 873.512578] binder: undelivered TRANSACTION_COMPLETE [ 873.539428] binder: undelivered transaction 430, process died. 15:49:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}, 0x0, 0x2, [{{0x2, 0x0, @broadcast=0xffffffff}}, {{0xa, 0x0, @broadcast=0xffffffff}}]}, 0x190) 15:49:17 executing program 1: mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) 15:49:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8901, &(0x7f0000000000)) 15:49:17 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001bd000/0x4000)=nil, 0x4000}}) 15:49:17 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x92, r0, 0x0) clone(0x0, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000e80)) 15:49:17 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xffffffffffffff2e) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1d2, @time={0x77359400}}) 15:49:17 executing program 6: madvise(&(0x7f0000006000/0x400000)=nil, 0x400000, 0xf) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xf) 15:49:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8bf6, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_flags}) [ 873.897825] binder: 10073:10121 got reply transaction with no transaction stack [ 873.944610] binder: 10073:10121 transaction failed 29201/-71, size 80-8 line 2927 15:49:17 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001bd000/0x4000)=nil, 0x4000}}) 15:49:17 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:49:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x5}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x8) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x4000020000004, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) 15:49:17 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001800)="2f0000001c000567ffffff000d0000000200000001000000ec0002c91300010023000000000000005867000000050b", 0x2f}], 0x1}, 0x0) 15:49:17 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') 15:49:17 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) write(r0, &(0x7f00000000c0)='=', 0x1) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r0, 0x0) dup2(r1, r0) [ 874.010511] binder: undelivered TRANSACTION_ERROR: 29201 [ 874.041417] binder: undelivered TRANSACTION_COMPLETE 15:49:17 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001bd000/0x4000)=nil, 0x4000}}) 15:49:17 executing program 6: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$reject(0x13, r0, 0x100, 0x5360, r1) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x0, 0x0) recvmsg(r2, &(0x7f0000000440)={&(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/172, 0xac}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000380)=""/157, 0x9d}], 0x3, 0x0, 0x0, 0x3f}, 0x2000) keyctl$unlink(0x9, r1, 0xfffffffffffffffd) [ 874.059346] binder: undelivered TRANSACTION_ERROR: 29189 15:49:17 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_team\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe}}) 15:49:18 executing program 1: mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) 15:49:18 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f0000000340), &(0x7f0000000380)) 15:49:18 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001bd000/0x4000)=nil, 0x4000}}) 15:49:18 executing program 6: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$reject(0x13, r0, 0x100, 0x5360, r1) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x0, 0x0) recvmsg(r2, &(0x7f0000000440)={&(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/172, 0xac}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000380)=""/157, 0x9d}], 0x3, 0x0, 0x0, 0x3f}, 0x2000) keyctl$unlink(0x9, r1, 0xfffffffffffffffd) 15:49:18 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000013000/0x3000)=nil, 0x3000}) 15:49:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00') lseek(r0, 0x0, 0x4) 15:49:18 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:49:18 executing program 2: mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) 15:49:18 executing program 5: mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) 15:49:18 executing program 3: personality(0x1bb2baf3005ac137) mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r0 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r0, 0x0) 15:49:18 executing program 6: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$reject(0x13, r0, 0x100, 0x5360, r1) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x0, 0x0) recvmsg(r2, &(0x7f0000000440)={&(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/172, 0xac}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000380)=""/157, 0x9d}], 0x3, 0x0, 0x0, 0x3f}, 0x2000) keyctl$unlink(0x9, r1, 0xfffffffffffffffd) 15:49:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x4b) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 15:49:18 executing program 7: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000a1aff7)={@loopback={0x0, 0x1}}, 0x14) 15:49:18 executing program 3: personality(0x1bb2baf3005ac137) mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r0 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r0, 0x0) 15:49:18 executing program 6: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$reject(0x13, r0, 0x100, 0x5360, r1) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x0, 0x0) recvmsg(r2, &(0x7f0000000440)={&(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/172, 0xac}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000380)=""/157, 0x9d}], 0x3, 0x0, 0x0, 0x3f}, 0x2000) keyctl$unlink(0x9, r1, 0xfffffffffffffffd) [ 874.873986] sg_write: data in/out 8519644/9 bytes for SCSI command 0x0-- guessing data in; [ 874.873986] program syz-executor4 not setting count and/or reply_len properly 15:49:18 executing program 6: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xc0040, 0x0) [ 875.026787] sg_write: data in/out 8519644/9 bytes for SCSI command 0x0-- guessing data in; [ 875.026787] program syz-executor4 not setting count and/or reply_len properly 15:49:19 executing program 1: mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) 15:49:19 executing program 7: rename(&(0x7f00000000c0)='\x00', &(0x7f0000000100)='./file0\x00') 15:49:19 executing program 3: personality(0x1bb2baf3005ac137) mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r0 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r0, 0x0) 15:49:19 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:49:19 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x80140912, &(0x7f0000000000)) 15:49:19 executing program 4: open(&(0x7f0000000180)='./file0\x00', 0x80000000004540, 0x18949a110a2dd6f4) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), &(0x7f00000002c0)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='@\x00']) 15:49:19 executing program 7: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0xfffffff800000200, 0x8022) r2 = memfd_create(&(0x7f0000000140)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000005500)=[{&(0x7f0000004500)=""/4096, 0x1000}], 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000180), 0x110000) 15:49:19 executing program 2: mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) 15:49:19 executing program 3: personality(0x1bb2baf3005ac137) mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r0 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r0, 0x0) 15:49:19 executing program 5: mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) 15:49:19 executing program 4: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)=@hci={0x1f}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001740)="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", 0x5dd}], 0x1, &(0x7f00000012c0)}}], 0x2, 0x0) 15:49:19 executing program 7: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0xfffffff800000200, 0x8022) r2 = memfd_create(&(0x7f0000000140)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000005500)=[{&(0x7f0000004500)=""/4096, 0x1000}], 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000180), 0x110000) 15:49:19 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0xfffffff800000200, 0x8022) r2 = memfd_create(&(0x7f0000000140)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000005500)=[{&(0x7f0000004500)=""/4096, 0x1000}], 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000180), 0x110000) 15:49:19 executing program 6: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xc0040, 0x0) 15:49:19 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:49:19 executing program 4: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)=@hci={0x1f}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001740)="c7ae8dab8cd39597d975fc02db9ee9c5df0425e38fe287a89f5603681a3abafbf4fb19548b0eda38f3bf14012c0a44884f259c0919ea41f13422b9b605aaae23d33246b72c56601b48274ef255cddc1b90b866bffa8f06777330af959149987684d61476c8de3aea52e3f636d4e766e8f6ba9f3570a373528780b3ee40275ff00b9e95ac9b90bffba612b7407bed9820fe3275142c687959c4d9a4f3e3a4b45ccf2055504689198a33ecf3f082986dbfcae3cb334bf4e7a2156a86fe15c6cf6ee00a500f2cf2f138c37051bb8b75460ef01f12bcab28b4453854e9fcb1b315d505578c1da21d0c02c9ba11df5c8f48b1a1fde7dcec326227aae5cd62f9f54afc8a911cbe2af955e7d42ca61ea68ecbea94105c9e1c61a739c117a3c2a9780819f2a0cee5bb3cf4984de8438b2f4e8b5b8fdbc4b18503eafe2540e97c7daf40f3c4ed357b8644472940435f934ec900a41daa8d407702745f5f07016164744fb86b41247cb85e6ebabe6893dda942405f621d321a9501da65aa6bd29ace4b731ed1a7059443ad4b8b979f11e07e8bf58e37e0635d141643657212dafb0e7b1f93dd8ae2d1309dd8c18c088b821e54550c0f60fae089e43d2f67ee3838cf57600e16f36e1541528b1f3c6fd52fc922337ae137cd319680e5475d2247f08716446b102f21086333ba8358ed4fdd540c1b584a41bc4b8a544ac3c84546f4bd4e70c5c06759841a3081de7fd90a819b538231db451b09c7f079dac33cf4f6d61119ef2c882d3ad793a1c3ad7ca225df2c294038eabb0ad716aa4dbd0acb287db5b817b0d311478932f27f2586a3ba555d40aea0189010bf35a05fe60d9086526ae2c753aa5619140d9a4ed45c09dcff4e392ebc9025b45f3f070e10c1d0ae18643d355b7b72be297039ce24be6cfea512d4c2446eb11f7e859f7fae5055168b2daec9c07d9890b375318c8dc10530c8eb97b04c434adc6037154bf23c9d1dccb7cbdae224d7c3bfc3ce90135d250d20354056c8b528deb8b5a5129ff05e165628123e1976e369c2557c8b591462c2dd1f37439d85444d71dd8c7e5dfde032810968eb79a09102d5a4df7db0bb36c98c2b0e3aa98b9ba47801d2964806d820486ac2623c2b5447fbb8283c4a15f8806b1c1f090e3f44d8628cd9da18977953d9f4022f98c5085d27e4197408cfe927b8c6665a1498affe7aec599d64f3e99caf9f5aca40bdd7ba09141c758c8c2c36141d5576d7af49737bbb475b65781eb25508672ccf8a75e0f053d854f6544d00fca3bfcd101f2df8c1136e5e0f0d3aeaaee50698b07ae93763c6afdfc30de4a4e08bd2cc744ebe109328d490938e2269a418a302f270c0023bcff2d3b48619475f0c162df8153f6dc4992979fbe5f8f358935411fece496c8c03403cb2b1d0dda14cb64a1f7cd4f87f06baef9e3310713efdb314cd805675eb4a9f1987e880ff87d715784c74811be713d3476ce8f30520ec3a252e17a0dcf604200f061e35a1427be5a39a0a5ceac8e1ff865e92057f96af882f393048a80c1c0f32c76874cd5ff44d4c70541193b271a8e2ba4ec4a776288c27c16d1cc92efbcad8776f7584f032d135105bc79eaa83efdfb1808202472e0d82ff05ea21061c7ff5d8079dfddf7f48a0178a954df79aa1965ec17dcab5b5ba70a12167b72ab39294e5b2c89048ee94a7b1408aa96c042595ed5393360ec2532577ca67d21d2d76a8ed9d6b21b7de47609317251f4242dd0395853432ab9d4272a96bd368ddfd674d3867e49e062d55997fafedc8f22c83ef8d08c75c0a501577c8b70d886db09248b0a363d95cd5aeff57185cb7ad0095915525064cb653b2f89d233740deb5a3e7a491f5133b604302da56f659929b17bfff64348cca55b9fe1a7e731f40446c589bc154e39fcdf225b57d7eba85999b6c2fa89bf6d6c8dfc7ec0157e63792ef589df01750d3846336b35c1295cb019213df4f8fbdefb2940e6064a3c257d3bf3af4aa00ee1f66371cc143de4caddff7978c515b77f2e1aee0651fe8bc31100fa96548e935911c0fcf085020e1a38451f787cf4f7830a2b8d46589fa94be8879b222198aa85464392bd5c13de28e6588dc210b50c029", 0x5dd}], 0x1, &(0x7f00000012c0)}}], 0x2, 0x0) 15:49:20 executing program 1: mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) 15:49:20 executing program 7: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0xfffffff800000200, 0x8022) r2 = memfd_create(&(0x7f0000000140)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000005500)=[{&(0x7f0000004500)=""/4096, 0x1000}], 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000180), 0x110000) 15:49:20 executing program 4: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)=@hci={0x1f}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001740)="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", 0x5dd}], 0x1, &(0x7f00000012c0)}}], 0x2, 0x0) 15:49:20 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0xfffffff800000200, 0x8022) r2 = memfd_create(&(0x7f0000000140)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000005500)=[{&(0x7f0000004500)=""/4096, 0x1000}], 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000180), 0x110000) 15:49:20 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/snapshot\x00', 0x201, 0x0) r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xec1) 15:49:20 executing program 4: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)=@hci={0x1f}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001740)="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", 0x5dd}], 0x1, &(0x7f00000012c0)}}], 0x2, 0x0) 15:49:20 executing program 7: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0xfffffff800000200, 0x8022) r2 = memfd_create(&(0x7f0000000140)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000005500)=[{&(0x7f0000004500)=""/4096, 0x1000}], 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000180), 0x110000) 15:49:20 executing program 2: mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) 15:49:20 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/snapshot\x00', 0x201, 0x0) r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xec1) 15:49:20 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0xfffffff800000200, 0x8022) r2 = memfd_create(&(0x7f0000000140)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000005500)=[{&(0x7f0000004500)=""/4096, 0x1000}], 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000180), 0x110000) 15:49:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000080), 0x4) 15:49:20 executing program 5: mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x19}) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0xf45) creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) 15:49:20 executing program 6: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xc0040, 0x0) 15:49:20 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000c700)=[{{0x0, 0x0, &(0x7f0000003440), 0x0, &(0x7f0000003500)}}, {{&(0x7f0000003580)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001fc0)="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", 0xae9}], 0x1, &(0x7f0000000c00)}}], 0x2, 0x0) 15:49:20 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendfile(r0, r1, &(0x7f00000000c0)=0x4, 0x80000002) 15:49:20 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x600, "6c626c6372048262b51b00"}, 0x2c) [ 877.248827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21024 sclass=netlink_route_socket [ 877.282339] IPVS: Scheduler module ip_vs_lblcrb not found 15:49:21 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendfile(r0, r1, &(0x7f00000000c0)=0x4, 0x80000002) 15:49:21 executing program 7: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) 15:49:21 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl(r0, 0x3359, &(0x7f0000000100)) 15:49:21 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/snapshot\x00', 0x201, 0x0) r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xec1) 15:49:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendfile(r0, r1, &(0x7f00000000c0)=0x4, 0x80000002) 15:49:21 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl(r0, 0x3359, &(0x7f0000000100)) 15:49:21 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/snapshot\x00', 0x201, 0x0) r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xec1) [ 877.738765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21024 sclass=netlink_route_socket [ 877.855826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21024 sclass=netlink_route_socket 15:49:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendfile(r0, r1, &(0x7f00000000c0)=0x4, 0x80000002) 15:49:21 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendfile(r0, r1, &(0x7f00000000c0)=0x4, 0x80000002) 15:49:21 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl(r0, 0x3359, &(0x7f0000000100)) 15:49:21 executing program 6: sched_setattr(0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xc0040, 0x0) 15:49:21 executing program 0: r0 = inotify_init1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r2, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:49:21 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fafb7a41cb22da280000206000000a843096c37234a39000900310008004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de440700d42c44e82afc5349fddd4ab94e7162", 0x55}], 0x1, &(0x7f0000000100)}, 0x0) 15:49:21 executing program 2: r0 = socket$inet(0x2, 0x6, 0x3) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x8}]}, 0x8) r1 = gettid() getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3f, &(0x7f0000000340), &(0x7f0000000380)=0x4) unshare(0x40000000) r2 = syz_open_procfs(r1, &(0x7f0000000080)="6e65742f69665f696e65743600689d001e363b6c264fa887a26fda3eca58373161f13a12a92be5a993b4720d86396a9b1cc039d178e14492de97786eb30b86bb0ae2163b7ed177ff87e312d09bd390ce2ce4d13622dbc9d6b533c3f99225e401466f9ef8a9ea53c0f11c5a10cf9677596ce7721105a3ac3b287b2ca64a5ad4aad7c941387ab5acedea8f64c584562f2a3eb7aac4df59716b44156fd857da4ad2") sendfile(r2, r2, &(0x7f0000000140), 0x2) r3 = socket$inet6(0xa, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f00000003c0)={0x0, 0xfffffffffffffcc4, 0xfffffffffffffffe}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x105400, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14010000", @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x4000800}, 0x801) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r4, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001}, 0xc) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000001000a00000000"], 0x1) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000440)=0x0) r8 = getpgrp(0x0) rt_tgsigqueueinfo(r7, r8, 0x38, &(0x7f0000000480)={0x2a, 0x7, 0x0, 0x8}) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000000), 0x4) 15:49:21 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl(r0, 0x3359, &(0x7f0000000100)) 15:49:21 executing program 5: ioprio_set$pid(0x2, 0x0, 0x0) clone(0x80280000, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000200)) [ 878.180742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21024 sclass=netlink_route_socket [ 878.186615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21024 sclass=netlink_route_socket 15:49:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendfile(r0, r1, &(0x7f00000000c0)=0x4, 0x80000002) [ 878.232660] binder_alloc: binder_alloc_mmap_handler: 10389 20001000-20004000 already mapped failed -16 [ 878.318692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21024 sclass=netlink_route_socket [ 878.345862] IPVS: Creating netns size=2552 id=48 [ 878.648352] IPVS: Creating netns size=2552 id=49 15:49:22 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) ftruncate(r1, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) pipe2(&(0x7f0000989000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) set_thread_area(&(0x7f0000000080)={0x100, 0xffffffff, 0x100000000, 0x80, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x81) sendfile(r5, r5, &(0x7f0000000280), 0x2) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) 15:49:22 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendfile(r0, r1, &(0x7f00000000c0)=0x4, 0x80000002) 15:49:22 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:49:22 executing program 5: ioprio_set$pid(0x2, 0x0, 0x0) clone(0x80280000, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000200)) 15:49:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:49:22 executing program 1: syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 15:49:22 executing program 2: r0 = socket$inet(0x2, 0x6, 0x3) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x8}]}, 0x8) r1 = gettid() getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3f, &(0x7f0000000340), &(0x7f0000000380)=0x4) unshare(0x40000000) r2 = syz_open_procfs(r1, &(0x7f0000000080)="6e65742f69665f696e65743600689d001e363b6c264fa887a26fda3eca58373161f13a12a92be5a993b4720d86396a9b1cc039d178e14492de97786eb30b86bb0ae2163b7ed177ff87e312d09bd390ce2ce4d13622dbc9d6b533c3f99225e401466f9ef8a9ea53c0f11c5a10cf9677596ce7721105a3ac3b287b2ca64a5ad4aad7c941387ab5acedea8f64c584562f2a3eb7aac4df59716b44156fd857da4ad2") sendfile(r2, r2, &(0x7f0000000140), 0x2) r3 = socket$inet6(0xa, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f00000003c0)={0x0, 0xfffffffffffffcc4, 0xfffffffffffffffe}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x105400, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14010000", @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x4000800}, 0x801) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r4, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001}, 0xc) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000001000a00000000"], 0x1) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000440)=0x0) r8 = getpgrp(0x0) rt_tgsigqueueinfo(r7, r8, 0x38, &(0x7f0000000480)={0x2a, 0x7, 0x0, 0x8}) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000000), 0x4) 15:49:22 executing program 3: r0 = gettid() r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) pread64(r1, &(0x7f0000000440)=""/37, 0x25, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) close(r1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) tkill(r0, 0x1001000000000016) [ 878.854463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21024 sclass=netlink_route_socket 15:49:22 executing program 1: add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_reqkey_keyring(0xe, 0x2) 15:49:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000240)=0x9, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000340)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000540)}, 0x0) 15:49:22 executing program 5: ioprio_set$pid(0x2, 0x0, 0x0) clone(0x80280000, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000200)) 15:49:22 executing program 4: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x0, 0x0, 0x0, 0x5}, 0x1c) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x2000000000000021, 0x0) 15:49:22 executing program 6: r0 = inotify_init() fcntl$setstatus(r0, 0x4, 0x800) creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x80000002) creat(&(0x7f0000000040)='./file0\x00', 0x0) read(r0, &(0x7f0000000000)=""/177, 0xb1) 15:49:22 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:49:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000000), 0x1) 15:49:22 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000900ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) r0 = creat(&(0x7f0000c5eff4)='./file0/bus\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) mq_getsetattr(r0, &(0x7f0000000040), 0x0) 15:49:22 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) ftruncate(r1, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) pipe2(&(0x7f0000989000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) set_thread_area(&(0x7f0000000080)={0x100, 0xffffffff, 0x100000000, 0x80, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x81) sendfile(r5, r5, &(0x7f0000000280), 0x2) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) 15:49:22 executing program 6: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000200)=""/202) 15:49:22 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) ftruncate(r1, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) pipe2(&(0x7f0000989000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) set_thread_area(&(0x7f0000000080)={0x100, 0xffffffff, 0x100000000, 0x80, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x81) sendfile(r5, r5, &(0x7f0000000280), 0x2) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) 15:49:22 executing program 5: ioprio_set$pid(0x2, 0x0, 0x0) clone(0x80280000, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000200)) 15:49:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) ftruncate(r1, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) pipe2(&(0x7f0000989000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) set_thread_area(&(0x7f0000000080)={0x100, 0xffffffff, 0x100000000, 0x80, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x81) sendfile(r5, r5, &(0x7f0000000280), 0x2) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) 15:49:23 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) ftruncate(r1, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) pipe2(&(0x7f0000989000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) set_thread_area(&(0x7f0000000080)={0x100, 0xffffffff, 0x100000000, 0x80, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x81) sendfile(r5, r5, &(0x7f0000000280), 0x2) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) [ 880.619936] pktgen: kernel_thread() failed for cpu 0 [ 880.625175] pktgen: Cannot create thread for cpu 0 (-4) [ 880.630590] pktgen: kernel_thread() failed for cpu 1 [ 880.636268] pktgen: Cannot create thread for cpu 1 (-4) [ 880.641628] pktgen: Initialization failed for all threads 15:49:24 executing program 2: r0 = socket$inet(0x2, 0x6, 0x3) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x8}]}, 0x8) r1 = gettid() getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3f, &(0x7f0000000340), &(0x7f0000000380)=0x4) unshare(0x40000000) r2 = syz_open_procfs(r1, &(0x7f0000000080)="6e65742f69665f696e65743600689d001e363b6c264fa887a26fda3eca58373161f13a12a92be5a993b4720d86396a9b1cc039d178e14492de97786eb30b86bb0ae2163b7ed177ff87e312d09bd390ce2ce4d13622dbc9d6b533c3f99225e401466f9ef8a9ea53c0f11c5a10cf9677596ce7721105a3ac3b287b2ca64a5ad4aad7c941387ab5acedea8f64c584562f2a3eb7aac4df59716b44156fd857da4ad2") sendfile(r2, r2, &(0x7f0000000140), 0x2) r3 = socket$inet6(0xa, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f00000003c0)={0x0, 0xfffffffffffffcc4, 0xfffffffffffffffe}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x105400, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14010000", @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x4000800}, 0x801) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r4, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001}, 0xc) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000001000a00000000"], 0x1) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000440)=0x0) r8 = getpgrp(0x0) rt_tgsigqueueinfo(r7, r8, 0x38, &(0x7f0000000480)={0x2a, 0x7, 0x0, 0x8}) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000000), 0x4) 15:49:24 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) ftruncate(r1, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) pipe2(&(0x7f0000989000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) set_thread_area(&(0x7f0000000080)={0x100, 0xffffffff, 0x100000000, 0x80, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x81) sendfile(r5, r5, &(0x7f0000000280), 0x2) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) 15:49:24 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:49:24 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) ftruncate(r1, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) pipe2(&(0x7f0000989000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) set_thread_area(&(0x7f0000000080)={0x100, 0xffffffff, 0x100000000, 0x80, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x81) sendfile(r5, r5, &(0x7f0000000280), 0x2) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) 15:49:24 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) ftruncate(r1, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) pipe2(&(0x7f0000989000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) set_thread_area(&(0x7f0000000080)={0x100, 0xffffffff, 0x100000000, 0x80, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x81) sendfile(r5, r5, &(0x7f0000000280), 0x2) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) 15:49:24 executing program 3: r0 = gettid() r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) pread64(r1, &(0x7f0000000440)=""/37, 0x25, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) close(r1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) tkill(r0, 0x1001000000000016) 15:49:24 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) ftruncate(r1, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) pipe2(&(0x7f0000989000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) set_thread_area(&(0x7f0000000080)={0x100, 0xffffffff, 0x100000000, 0x80, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x81) sendfile(r5, r5, &(0x7f0000000280), 0x2) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) 15:49:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) ftruncate(r1, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) pipe2(&(0x7f0000989000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) set_thread_area(&(0x7f0000000080)={0x100, 0xffffffff, 0x100000000, 0x80, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x81) sendfile(r5, r5, &(0x7f0000000280), 0x2) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) 15:49:24 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) ftruncate(r1, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) pipe2(&(0x7f0000989000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) set_thread_area(&(0x7f0000000080)={0x100, 0xffffffff, 0x100000000, 0x80, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x81) sendfile(r5, r5, &(0x7f0000000280), 0x2) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) 15:49:24 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) ftruncate(r1, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) pipe2(&(0x7f0000989000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) set_thread_area(&(0x7f0000000080)={0x100, 0xffffffff, 0x100000000, 0x80, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x81) sendfile(r5, r5, &(0x7f0000000280), 0x2) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) 15:49:25 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) ftruncate(r1, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) pipe2(&(0x7f0000989000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) set_thread_area(&(0x7f0000000080)={0x100, 0xffffffff, 0x100000000, 0x80, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x81) sendfile(r5, r5, &(0x7f0000000280), 0x2) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) 15:49:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) ftruncate(r1, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) pipe2(&(0x7f0000989000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) set_thread_area(&(0x7f0000000080)={0x100, 0xffffffff, 0x100000000, 0x80, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x81) sendfile(r5, r5, &(0x7f0000000280), 0x2) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) 15:49:25 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:49:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) ftruncate(r1, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) pipe2(&(0x7f0000989000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) set_thread_area(&(0x7f0000000080)={0x100, 0xffffffff, 0x100000000, 0x80, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x81) sendfile(r5, r5, &(0x7f0000000280), 0x2) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) 15:49:25 executing program 3: r0 = gettid() r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) pread64(r1, &(0x7f0000000440)=""/37, 0x25, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) close(r1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) tkill(r0, 0x1001000000000016) 15:49:25 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000880)=ANY=[@ANYBLOB='#! ./file0 '], 0xb) execveat(r0, &(0x7f0000000340)='\x00', &(0x7f00000001c0), &(0x7f00000002c0), 0x1000) [ 882.677795] pktgen: kernel_thread() failed for cpu 0 [ 882.682940] pktgen: Cannot create thread for cpu 0 (-4) [ 882.688889] pktgen: kernel_thread() failed for cpu 1 [ 882.694202] pktgen: Cannot create thread for cpu 1 (-4) [ 882.699547] pktgen: Initialization failed for all threads 15:49:26 executing program 2: r0 = socket$inet(0x2, 0x6, 0x3) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x8}]}, 0x8) r1 = gettid() getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3f, &(0x7f0000000340), &(0x7f0000000380)=0x4) unshare(0x40000000) r2 = syz_open_procfs(r1, &(0x7f0000000080)="6e65742f69665f696e65743600689d001e363b6c264fa887a26fda3eca58373161f13a12a92be5a993b4720d86396a9b1cc039d178e14492de97786eb30b86bb0ae2163b7ed177ff87e312d09bd390ce2ce4d13622dbc9d6b533c3f99225e401466f9ef8a9ea53c0f11c5a10cf9677596ce7721105a3ac3b287b2ca64a5ad4aad7c941387ab5acedea8f64c584562f2a3eb7aac4df59716b44156fd857da4ad2") sendfile(r2, r2, &(0x7f0000000140), 0x2) r3 = socket$inet6(0xa, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f00000003c0)={0x0, 0xfffffffffffffcc4, 0xfffffffffffffffe}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x105400, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14010000", @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x4000800}, 0x801) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r4, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001}, 0xc) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000001000a00000000"], 0x1) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000440)=0x0) r8 = getpgrp(0x0) rt_tgsigqueueinfo(r7, r8, 0x38, &(0x7f0000000480)={0x2a, 0x7, 0x0, 0x8}) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000000), 0x4) 15:49:26 executing program 4: mount(&(0x7f0000000400)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000003c0)='bdev\x00', 0x0, &(0x7f0000444000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000471000/0x2000)=nil, 0x2000, 0xa) 15:49:26 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f0000000280)={{0x3}, 'port1\x00'}) 15:49:26 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 15:49:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) ftruncate(r1, 0x2) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='./cgroup.cpu\x00', 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) pipe2(&(0x7f0000989000), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) mmap$binder(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) set_thread_area(&(0x7f0000000080)={0x100, 0xffffffff, 0x100000000, 0x80, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000003000/0x1000)=nil, 0x1000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x81) sendfile(r5, r5, &(0x7f0000000280), 0x2) write$evdev(r3, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) 15:49:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xc, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)) 15:49:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), &(0x7f0000001ac0)=0x4) 15:49:26 executing program 3: r0 = gettid() r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) pread64(r1, &(0x7f0000000440)=""/37, 0x25, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000040000)) close(r1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) tkill(r0, 0x1001000000000016) 15:49:26 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./f-le0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:49:26 executing program 6: r0 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f0000000040)=""/4, 0x0) 15:49:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)}, 0x8) r1 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x1, 0x200) r2 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000480)={'broute\x00', 0x0, 0x4, 0x6, [], 0x100001ea, &(0x7f0000000200)=[{}], &(0x7f00000001c0)=""/6}, &(0x7f0000000340)=0xfffffe9c) personality(0x800000000000000e) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000400)) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r2, 0x0) read(r0, &(0x7f0000000100)=""/180, 0xb4) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f0000000080)=0x7, 0x4) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/create\x00', 0x2, 0x0) write$fuse(r1, &(0x7f0000000440)={0x20, 0x0, 0x6, @fuse_ioctl_out={0x9, 0x20, 0xffffffff, 0x6}}, 0x20) 15:49:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000800)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1, &(0x7f0000001980)=""/50, 0x32}}], 0x1, 0x0, 0x0) 15:49:26 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000080)="2400000058001f00ff07f4f9002304000a04f51108000100020100020800038001000000", 0x24) 15:49:26 executing program 7: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) 15:49:26 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3) 15:49:26 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 883.014752] IPVS: Creating netns size=2552 id=50 15:49:26 executing program 5: prctl$intptr(0x1a, 0x1) 15:49:26 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000580)='C', 0x1}], 0x1) 15:49:26 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000300)=""/32, &(0x7f0000000340)=0x20) 15:49:26 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) 15:49:26 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 15:49:26 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="feffff06000000ffc100000056ba579f4100000008"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 15:49:26 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) 15:49:27 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="feffff06000000ffc100000056ba579f4100000008"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 15:49:27 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 15:49:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f00000000c0)={0x20, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, {}, [@generic="93", @nested={0x8, 0x5b, [@typed={0x4}]}]}, 0x20}, 0x1}, 0x0) [ 883.666161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor2'. 15:49:27 executing program 0: futex(&(0x7f0000000140), 0x5, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x7fffffff) 15:49:27 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000580)='C', 0x1}], 0x1) 15:49:27 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "b441d632cdbbcb211363807aec73d3883762a61dc02d349bfa3ac974b987aa7fb97eb324d594fbbb77bab759418aa8d451d921e8f5d2cf2b08292111701192e97cac366dd3eb2e0fb039e58314ef4709c5f3556db6a1ab6b4fb2bdd83cdc26e8395ec4984ec3faf71a611d1569545d654cded93be827a85188b803c19c1b56aab522862a718b81e512b49690994d3425e33bd93f0e744c66a083c1f9f1bd7bb8f9e123c08f3f041ed3fdc058136cf0071a47cc0e38720a12e11e842a7b5b26dff07f578fdb9a7b14662a625c1ee76c41ccb2b1fc6376aa718e1067b9e4af511ef5b360dbfad326108bb033db193dab27974eb8c462739eaee51d87f31c516e7e391073770da3202e02c41a7277c847df24bd5b0a7ab6e252f3c8ebf00688cc55311d887e8bfd95a7f4c6a126af3fe26714ddb869c66d18f870631bbd497e8a06881b754ecdcdd0dcffc51cd52a6b560f8d64b63a1674745edc5f53b18a8ffcc5c2fbc4d2bbcc2faf3c189d9b36c0655d1394f5c127ec86b8a764a87b546c2b6ac37d0a8ec3edd7cda6f930570763dbdc0640d219749bd57c7c89eaadfdae41d654a46b17be069a32a7d94d29b612fbe61b8bd11a2d10ba5d4ac7014fc0465c3f144598bd1f913343e7293711040eee0ae8df1e49f04ed1037d4b742aed0e932116060aaf6b985238d2e10fb5b11d19d7801befed4833287d96a85a7cdd9e211a672760335655576fc0fa0336621c2b2b1018ef71bb5077c67ee5fa8d479d6776013363e98b1f1213712be7e47549b6035459008c509f0f983130a451531381ee3c1ab9e1cbb8e558b56ca1a70939389addc5f9632b37ff3f634abb504bb0be0a51649683f6e29588c15cda40255e173328681884ffef6729e9058c5623e1401fdcc7b8cb5623a8fd725fbeea05fc417c44e46500619218dff7c70aa068994c58883cada505a2aa85b6620dfe9c45b707c9aa1222b86972eae564b28a05ddfa3545df231fde2707d4bf67dc6ba41daba91dee8081e5c7e2bcfbebebd42d5ab8a32d6e098fd57233e3b813dc0d772134775def451823b7fef2bc93da01722cd613b9a3db7e2d4c51fb7b56006ee9cea53b62343599a56167388d45247f9289fb1cab67a7cb0c3665ddf1e1411875b4de3428b32fc6603691a023d8e4cb93c667acb7b535fb5f77af9a49640cbe8ffe3a193cf4df1b556a67cb753c60bdf978b871aa513c07074c6602037ebc32199290e3c7ac6f103ad9358951ad4de0c8f1b34951b0e6a48295975cf08b2c3c95064855fc95317e386f1c18608d1d08699003c998b93332cd316f17a5139d350cbfa9dabc3f77c4197a0186e50913978e980a7a028e7ccdeee718af028200e94a6b3a0ec93ba14b0c64dfaf3967e230d8cf876f26287d436ebc9588b52b43f2380836bfe3"}}}}}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000400)=""/202, 0xca}, {&(0x7f0000000500)=""/245, 0xf5}], 0x5, &(0x7f0000000680)=""/93, 0x5d}, 0x40000141) 15:49:27 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) 15:49:27 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000140)="6e732f7069642f0a8b2a945639bc83a97e1c9f8a1bf7f83fd8ab19634a9a073e5a26685209e973d8ac6c7dd68ec3423dbd3b67a920afc328543f43957ca0362e4ff54c21f84a0cf8e5fe24dc74d199b9c44aa65d4d2eb106726e3be1dd47cad8ea2c7ef3c935cb22a7cc76a34f9091806737c236a8408eb60db36be3ea32b2784fa0424565837eae1155db750db972") 15:49:27 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="feffff06000000ffc100000056ba579f4100000008"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 15:49:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x890b, &(0x7f00000000c0)={"6966623002000000006b2700", @ifru_names='vlan0\x00'}) 15:49:27 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 15:49:27 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') socket$packet(0x11, 0x3, 0x300) socket(0x11, 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x5c, 0x80000003) 15:49:27 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="feffff06000000ffc100000056ba579f4100000008"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 15:49:27 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) 15:49:27 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000580)='C', 0x1}], 0x1) 15:49:27 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "b441d632cdbbcb211363807aec73d3883762a61dc02d349bfa3ac974b987aa7fb97eb324d594fbbb77bab759418aa8d451d921e8f5d2cf2b08292111701192e97cac366dd3eb2e0fb039e58314ef4709c5f3556db6a1ab6b4fb2bdd83cdc26e8395ec4984ec3faf71a611d1569545d654cded93be827a85188b803c19c1b56aab522862a718b81e512b49690994d3425e33bd93f0e744c66a083c1f9f1bd7bb8f9e123c08f3f041ed3fdc058136cf0071a47cc0e38720a12e11e842a7b5b26dff07f578fdb9a7b14662a625c1ee76c41ccb2b1fc6376aa718e1067b9e4af511ef5b360dbfad326108bb033db193dab27974eb8c462739eaee51d87f31c516e7e391073770da3202e02c41a7277c847df24bd5b0a7ab6e252f3c8ebf00688cc55311d887e8bfd95a7f4c6a126af3fe26714ddb869c66d18f870631bbd497e8a06881b754ecdcdd0dcffc51cd52a6b560f8d64b63a1674745edc5f53b18a8ffcc5c2fbc4d2bbcc2faf3c189d9b36c0655d1394f5c127ec86b8a764a87b546c2b6ac37d0a8ec3edd7cda6f930570763dbdc0640d219749bd57c7c89eaadfdae41d654a46b17be069a32a7d94d29b612fbe61b8bd11a2d10ba5d4ac7014fc0465c3f144598bd1f913343e7293711040eee0ae8df1e49f04ed1037d4b742aed0e932116060aaf6b985238d2e10fb5b11d19d7801befed4833287d96a85a7cdd9e211a672760335655576fc0fa0336621c2b2b1018ef71bb5077c67ee5fa8d479d6776013363e98b1f1213712be7e47549b6035459008c509f0f983130a451531381ee3c1ab9e1cbb8e558b56ca1a70939389addc5f9632b37ff3f634abb504bb0be0a51649683f6e29588c15cda40255e173328681884ffef6729e9058c5623e1401fdcc7b8cb5623a8fd725fbeea05fc417c44e46500619218dff7c70aa068994c58883cada505a2aa85b6620dfe9c45b707c9aa1222b86972eae564b28a05ddfa3545df231fde2707d4bf67dc6ba41daba91dee8081e5c7e2bcfbebebd42d5ab8a32d6e098fd57233e3b813dc0d772134775def451823b7fef2bc93da01722cd613b9a3db7e2d4c51fb7b56006ee9cea53b62343599a56167388d45247f9289fb1cab67a7cb0c3665ddf1e1411875b4de3428b32fc6603691a023d8e4cb93c667acb7b535fb5f77af9a49640cbe8ffe3a193cf4df1b556a67cb753c60bdf978b871aa513c07074c6602037ebc32199290e3c7ac6f103ad9358951ad4de0c8f1b34951b0e6a48295975cf08b2c3c95064855fc95317e386f1c18608d1d08699003c998b93332cd316f17a5139d350cbfa9dabc3f77c4197a0186e50913978e980a7a028e7ccdeee718af028200e94a6b3a0ec93ba14b0c64dfaf3967e230d8cf876f26287d436ebc9588b52b43f2380836bfe3"}}}}}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000400)=""/202, 0xca}, {&(0x7f0000000500)=""/245, 0xf5}], 0x5, &(0x7f0000000680)=""/93, 0x5d}, 0x40000141) 15:49:27 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000140)="6e732f7069642f0a8b2a945639bc83a97e1c9f8a1bf7f83fd8ab19634a9a073e5a26685209e973d8ac6c7dd68ec3423dbd3b67a920afc328543f43957ca0362e4ff54c21f84a0cf8e5fe24dc74d199b9c44aa65d4d2eb106726e3be1dd47cad8ea2c7ef3c935cb22a7cc76a34f9091806737c236a8408eb60db36be3ea32b2784fa0424565837eae1155db750db972") 15:49:27 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000200)) 15:49:27 executing program 5: r0 = memfd_create(&(0x7f0000034ffe)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000013c0)=""/182, 0x7}], 0x1) 15:49:27 executing program 4: r0 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r0) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000000640)=[{{&(0x7f00000001c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/128}, {&(0x7f00000002c0)=""/34}, {&(0x7f0000000300)=""/82}]}}, {{&(0x7f00000003c0)=@sco, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/155}, {&(0x7f0000000500)=""/55}, {&(0x7f0000000540)=""/169}], 0x0, &(0x7f00000006c0)=""/143}}], 0x8000000000000be, 0x0, &(0x7f00000050c0)={0x77359400}) [ 884.238445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 15:49:27 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000140)="6e732f7069642f0a8b2a945639bc83a97e1c9f8a1bf7f83fd8ab19634a9a073e5a26685209e973d8ac6c7dd68ec3423dbd3b67a920afc328543f43957ca0362e4ff54c21f84a0cf8e5fe24dc74d199b9c44aa65d4d2eb106726e3be1dd47cad8ea2c7ef3c935cb22a7cc76a34f9091806737c236a8408eb60db36be3ea32b2784fa0424565837eae1155db750db972") 15:49:27 executing program 7: connect(0xffffffffffffffff, &(0x7f0000003440)=@sco={0x1f, {0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0}}, 0x80) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pause() fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000002c0)={0x1, 0x1, 0xfff, 0x8}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) 15:49:27 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000580)='C', 0x1}], 0x1) 15:49:27 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000400)=""/202, 0xca}, {&(0x7f0000000500)=""/245, 0xf5}], 0x5, &(0x7f0000000680)=""/93, 0x5d}, 0x40000141) 15:49:28 executing program 0: r0 = gettid() rt_sigqueueinfo(r0, 0x10000000af, &(0x7f0000000000)) 15:49:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000140), 0x3) 15:49:28 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000001500)='./file0/file0\x00', 0x0) mount(&(0x7f0000000f00)='./file0/file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f00000003c0)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x80000, &(0x7f0000000900)) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1002, &(0x7f0000000380)) [ 884.440488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 15:49:28 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') socket$packet(0x11, 0x3, 0x300) socket(0x11, 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x5c, 0x80000003) 15:49:28 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000140)="6e732f7069642f0a8b2a945639bc83a97e1c9f8a1bf7f83fd8ab19634a9a073e5a26685209e973d8ac6c7dd68ec3423dbd3b67a920afc328543f43957ca0362e4ff54c21f84a0cf8e5fe24dc74d199b9c44aa65d4d2eb106726e3be1dd47cad8ea2c7ef3c935cb22a7cc76a34f9091806737c236a8408eb60db36be3ea32b2784fa0424565837eae1155db750db972") 15:49:28 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "b441d632cdbbcb211363807aec73d3883762a61dc02d349bfa3ac974b987aa7fb97eb324d594fbbb77bab759418aa8d451d921e8f5d2cf2b08292111701192e97cac366dd3eb2e0fb039e58314ef4709c5f3556db6a1ab6b4fb2bdd83cdc26e8395ec4984ec3faf71a611d1569545d654cded93be827a85188b803c19c1b56aab522862a718b81e512b49690994d3425e33bd93f0e744c66a083c1f9f1bd7bb8f9e123c08f3f041ed3fdc058136cf0071a47cc0e38720a12e11e842a7b5b26dff07f578fdb9a7b14662a625c1ee76c41ccb2b1fc6376aa718e1067b9e4af511ef5b360dbfad326108bb033db193dab27974eb8c462739eaee51d87f31c516e7e391073770da3202e02c41a7277c847df24bd5b0a7ab6e252f3c8ebf00688cc55311d887e8bfd95a7f4c6a126af3fe26714ddb869c66d18f870631bbd497e8a06881b754ecdcdd0dcffc51cd52a6b560f8d64b63a1674745edc5f53b18a8ffcc5c2fbc4d2bbcc2faf3c189d9b36c0655d1394f5c127ec86b8a764a87b546c2b6ac37d0a8ec3edd7cda6f930570763dbdc0640d219749bd57c7c89eaadfdae41d654a46b17be069a32a7d94d29b612fbe61b8bd11a2d10ba5d4ac7014fc0465c3f144598bd1f913343e7293711040eee0ae8df1e49f04ed1037d4b742aed0e932116060aaf6b985238d2e10fb5b11d19d7801befed4833287d96a85a7cdd9e211a672760335655576fc0fa0336621c2b2b1018ef71bb5077c67ee5fa8d479d6776013363e98b1f1213712be7e47549b6035459008c509f0f983130a451531381ee3c1ab9e1cbb8e558b56ca1a70939389addc5f9632b37ff3f634abb504bb0be0a51649683f6e29588c15cda40255e173328681884ffef6729e9058c5623e1401fdcc7b8cb5623a8fd725fbeea05fc417c44e46500619218dff7c70aa068994c58883cada505a2aa85b6620dfe9c45b707c9aa1222b86972eae564b28a05ddfa3545df231fde2707d4bf67dc6ba41daba91dee8081e5c7e2bcfbebebd42d5ab8a32d6e098fd57233e3b813dc0d772134775def451823b7fef2bc93da01722cd613b9a3db7e2d4c51fb7b56006ee9cea53b62343599a56167388d45247f9289fb1cab67a7cb0c3665ddf1e1411875b4de3428b32fc6603691a023d8e4cb93c667acb7b535fb5f77af9a49640cbe8ffe3a193cf4df1b556a67cb753c60bdf978b871aa513c07074c6602037ebc32199290e3c7ac6f103ad9358951ad4de0c8f1b34951b0e6a48295975cf08b2c3c95064855fc95317e386f1c18608d1d08699003c998b93332cd316f17a5139d350cbfa9dabc3f77c4197a0186e50913978e980a7a028e7ccdeee718af028200e94a6b3a0ec93ba14b0c64dfaf3967e230d8cf876f26287d436ebc9588b52b43f2380836bfe3"}}}}}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000400)=""/202, 0xca}, {&(0x7f0000000500)=""/245, 0xf5}], 0x5, &(0x7f0000000680)=""/93, 0x5d}, 0x40000141) 15:49:28 executing program 5: personality(0xffffffffffffffff) 15:49:28 executing program 6: add_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x2e, 0x79, 0x7a}, &(0x7f0000000200)="10", 0x1, 0xfffffffffffffffb) 15:49:28 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000001500)='./file0/file0\x00', 0x0) mount(&(0x7f0000000f00)='./file0/file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f00000003c0)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x80000, &(0x7f0000000900)) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1002, &(0x7f0000000380)) 15:49:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40), 0x0, 0x0, &(0x7f0000004b80)) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000001c0)='./bus\x00', 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700)='/dev/sw_sync\x00', 0x0, 0x0) 15:49:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b}}) [ 884.830723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 15:49:28 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0x2001}) 15:49:28 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x10001, 0x4) 15:49:29 executing program 7: connect(0xffffffffffffffff, &(0x7f0000003440)=@sco={0x1f, {0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0}}, 0x80) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pause() fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000002c0)={0x1, 0x1, 0xfff, 0x8}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) 15:49:29 executing program 1: unshare(0x40000000) r0 = socket$inet6(0xa, 0x202000000802, 0x0) r1 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff}, 0x20) 15:49:29 executing program 5: mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x1, &(0x7f0000fc9000)) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000e34000)='./bus\x00', 0x2, 0x0) 15:49:29 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000001500)='./file0/file0\x00', 0x0) mount(&(0x7f0000000f00)='./file0/file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f00000003c0)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x80000, &(0x7f0000000900)) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1002, &(0x7f0000000380)) 15:49:29 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') socket$packet(0x11, 0x3, 0x300) socket(0x11, 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x5c, 0x80000003) 15:49:29 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x10001, 0x4) 15:49:29 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000001500)='./file0/file0\x00', 0x0) mount(&(0x7f0000000f00)='./file0/file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f00000003c0)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x80000, &(0x7f0000000900)) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1002, &(0x7f0000000380)) 15:49:29 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x10001, 0x4) 15:49:29 executing program 5: connect(0xffffffffffffffff, &(0x7f0000003440)=@sco={0x1f, {0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0}}, 0x80) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pause() fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000002c0)={0x1, 0x1, 0xfff, 0x8}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) [ 885.627596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket [ 885.697641] IPVS: Creating netns size=2552 id=51 15:49:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40), 0x0, 0x0, &(0x7f0000004b80)) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000001c0)='./bus\x00', 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700)='/dev/sw_sync\x00', 0x0, 0x0) 15:49:29 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x10001, 0x4) 15:49:29 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') socket$packet(0x11, 0x3, 0x300) socket(0x11, 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x5c, 0x80000003) 15:49:29 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKMODE={0x8, 0x11}]}, 0x28}, 0x1}, 0x0) 15:49:29 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x8012, r0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) [ 885.914743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket [ 886.091309] IPVS: Creating netns size=2552 id=52 15:49:29 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0x2001}) 15:49:29 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [{0x20}, {0x20}, {0x20, '&'}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '*sem0'}, {0x20, '\x00'}], 0xa, "180e22511ec2b809160d9462246837f938cc1a65472b60c043f244fe893021a99e639d895e00000e1d3576530137bbc5267ed4b40f4c299de425ef3136e54ff155426f234ae3a5314ff9c330ee604e5bda4d030430720af03038ae01e14e6509"}, 0x7f) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 15:49:30 executing program 7: connect(0xffffffffffffffff, &(0x7f0000003440)=@sco={0x1f, {0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0}}, 0x80) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pause() fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000002c0)={0x1, 0x1, 0xfff, 0x8}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) 15:49:30 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x7fffffff) 15:49:30 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000600)={0x2, &(0x7f000039a000)=[{0x44}, {0x6}]}, 0x10) write(r0, &(0x7f00000001c0), 0x0) 15:49:30 executing program 1: unshare(0x40000000) r0 = socket$inet6(0xa, 0x202000000802, 0x0) r1 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff}, 0x20) 15:49:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8, 0xb}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf}]}, 0x30}, 0x1}, 0x0) 15:49:30 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/34) 15:49:30 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000180)={[], 0x0, 0x1000, 0x80000000}) 15:49:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40), 0x0, 0x0, &(0x7f0000004b80)) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000001c0)='./bus\x00', 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700)='/dev/sw_sync\x00', 0x0, 0x0) 15:49:30 executing program 5: connect(0xffffffffffffffff, &(0x7f0000003440)=@sco={0x1f, {0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0}}, 0x80) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pause() fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000002c0)={0x1, 0x1, 0xfff, 0x8}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) 15:49:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8, 0xb}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf}]}, 0x30}, 0x1}, 0x0) 15:49:30 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x2, &(0x7f00000002c0)={'filter\x00'}, &(0x7f0000002480)=0x24) 15:49:30 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) renameat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 15:49:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8, 0xb}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf}]}, 0x30}, 0x1}, 0x0) 15:49:30 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0x2001}) 15:49:30 executing program 6: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bcsf0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3b0000000600000001010000faffffff0000000180ffff0020faff66bff92a819eb72766ae6ed1b0ab0009000000fcffff"]}) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) [ 887.077268] binder_alloc: binder_alloc_mmap_handler: 10885 20000000-20002000 already mapped failed -16 15:49:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8, 0xb}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf}]}, 0x30}, 0x1}, 0x0) 15:49:31 executing program 7: connect(0xffffffffffffffff, &(0x7f0000003440)=@sco={0x1f, {0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0}}, 0x80) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pause() fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000002c0)={0x1, 0x1, 0xfff, 0x8}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) 15:49:31 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) 15:49:31 executing program 6: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bcsf0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3b0000000600000001010000faffffff0000000180ffff0020faff66bff92a819eb72766ae6ed1b0ab0009000000fcffff"]}) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) [ 888.877896] pktgen: kernel_thread() failed for cpu 0 [ 888.883071] pktgen: Cannot create thread for cpu 0 (-4) [ 888.888554] pktgen: kernel_thread() failed for cpu 1 [ 888.893757] pktgen: Cannot create thread for cpu 1 (-4) [ 888.899111] pktgen: Initialization failed for all threads 15:49:32 executing program 1: unshare(0x40000000) r0 = socket$inet6(0xa, 0x202000000802, 0x0) r1 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff}, 0x20) 15:49:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40104593, &(0x7f0000000000)=[0x0, 0x100100000]) 15:49:32 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40), 0x0, 0x0, &(0x7f0000004b80)) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000001c0)='./bus\x00', 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700)='/dev/sw_sync\x00', 0x0, 0x0) 15:49:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)}) 15:49:32 executing program 6: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bcsf0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3b0000000600000001010000faffffff0000000180ffff0020faff66bff92a819eb72766ae6ed1b0ab0009000000fcffff"]}) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:49:32 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0x2001}) 15:49:32 executing program 5: connect(0xffffffffffffffff, &(0x7f0000003440)=@sco={0x1f, {0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0}}, 0x80) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pause() fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000002c0)={0x1, 0x1, 0xfff, 0x8}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) 15:49:32 executing program 7: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl(r0, 0x2, &(0x7f0000000040)) 15:49:32 executing program 7: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) unshare(0x8000400) mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f6, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 15:49:32 executing program 6: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bcsf0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3b0000000600000001010000faffffff0000000180ffff0020faff66bff92a819eb72766ae6ed1b0ab0009000000fcffff"]}) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:49:32 executing program 2: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./control\x00') r1 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000016ff8)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000400)='./control/file0\x00') renameat(r0, &(0x7f0000000240)='./control\x00', r2, &(0x7f0000000280)='./file0\x00') 15:49:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000040), 0x0) 15:49:32 executing program 6: mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x1) 15:49:32 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x0, 0x0) lseek(r0, 0x4d, 0x1) 15:49:32 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x8d264d94b88cc547) ftruncate(r1, 0x8008200) write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0x2710}}, {{0x77359400}}, {}], 0xfffffffffffffdc6) 15:49:32 executing program 0: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000280)='loginuid\x00') exit(0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/202, 0xca}], 0x1, 0x0) [ 890.798349] pktgen: kernel_thread() failed for cpu 0 [ 890.803532] pktgen: Cannot create thread for cpu 0 (-4) [ 890.808931] pktgen: kernel_thread() failed for cpu 1 [ 890.814414] pktgen: Cannot create thread for cpu 1 (-4) [ 890.819764] pktgen: Initialization failed for all threads 15:49:34 executing program 1: unshare(0x40000000) r0 = socket$inet6(0xa, 0x202000000802, 0x0) r1 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff}, 0x20) 15:49:34 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x0) 15:49:34 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{0x0, 0x3}}) 15:49:34 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x8d264d94b88cc547) ftruncate(r1, 0x8008200) write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0x2710}}, {{0x77359400}}, {}], 0xfffffffffffffdc6) 15:49:34 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000840)=""/121, 0x79}, 0x0) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x1000000004}, 0x1c) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="c9", 0x1}], 0x1}, 0x0) 15:49:34 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 15:49:34 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xffffffffffffffff}, 0x4) r1 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) sendto$inet6(r1, &(0x7f0000000200)="4500009613076193cd3b2336d644d8a62b7192622708f4c1720900f2f955085323c2fe5630e08644d75a07f6e623a27de1cc84e7360384eb8792f9bed1d7cbe01ba85000103f82fd9475f9d8cea59b06e0909077c8caaf68deef1ec8c405e2108afea9eff924d0e15ffa507e5e1bdc1128307c1a420c5cb2d253ea2a9cc73ef107f7e63701e8a41bdf68a3e82185043eb6b043c394e09b", 0x97, 0x0, 0x0, 0x0) 15:49:34 executing program 0: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000280)='loginuid\x00') exit(0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/202, 0xca}], 0x1, 0x0) 15:49:34 executing program 6: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv6_delrule={0x54, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_DST={0x14, 0x1, @ipv4={[], [0xff, 0xff], @rand_addr}}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14}, @FRA_SRC={0x14, 0x2, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}]}, 0x54}, 0x1}, 0x0) 15:49:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x2, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 15:49:34 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 15:49:34 executing program 6: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bcsf0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3b0000000600000001010000faffffff0000000180ffff0020faff66bff92a819eb72766ae6ed1b0ab0009000000fcffff"]}) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) [ 891.025866] IPVS: Creating netns size=2552 id=53 15:49:34 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigsuspend(&(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:49:34 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 15:49:34 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xffffffffffffffff}, 0x4) r1 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) sendto$inet6(r1, &(0x7f0000000200)="4500009613076193cd3b2336d644d8a62b7192622708f4c1720900f2f955085323c2fe5630e08644d75a07f6e623a27de1cc84e7360384eb8792f9bed1d7cbe01ba85000103f82fd9475f9d8cea59b06e0909077c8caaf68deef1ec8c405e2108afea9eff924d0e15ffa507e5e1bdc1128307c1a420c5cb2d253ea2a9cc73ef107f7e63701e8a41bdf68a3e82185043eb6b043c394e09b", 0x97, 0x0, 0x0, 0x0) 15:49:34 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x8d264d94b88cc547) ftruncate(r1, 0x8008200) write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0x2710}}, {{0x77359400}}, {}], 0xfffffffffffffdc6) 15:49:34 executing program 6: ioprio_set$uid(0x0, 0x0, 0x35ff) 15:49:34 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 15:49:34 executing program 6: creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) 15:49:34 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xffffffffffffffff}, 0x4) r1 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) sendto$inet6(r1, &(0x7f0000000200)="4500009613076193cd3b2336d644d8a62b7192622708f4c1720900f2f955085323c2fe5630e08644d75a07f6e623a27de1cc84e7360384eb8792f9bed1d7cbe01ba85000103f82fd9475f9d8cea59b06e0909077c8caaf68deef1ec8c405e2108afea9eff924d0e15ffa507e5e1bdc1128307c1a420c5cb2d253ea2a9cc73ef107f7e63701e8a41bdf68a3e82185043eb6b043c394e09b", 0x97, 0x0, 0x0, 0x0) 15:49:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000840)=""/121, 0x79}, 0x0) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x1000000004}, 0x1c) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="c9", 0x1}], 0x1}, 0x0) 15:49:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={"6c6f3a0500", {0x2, 0x0, @rand_addr}}) 15:49:35 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) 15:49:35 executing program 0: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000280)='loginuid\x00') exit(0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/202, 0xca}], 0x1, 0x0) 15:49:35 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="cd", 0x1}], 0x1) 15:49:35 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x8d264d94b88cc547) ftruncate(r1, 0x8008200) write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0x2710}}, {{0x77359400}}, {}], 0xfffffffffffffdc6) 15:49:35 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xffffffffffffffff}, 0x4) r1 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) sendto$inet6(r1, &(0x7f0000000200)="4500009613076193cd3b2336d644d8a62b7192622708f4c1720900f2f955085323c2fe5630e08644d75a07f6e623a27de1cc84e7360384eb8792f9bed1d7cbe01ba85000103f82fd9475f9d8cea59b06e0909077c8caaf68deef1ec8c405e2108afea9eff924d0e15ffa507e5e1bdc1128307c1a420c5cb2d253ea2a9cc73ef107f7e63701e8a41bdf68a3e82185043eb6b043c394e09b", 0x97, 0x0, 0x0, 0x0) 15:49:35 executing program 1: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'lo\x00'}) getrandom(&(0x7f0000000080)=""/15, 0xf, 0x3) 15:49:35 executing program 6: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='.') 15:49:35 executing program 1: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'lo\x00'}) getrandom(&(0x7f0000000080)=""/15, 0xf, 0x3) 15:49:35 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigsuspend(&(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:49:35 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'lo\x00'}) getrandom(&(0x7f0000000080)=""/15, 0xf, 0x3) 15:49:35 executing program 1: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'lo\x00'}) getrandom(&(0x7f0000000080)=""/15, 0xf, 0x3) 15:49:35 executing program 6: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='.') 15:49:35 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'lo\x00'}) getrandom(&(0x7f0000000080)=""/15, 0xf, 0x3) 15:49:35 executing program 1: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'lo\x00'}) getrandom(&(0x7f0000000080)=""/15, 0xf, 0x3) 15:49:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000840)=""/121, 0x79}, 0x0) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x1000000004}, 0x1c) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="c9", 0x1}], 0x1}, 0x0) 15:49:36 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000200)="441f3708e30700000000840e00fe36ce73e20700000000000000db5851", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)=""/37, &(0x7f0000000040)=0x25) 15:49:36 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) 15:49:36 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'lo\x00'}) getrandom(&(0x7f0000000080)=""/15, 0xf, 0x3) 15:49:36 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) 15:49:36 executing program 6: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='.') 15:49:36 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) 15:49:36 executing program 0: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000280)='loginuid\x00') exit(0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/202, 0xca}], 0x1, 0x0) 15:49:36 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) 15:49:36 executing program 6: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='.') 15:49:36 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigsuspend(&(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:49:36 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) read(r0, &(0x7f0000000080)=""/222, 0xde) connect$unix(r0, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) 15:49:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000001880)={0x84, @multicast2=0xe0000002, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 15:49:36 executing program 6: setfsuid(0x0) 15:49:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) setpriority(0x0, 0x0, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) [ 892.978621] IPVS: __ip_vs_del_service: enter [ 892.995922] IPVS: __ip_vs_del_service: enter 15:49:36 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f4546000000a15416988c1612956908655d4e1d310e524467c8a1648dd386840008003b000000b0fa0a"], 0x2a) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) [ 893.028605] binder: 11160:11161 ERROR: BC_REGISTER_LOOPER called without request [ 893.038347] binder: 11160:11161 ioctl c0306201 2000dfd0 returned -11 [ 893.064780] binder: 11160:11166 ERROR: BC_REGISTER_LOOPER called without request 15:49:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000840)=""/121, 0x79}, 0x0) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x1000000004}, 0x1c) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="c9", 0x1}], 0x1}, 0x0) 15:49:37 executing program 5: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050000000000000005006d20002b1f00c05d080a4a51f1ee839cd53400b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000000000), 0x2ea, 0x4040, 0x0, 0xffffffffffffff40) [ 893.467461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 15:49:37 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) 15:49:37 executing program 6: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000043bff0), &(0x7f0000048000), 0x0) 15:49:37 executing program 5: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050000000000000005006d20002b1f00c05d080a4a51f1ee839cd53400b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000000000), 0x2ea, 0x4040, 0x0, 0xffffffffffffff40) 15:49:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000004c0)={0x0, @rand_addr, 0x0, 0x0, 'none\x00'}, 0x2c) 15:49:37 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigsuspend(&(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:49:37 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x40085112, &(0x7f0000000000)={0xff}) 15:49:37 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) 15:49:37 executing program 0: r0 = socket(0xa, 0x1, 0x0) mmap(&(0x7f000087d000/0x4000)=nil, 0x4000, 0x2000004, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x4, 0x0, "d8588341c1332e435893f760968f541b42c41db0f53229e150000000000000000b07deaa85a7158cb72317b9229c04a260f51652df313a01eba60958f71aa48ae177e2e4fe748f1a549984fb59bde9e6"}, 0xd8) [ 893.804696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 15:49:37 executing program 5: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050000000000000005006d20002b1f00c05d080a4a51f1ee839cd53400b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000000000), 0x2ea, 0x4040, 0x0, 0xffffffffffffff40) 15:49:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:49:37 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x800, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/234, 0xea}], 0x1, 0x0) 15:49:37 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100), 0xaf, 0x0) 15:49:37 executing program 5: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050000000000000005006d20002b1f00c05d080a4a51f1ee839cd53400b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000000000), 0x2ea, 0x4040, 0x0, 0xffffffffffffff40) [ 893.957455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 15:49:37 executing program 6: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) [ 894.058497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 15:49:37 executing program 5: getpeername$inet6(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, @local}, &(0x7f0000000280)=0x1c) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000015c0)={@dev}, &(0x7f0000001680)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001740)={{{@in, @in6=@loopback={0x0, 0x1}, 0x4e22, 0xffff, 0x4e21, 0x0, 0xa, 0x0, 0xa0, 0x87}, {0x4, 0x3, 0x0, 0x0, 0x5, 0x100, 0x1}, {0xa2d3, 0x1}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x5, 0x0, 0x6c}, 0xa, @in6, 0x3501, 0x3, 0x1, 0x6, 0x6, 0x0, 0x8}}, 0xe8) gettid() recvmmsg(r0, &(0x7f0000004100)=[{{&(0x7f0000001600)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/4096}, {&(0x7f0000001340)=""/203}, {&(0x7f0000000140)=""/119}, {&(0x7f0000001440)=""/133}, {&(0x7f0000000000)=""/47}, {&(0x7f0000001500)=""/79}]}}], 0x2a37, 0x0, 0x0) 15:49:37 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x800, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/234, 0xea}], 0x1, 0x0) 15:49:38 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) 15:49:38 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x19) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 15:49:38 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x1000) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000200)={0x0, 0x0, 0x28000000000}) lseek(r0, 0x0, 0x3) 15:49:38 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x800, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/234, 0xea}], 0x1, 0x0) 15:49:38 executing program 5: getpeername$inet6(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, @local}, &(0x7f0000000280)=0x1c) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000015c0)={@dev}, &(0x7f0000001680)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001740)={{{@in, @in6=@loopback={0x0, 0x1}, 0x4e22, 0xffff, 0x4e21, 0x0, 0xa, 0x0, 0xa0, 0x87}, {0x4, 0x3, 0x0, 0x0, 0x5, 0x100, 0x1}, {0xa2d3, 0x1}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x5, 0x0, 0x6c}, 0xa, @in6, 0x3501, 0x3, 0x1, 0x6, 0x6, 0x0, 0x8}}, 0xe8) gettid() recvmmsg(r0, &(0x7f0000004100)=[{{&(0x7f0000001600)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/4096}, {&(0x7f0000001340)=""/203}, {&(0x7f0000000140)=""/119}, {&(0x7f0000001440)=""/133}, {&(0x7f0000000000)=""/47}, {&(0x7f0000001500)=""/79}]}}], 0x2a37, 0x0, 0x0) 15:49:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="187d6acf46ffc57e6102bf49483f298f035ae70438e91e71") setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000180)=@dstopts, 0x7) 15:49:38 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) 15:49:38 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80284504, &(0x7f0000000140)=[0x2ff]) 15:49:38 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x800, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/234, 0xea}], 0x1, 0x0) 15:49:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:49:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000100), 0x4) 15:49:38 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x20000000020005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) write$fuse(r0, &(0x7f0000000040)={0xfffffe87, 0x0, 0x0, @fuse_notify_poll_wakeup_out}, 0x12) 15:49:38 executing program 5: getpeername$inet6(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, @local}, &(0x7f0000000280)=0x1c) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000015c0)={@dev}, &(0x7f0000001680)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001740)={{{@in, @in6=@loopback={0x0, 0x1}, 0x4e22, 0xffff, 0x4e21, 0x0, 0xa, 0x0, 0xa0, 0x87}, {0x4, 0x3, 0x0, 0x0, 0x5, 0x100, 0x1}, {0xa2d3, 0x1}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x5, 0x0, 0x6c}, 0xa, @in6, 0x3501, 0x3, 0x1, 0x6, 0x6, 0x0, 0x8}}, 0xe8) gettid() recvmmsg(r0, &(0x7f0000004100)=[{{&(0x7f0000001600)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/4096}, {&(0x7f0000001340)=""/203}, {&(0x7f0000000140)=""/119}, {&(0x7f0000001440)=""/133}, {&(0x7f0000000000)=""/47}, {&(0x7f0000001500)=""/79}]}}], 0x2a37, 0x0, 0x0) 15:49:38 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80284504, &(0x7f0000000140)=[0x2ff]) 15:49:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:49:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:49:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80284504, &(0x7f0000000140)=[0x2ff]) 15:49:39 executing program 5: getpeername$inet6(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, @local}, &(0x7f0000000280)=0x1c) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000015c0)={@dev}, &(0x7f0000001680)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001740)={{{@in, @in6=@loopback={0x0, 0x1}, 0x4e22, 0xffff, 0x4e21, 0x0, 0xa, 0x0, 0xa0, 0x87}, {0x4, 0x3, 0x0, 0x0, 0x5, 0x100, 0x1}, {0xa2d3, 0x1}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x5, 0x0, 0x6c}, 0xa, @in6, 0x3501, 0x3, 0x1, 0x6, 0x6, 0x0, 0x8}}, 0xe8) gettid() recvmmsg(r0, &(0x7f0000004100)=[{{&(0x7f0000001600)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/4096}, {&(0x7f0000001340)=""/203}, {&(0x7f0000000140)=""/119}, {&(0x7f0000001440)=""/133}, {&(0x7f0000000000)=""/47}, {&(0x7f0000001500)=""/79}]}}], 0x2a37, 0x0, 0x0) 15:49:39 executing program 6: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 15:49:39 executing program 6: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 15:49:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000003400)=[{&(0x7f00000033c0)=""/50, 0x32}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)) 15:49:39 executing program 6: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 15:49:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80284504, &(0x7f0000000140)=[0x2ff]) 15:49:39 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x1, @ipv4=@multicast1=0xe0000001}]}, 0x1c}, 0x1}, 0x0) 15:49:39 executing program 6: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) [ 895.965647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 15:49:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 15:49:39 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000046e000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 15:49:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:49:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') preadv(r0, &(0x7f0000000080), 0xa2, 0x4000000) sendfile(r0, r0, &(0x7f0000000000), 0x43d) fadvise64(r0, 0x0, 0x10001, 0x0) 15:49:39 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x2}, 0x4) sendto$inet6(r1, &(0x7f0000000140), 0xffdb, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 15:49:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:49:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:49:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x1000000, 0x0, @in6=@loopback={0x0, 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x80}, 0x1}, 0x0) 15:49:39 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54", 0x3f) write$cgroup_pid(r1, &(0x7f0000000140)={[0x0, 0x39]}, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:49:39 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000046e000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 15:49:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000046e000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 15:49:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0x8, 0x4) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000080)=""/176, &(0x7f0000000000)=0xb0) 15:49:40 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54", 0x3f) write$cgroup_pid(r1, &(0x7f0000000140)={[0x0, 0x39]}, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:49:40 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000046e000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 15:49:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000046e000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 15:49:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') preadv(r0, &(0x7f0000000080), 0xa2, 0x4000000) sendfile(r0, r0, &(0x7f0000000000), 0x43d) fadvise64(r0, 0x0, 0x10001, 0x0) 15:49:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:49:40 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54", 0x3f) write$cgroup_pid(r1, &(0x7f0000000140)={[0x0, 0x39]}, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:49:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000080)={0x80, 0x0, 'client0\x00', 0x0, "cf5493b26d7da4bb", "cf061369767509a2cbf0594d12105f3df9c75c9b7dbbab40123dd35fe184e054"}) 15:49:40 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000046e000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 15:49:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000046e000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 15:49:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:49:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:49:40 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:49:40 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54", 0x3f) write$cgroup_pid(r1, &(0x7f0000000140)={[0x0, 0x39]}, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:49:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') preadv(r0, &(0x7f0000000080), 0xa2, 0x4000000) sendfile(r0, r0, &(0x7f0000000000), 0x43d) fadvise64(r0, 0x0, 0x10001, 0x0) 15:49:40 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:49:41 executing program 6: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{0x3, 0x0, 0x0, 0x0, 0x7f}]}, 0x58) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r1, &(0x7f0000000080), 0x0) 15:49:41 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:49:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x400000000000486, &(0x7f0000dcffe8)=""/24, &(0x7f00000002c0)=0x18) 15:49:41 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r0, &(0x7f00000001c0)=""/143, 0x31) exit(0x0) getdents(r0, &(0x7f0000000040)=""/182, 0x22) 15:49:41 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:49:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000001dc0)=@bridge_getlink={0x24, 0x12, 0x201, 0x0, 0x0, {0x7}, [@IFLA_AF_SPEC={0x4, 0x1a}]}, 0x24}, 0x1}, 0x0) 15:49:41 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140), 0x8) ioctl$TCSETSF(r0, 0x5111, &(0x7f0000000000)) 15:49:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0xa, [@empty, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002, @empty, @rand_addr, @rand_addr, @rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr, @broadcast=0xffffffff]}, 0x38) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000040)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 15:49:41 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x50f, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 15:49:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) r2 = dup(r0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r3, 0x0, 0x0, 0x0, {0xb}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6}]}]}, 0x20}, 0x1}, 0x0) 15:49:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') preadv(r0, &(0x7f0000000080), 0xa2, 0x4000000) sendfile(r0, r0, &(0x7f0000000000), 0x43d) fadvise64(r0, 0x0, 0x10001, 0x0) 15:49:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xfffffffffffffffd}}], 0x0, 0x0, &(0x7f0000000340)}) 15:49:41 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x40247007, &(0x7f0000000040)) 15:49:41 executing program 5: r0 = inotify_init1(0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4209, r1, 0x20000000, &(0x7f0000000080)) 15:49:41 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) rename(&(0x7f0000000140)='./file2\x00', &(0x7f00000001c0)='../file0\x00') [ 898.238963] binder: 11457:11464 transaction failed 29201/-22, size 0-0 line 3142 15:49:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) r2 = dup(r0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r3, 0x0, 0x0, 0x0, {0xb}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6}]}]}, 0x20}, 0x1}, 0x0) 15:49:41 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x40247007, &(0x7f0000000040)) 15:49:41 executing program 5: r0 = inotify_init1(0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4209, r1, 0x20000000, &(0x7f0000000080)) [ 898.330799] binder_alloc: binder_alloc_mmap_handler: 11457 20001000-20004000 already mapped failed -16 [ 898.353554] binder: BINDER_SET_CONTEXT_MGR already set [ 898.367700] binder: 11457:11464 ioctl 40046207 0 returned -16 [ 898.379638] binder_alloc: 11457: binder_alloc_buf, no vma 15:49:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) r2 = dup(r0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r3, 0x0, 0x0, 0x0, {0xb}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6}]}]}, 0x20}, 0x1}, 0x0) 15:49:42 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 15:49:42 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) rename(&(0x7f0000000140)='./file2\x00', &(0x7f00000001c0)='../file0\x00') 15:49:42 executing program 5: r0 = inotify_init1(0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4209, r1, 0x20000000, &(0x7f0000000080)) [ 898.413874] binder: 11457:11485 transaction failed 29189/-3, size 0-0 line 3142 [ 898.519909] binder: undelivered TRANSACTION_ERROR: 29189 [ 898.525636] binder: undelivered TRANSACTION_ERROR: 29201 15:49:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@ipv6_delrule={0x20, 0x21, 0x0, 0x0, 0x0, {0xa}}, 0x20}, 0x1}, 0x0) 15:49:42 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x40247007, &(0x7f0000000040)) 15:49:42 executing program 1: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_names\x00') setrlimit(0x1, &(0x7f0000011000)) ftruncate(r0, 0x3) 15:49:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) r2 = dup(r0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r3, 0x0, 0x0, 0x0, {0xb}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6}]}]}, 0x20}, 0x1}, 0x0) 15:49:42 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) rename(&(0x7f0000000140)='./file2\x00', &(0x7f00000001c0)='../file0\x00') 15:49:42 executing program 7: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000000040)={0x51, 0x0, 0x0, {}, {}, @period={0x5d}}) 15:49:42 executing program 5: r0 = inotify_init1(0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4209, r1, 0x20000000, &(0x7f0000000080)) 15:49:42 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) capset(&(0x7f0000f4b000)={0x19980330}, &(0x7f0000000040)) 15:49:42 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) rename(&(0x7f0000000140)='./file2\x00', &(0x7f00000001c0)='../file0\x00') 15:49:42 executing program 4: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x20005) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000000)={0x3c847480}) dup2(r1, r0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000200)="83191cfd344a2c5c5c2170ea40186ba8255c2bf8e7511ab164342fed", 0x1c}], 0x1) 15:49:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000000f740)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f000000f700)={&(0x7f000000f680)=@ipv6_delroute={0x24, 0x19, 0x101, 0x0, 0x0, {0xa}, [@RTA_PRIORITY={0x8, 0x6, 0xfffffffffffffe01}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x800) 15:49:42 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="02000000080000000000000008639ede5b044175", 0x14, 0x0) 15:49:42 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x40247007, &(0x7f0000000040)) 15:49:42 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xc, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)) 15:49:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_tables_matches\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/50, 0x32}], 0x1, 0x10400003) 15:49:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000000f740)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f000000f700)={&(0x7f000000f680)=@ipv6_delroute={0x24, 0x19, 0x101, 0x0, 0x0, {0xa}, [@RTA_PRIORITY={0x8, 0x6, 0xfffffffffffffe01}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x800) 15:49:43 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r0, r1, &(0x7f0000000040)=0x3, 0x80000001) 15:49:43 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001580)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000001440)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001380)=""/176, 0xb0}], 0x2, &(0x7f0000000080)=""/136, 0x88}, 0x0) 15:49:43 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000800)={{0x0, 0x8001}, {0x200000000080}}) 15:49:43 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r2, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x1, "7665745a315f353f5f6201196b0bde00", 0x1}, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) 15:49:43 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000010c0)='ns/pid\x00') setns(r0, 0x1fffffff) 15:49:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000000f740)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f000000f700)={&(0x7f000000f680)=@ipv6_delroute={0x24, 0x19, 0x101, 0x0, 0x0, {0xa}, [@RTA_PRIORITY={0x8, 0x6, 0xfffffffffffffe01}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x800) 15:49:43 executing program 6: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x80802, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) 15:49:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) dup2(r0, r1) sendto$inet6(r2, &(0x7f0000000100)="dc", 0x1, 0x0, 0x0, 0x0) 15:49:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 15:49:43 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000800)={{0x0, 0x8001}, {0x200000000080}}) 15:49:43 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x281, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, 0x78) 15:49:43 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r0, r1, &(0x7f0000000040)=0x3, 0x80000001) 15:49:43 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000800)={{0x0, 0x8001}, {0x200000000080}}) 15:49:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000000f740)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f000000f700)={&(0x7f000000f680)=@ipv6_delroute={0x24, 0x19, 0x101, 0x0, 0x0, {0xa}, [@RTA_PRIORITY={0x8, 0x6, 0xfffffffffffffe01}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x800) 15:49:43 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000025c0)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newaddr={0x7c, 0x14, 0x3353cd1e187a4f97, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x8001, 0x8, 0x7, 0xfffffffffffffffb}}, @IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}, @IFA_ADDRESS={0x14, 0x1, @loopback={0x0, 0x1}}, @IFA_ADDRESS={0x14, 0x1, @mcast2={0xff, 0x2, [], 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040801}, 0x800) 15:49:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 15:49:43 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 15:49:43 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000800)={{0x0, 0x8001}, {0x200000000080}}) 15:49:43 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x232) 15:49:44 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r2, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x1, "7665745a315f353f5f6201196b0bde00", 0x1}, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) 15:49:44 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000080)={@loopback={0x0, 0x1}}, 0x200000a0) 15:49:44 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r0, r1, &(0x7f0000000040)=0x3, 0x80000001) 15:49:44 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={{}, 0x3000}) clone(0x0, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000580), &(0x7f0000000440)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) 15:49:44 executing program 1: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') getdents64(r0, &(0x7f00000011c0)=""/4096, 0x1000) getdents(r0, &(0x7f0000001100)=""/188, 0xbc) 15:49:44 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 15:49:44 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 15:49:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000480)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f00000028c0)=[{0x10, 0x29}], 0x10}}], 0x2, 0x0) 15:49:44 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045401, &(0x7f0000a07fff)) 15:49:44 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r0, r1, &(0x7f0000000040)=0x3, 0x80000001) 15:49:44 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={{}, 0x3000}) clone(0x0, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000580), &(0x7f0000000440)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) 15:49:44 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@deltclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, r1, {0x0, 0xfffe}, {0x0, 0xa}}}, 0x24}, 0x1}, 0x0) 15:49:44 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 15:49:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f000000d000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f000000c1a8)={0x24, 0x15, 0x21, 0x0, 0x0, {0x2}, [@nested={0x10, 0x0, [@typed={0xc, 0x6, @ipv4=@loopback=0x7f000001}]}]}, 0x24}, 0x1}, 0x0) 15:49:44 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 15:49:44 executing program 1: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') getdents64(r0, &(0x7f00000011c0)=""/4096, 0x1000) getdents(r0, &(0x7f0000001100)=""/188, 0xbc) 15:49:44 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r2, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x1, "7665745a315f353f5f6201196b0bde00", 0x1}, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) 15:49:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x8001, 0x2, 0x0, 0x0, 0x1, 0x26, 0x18}, 0x20) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={0x1}, &(0x7f0000000100), &(0x7f0000000140), 0x8) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x800, 0x4) 15:49:44 executing program 3: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x0, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x3f}) 15:49:44 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) 15:49:44 executing program 2: r0 = memfd_create(&(0x7f0000000400)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 15:49:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000280), &(0x7f0000000040)=0x4) 15:49:44 executing program 1: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') getdents64(r0, &(0x7f00000011c0)=""/4096, 0x1000) getdents(r0, &(0x7f0000001100)=""/188, 0xbc) 15:49:44 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={{}, 0x3000}) clone(0x0, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000580), &(0x7f0000000440)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) 15:49:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x200031, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)) 15:49:45 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/40, 0x28}], 0x1) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xffffffe3) 15:49:45 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f00000004c0), 0xffffffffffffffd7) ioctl$TCFLSH(r2, 0x540b, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x1, "7665745a315f353f5f6201196b0bde00", 0x1}, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) 15:49:45 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$fiemap(r0, 0x40046602, &(0x7f0000000180)={0x3b41de82000, 0x0, 0x0, 0x0, 0x7c6}) 15:49:45 executing program 1: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') getdents64(r0, &(0x7f00000011c0)=""/4096, 0x1000) getdents(r0, &(0x7f0000001100)=""/188, 0xbc) 15:49:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x8001, 0x2, 0x0, 0x0, 0x1, 0x26, 0x18}, 0x20) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={0x1}, &(0x7f0000000100), &(0x7f0000000140), 0x8) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x800, 0x4) 15:49:45 executing program 6: r0 = socket$inet(0x2, 0x8000000002, 0x0) setsockopt$inet_int(r0, 0x0, 0xc9, &(0x7f0000000040), 0x4) 15:49:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000)=0x8, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 15:49:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x8001, 0x2, 0x0, 0x0, 0x1, 0x26, 0x18}, 0x20) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={0x1}, &(0x7f0000000100), &(0x7f0000000140), 0x8) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x800, 0x4) 15:49:45 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000200)='schedstat\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x1) 15:49:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x200031, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)) 15:49:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x8001, 0x2, 0x0, 0x0, 0x1, 0x26, 0x18}, 0x20) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={0x1}, &(0x7f0000000100), &(0x7f0000000140), 0x8) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x800, 0x4) 15:49:45 executing program 2: r0 = memfd_create(&(0x7f0000000400)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 15:49:45 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x100400000000102, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="05", 0x1}], 0x1, 0x0) 15:49:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc) close(r0) 15:49:45 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={{}, 0x3000}) clone(0x0, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000580), &(0x7f0000000440)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) 15:49:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x200031, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)) 15:49:46 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/40, 0x28}], 0x1) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xffffffe3) 15:49:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f0000000100)=""/4096, 0x1000) 15:49:46 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10}}) 15:49:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x200031, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)) 15:49:46 executing program 7: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7704, &(0x7f0000000040)) 15:49:46 executing program 2: r0 = memfd_create(&(0x7f0000000400)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 15:49:46 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000006f80), &(0x7f0000000200)=0x1d7) 15:49:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000)=0x8, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 15:49:46 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:49:46 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) 15:49:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f000039a000)=[{0x3c}, {0x6}]}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 15:49:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f0000000100)=""/4096, 0x1000) 15:49:46 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) 15:49:46 executing program 7: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x30, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x8, 0x16, [{0x4, 0x1}]}, @IFLA_OPERSTATE={0x8, 0x10}]}, 0x30}, 0x1}, 0x0) 15:49:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f000039a000)=[{0x3c}, {0x6}]}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 15:49:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f0000000100)=""/4096, 0x1000) 15:49:47 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/40, 0x28}], 0x1) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xffffffe3) 15:49:47 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) close(r0) 15:49:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f000087d000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f000087cf79)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0xc, 0x0, "d858834181332e435893f760968f541b42c41db0f53229e10458031e411acc910b07deaa85a7158cb72f17b9229c05a260f51652df313a01cea60958f71aa48ae177e2e4fe748f1a5499840c5abde9e6"}, 0xd8) 15:49:47 executing program 2: r0 = memfd_create(&(0x7f0000000400)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 15:49:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000)=0x8, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 15:49:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f0000000100)=""/4096, 0x1000) 15:49:47 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4, 0x28011, r4, 0x0) 15:49:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f000039a000)=[{0x3c}, {0x6}]}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 15:49:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0xa}, [@IFA_FLAGS={0x8, 0x2}]}, 0x20}, 0x1}, 0x0) 15:49:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f000039a000)=[{0x3c}, {0x6}]}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 15:49:47 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100100000000b, &(0x7f0000c29ffc)=0x3, 0x4) 15:49:47 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7ff) 15:49:47 executing program 3: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000040), 0xffffffffffffff90) 15:49:47 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_bond\x00', 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_bond\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) 15:49:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x7fffffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x104) 15:49:47 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$fuse(r2, &(0x7f0000000000)={0x20, 0x0, 0x0, @fuse_ioctl_out}, 0xfffffffffffffcd0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x7ffffffe) 15:49:47 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x6, 0x1a, &(0x7f0000000040), &(0x7f0000013000)=0x221) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 904.607756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12344 sclass=netlink_route_socket [ 904.620828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12344 sclass=netlink_route_socket [ 904.632184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12576 sclass=netlink_route_socket [ 904.642614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket [ 904.654553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12387 sclass=netlink_route_socket [ 904.672505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8240 sclass=netlink_route_socket [ 904.695612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 15:49:48 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/40, 0x28}], 0x1) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xffffffe3) 15:49:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000180)=[{0x24, 0x29, 0x5, "27020201594a87ccfe80000000000000381fc3b606"}], 0x24}, 0x0) 15:49:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000)=0x8, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 15:49:48 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_bond\x00', 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_bond\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) 15:49:48 executing program 0: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) recvfrom(r0, &(0x7f0000000000)=""/7, 0x7, 0x0, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x80) 15:49:48 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4, 0x28011, r4, 0x0) 15:49:48 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$fuse(r2, &(0x7f0000000000)={0x20, 0x0, 0x0, @fuse_ioctl_out}, 0xfffffffffffffcd0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x7ffffffe) 15:49:48 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$fuse(r2, &(0x7f0000000000)={0x20, 0x0, 0x0, @fuse_ioctl_out}, 0xfffffffffffffcd0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x7ffffffe) 15:49:48 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_bond\x00', 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_bond\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) 15:49:48 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4, 0x28011, r4, 0x0) 15:49:48 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_bond\x00', 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_bond\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) 15:49:48 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4, 0x28011, r4, 0x0) [ 905.082840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12344 sclass=netlink_route_socket [ 905.116480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12344 sclass=netlink_route_socket [ 905.152607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12576 sclass=netlink_route_socket [ 905.167617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12344 sclass=netlink_route_socket [ 905.187162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket [ 905.208633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12339 sclass=netlink_route_socket [ 905.237763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12387 sclass=netlink_route_socket [ 905.250275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12832 sclass=netlink_route_socket [ 905.272488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8240 sclass=netlink_route_socket [ 905.287662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 15:49:48 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = userfaultfd(0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)) [ 905.310834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket [ 905.333403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12387 sclass=netlink_route_socket 15:49:49 executing program 3: r0 = socket$inet(0x11, 0x40000000000803, 0x0) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000180)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000400), 0x0, &(0x7f00000006c0)=[{0xc, 0x1, 0x24}], 0xc}, 0x0) [ 905.395113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8240 sclass=netlink_route_socket 15:49:49 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$fuse(r2, &(0x7f0000000000)={0x20, 0x0, 0x0, @fuse_ioctl_out}, 0xfffffffffffffcd0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x7ffffffe) [ 905.450433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 15:49:49 executing program 3: r0 = socket$inet(0x11, 0x40000000000803, 0x0) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000180)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000400), 0x0, &(0x7f00000006c0)=[{0xc, 0x1, 0x24}], 0xc}, 0x0) 15:49:49 executing program 1: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 15:49:49 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$fuse(r2, &(0x7f0000000000)={0x20, 0x0, 0x0, @fuse_ioctl_out}, 0xfffffffffffffcd0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x7ffffffe) 15:49:49 executing program 3: r0 = socket$inet(0x11, 0x40000000000803, 0x0) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000180)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000400), 0x0, &(0x7f00000006c0)=[{0xc, 0x1, 0x24}], 0xc}, 0x0) 15:49:49 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) fcntl$setstatus(r0, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000001440)='./bus\x00', 0x7) 15:49:49 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4, 0x28011, r4, 0x0) [ 905.847193] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 905.906344] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 15:49:49 executing program 3: r0 = socket$inet(0x11, 0x40000000000803, 0x0) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000180)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000400), 0x0, &(0x7f00000006c0)=[{0xc, 0x1, 0x24}], 0xc}, 0x0) [ 905.948655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12344 sclass=netlink_route_socket [ 905.967048] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 905.984671] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 906.002085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12344 sclass=netlink_route_socket 15:49:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KDSIGACCEPT(r1, 0x5393, 0x0) [ 906.051566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12576 sclass=netlink_route_socket 15:49:49 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4, 0x28011, r4, 0x0) 15:49:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) [ 906.108716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 15:49:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KDSIGACCEPT(r1, 0x5393, 0x0) [ 906.168131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12387 sclass=netlink_route_socket [ 906.186431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12344 sclass=netlink_route_socket 15:49:49 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4, 0x28011, r4, 0x0) [ 906.229875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12339 sclass=netlink_route_socket [ 906.249200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8240 sclass=netlink_route_socket 15:49:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 15:49:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KDSIGACCEPT(r1, 0x5393, 0x0) [ 906.281794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12832 sclass=netlink_route_socket [ 906.294008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket [ 906.352106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 15:49:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) [ 906.432480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12387 sclass=netlink_route_socket 15:49:50 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$fuse(r2, &(0x7f0000000000)={0x20, 0x0, 0x0, @fuse_ioctl_out}, 0xfffffffffffffcd0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x7ffffffe) 15:49:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KDSIGACCEPT(r1, 0x5393, 0x0) 15:49:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) [ 906.488886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8240 sclass=netlink_route_socket [ 906.549840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 15:49:50 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$fuse(r2, &(0x7f0000000000)={0x20, 0x0, 0x0, @fuse_ioctl_out}, 0xfffffffffffffcd0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x7ffffffe) 15:49:50 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001007400"], 0x8) close(r0) [ 906.778490] keychord: using input dev Power Button for fevent [ 906.806419] keychord: using input dev AT Translated Set 2 keyboard for fevent 15:49:50 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) fcntl$setstatus(r0, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000001440)='./bus\x00', 0x7) [ 906.960870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12344 sclass=netlink_route_socket [ 906.989561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12344 sclass=netlink_route_socket 15:49:50 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4, 0x28011, r4, 0x0) 15:49:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x1000}) dup2(r1, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) [ 907.014180] keychord: using input dev Power Button for fevent [ 907.023328] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 907.034293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12576 sclass=netlink_route_socket 15:49:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x1000}) dup2(r1, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) [ 907.109124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket [ 907.146132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12387 sclass=netlink_route_socket [ 907.189400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8240 sclass=netlink_route_socket [ 907.223088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12344 sclass=netlink_route_socket 15:49:50 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4, 0x28011, r4, 0x0) 15:49:50 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001007400"], 0x8) close(r0) 15:49:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x1000}) dup2(r1, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) [ 907.247608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket [ 907.264675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12339 sclass=netlink_route_socket [ 907.310795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12832 sclass=netlink_route_socket [ 907.335564] keychord: using input dev Power Button for fevent [ 907.357187] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 907.377331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 15:49:51 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4, 0x28011, r4, 0x0) 15:49:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x1000}) dup2(r1, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) [ 907.428862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12387 sclass=netlink_route_socket [ 907.461626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8240 sclass=netlink_route_socket 15:49:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x1000}) dup2(r1, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) 15:49:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 15:49:51 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001007400"], 0x8) close(r0) [ 907.531869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket 15:49:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x1000}) dup2(r1, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) [ 907.664143] keychord: using input dev Power Button for fevent 15:49:51 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) userfaultfd(0x0) pselect6(0x2e7, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) [ 907.713087] keychord: using input dev AT Translated Set 2 keyboard for fevent 15:49:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x1000}) dup2(r1, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) 15:49:51 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001007400"], 0x8) close(r0) 15:49:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) fcntl$setstatus(r0, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000001440)='./bus\x00', 0x7) [ 908.021471] keychord: using input dev Power Button for fevent [ 908.051595] keychord: using input dev AT Translated Set 2 keyboard for fevent 15:49:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x5380, &(0x7f0000000000)) 15:49:51 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) userfaultfd(0x0) pselect6(0x2e7, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 15:49:51 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}], 0x1, 0x0) 15:49:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000240)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) 15:49:52 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) userfaultfd(0x0) pselect6(0x2e7, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 15:49:52 executing program 4: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x10000000000032, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000001000)={'filter\x00'}, &(0x7f0000000140)=0x24) 15:49:52 executing program 0: unshare(0x400) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140), 0x0) 15:49:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x340, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="6a725a5f62d02a6be55afd02d999", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x8, @dev={0xfe, 0x80}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x5, 0x4) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000240)}, 0x2000) 15:49:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0xd) 15:49:52 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) userfaultfd(0x0) pselect6(0x2e7, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 15:49:52 executing program 7: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='configfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) r1 = syz_open_procfs(0x0, &(0x7f00000c3000)="6d6f756e74696e666f00a4") sendfile(r1, r1, &(0x7f0000000040)=0x800000, 0x408) 15:49:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 15:49:52 executing program 6: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$eventfd(r0, &(0x7f0000000180), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x9, 0x8) 15:49:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}}, 0x104) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x399) 15:49:52 executing program 0: mkdir(&(0x7f0000001000)='./file0\x00', 0x0) mount(&(0x7f0000000140)='\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='btrfs\x00', 0x2000, &(0x7f0000000200)) 15:49:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8000001) fcntl$setstatus(r0, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000001440)='./bus\x00', 0x7) 15:49:52 executing program 2: r0 = socket$inet6(0xa, 0x202000000802, 0x0) r1 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff}, 0x20) 15:49:52 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f00000001c0), 0x8) write(r1, &(0x7f0000000180), 0x0) 15:49:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000040)=0xfffffffffffffff8, 0x4) 15:49:52 executing program 0: mkdir(&(0x7f0000001000)='./file0\x00', 0x0) mount(&(0x7f0000000140)='\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='btrfs\x00', 0x2000, &(0x7f0000000200)) 15:49:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f6970365f666c6f776c6162656c00526afb8ba033bd6fbf0983c0e8e6c7fafcf57cfd4ac49d087e1c4633e874b2e602984665e58b88fcdb034c36563aefc9e5cd7ad69bdf6088b524222bb66d588eb0bb831c47e436206adcf94c4eb4734f291d3489925772ac9454f79acdc18f3dbde74abcb604540bfbcbf6288ad9d0d86c1828659b") r1 = eventfd2(0x0, 0x200000000000800) sendfile(r1, r0, &(0x7f0000000180), 0x10ed5b) 15:49:52 executing program 0: mkdir(&(0x7f0000001000)='./file0\x00', 0x0) mount(&(0x7f0000000140)='\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='btrfs\x00', 0x2000, &(0x7f0000000200)) 15:49:52 executing program 4: mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={"74756e6c3000f5ffffffffffffff00", &(0x7f0000000100)=@ethtool_ts_info={0x41}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00006a5000/0x4000)=nil) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="6206011b00000000fe8000000071b7de46000000000000bb00000000000100000000000000000028ddf40101956d6da27a3200000000000000006efc3e279f189d817bf6e0c0ce4966a1d7e45ce5e3bef6c2a15ff6"], 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x442000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r3) 15:49:52 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="220000002100070700be875d09001c010a00001e0001090000000800050003800010", 0x22) 15:49:52 executing program 2: r0 = socket$inet6(0xa, 0x202000000802, 0x0) r1 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff}, 0x20) 15:49:52 executing program 0: mkdir(&(0x7f0000001000)='./file0\x00', 0x0) mount(&(0x7f0000000140)='\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='btrfs\x00', 0x2000, &(0x7f0000000200)) 15:49:52 executing program 2: r0 = socket$inet6(0xa, 0x202000000802, 0x0) r1 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff}, 0x20) 15:49:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 15:49:53 executing program 6: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$eventfd(r0, &(0x7f0000000180), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x9, 0x8) 15:49:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001fc0)={&(0x7f0000000ac0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x13, 0x2040301, 0x0, 0x0, {0x1f}}, 0x14}, 0x1}, 0x0) recvmmsg(r0, &(0x7f000000be00)=[{{&(0x7f000000bc80)=@can, 0x80, &(0x7f000000bdc0)}}], 0x1, 0x0, &(0x7f000000bec0)) 15:49:53 executing program 0: rt_sigaction(0x7, &(0x7f0000000000), &(0x7f0000d4efe8), 0x8, &(0x7f0000312ff8)) 15:49:53 executing program 4: mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={"74756e6c3000f5ffffffffffffff00", &(0x7f0000000100)=@ethtool_ts_info={0x41}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00006a5000/0x4000)=nil) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="6206011b00000000fe8000000071b7de46000000000000bb00000000000100000000000000000028ddf40101956d6da27a3200000000000000006efc3e279f189d817bf6e0c0ce4966a1d7e45ce5e3bef6c2a15ff6"], 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x442000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r3) 15:49:53 executing program 2: r0 = socket$inet6(0xa, 0x202000000802, 0x0) r1 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff}, 0x20) 15:49:53 executing program 7: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000100)) 15:49:53 executing program 0: mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={"74756e6c3000f5ffffffffffffff00", &(0x7f0000000100)=@ethtool_ts_info={0x41}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00006a5000/0x4000)=nil) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="6206011b00000000fe8000000071b7de46000000000000bb00000000000100000000000000000028ddf40101956d6da27a3200000000000000006efc3e279f189d817bf6e0c0ce4966a1d7e45ce5e3bef6c2a15ff6"], 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x442000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r3) 15:49:53 executing program 1: mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={"74756e6c3000f5ffffffffffffff00", &(0x7f0000000100)=@ethtool_ts_info={0x41}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00006a5000/0x4000)=nil) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="6206011b00000000fe8000000071b7de46000000000000bb00000000000100000000000000000028ddf40101956d6da27a3200000000000000006efc3e279f189d817bf6e0c0ce4966a1d7e45ce5e3bef6c2a15ff6"], 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x442000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r3) 15:49:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000080)=0x7d23f622, 0x4) r2 = accept4(r0, 0x0, &(0x7f0000000ac0)=0xfffffd03, 0x0) sendmsg$nl_route(r2, &(0x7f0000000a00)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8804) dup2(r0, r1) 15:49:53 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000600)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) 15:49:53 executing program 7: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000100)) 15:49:53 executing program 4: mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={"74756e6c3000f5ffffffffffffff00", &(0x7f0000000100)=@ethtool_ts_info={0x41}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00006a5000/0x4000)=nil) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="6206011b00000000fe8000000071b7de46000000000000bb00000000000100000000000000000028ddf40101956d6da27a3200000000000000006efc3e279f189d817bf6e0c0ce4966a1d7e45ce5e3bef6c2a15ff6"], 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x442000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r3) 15:49:53 executing program 7: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000100)) 15:49:53 executing program 0: mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={"74756e6c3000f5ffffffffffffff00", &(0x7f0000000100)=@ethtool_ts_info={0x41}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00006a5000/0x4000)=nil) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="6206011b00000000fe8000000071b7de46000000000000bb00000000000100000000000000000028ddf40101956d6da27a3200000000000000006efc3e279f189d817bf6e0c0ce4966a1d7e45ce5e3bef6c2a15ff6"], 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x442000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r3) 15:49:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 15:49:53 executing program 6: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$eventfd(r0, &(0x7f0000000180), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x9, 0x8) 15:49:53 executing program 7: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000100)) 15:49:53 executing program 1: mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={"74756e6c3000f5ffffffffffffff00", &(0x7f0000000100)=@ethtool_ts_info={0x41}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00006a5000/0x4000)=nil) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="6206011b00000000fe8000000071b7de46000000000000bb00000000000100000000000000000028ddf40101956d6da27a3200000000000000006efc3e279f189d817bf6e0c0ce4966a1d7e45ce5e3bef6c2a15ff6"], 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x442000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r3) 15:49:54 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000040)}) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)}}}], 0x1, 0x0, &(0x7f0000000180)="a6"}) 15:49:54 executing program 4: mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={"74756e6c3000f5ffffffffffffff00", &(0x7f0000000100)=@ethtool_ts_info={0x41}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00006a5000/0x4000)=nil) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="6206011b00000000fe8000000071b7de46000000000000bb00000000000100000000000000000028ddf40101956d6da27a3200000000000000006efc3e279f189d817bf6e0c0ce4966a1d7e45ce5e3bef6c2a15ff6"], 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x442000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r3) 15:49:54 executing program 0: mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={"74756e6c3000f5ffffffffffffff00", &(0x7f0000000100)=@ethtool_ts_info={0x41}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00006a5000/0x4000)=nil) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="6206011b00000000fe8000000071b7de46000000000000bb00000000000100000000000000000028ddf40101956d6da27a3200000000000000006efc3e279f189d817bf6e0c0ce4966a1d7e45ce5e3bef6c2a15ff6"], 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x442000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r3) 15:49:54 executing program 1: mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={"74756e6c3000f5ffffffffffffff00", &(0x7f0000000100)=@ethtool_ts_info={0x41}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00006a5000/0x4000)=nil) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="6206011b00000000fe8000000071b7de46000000000000bb00000000000100000000000000000028ddf40101956d6da27a3200000000000000006efc3e279f189d817bf6e0c0ce4966a1d7e45ce5e3bef6c2a15ff6"], 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x442000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r3) 15:49:54 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='..', 0x0, 0x0) getdents(r1, &(0x7f0000000140)=""/115, 0x73) 15:49:54 executing program 0: fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/148, 0xc}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/icmp6\x00') socket$packet(0x11, 0x0, 0x300) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 15:49:54 executing program 5: seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x81}, {0x6}]}) 15:49:54 executing program 1: r0 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000004c0)="47e37ad0cf344394bf43f96b36e7c2b8a31c89bfa71e3d04181fbd79e32e78c206f46261c8694cbca0f0c3a36b654599d7402360f4de392c4d02352e2bfa9eac5ad6bf23f887cd99d932ebe452444a3d7e36e2789fddffb6f82484d301ae89b9237fe4181bd8d85949071b698eb3e98f36c95a1f0b2a767074f945868c3f4f7d7723e3fa2ac02d1d26bf26861ddf2f3e9331c56070ecfa5d792ad1a543158eef363b2489e916ff914ad84192d2e2a7d3dede0bb181962a5f973819872a6c9bf7b9d4d91155601eb49166ca396b51a891913de774362ae9402a2360e2b2d9cf5613a541ce7e6f69ace6429a0767f61133579d7a3a326e9396220a416e7e81bd0816d7430f3838ea11c18671b6de108bde0465cacb01359219ae58cc09240a4df5478b5159f198aa30cc2cd899104608dcfc958b9f8b10ee48f5bfe134c7b5ac6dd5e71b4b26b910593cf8d2e0687ba041bb5bbd1f2621a7bb54181e4bfb1280f89923032885df0646c79b0334414f2d9529b69b9055cddfceaecb4f8a2b5204ab9ae167f6a328cdc912649a15be11fc9e79f482709d9e814995e32fda5c858a9ccbc5314a031500fc42905d81420431cf476dea1ec09b364020ada89761c2ecc01f5dd5abafe8458908c8f729ac6e31e3853773a1ecad7bdc4391d0dec1dafa5aa1beadadde5a751cff06ab26909b30cfae7d2bd8e8f0f5f7b135d2b58069b64ec2758e74324339254ac0af67620c1f0f5b9f48014dca2453be3a9868c6e4c6c8f3d69c0cc8ef7accf3545e945ab32c7e0bd6a1083763dc42a8d60b1148a227bf410f74a9a569037752542151cb6c6d4ad8d67f1cd0ab2e08333f8ab37564f9e825352c8c536ab567ff4e835433bdcb231423e2ab47c2e41e658415e762b912338a8b1863f9a18980be726fbaf070ebdcebbd425cd5dd541acb4793c5105dbe577538187bf86b385b7c81c8811fa6c208d2ae3ed12803ccf921c7635e30cbbe554f2c8505f698f47f473b16364a4a5223897a7de1d52658ba824d4e8368fceba90669319e6119cba19b6917eebdf0188d8b671e1e99d9b7ef46d0abef3b1e8a660bd30714efe8823fcff2c7a498273d952dce260f0b5ca3d05e6348dad4fd04d8e334b09d626c7eb6ba897404b96e765805db4ad236b22fa5f05336116d2a0a40234ca52077a10fc28442dd72075ad57e5dbc4aa71839ff258194c2a0d2897484211ce6b855babdef8fa4f569c30142fe4def002dc2e68364bfcb58a85f81b313ae657cd344f1f3b04b3e1e252e6b960ec8152ba374e7ea7f3fa0a637709cddc1c406096816e53690139e28fb41b09e79b232573e9ca0268c739acdc3939f9e5c2cd5d6c4b02e4a939425fba5ae5d61e70ceabcdad3d666a34b97c641894ff6ec04f1712109a2ef6a1e1d620d94659b659d89d9cf3de3636085cb447473488de453bdb221339ad5fa7fa352eef36deed2d3f6f1c7b02528a2ec788a286784e85cf30379d6f750e5ab99558df54905e0890f57d69c4bdd49c1478a6735deb4c91816b388282daccf2fab9b7ac7ac9dfab9be4e258e106c99c1f756f85edcbea898f3ec307cea515f49e631fc24adf198d0246a1d3482790e7b2a280dbc4e8ac936d4e9fcc91c3cb376b91e60b25c8cffbee9506db33720339c87565066c8552bd71e3cbfd10d785f3dd361f172a4dde6b6984323d91444ee6ad09e519d5f3b99c3afdebfaba9520726dbf7ef00815ec2b37f0e811e86954daf18a90c5e5ec191eb73244eb57c5c562515bb51b6b2742be1a9464e46fe5dbdbab1b1e3726b53bc109db605d23a753edfe24d4c631b35515f92928edb250093f6c1e30283b9b1c23dfe58fce85fa5a46fde02afd473b9a771d671e44ffc500a68f9e8d8f6f235aee7f341f538b6177fe52a5f782526f741558034d12201e49b15ff578ab5e53703058cc563147693ac68b3bffa90861954d5671afc3bd98e22bdad2f0bd021b1ca7b04d40880a0002fc8059e2cc62ac5e2cf121fbc337c4ce2a3caf02fcddd66cc230b8f70e45547e3b7df65c958c09ed3899368e3d70a0d9ee0d19501c3fc186208d27efc7894d1347e0fc507159fa23ae6b3b00c81912cb7c7f2339f4e8134727018fbe2c50f7a4599ee37cf3bc9f4cf59019fc8c39d66db96c5bcf2c1538f36efe8b3af642c35eed158d9ad25230acc6f42f4f5a1726102b27aaf11e003ba927d3569563f0a6f93281bbd88b1e01a99ce28bb32cfbec649ef06a444382469a6ac634892edf2ebba29865cf66d5b8d9a4c70cc10331b197704b06ed3ec6db3db9512325604bdd7de1bb952457e23d309d6fc7e8d143a9e3698e13ee862156e7647d8e1f0f38cbf39bc123b2454d5023bdad3da71535de9c177536dd30a7bf4ddf8829b48e9df4b7b8d3f44b7dc6bd71f8b72301d8151ee08da0ed7c3a5176937c775c4e5ce286a578411cdb9afb494e88672f0b27ef1a24c5ea61c82569f69d80fd0b07a29be44a371e552e6fbdb81f35bc086af19e64316cdf03e9e9890f5cced96c070d53bfca3aff8b72f969f3a46ce330b8cc3a91b9fbe70aa770c61bdcd7c4d019f9ef47987dda969af933fc66d118cb687ddd4571eacd2281be77271060df37771af2b15eb5faa585bf6ad4f4a50f2b18e914bb0a66cdb69ce61c0189d3702759e4ba859f95a52fcd2ef21be126d27a00d7b0550cea0ffbcd5ff30e511082ff866edbadf0d149b90125b1cbddf4db9bc30ed44972733a5eb31178a84e92e1bc813286bddceecd6cc92f902bc495d2d53bd4ace7b617be4cafa9c146eddac51d6459314fd57bc9a086849bf6b3e9ee17100be5c4b2704b41d9ddb607e10ed5b7a70537f216b52fdd3e3ac1b8138ea2e8ce3f675a0e86e611520c362a7a4feea316b0461c9fbf532b9965f37637e605679987ae2dadd7545fa7a2baf0242184d2f842094dd99af8478bf16ae9ba3812d5a8331caac41791148b831c8b137860c6e7c96571af00ce3a264e5dc42cb07acbb3b0f1507acb11c9d1aae86e33f3303a115bbc63a82ff45888ef26c8d87df2cf81711acaa0c730963dcd5a9b33b47d67ddf17ea9979ea5d876db519c9b43ac461c725b303ce14b9dfc936c4c26942954baa22d8fec0ad8f9b598ca424d05afb2cfb2e42e2e17e5baab8ffaddd515b9083587b21ad961acd2a481e701d45d92adeea80314a9638fa826b7eb735b3177fd2658c7d96073a40d87173de9c58e4c8cdcece3d4198bebfd0de5ea0f97abb857676c341f12d27b319f18b9a8233162f07b2bcf369a409cdf55fadc86e2bf4243b48c0e4395eef43fea92fc09889b50900ae76c3e13c40cb06ce5e7f87aa7432a78341766e1d26ccf74493b2bb0df70cbc8863d96ee7e14b823af4daa92f61c81c90770bb9b7a4684b34bae8ccb2733e8f64bfd666f9f2a9bc94efaf3a0ad4e1cc960c8b3488b5ddb9f71c9c16c5c8fe5d5ab46f09454b13796fe02720d6a7b23511f33b9f62796c15d676860f135cf424ddf6d37f6a9b175efd1aa4415cd3d09a77a4883b3d347b2d99dabebf4a79fc9dfe5dcbf04d96d7a2297803812674d191cba45f3e5f32c90ddd873b97826cd4b0bfa924a5c9ac2671effbf7c7ca74acdbf539ac0c2d6f8b51cae01aea56a70f43c0443ea36c12f1adb605fa772e84ec759bc7ba4a263e12363e1e19070d0c6525faa40c0c3e130ce1da0aaed185e52f7a532e972e333913aeb3eae0b771d901159ef8e15edc7f3becbaa73b57baf72977c1e92cd463199be1e17158590986db60977351e92efc9fe377e3bd2be5ffa3c2b0f99d70157e6a69d3438b53bb372f64fe61b9ccae9afe96eabfcdd39cd2367bf3b2ce601629ed775f4c22f2288263ed4427fae7517f1787c35c5ac54216fd0adfa331557eb024a65069a82c2189cce7ab244f94af46985803438efa0720f6dcb5e9f745daab1d44584342b8bcebd698b67fa82e5219119244a249a5d917b87fd398a8e45258487ffe9420c821c6a0a809381c8e8b881a435177bd6c46e72a68bee2f2d5bd393c3acb262340505962d7f5cc12508321c17db4f654cc1e8cdecbb2773b13467eeb7e54b8a607b54db2fe49916f30edf20af10c54e35a73f74f77d8e0ea0f868f982d7755296e6ee9ffdb34b453d1dd310ffb8fa9e0834d2ec123217badb0d872fa4813377c46e0ee00513973dad9b0e08539c852ca36c8eddeb2a574cfd6f27a91422a9d7adacaa98ebfdecd20b64162ab286b3af55254f09ef46450e0b18cb9ca4b41ac280c3981a662c9b60a2a47286db99600a4b201025562f43659d8498dff8f749f5a53c2067e519024f33c91ee248d247f6318606e20e88cf11f0ba8bf2ee809cab25c01cd3b9576a617128069b64699a3d57c9cf160174d927359c206b6b41e0f3707e5428529c68ad23f6b95db66b2cfa84ab522ea2e7c540b71824c2e9f04f08dd639f33d9e75d61c04c06cf0db7a4c80717c6228a838f59d9ca07844d5d1273f3a01823b10bc17835622783d4e3372cc58f35b5e9ba3eeff7a10ef674e19a8b1ed90b353bcc82d88ecc3e453d552c109012c1069547fd1a10d13c38f3823a80a3c0fc9037cab87d2ac562e674cea66f434d2f4214fa90ba284cfdc438d9ac493fed82f513667b5390fad2b9d412ffed80d0cdc44565b662620a8b29140fc21545fe9306754c4ad0307724823ea4e4272f725f88172045e8509667e6583d947728b9bc35b650f86d9708abf46f2446390f473ffd71a39a7fb95c3a41007b042cff70568d90c3c9c2623a05a5eb9f7ac093f28dc1e3a12bdcfadeb89d933a9f58864358cbba0ae25825e8a94df72414e9667edf17210361dba6f5d09ecee709a15a2371c0b32e054832924babc954d8f9485212ceaf9f3aeec418f5eb2097457b21db156325367b53f829bd16d1b446e75d0796f7f05330341ce6baf62a78ef9c9be4fde0fb2e5ee018e001eb59b8d06037d335f41db5d9597583cee5cdea113d5621ed2d05504fddc80b5dfd7d3367a48e12c9a5372b115651281a874b079ab45b9fc0c2e7dca3640d6012deb5a93c6571c4dc8e20cc89484f682038a4e87c91c3da0b4b8603f2414c66b12a7d1bdcf99c77c3ab7bfb6ef38652a550b889f6c70c9761962a1d143d143bd305da60854f4d0fa5bcbce42957470b09fe9d35851ffcc45a72dae5f06fa609c1017feb30d0de9d356744792ce302b1db97ce83df3aa97352886e8b64e303bd9144f86914617b294983458c454ae452fda6edaa5849779c7a655b084c6ee58d66bc565d91da167409b84afa87227c1ceca70710cd144aec3b70df4db5008023b5b8addf40e6a4520778747a8838ba20744f387c3cc4005006e70fdf3e0ebb9d07a3c8f516d6bc8be7c6d73430377ec701c2df17ce767d89580561ba03a0128f7d47ec77282ad71ca6561ae4e6b43539a90660f039d0267e651458d949b40da25e94f75b47cfeef31c103616be2a9e4a3af9f419651ce71f6cd701f75f0ffe691c8973b87777a7da5ba70be07f7647af5", 0xf47}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000002780)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x9}], 0x2, 0x0) 15:49:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt6_stats\x00') sendfile(r0, r0, &(0x7f00000003c0)=0x41, 0x4) 15:49:54 executing program 0: fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/148, 0xc}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/icmp6\x00') socket$packet(0x11, 0x0, 0x300) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 15:49:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000), 0x4) 15:49:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) [ 911.162173] audit: type=1326 audit(1531064994.776:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=12269 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf77acbe9 code=0x0 15:49:54 executing program 0: fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/148, 0xc}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/icmp6\x00') socket$packet(0x11, 0x0, 0x300) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 15:49:54 executing program 6: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$eventfd(r0, &(0x7f0000000180), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x9, 0x8) 15:49:54 executing program 3: mmap$binder(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x4000001c132, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) 15:49:54 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x14}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x78}, 0x1}, 0x0) [ 911.250767] binder: 12276:12280 ERROR: BC_REGISTER_LOOPER called without request [ 911.318819] binder: release 12276:12280 transaction 438 out, still active [ 911.327935] binder: send failed reply for transaction 438, target dead [ 911.338217] binder: undelivered TRANSACTION_COMPLETE [ 911.356299] binder: 12276:12280 ioctl c0306201 2000efd0 returned -14 [ 911.362746] binder: BINDER_SET_CONTEXT_MGR already set [ 911.362757] binder: 12234:12293 ioctl 40046207 0 returned -16 [ 911.418530] binder: BINDER_SET_CONTEXT_MGR already set [ 911.425866] binder: 12276:12300 ioctl 40046207 0 returned -16 [ 911.435591] binder: 12276:12300 ERROR: BC_REGISTER_LOOPER called without request [ 911.445708] binder_alloc: 12276: binder_alloc_buf, no vma [ 911.451804] binder: 12276:12280 transaction failed 29189/-3, size 0-0 line 3142 [ 911.459463] binder: undelivered TRANSACTION_ERROR: 29189 [ 911.465420] binder: send failed reply for transaction 439 to 12234:12295 [ 911.472378] binder: send failed reply for transaction 440 to 12234:12293 [ 911.497959] binder_alloc: binder_alloc_mmap_handler: 12234 20001000-20004000 already mapped failed -16 15:49:55 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000040)}) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)}}}], 0x1, 0x0, &(0x7f0000000180)="a6"}) 15:49:55 executing program 1: r0 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000004c0)="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", 0xf47}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000002780)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x9}], 0x2, 0x0) 15:49:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 15:49:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000080)='\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 15:49:55 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 15:49:55 executing program 0: fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/148, 0xc}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/icmp6\x00') socket$packet(0x11, 0x0, 0x300) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 15:49:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) [ 911.540686] binder_alloc: 12234: binder_alloc_buf, no vma [ 911.546392] binder: 12234:12303 transaction failed 29189/-3, size 0-0 line 3142 15:49:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) [ 911.603331] binder: undelivered TRANSACTION_COMPLETE [ 911.609470] binder: undelivered TRANSACTION_ERROR: 29189 [ 911.610226] binder: 12309:12315 ERROR: BC_REGISTER_LOOPER called without request [ 911.631010] binder: send failed reply for transaction 445 to 12309:12315 15:49:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000080)='\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 15:49:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000040)}) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)}}}], 0x1, 0x0, &(0x7f0000000180)="a6"}) 15:49:55 executing program 1: r0 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000004c0)="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", 0xf47}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000002780)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x9}], 0x2, 0x0) 15:49:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000040)}) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)}}}], 0x1, 0x0, &(0x7f0000000180)="a6"}) [ 911.654585] binder: undelivered TRANSACTION_COMPLETE [ 911.677305] binder: undelivered TRANSACTION_ERROR: 29201 [ 911.691809] binder: 12309:12315 ioctl c0306201 2000efd0 returned -14 15:49:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) [ 911.726039] binder: undelivered TRANSACTION_ERROR: 29189 15:49:55 executing program 1: r0 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000004c0)="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", 0xf47}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000002780)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x9}], 0x2, 0x0) 15:49:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000080)='\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 15:49:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) [ 912.140401] binder: 12345:12347 ERROR: BC_REGISTER_LOOPER called without request [ 912.151650] binder: release 12345:12347 transaction 447 out, still active [ 912.159963] binder: send failed reply for transaction 447, target dead [ 912.163646] binder: undelivered TRANSACTION_COMPLETE [ 912.181194] binder: 12345:12347 ioctl c0306201 2000efd0 returned -14 [ 912.435514] binder: 12317:12353 got transaction to context manager from process owning it [ 912.443988] binder: 12317:12353 transaction failed 29201/-22, size 0-0 line 3010 15:49:56 executing program 6: getrandom(&(0x7f0000000040), 0x0, 0x3) 15:49:56 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000040)}) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)}}}], 0x1, 0x0, &(0x7f0000000180)="a6"}) 15:49:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 15:49:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000080)='\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 15:49:56 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000000)={{0x7fffffff, 0x1000000000009}}) 15:49:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) [ 912.510969] binder: BINDER_SET_CONTEXT_MGR already set [ 912.516340] binder: 12326:12354 ioctl 40046207 0 returned -16 [ 912.588023] binder: 12330:12355 got transaction to context manager from process owning it [ 912.592077] binder: BINDER_SET_CONTEXT_MGR already set [ 912.592084] binder: 12361:12365 ioctl 40046207 0 returned -16 [ 912.593364] binder: send failed reply for transaction 449 to 12317:12353 [ 912.593383] binder: send failed reply for transaction 451 to 12326:12354 [ 912.593400] binder: send failed reply for transaction 452 to 12326:12354 [ 912.596436] binder: undelivered TRANSACTION_COMPLETE 15:49:56 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 15:49:56 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:49:56 executing program 3: timer_create(0x7, &(0x7f00000004c0)={0x0, 0x0, 0x1, @thr={&(0x7f0000000340), &(0x7f00000003c0)}}, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) 15:49:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000040)}) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)}}}], 0x1, 0x0, &(0x7f0000000180)="a6"}) [ 912.596449] binder: undelivered TRANSACTION_ERROR: 29189 [ 912.602857] binder: 12361:12365 ERROR: BC_REGISTER_LOOPER called without request [ 912.604724] binder: release 12361:12365 transaction 456 out, still active [ 912.604728] binder: undelivered TRANSACTION_COMPLETE [ 912.661219] binder: 12330:12355 transaction failed 29201/-22, size 0-0 line 3010 [ 912.703444] binder: undelivered TRANSACTION_COMPLETE [ 912.708869] binder: undelivered TRANSACTION_ERROR: 29189 15:49:56 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ec6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000358fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000a5dfe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f0000080000)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) poll(&(0x7f000071cfe0)=[{r0}], 0x1, 0x0) 15:49:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000040)}) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)}}}], 0x1, 0x0, &(0x7f0000000180)="a6"}) 15:49:56 executing program 3: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x36, &(0x7f0000f68000)={@remote={0xfe, 0x80, [], 0xbb}}, 0x20) 15:49:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x440000000000530e, &(0x7f0000000140)) 15:49:56 executing program 5: futex(&(0x7f0000000040), 0xc, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000000), 0x0) [ 912.824219] binder: send failed reply for transaction 454 to 12330:12355 [ 912.831279] binder: send failed reply for transaction 456, target dead [ 912.843763] binder: release 12380:12383 transaction 461 out, still active 15:49:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffb7, 0x20000804, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x7e) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) [ 912.878801] binder: undelivered TRANSACTION_COMPLETE [ 912.887460] binder: undelivered TRANSACTION_ERROR: 29189 [ 912.913313] binder: undelivered TRANSACTION_COMPLETE 15:49:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newroute={0x20, 0x18, 0x501, 0x0, 0x0, {0xa, 0xfe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_METRICS={0x4, 0x8}]}, 0x20}, 0x1}, 0x0) [ 912.929847] binder: BINDER_SET_CONTEXT_MGR already set [ 912.941720] binder: 12380:12401 ioctl 40046207 0 returned -16 [ 912.959565] binder_alloc: 12380: binder_alloc_buf, no vma [ 912.972378] binder: 12380:12401 transaction failed 29189/-3, size 24-8 line 3142 [ 912.985286] binder: 12380:12383 got transaction to invalid handle [ 912.991846] binder: 12380:12383 transaction failed 29201/-22, size 0-0 line 3019 [ 913.043342] binder: undelivered TRANSACTION_ERROR: 29201 [ 913.049847] binder: release 12380:12383 transaction 458 out, still active [ 913.057520] binder: unexpected work type, 4, not freed [ 913.062905] binder: undelivered TRANSACTION_COMPLETE [ 913.068961] binder: send failed reply for transaction 461, target dead [ 913.075805] binder: send failed reply for transaction 458, target dead [ 913.082556] binder: undelivered TRANSACTION_ERROR: 29189 [ 913.398177] binder: 12362:12409 got transaction to context manager from process owning it [ 913.406634] binder: 12362:12409 transaction failed 29201/-22, size 0-0 line 3010 15:49:57 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000040)}) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)}}}], 0x1, 0x0, &(0x7f0000000180)="a6"}) 15:49:57 executing program 5: r0 = inotify_init() readv(r0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/55, 0x37}], 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x80000002) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:49:57 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:49:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffb7, 0x20000804, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x7e) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 15:49:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffb7, 0x20000804, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x7e) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) [ 913.544066] binder: send failed reply for transaction 465 to 12362:12409 [ 913.551097] binder: 12373:12411 got transaction to context manager from process owning it [ 913.561334] binder: undelivered TRANSACTION_COMPLETE [ 913.567943] binder: 12373:12411 transaction failed 29201/-22, size 0-0 line 3010 [ 913.585140] binder: BINDER_SET_CONTEXT_MGR already set 15:49:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffb7, 0x20000804, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x7e) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) [ 913.590635] binder: undelivered TRANSACTION_ERROR: 29189 [ 913.603587] binder: 12414:12421 ioctl 40046207 0 returned -16 [ 913.620581] binder: 12414:12421 got transaction to invalid handle [ 913.634812] binder: 12414:12421 transaction failed 29201/-22, size 0-0 line 3019 15:49:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffb7, 0x20000804, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x7e) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 15:49:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000040)}) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)}}}], 0x1, 0x0, &(0x7f0000000180)="a6"}) [ 913.649769] binder: BINDER_SET_CONTEXT_MGR already set [ 913.656751] binder: 12388:12423 ioctl 40046207 0 returned -16 [ 913.684582] binder_alloc: 12373: binder_alloc_buf, no vma 15:49:57 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 913.711713] binder: 12388:12423 transaction failed 29189/-3, size 0-0 line 3142 [ 913.723342] binder: undelivered TRANSACTION_ERROR: 29201 [ 913.729934] binder: send failed reply for transaction 468 to 12373:12411 [ 913.756363] binder: send failed reply for transaction 470 to 12414:12421 15:49:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffb7, 0x20000804, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x7e) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 15:49:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000040)}) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)}}}], 0x1, 0x0, &(0x7f0000000180)="a6"}) 15:49:57 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ec6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000358fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000a5dfe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f0000080000)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) poll(&(0x7f000071cfe0)=[{r0}], 0x1, 0x0) [ 913.803193] binder: send failed reply for transaction 474 to 12388:12423 [ 913.804675] binder: release 12437:12438 transaction 480 out, still active [ 913.824586] binder: undelivered TRANSACTION_COMPLETE 15:49:57 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:49:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffb7, 0x20000804, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x7e) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) [ 913.871423] binder: send failed reply for transaction 477 to 12437:12438 [ 913.911335] binder: unexpected work type, 4, not freed [ 913.935499] binder: release 12447:12449 transaction 485 out, still active [ 913.944743] binder: undelivered TRANSACTION_COMPLETE [ 913.957845] binder: undelivered TRANSACTION_ERROR: 29189 15:49:57 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) 15:49:57 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={"74756e6c3000000000ffe200", &(0x7f0000000140)=@ethtool_coalesce={0xf}}) [ 913.979482] binder: send failed reply for transaction 480, target dead [ 913.995201] binder: undelivered TRANSACTION_COMPLETE [ 914.053536] binder: send failed reply for transaction 482 to 12447:12449 [ 914.078655] binder: unexpected work type, 4, not freed [ 914.104532] binder: undelivered TRANSACTION_COMPLETE [ 914.109714] binder: undelivered TRANSACTION_ERROR: 29189 [ 914.116269] binder: send failed reply for transaction 485, target dead [ 914.124504] binder: undelivered TRANSACTION_COMPLETE [ 914.129619] binder: undelivered TRANSACTION_ERROR: 29189 [ 914.135301] binder: undelivered TRANSACTION_COMPLETE [ 914.140411] binder: undelivered TRANSACTION_ERROR: 29189 [ 914.146217] binder: undelivered TRANSACTION_COMPLETE [ 914.151317] binder: undelivered TRANSACTION_ERROR: 29189 [ 914.385804] binder: 12417:12465 got transaction to context manager from process owning it [ 914.394377] binder: 12417:12465 transaction failed 29201/-22, size 0-0 line 3010 15:49:58 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000540), 0x245, 0x0) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000001080)}, {&(0x7f0000001140)}], 0x2) 15:49:58 executing program 6: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x2081fc) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) readv(r1, &(0x7f00000042c0)=[{&(0x7f0000004000)=""/233, 0xe9}, {&(0x7f0000001ac0)=""/21, 0x15}, {&(0x7f0000003ec0)=""/61, 0x3d}], 0x3) 15:49:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000480)=""/136, 0x88}], 0x2) 15:49:58 executing program 7: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)=[{0x10, 0x29, 0xb, "f1"}], 0x10}, 0x0) 15:49:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) 15:49:58 executing program 7: r0 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000140)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000008000)={0x8, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000000)=0x369) [ 914.533266] binder: send failed reply for transaction 487 to 12417:12465 [ 914.544674] binder: undelivered TRANSACTION_COMPLETE [ 914.555757] binder: 12432:12468 got transaction to context manager from process owning it [ 914.576194] binder: undelivered TRANSACTION_ERROR: 29189 15:49:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000480)=""/136, 0x88}], 0x2) [ 914.587364] binder: 12432:12468 transaction failed 29201/-22, size 0-0 line 3010 15:49:58 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000540), 0x245, 0x0) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000001080)}, {&(0x7f0000001140)}], 0x2) 15:49:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000080)) 15:49:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) [ 914.760550] binder: 12444:12495 got transaction to context manager from process owning it [ 914.769262] binder: send failed reply for transaction 490 to 12432:12468 [ 914.802344] binder: undelivered TRANSACTION_COMPLETE [ 914.832707] binder: undelivered TRANSACTION_ERROR: 29189 [ 914.845246] binder: 12444:12495 transaction failed 29201/-22, size 0-0 line 3010 15:49:58 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000040), &(0x7f00000001c0)) wait4(0x0, &(0x7f00000003c0), 0x80000000, 0x0) 15:49:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="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") sendfile(r0, r0, &(0x7f0000000080)=0xffc, 0x48c) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) 15:49:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000480)=""/136, 0x88}], 0x2) 15:49:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}, 0x1}, 0x0) 15:49:58 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ec6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000358fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000a5dfe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f0000080000)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) poll(&(0x7f000071cfe0)=[{r0}], 0x1, 0x0) 15:49:58 executing program 6: setitimer(0x3, &(0x7f0000000200)={{0x77359400}}, &(0x7f0000000240)) 15:49:58 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000540), 0x245, 0x0) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000001080)}, {&(0x7f0000001140)}], 0x2) 15:49:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 914.943376] binder: send failed reply for transaction 493 to 12444:12495 [ 914.951143] binder: undelivered TRANSACTION_COMPLETE 15:49:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="6e65742f69665f696e65743600689d001e363b6c264fa887a26fda3eca58373161f13a12a92be6a993b4720d86396a9b1cc039d178e14492de97786eb30b86bb0ae2163b7ed177ff87e312d09bd390ce2ce4d13622dbc9d6b533c3f99225e401466f9ef8a9ea53c0f13a5a10cf9677596ce7761105a3ac3b287b2ca64a5ad4aad7c941387ab5acedea8f64c584562f2a3eb7aac4df59716b44156fd857da4ad2bb42af9246985432c372d8c3f7484fb6dfdf47690d3d8aa7cca48c70d4948da27a4d0ffbcb7c45af39bfb20eb1f07921ecb9437cd67a19010f35d27641fa72d0fc9f032f4d9d899ee1732adef346b6fa980ea31173fc8793dc49e512cac9e4e7e5ad81301b5dcfdbdaa7a89755fb04c520292659576c2fac2022cb13162ebf5fe9b1c7623cc56f837bd67b6953ba10cac9a54f5872af891930ab666d09492c1017e842a364b2d40697e48a955328081d627cb6560a972b55e8106c2b0f0000bf5d23d5a33709d8dac6f3e42cfef662e6") sendfile(r0, r0, &(0x7f0000000080)=0xffc, 0x48c) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) 15:49:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 15:49:58 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @random="1b207f5c5eeb", [], {@mpls_uc={0x8864, {[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x21, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, @igmp={0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}}}}, &(0x7f0000000080)) 15:49:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000480)=""/136, 0x88}], 0x2) [ 914.992464] binder: undelivered TRANSACTION_ERROR: 29189 15:49:58 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0xfeffffff, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 15:49:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000240)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) 15:49:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="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") sendfile(r0, r0, &(0x7f0000000080)=0xffc, 0x48c) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) 15:49:58 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000540), 0x245, 0x0) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000001080)}, {&(0x7f0000001140)}], 0x2) 15:49:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a00010000000f0000000200005a440800005d14dfb515", 0x39}], 0x1) 15:49:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}], 0x48, 0x0, &(0x7f0000000440)="a808285ca183fdbe0dd23f4223d7c58b117bf3caca20090ed2897248019d13bd5526e3f79398460b4dd21aa1415c128dd3c49dd5863a0f9f058e039c9b0f4c4185879c8efedf59d8"}) r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000000240)}) 15:49:58 executing program 3: r0 = memfd_create(&(0x7f0000041000)="b8c0a9b7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000041ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000e50)=[{0x9, 0x0, 0x0, 0x0, @tick=0x5da36b38, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000002c0)={0x5a, @time={0x77359400}, 0x0, {}, 0x8000000000000009}) 15:49:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000240)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) [ 915.256949] binder: 12554:12561 ERROR: BC_REGISTER_LOOPER called without request [ 915.305551] binder_alloc: 12554: binder_alloc_buf, no vma [ 915.316410] binder: 12554:12561 transaction failed 29189/-3, size 0-0 line 3142 [ 915.326784] binder: send failed reply for transaction 496 to 12554:12561 [ 915.338036] binder_alloc: binder_alloc_mmap_handler: 12554 20001000-20004000 already mapped failed -16 [ 915.358346] binder: BINDER_SET_CONTEXT_MGR already set [ 915.363817] binder: 12554:12561 ioctl 40046207 0 returned -16 [ 915.364322] binder_alloc: 12554: binder_alloc_buf, no vma [ 915.364363] binder: 12554:12567 transaction failed 29189/-3, size 0-0 line 3142 [ 915.384194] binder: 12554:12567 ERROR: BC_REGISTER_LOOPER called without request [ 915.392186] binder: 12554:12570 got reply transaction with no transaction stack [ 915.400529] binder: 12554:12570 transaction failed 29201/-71, size 0-0 line 2927 [ 915.409277] binder: 12554:12567 BC_FREE_BUFFER u0000000020001000 no match [ 915.421754] binder: undelivered TRANSACTION_ERROR: 29189 [ 915.434185] binder: undelivered TRANSACTION_COMPLETE [ 915.439449] binder: undelivered TRANSACTION_ERROR: 29189 15:49:59 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ec6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000358fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000a5dfe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f0000080000)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) poll(&(0x7f000071cfe0)=[{r0}], 0x1, 0x0) 15:49:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="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") sendfile(r0, r0, &(0x7f0000000080)=0xffc, 0x48c) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) 15:49:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000240)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) 15:49:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') ioctl$fiemap(r0, 0x402c582a, &(0x7f00000001c0)={0x0, 0x10000000000}) 15:49:59 executing program 3: r0 = socket(0x10, 0x803, 0x9) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x109200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f0000000000000000") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) socketpair(0x1, 0x7, 0x9, &(0x7f00000000c0)) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/18, 0x12, 0x120, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) syz_open_procfs(0x0, &(0x7f00000002c0)) socketpair(0x5, 0x80b, 0x45e, &(0x7f0000000040)) 15:49:59 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 15:49:59 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r2, 0x401) 15:49:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000240)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) 15:49:59 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x0, 0x0, &(0x7f0000002640)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') pwritev(r0, &(0x7f0000001400), 0x2a6, 0x0) 15:49:59 executing program 7: r0 = memfd_create(&(0x7f0000000000)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/50) 15:49:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') ioctl$fiemap(r0, 0x402c582a, &(0x7f00000001c0)={0x0, 0x10000000000}) [ 915.919934] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=257 sclass=netlink_audit_socket [ 915.952605] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36112 sclass=netlink_audit_socket 15:49:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f0000000a80)}}], 0x1, 0x0) 15:49:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') ioctl$fiemap(r0, 0x402c582a, &(0x7f00000001c0)={0x0, 0x10000000000}) [ 916.014687] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33536 sclass=netlink_audit_socket 15:49:59 executing program 5: clone(0x14000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) [ 916.096199] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33808 sclass=netlink_audit_socket 15:49:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f0000000a80)}}], 0x1, 0x0) 15:49:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') ioctl$fiemap(r0, 0x402c582a, &(0x7f00000001c0)={0x0, 0x10000000000}) [ 916.190693] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5125 sclass=netlink_audit_socket [ 916.238995] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21334 sclass=netlink_audit_socket [ 916.290838] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=247 sclass=netlink_audit_socket [ 916.327157] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=64904 sclass=netlink_audit_socket [ 916.340234] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29395 sclass=netlink_audit_socket [ 916.351588] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21334 sclass=netlink_audit_socket [ 916.361689] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket [ 916.371846] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket [ 916.381542] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34107 sclass=netlink_audit_socket [ 916.392922] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4095 sclass=netlink_audit_socket [ 916.402882] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1 sclass=netlink_audit_socket [ 916.413178] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=56389 sclass=netlink_audit_socket [ 916.423678] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65313 sclass=netlink_audit_socket [ 916.433787] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4458 sclass=netlink_audit_socket [ 916.444176] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=55353 sclass=netlink_audit_socket [ 916.454178] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4208 sclass=netlink_audit_socket [ 916.464553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=27331 sclass=netlink_audit_socket [ 916.474753] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29837 sclass=netlink_audit_socket [ 916.485469] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38 sclass=netlink_audit_socket [ 916.495232] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=3108 sclass=netlink_audit_socket [ 916.505611] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket [ 916.515288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket [ 916.525502] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=12403 sclass=netlink_audit_socket [ 916.535512] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=62650 sclass=netlink_audit_socket [ 916.546226] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket [ 916.556236] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65485 sclass=netlink_audit_socket [ 916.566709] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=492 sclass=netlink_audit_socket [ 916.576559] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22280 sclass=netlink_audit_socket [ 916.587205] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33537 sclass=netlink_audit_socket [ 916.597210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18430 sclass=netlink_audit_socket [ 916.607661] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=182 sclass=netlink_audit_socket [ 916.617496] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26325 sclass=netlink_audit_socket [ 916.628050] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2088 sclass=netlink_audit_socket [ 916.637973] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=61911 sclass=netlink_audit_socket [ 916.648424] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26112 sclass=netlink_audit_socket [ 916.658442] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28431 sclass=netlink_audit_socket [ 916.668912] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49687 sclass=netlink_audit_socket [ 916.678928] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4032 sclass=netlink_audit_socket [ 916.689627] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37008 sclass=netlink_audit_socket [ 916.699716] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=55823 sclass=netlink_audit_socket [ 916.711096] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=50011 sclass=netlink_audit_socket [ 916.721172] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=10255 sclass=netlink_audit_socket [ 916.731688] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4649 sclass=netlink_audit_socket [ 916.741657] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35686 sclass=netlink_audit_socket [ 916.752302] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49935 sclass=netlink_audit_socket [ 916.762337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=3904 sclass=netlink_audit_socket [ 916.772712] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26350 sclass=netlink_audit_socket [ 916.782781] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2062 sclass=netlink_audit_socket [ 916.793378] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=8274 sclass=netlink_audit_socket [ 916.803800] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26111 sclass=netlink_audit_socket [ 916.813954] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket [ 916.828801] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35600 sclass=netlink_audit_socket [ 916.839935] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26256 sclass=netlink_audit_socket [ 916.858967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=27669 sclass=netlink_audit_socket [ 916.869774] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=257 sclass=netlink_audit_socket [ 916.880270] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=7561 sclass=netlink_audit_socket 15:50:00 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 15:50:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCCONS(r0, 0x541d) 15:50:00 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x0, 0x0, &(0x7f0000002640)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') pwritev(r0, &(0x7f0000001400), 0x2a6, 0x0) 15:50:00 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[@ANYRES16], 0xfffffffffffffdf7) ioctl$TIOCEXCL(r1, 0x540c) fcntl$setsig(r1, 0xa, 0x36) fdatasync(r1) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) fsync(r1) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) [ 916.897127] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36112 sclass=netlink_audit_socket [ 916.907860] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5237 sclass=netlink_audit_socket [ 916.919326] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33536 sclass=netlink_audit_socket [ 916.940390] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=60547 sclass=netlink_audit_socket [ 916.962047] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33808 sclass=netlink_audit_socket [ 916.978851] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=264 sclass=netlink_audit_socket [ 916.999047] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5125 sclass=netlink_audit_socket [ 917.015277] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=50307 sclass=netlink_audit_socket [ 917.030973] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21334 sclass=netlink_audit_socket [ 917.064387] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=247 sclass=netlink_audit_socket [ 917.091669] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=64904 sclass=netlink_audit_socket [ 917.117296] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29395 sclass=netlink_audit_socket [ 917.144310] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21334 sclass=netlink_audit_socket [ 917.154454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket 15:50:00 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 15:50:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f0000000a80)}}], 0x1, 0x0) 15:50:00 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x0, 0x0, &(0x7f0000002640)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') pwritev(r0, &(0x7f0000001400), 0x2a6, 0x0) 15:50:00 executing program 1: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000021ff8)={0xffffffffffffffff}) pipe(&(0x7f00004a8000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) writev(r2, &(0x7f000000b000)=[{&(0x7f0000c01f96)="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", 0x1001}], 0x1) dup2(r0, r1) 15:50:00 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x0, 0x0, &(0x7f0000002640)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') pwritev(r0, &(0x7f0000001400), 0x2a6, 0x0) [ 917.165430] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket [ 917.175276] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34107 sclass=netlink_audit_socket [ 917.186277] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4095 sclass=netlink_audit_socket [ 917.196615] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1 sclass=netlink_audit_socket [ 917.206891] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=56389 sclass=netlink_audit_socket 15:50:01 executing program 7: r0 = memfd_create(&(0x7f0000000000)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/50) 15:50:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f0000000a80)}}], 0x1, 0x0) 15:50:01 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 15:50:01 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x0, 0x0, &(0x7f0000002640)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') pwritev(r0, &(0x7f0000001400), 0x2a6, 0x0) 15:50:01 executing program 2: r0 = memfd_create(&(0x7f0000000000)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/50) 15:50:01 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 15:50:01 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x0, 0x0, &(0x7f0000002640)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') pwritev(r0, &(0x7f0000001400), 0x2a6, 0x0) 15:50:01 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 15:50:01 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0xffffffb0}}) 15:50:01 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x0, 0x0, &(0x7f0000002640)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') pwritev(r0, &(0x7f0000001400), 0x2a6, 0x0) 15:50:02 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[@ANYRES16], 0xfffffffffffffdf7) ioctl$TIOCEXCL(r1, 0x540c) fcntl$setsig(r1, 0xa, 0x36) fdatasync(r1) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) fsync(r1) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) 15:50:02 executing program 0: r0 = memfd_create(&(0x7f0000000000)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/50) 15:50:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000046c0)=[{{&(0x7f0000001540)=@nl=@unspec, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)=""/109, 0x6d}], 0x1, &(0x7f0000001700)=""/96, 0x60}}], 0x1, 0x0, &(0x7f0000004780)) preadv(r1, &(0x7f0000000140), 0x391, 0x51) 15:50:02 executing program 3: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}]}, 0x78) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 15:50:02 executing program 1: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000021ff8)={0xffffffffffffffff}) pipe(&(0x7f00004a8000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) writev(r2, &(0x7f000000b000)=[{&(0x7f0000c01f96)="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", 0x1001}], 0x1) dup2(r0, r1) 15:50:02 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[@ANYRES16], 0xfffffffffffffdf7) ioctl$TIOCEXCL(r1, 0x540c) fcntl$setsig(r1, 0xa, 0x36) fdatasync(r1) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) fsync(r1) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) 15:50:02 executing program 7: r0 = memfd_create(&(0x7f0000000000)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/50) 15:50:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000046c0)=[{{&(0x7f0000001540)=@nl=@unspec, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)=""/109, 0x6d}], 0x1, &(0x7f0000001700)=""/96, 0x60}}], 0x1, 0x0, &(0x7f0000004780)) preadv(r1, &(0x7f0000000140), 0x391, 0x51) 15:50:02 executing program 2: r0 = memfd_create(&(0x7f0000000000)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/50) 15:50:02 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x48, &(0x7f0000000000)="4aa41625", 0x4) 15:50:02 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) request_key(&(0x7f0000e0f000)='logon\x00', &(0x7f0000ab3ffb)={0x73, 0x79, 0x7a}, &(0x7f0000000380)='\x00', 0x0) 15:50:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000046c0)=[{{&(0x7f0000001540)=@nl=@unspec, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)=""/109, 0x6d}], 0x1, &(0x7f0000001700)=""/96, 0x60}}], 0x1, 0x0, &(0x7f0000004780)) preadv(r1, &(0x7f0000000140), 0x391, 0x51) 15:50:02 executing program 6: clock_adjtime(0x0, &(0x7f0000000000)) sysinfo(&(0x7f0000000080)=""/157) 15:50:02 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x5411, &(0x7f0000000000)) 15:50:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000046c0)=[{{&(0x7f0000001540)=@nl=@unspec, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)=""/109, 0x6d}], 0x1, &(0x7f0000001700)=""/96, 0x60}}], 0x1, 0x0, &(0x7f0000004780)) preadv(r1, &(0x7f0000000140), 0x391, 0x51) 15:50:02 executing program 6: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x0, 0x0) r0 = epoll_create(0x20) fcntl$notify(r0, 0x0, 0x284) 15:50:03 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[@ANYRES16], 0xfffffffffffffdf7) ioctl$TIOCEXCL(r1, 0x540c) fcntl$setsig(r1, 0xa, 0x36) fdatasync(r1) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) fsync(r1) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) 15:50:03 executing program 0: r0 = memfd_create(&(0x7f0000000000)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/50) 15:50:03 executing program 6: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x3}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 15:50:03 executing program 1: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000021ff8)={0xffffffffffffffff}) pipe(&(0x7f00004a8000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) writev(r2, &(0x7f000000b000)=[{&(0x7f0000c01f96)="2c267e242481c30c666d158d944f0d89d0b24c02deea35d5f9772f8dae1cd41446cde1fbd5331eb8ac66abe4cabe3d1e42910a6a97054224ebde680a2c55c3eb196263fff503b9a83e01ec52bb3c81701958db38fabf47e496cf0a9432989b7476733757dc1062021181e6ac4f656a7b7be4ace9d1d96fb9cf322fa1916986285493f75f8787212d0ccbd4c3fa28fda762b68fbf35cc9e334d419c9d9fab1b0a5fd501e429ef862e908502d31b442c89b8e728b222c35ef07ca658b0c27225da062e195f29b1b2ba25d4099813dcd2f613c79466432b6c36fa3b2e7822aa51458c4d5cea7abdba8e2f129daff37f27487e477a5c5ba0f214c0ba7845e146c8689525e3a923e35014b6ddb9b85e35ad7590abaf67c006c4b1feb963d9eab378801359edbcdd410f113b39b11b5f7a420a080df102df54c169372e0e045640619942d91cf198369418515e484ee19965db6d9ff1b76561d8b60216afb1b236d5b56cbdfe8a3166c2cb934bd953d7d4989e899f871d0892bc9cebe86962d59c65881ebf3edcfb52180ff5795d2b5abefefbc7d122a20dc5b32465da34213a0c623d7a9b2f3339fa63ddc561a45ac96a68c4f21423a05ea2235b6df0ed19019d07d9b0e9cda2f58709b494a46ebe64722863d67a846b829f3e3ce4c9f0ce5a37d93fb1d07a420bde1c678ab8ad546c5a1f295baf92e543c4da2dabfb9b15b89e2875c06d7dfcb2994a68fefbdfa07991c1222403482c5b09928214d1d4369ab817d15838538566a0176cc12e72bdac913ea4ad953e4ef72e338c9abb074e45389d831d29eb0c2147ccf7cd404c7c71e77fa9e44a1dcd4bb893211bfd9a2c25214e9202ebc41539286e3f2417a34400bfbfa668b8c0dc75673bbb42c3d88870ace8de6b6b9b5d51264a690396cc342012bba7192829d5e13d7603ed5e8489811daa185e2ad017a5c66df226512cef5ebc7d7b9556d42af281defaadcff6d6f264dedf38296b00b0c1a534dc539c3c7f6b1882be5cd29f7c6541d9efc446ff28ea9a7cf7ced90bf2a3cd4b08b98debf758df3bf64090af0fa91269a827554d0088657fff5d93bcd5c9f26ab2aeceb659e427e05ce81fa0bf118ac60e56aca2129e6bc8513e6372de0ec4b7561d69e7126daf2a98ed9f96b0d3d611a8f0a69468fed7caf20980b80cb2bd629e376aface6d811ccb978546ac135b8cb146862ec33a4f14cec8f340b09bcc49fed4b5f861d397de3eb153841bfeda6cf888f18df77940d2ff55759d1e7c7976f5f4de3803b3b6f1eb5d6e7bb1138f8198119a237482acfe813619c20b7656c76236ad6622e6f917b74fe13679677d7008d603de253372e93994e10590b44c71468723cdaa8a0368c04773926d5d901d46b671d9e5f43641fd39cef19474375343f0a0be26e5614d1970e7d1a6c832253cdbc7f859955ad62674c9a97287d7cb4d811fb7694d579322fdf25ff824605aa0c8cf5460bed8ca2a8b1527c9c51f6b7c1510143b024142d6a9e5111c4aa98147ecc41febad60fb132faa75cc3b61ca564412ef8827327a85efc37ce6df695d394c2399f6e24189499438e0f77b598891e6ffbf855d741817f44f4a431ee11ad30a50b178a5ef179137ba24336b9b9a6a459d1f361eed683da46ccc51081331fc422471a136d31ad7698fc27d0a5cc2e48d0c0af32c91489e03647a9e9771c4fc62d3877079fb037b641a5fe7bda287ab1a049ee5dadaa2f971566dcb708e351e0f937993696fd31a1d999addd76127e97ad684948d0d5e6bd21b0b68986295d7cc71be683e448b1e3016ae3e98ee83512c398376d52bb0ab50674a886d34a7c123748396498581ff22aeb3052d01b3f6dc473b6ce27d359dc9077a68a2abe4b17c3dfbaeb7f90f1be19c89de6753620f33e31cfe27a3a18b333e548836e38920a3459b5407268f0d41c58c6f5091172cf0a508c1d73f2aa9e953496bbe8ab03533f89e2b4dafb37b89d25e0efb75ff84bb1cbd60a33dddb627e88efb44138b40ffad9bf70111f7e8f6b01e89b3a74b9cf71191f2bd026ba01e16a21d0abca2491351475a08fb593cdfb40047e896457af4c3a61f4fb7ad570080193954b62a7839127ddfb8d93018978fd3e642658213571246308454cc4195cead295f6f72c10def5930930e44782edd916230fa99423def58b780f6936d55aa952baea0c58630526df65f0ebf91b0e01c97f9b3bbca8fceff87ffc945c972b51b11954a476967b52c2fa3247a6e6bba9cef9ff5efd4523a64e11005128003b34251108d8f3dd62c3db158fec915546db1db5f02300b3f5baee8ac9a498d00a1bdb1cfab31dffc4506c799a269b6be101c0e8a2907c5464733a06d8f855c619befa9b77cbceb48da086ac09e510c609cb5c95d0f69d053ef35c32a7b96e6ab7297fdf211e198bf90087433474bffd8fe0d1e77934d8848d2d6a5ce21124e8c2af71e28026950caa63c4b0f6648e41225b384d5ee21701659489ccc2017d48463e0dcf97361c538c8b47d049f2b36d0584cb786215400ce18e285c1dbad47dda87c28d3f5f7fb15c560d1b28472f787b4915300364ce08acf3747d0020731e81dac8c252ed2cb5e096268f6d3e363620d92f272bd34c240eb4aba3d01904d897723345234ccbc4610a3a2259b244397b1f1db4094dfbc765aa212dd09a9197c9ff51e0f07c3547fc3f2f86e2d996b3bb4a6ebb282a10e2738b1e945ce3f33bd3979bfba6edb830341f6eb997cab67f9eb7a57fc1a8bf0ce64d9300e622a144bb424ecace72f0d16ef443de9ba89d8ac38e2e88f0a3ed23ec851dfb45df034532169cca827c88081e7fd2354819d9c20ea39f2932787246d8806e089ec1c70cca020f898602f211eb2504aadc3090d85a3ec9483451058d6caba71806f3f494d73755774296a67511572eb801b188dfbddf065be196febbfbce5af895fdc7278a1ede609f9af86f208aeef20001a9fc0bc04eef1a84229dda539e6bcc31479321036f162e57f41b1991cddc88179be2b1ada532eeb770aab9ec82399b80879ed2cdda07b061b0f0ee35002209d9b5afa9836efd2cad153227f4af2c1b4f60c21573c35faec09c45467540dbf3cabee5a2918b4a9432ebe672306f1acfdae1a3c3d8be48c58621c0b16312ed7777f81fc9084eeddf26e68c5d7f0d83347897a69e9b293c1e93b17448fea811d13af456f30f4f5b0ed0ec8b5876ab2dadeff381093f16f5013cfff76f2c77fdaf87d0d82697e070131831054757ac544aab5801ca1dfa665ded0e9de3eedb8cb6f17485a92eceac1b2b33927bb410c9369a4b7f3fc186828693a92fc07f415d244ee972b25c2d42b69c5e03ba57a1037d59f02a098fe62536e7af192233d86e8fae5d17fc7bd13b6e54d59941edeb975c85667a743ad4825e68cd00c707ba80bb0902d7f7fabd7c8e6a6df462b210528ce8378a6255c1da496305c84e741c5a5175919b44938f969bc2cf50e0ea4569e0dc523118e7b4d8165893f610a49a215f0945f0c177d1fc348cfbdbe1ef33bd8f1f41f761b9f8bb23172315bbd451d729f823d20559b3535d01173c92dd4b8c151d1e9be2eeb62d133f050bea021e75e41d8eab2678f0bfb40e134d8a60029a9ee4332316e1665360f477255915f344e1c56ed620431e9e4371c983abef24ba800c239b2273b14b342339a374a0fc3aa30898ef0e69040ef4dd6c298dc90e03242118eb824bd23044c87783085533e19445b43ef341c4372ac4545ac03a3adc532475947d63ce67e1e3763cc7f9ff9d103c434570c02c7b811a648b5bbfadb847d29311b6589a4864fd8af8e354b221fc78e407c95160460cd74d5966ba405da1f496950a6ac1e79ab6dc511ecd726d05d38e0fd65bd66c58c11280785a302aa00ddc03cad93833bd357b30ec13e91d632ec8d5565ed6a5d0554f17b4d7efa147fc0d9035d8a96213e9465da1d3b94f56d3f2b12d7e394a5fff25873c591cee50c5c14273d4b1c645d5ded4a0ad5d8a1296f40c2b65cf457a5780c4a4569927bd896c0d71498f2d31f4f61282540105f5845326aa61ceb01c10be922a2fdeaa1a9689922e255e053be4c4cb45f5c6bd8af4f93f8362bbf54875ddbedab4b97e8cec478e4ceda8121439523839abb6e1cdc7ba2eb34c1fe9931585e1e0d8c326276bab83170752a30f2a3a250aad1cc1f72155457dd3ab40e4c2f1454084683f8bfc92fd87af76a73dbbf06f8d4f18dffbff0c8310eb96303c60401e4efa54def27c4e023aaaee24d525d1d98822eaeb33bbc5d40e8845b6ae1b29ede30c6675f5aab93b2b28391008e62d9d9bd1224116d9874233c57f3524e34a2737f74daa1bb9051ba8e2564fa2f3e5462bd67a7be796c682ba55d0f64331b1c0c3e45aec99548e65b61420f25cad6d3ca9063db31fe16b7157249cdc2e592188efddd0161314104615509ee1ff212c98a448a5b2b7a931b01b1ed502135f324f3b58906591ce181010e9c62ce9cfab26d4ddf9ab43fbc277d15b8bfb93edbcfe276e5646fde162dc926487440cdcc90a92ed03662ec04ab9ec1b1647707b43c7fe18a030e3001cd7915013e0196c4609aa8475fc85302b963f4be6a16b8206b099c81b6bf4619389f6df538813a2ad08183e97750b35b1ced267166f4f39b13d9925db22bdc6dd7c3ca8d0aab439040d42952e62eee9a2728c9b7e45f7463f8447ec2ec435bd7e91bd05ad09ec013468f4ba54437da9b8db677f4eaf10c5746da05bf12359b3aa915be2999e2bce629dd4ad01ce0b6229e4b49cca0157abb5221488a785af2d71a149f096b0c564a6d36ca92d36ea15c54dc44eaafed114a858f1c126f68888eba594dcd52ae7f233e2ec88d2a2fc95da3385e02f30746a844f8d6e05b724aff933c15088cde099f04f4228745bdb51180d4e6114a364cb6ef32a71872dfcb86278df4a20423c354699cdb4c63b35dc4fa04a5d456c65e72b20be53f302e8ccbe6873e76e0adabdca405c50a9d933be9046c616c8e6ada9949de0db64bed0b6c8c8d6250a2589896ebbdaa5e7d254130c4b5fd7e9b57da57e5491aad4aa5f81d73a220332abf1e7a5ccc360bc1ac342408f8d5335e97a3c2f8353498946bfbbabf386459423c4e2af0c908b4724df1f97b92991a937a955ac45aa3b130768c49d550cfdacd2e7753950f336d9ce6f367fb566c935bb940f9beedaaa4348efff216e201a9e5de2c65ac43f6c3d0e8d5f0b960b65c3285c99b2f7d747657bf77afb9057a6d28bede1a72d45cb2125a8902150685e3ca7171212e01d224e876feb972d5ded4313c48164034bc0244ec73e687d87b44c33a16e8471e25e1a58094dfc509a007a3f2c010dfffeb80f36febb448fc40fe301e897bbe1aeb2a7a7ca968b22bb5d5ad5b366a4377ae441937f2b60a4e3ec6c8a90dd415cc47ae6dad270eaadab63c7f321b3af28d9079759da8b18167608a4ae2e08a84f84eeccb08c56cc476ed0db598c174437c1eace848c717a7e5aaca4e35d861038326bae04ebac9bc451fa4c5d60bd52eeeac89e01e11b3719f07b33a4192709713d120b0f7bddd82cbb13c321ccd87880993eedb0e2a8ca88dd7ec9af1367240b20209f96c237e067889503fee6bf3787a4d90570de215fb02d11a82a379303bbb5ed40d0432a317b50ff1ef21bcdf57f894a6938ad35396b6bf8dc24287cea55c472b6bcd7a2e3fd4a6cdf3435e54170fac4f116fdd3817240c940fea9b0509b5e047f23e6f7ef05d04ccdd39bd8d70e1a130e72fdf6c1e", 0x1001}], 0x1) dup2(r0, r1) 15:50:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[@ANYRES16], 0xfffffffffffffdf7) ioctl$TIOCEXCL(r1, 0x540c) fcntl$setsig(r1, 0xa, 0x36) fdatasync(r1) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) fsync(r1) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) 15:50:03 executing program 4: clock_gettime(0x7, &(0x7f00000004c0)) 15:50:03 executing program 7: r0 = memfd_create(&(0x7f0000000000)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/50) 15:50:03 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc0800190001000000", 0x24) 15:50:03 executing program 2: r0 = memfd_create(&(0x7f0000000000)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/50) 15:50:03 executing program 6: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x3}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 15:50:03 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x3}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 15:50:03 executing program 6: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x3}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 15:50:03 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x3}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 15:50:03 executing program 6: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x3}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 15:50:03 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x3}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 15:50:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x4}) 15:50:04 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[@ANYRES16], 0xfffffffffffffdf7) ioctl$TIOCEXCL(r1, 0x540c) fcntl$setsig(r1, 0xa, 0x36) fdatasync(r1) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) fsync(r1) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) 15:50:04 executing program 0: r0 = memfd_create(&(0x7f0000000000)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/50) 15:50:04 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) 15:50:04 executing program 4: prctl$intptr(0x8, 0x3ff) 15:50:04 executing program 1: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000021ff8)={0xffffffffffffffff}) pipe(&(0x7f00004a8000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) writev(r2, &(0x7f000000b000)=[{&(0x7f0000c01f96)="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", 0x1001}], 0x1) dup2(r0, r1) 15:50:04 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[@ANYRES16], 0xfffffffffffffdf7) ioctl$TIOCEXCL(r1, 0x540c) fcntl$setsig(r1, 0xa, 0x36) fdatasync(r1) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[], 0xfffffcf6) fsync(r1) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) 15:50:04 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000dc5f98)) 15:50:04 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x104) close(r0) 15:50:04 executing program 7: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0xfffffffffffeffff) 15:50:04 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@srh={0x0, 0x0, 0x4}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)}, 0x0) 15:50:04 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f000002aff0)=[{&(0x7f0000000080)="5500000020007fafb72d13b2a4b2809302000000030343026c26236925000400fe000000022dca8a9848a3c728f1c46b7b39afdc1338d544000000000000f75ae593de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000000040)}, 0x0) 15:50:04 executing program 6: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000040)={0x24, 0x2c, 0x217, 0x0, 0x0, {}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @pid}]}, @generic="c87245"]}, 0x24}, 0x1}, 0x0) 15:50:04 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0xa, 0x800000000a, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x0) [ 921.302973] netlink: 17 bytes leftover after parsing attributes in process `syz-executor2'. 15:50:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2000000, 0x1) 15:50:05 executing program 2: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x2}, [{}, {0x3}]}, 0x78) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 15:50:05 executing program 6: sched_setscheduler(0x0, 0x5, &(0x7f0000000300)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 15:50:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x80, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:50:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x80, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:50:05 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00007e8fde)="220000002100070700be0000090007010a00001e00000000ff000400050011800041", 0x22) 15:50:05 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000100), 0x4) 15:50:05 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xc, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 15:50:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000001400)=@alg, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x33f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x0, &(0x7f0000002e40)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}, 0x1}, 0x0) 15:50:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 15:50:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x80, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 922.184256] binder_alloc: 12883: binder_alloc_buf, no vma [ 922.197860] binder: 12883:12887 transaction failed 29189/-3, size 0-0 line 3142 15:50:05 executing program 7: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) tee(r1, r0, 0x2008, 0x0) [ 922.228625] binder_alloc: 12883: binder_alloc_buf, no vma 15:50:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x80, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:50:05 executing program 1: keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a}) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) 15:50:05 executing program 2: membarrier(0x0, 0x6000000) [ 922.274407] binder: 12883:12909 transaction failed 29189/-3, size 0-0 line 3142 15:50:06 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000140)=""/148, 0x94}], 0x2000000000000109, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000100), 0x2000000000000314, 0x10400003) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000480)) 15:50:06 executing program 2: r0 = userfaultfd(0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 922.334169] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 922.363444] qtaguid: iface_stat: create6(lo): no inet dev 15:50:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)}}, {{&(0x7f00000029c0)=@nfc={0x27}, 0x80, &(0x7f0000002cc0), 0x0, &(0x7f0000002d00)=[{0xfc0, 0x0, 0x0, "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"}, {0x100c, 0x3a, 0xff10, "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"}, {0x100c, 0x10f, 0x7ff, "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"}], 0x2fd8, 0x4}, 0xfffffffffffffff7}, {{0x0, 0x0, &(0x7f0000009340)=[{&(0x7f0000008240)="eb3eb30963fa72fb1300fa9fdfc63c6badc662812e9a69a6a64210bed364d013667ce97556db2776053d6ebf890a121849c86794e563d6c1b452a0d01d5a0c92f0c002ecc5061a8f0711b56e0b660b80707b923cf402ce92c7c07f8068c8c094eb6a922820d9c1ef125c62499a528cbecadc1cb41ad5243021232d2159c22e256f76cc27aab80db3594512f99030af3e9b7194d8cd80885e62340da0277f5da3cdb77722eb7bf1eaf129118bf7633a71127c1556a12c341051a5861b0965214ce5a310127e7873783c0f2868848e5e6e74d185348c589c", 0xd7}], 0x1, &(0x7f0000009380)=[{0xe0, 0x101, 0x40, "082c10af47b734d58c976ee9b4ec42021d2c8e7784200cb723a1f2402e33b64e539d0285819c09440f78ee8e19f85362b98a83cd9a2c470d2130054d86ed8d4509db28d762b991b98ddc0a9d79bb317857a12fb58bf8433f18c0f2114b72d22f2552e7e2a8064f7d5164e485a800060643cedeb7be93964aece1b4885edad5f8f0a45623d85ed8bab2cd6894e17e558fa00d59c40210080eb9f4bfedb7d34117fa4da0838ee6a61ab1fb3e838826ddbda30ab0ec39ae66cbfae834df14ddc1bc508bde3e7f2e6bb63fc3728a419a948dfec7f1"}, {0xa8, 0x10f, 0x7, "f167d2dc75a6bd833978bf7fe42351422bc6999638058c6f04a7d1a6ddd9af0b0cddcaf5a5cb82da30ef4fc07db0d2ffb98762f113b02a326f00f9100b64a2d16282bfc2ad1db45e5a1a578cfc77590f1ab354ca234f8762864eaab4db986aa7ac1e389ea33f1df28c37f1586ed1a3274b6c8fa3a980d9d0ff260fb19d657b4d2fd316423b4bb22138bfa8041ab6c94330232ff107b0d326ba"}], 0x188, 0x4}, 0x8}], 0x3, 0x0) [ 922.474387] Dead loop on virtual device ip6tnl0, fix it urgently! [ 922.544990] Dead loop on virtual device ip6tnl0, fix it urgently! 15:50:06 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_acct\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 15:50:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)="c21903dc66f0cf4f069dcefadba536f91ddc8de9650368a7dc9404001b", 0x1d) 15:50:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x80, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:50:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000080)=[{0xc, 0x29, 0x43}], 0xc}}], 0x2, 0x0) 15:50:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x80, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:50:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) [ 922.653873] binder: undelivered TRANSACTION_ERROR: 29189 [ 922.669866] binder: undelivered TRANSACTION_ERROR: 29189 [ 922.696570] Dead loop on virtual device ip6tnl0, fix it urgently! [ 922.705109] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 922.726022] Dead loop on virtual device ip6tnl0, fix it urgently! [ 922.763603] qtaguid: iface_stat: create6(lo): no inet dev 15:50:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000340)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000540)}, 0x0) dup2(r1, r0) 15:50:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$evdev(r0, &(0x7f0000000240)=[{{}, 0x11, 0x180}], 0x18) 15:50:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') read(r0, &(0x7f00000003c0)=""/90, 0x5a) 15:50:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x0) sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x4008000, 0x0, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000280)='9', 0x1}], 0x1) 15:50:06 executing program 4: r0 = socket(0x11, 0x400000003, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)=""/91, 0x5b}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) ioctl$sock_ifreq(r0, 0x800000089f3, &(0x7f0000000080)={'ip6gre0\x00', @ifru_flags}) 15:50:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x80, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:50:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) [ 923.063869] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 923.101326] qtaguid: iface_stat: create6(lo): no inet dev 15:50:07 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f0000000000), 0x0) 15:50:07 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 15:50:07 executing program 1: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000010c0)="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", 0x69b) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0xfffffd64) syz_emit_ethernet(0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa008137ffff075c000000000000c2d51d26d57c000000000000e0d26d34ac630000220000000007005c"], &(0x7f00000000c0)) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 15:50:07 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000080)={[0x36, 0x33]}, 0x2) write$cgroup_pid(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='3\t'], 0x2) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 15:50:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) getsockname(r0, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80) 15:50:07 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x400, &(0x7f0000000140)) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') syz_fuse_mount(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:50:07 executing program 0: removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'btrfs.', ',\x00'}) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') socket$packet(0x11, 0x2, 0x300) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 15:50:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 15:50:07 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x303) write$binfmt_elf32(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) 15:50:07 executing program 4: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000380)='ns\x00') exit(0x0) getdents64(r1, &(0x7f0000000340)=""/57, 0x39) 15:50:07 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000001300090468fe0700000000000000ff3f0700000045000107000000141900040002000700efff0100000a00005d14a4e91ee438d2fd", 0x39}], 0x1) 15:50:07 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 15:50:08 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) shutdown(r0, 0x1) 15:50:08 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x400, &(0x7f0000000140)) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') syz_fuse_mount(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:50:08 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000001300090468fe0700000000000000ff3f0700000045000107000000141900040002000700efff0100000a00005d14a4e91ee438d2fd", 0x39}], 0x1) 15:50:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) getsockname(r0, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80) 15:50:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000040)={&(0x7f0000000400)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/153, 0x99}], 0x1, &(0x7f0000000940)=""/42, 0x2a}, 0x202) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f00000004c0), 0x1000002c0) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='#'], 0x1) recvfrom(r1, &(0x7f0000000080)=""/174, 0xae, 0x2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x20000000) 15:50:08 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000001300090468fe0700000000000000ff3f0700000045000107000000141900040002000700efff0100000a00005d14a4e91ee438d2fd", 0x39}], 0x1) 15:50:08 executing program 0: mprotect(&(0x7f0000613000/0x4000)=nil, 0x4000, 0x2b1ebe83d45907c5) 15:50:08 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000001300090468fe0700000000000000ff3f0700000045000107000000141900040002000700efff0100000a00005d14a4e91ee438d2fd", 0x39}], 0x1) 15:50:08 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x400, &(0x7f0000000140)) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') syz_fuse_mount(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:50:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) getsockname(r0, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80) 15:50:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000180), 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000200)=0x1a, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000300)=0x14, 0x4) 15:50:08 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x19, 0x400000201, 0x0, 0x0, {0x2}, [@nested={0x38, 0x0, [@typed={0x8, 0x0, @str='*\x00'}, @generic="b272dfe8be05b4f786f37401eadc21051343ef2a953e90b8116afdc68efffab043878616fc27f49d63"]}]}, 0x4c}, 0x1}, 0x0) 15:50:08 executing program 0: r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r0, 0x0) futex(&(0x7f0000000000), 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000000040), 0x0) 15:50:08 executing program 4: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10) 15:50:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 15:50:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) getsockname(r0, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80) 15:50:08 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x400, &(0x7f0000000140)) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') syz_fuse_mount(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:50:08 executing program 7: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x7, 0x0, @buffer={0xd, 0x4, &(0x7f0000000040)=""/4}, &(0x7f0000000080)="3c1a0080df003b", &(0x7f0000000100)=""/41, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 15:50:08 executing program 0: r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r0, 0x0) futex(&(0x7f0000000000), 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000000040), 0x0) 15:50:08 executing program 6: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000340)=""/47) 15:50:09 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r0, 0x800000007, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x0, 0x1000}) 15:50:09 executing program 7: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x7, 0x0, @buffer={0xd, 0x4, &(0x7f0000000040)=""/4}, &(0x7f0000000080)="3c1a0080df003b", &(0x7f0000000100)=""/41, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 15:50:09 executing program 0: r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r0, 0x0) futex(&(0x7f0000000000), 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000000040), 0x0) 15:50:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_COPY(r0, 0x400c55cb, &(0x7f0000000000)={&(0x7f00002b9000/0x3000)=nil}) 15:50:09 executing program 4: r0 = epoll_create(0x5) r1 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf8ff4)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000100)=""/4096}, &(0x7f0000001100)="44be86ddbaef", &(0x7f0000001200)=""/190, 0x0, 0x0, 0x0, &(0x7f00000012c0)}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 15:50:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_getneigh={0x20, 0x1e, 0x303, 0x0, 0x0, {0xc00}}, 0x20}, 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_buf(r1, 0x29, 0x2d, &(0x7f00000002c0)="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", 0xff) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f00000001c0)={0x0, 0x0, 0x200000, 0xfcae}) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x4, 0x103000) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000240)) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x54) 15:50:09 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0xac}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x60}, 0x1}, 0x0) 15:50:09 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) clock_gettime(0x0, &(0x7f0000000200)) recvmmsg(r0, &(0x7f0000003ec0)=[{{&(0x7f00000039c0)=@ax25, 0x80, &(0x7f00000001c0), 0x186, &(0x7f0000003dc0)=""/244, 0xf4}}], 0x1, 0x0, &(0x7f0000003fc0)) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, &(0x7f0000000000)="96", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x20000000004e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 15:50:09 executing program 0: r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r0, 0x0) futex(&(0x7f0000000000), 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000000040), 0x0) 15:50:09 executing program 7: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x7, 0x0, @buffer={0xd, 0x4, &(0x7f0000000040)=""/4}, &(0x7f0000000080)="3c1a0080df003b", &(0x7f0000000100)=""/41, 0x0, 0x0, 0x0, &(0x7f0000000280)}) [ 925.786117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 925.871357] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 925.906833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 925.917942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 926.186459] binder: 13092:13154 ERROR: BC_REGISTER_LOOPER called without request [ 926.302441] binder_alloc: binder_alloc_mmap_handler: 13092 20001000-20004000 already mapped failed -16 [ 926.315780] binder: BINDER_SET_CONTEXT_MGR already set [ 926.321154] binder: 13092:13154 ioctl 40046207 0 returned -16 [ 926.321260] binder_alloc: 13092: binder_alloc_buf, no vma [ 926.321301] binder: 13092:13157 transaction failed 29189/-3, size 0-0 line 3142 [ 926.348419] binder: 13092:13154 ERROR: BC_REGISTER_LOOPER called without request [ 926.356139] binder: 13092:13157 got reply transaction with no transaction stack [ 926.363658] binder: 13092:13157 transaction failed 29201/-71, size 0-0 line 2927 15:50:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 15:50:10 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40a45323, &(0x7f0000000080)={{0x180}}) 15:50:10 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x80012, r0, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 15:50:10 executing program 6: ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/78, 0x4e}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='comm\x00') writev(r0, &(0x7f00000001c0), 0x26) 15:50:10 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x40442) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000100)={0x53, 0xfffffdffffffffff, 0x6, 0x0, @buffer={0x600, 0x96, &(0x7f0000000180)=""/150}, &(0x7f0000000040)="fc663618c900", &(0x7f0000000500)=""/239}) 15:50:10 executing program 7: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x7, 0x0, @buffer={0xd, 0x4, &(0x7f0000000040)=""/4}, &(0x7f0000000080)="3c1a0080df003b", &(0x7f0000000100)=""/41, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 15:50:10 executing program 5: setrlimit(0x0, &(0x7f0000000240)) setrlimit(0x0, &(0x7f0000000140)={0x2, 0x40000000}) [ 926.477129] binder: undelivered TRANSACTION_ERROR: 29201 [ 926.513466] binder: undelivered TRANSACTION_COMPLETE 15:50:10 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}], 0x30) 15:50:10 executing program 4: r0 = epoll_create1(0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x7) 15:50:10 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) shutdown(r0, 0x0) 15:50:10 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0bc5310, &(0x7f0000000080)={0x4a48b125e13656b}) [ 926.531830] binder: undelivered transaction 505, process died. [ 926.541260] binder: BINDER_SET_CONTEXT_MGR already set 15:50:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/10, 0xa}], 0x200000000000001d) 15:50:10 executing program 5: r0 = epoll_create1(0x0) r1 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) epoll_wait(r0, &(0x7f0000000340)=[{}], 0x1, 0x0) [ 926.578886] binder: 13171:13175 ioctl 40046207 0 returned -16 15:50:10 executing program 6: ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/78, 0x4e}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='comm\x00') writev(r0, &(0x7f00000001c0), 0x26) 15:50:10 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x100, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x100, 0x0, 0xffffffffffffffff}, 0x20) 15:50:10 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={"6966623000fafff6ffffffffff00"}) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4000011, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) [ 926.619319] binder_alloc: 13092: binder_alloc_buf, no vma [ 926.634459] binder: undelivered TRANSACTION_COMPLETE [ 926.639678] binder: undelivered TRANSACTION_ERROR: 29189 [ 926.701552] binder: 13171:13175 transaction failed 29189/-3, size 0-0 line 3142 [ 927.325575] binder: 13171:13217 ERROR: BC_REGISTER_LOOPER called without request [ 927.339646] binder: 13171:13217 got reply transaction with no transaction stack [ 927.347230] binder: 13171:13217 transaction failed 29201/-71, size 0-0 line 2927 15:50:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 15:50:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x8000000000013, &(0x7f0000000000), 0x14) 15:50:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=@getspdinfo={0x14, 0x25, 0x711}, 0x14}, 0x1}, 0x0) 15:50:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040), 0x8001) write(r0, &(0x7f0000000640), 0x0) 15:50:11 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x1, 0x1400000000000000, &(0x7f0000000480)="e9"}) 15:50:11 executing program 6: ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/78, 0x4e}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='comm\x00') writev(r0, &(0x7f00000001c0), 0x26) 15:50:11 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x100, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x100, 0x0, 0xffffffffffffffff}, 0x20) 15:50:11 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={"6966623000fafff6ffffffffff00"}) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4000011, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) [ 927.465898] binder: undelivered TRANSACTION_ERROR: 29201 15:50:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/prev\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/202, 0x3}], 0x2000000000000112, 0x0) 15:50:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x50, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0xfe56) 15:50:11 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x100, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x100, 0x0, 0xffffffffffffffff}, 0x20) 15:50:11 executing program 6: ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/78, 0x4e}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='comm\x00') writev(r0, &(0x7f00000001c0), 0x26) [ 927.511622] binder: BINDER_SET_CONTEXT_MGR already set [ 927.513191] binder: undelivered TRANSACTION_ERROR: 29189 [ 927.536086] Dead loop on virtual device ip6tnl0, fix it urgently! [ 927.552574] binder: 13224:13230 ioctl 40046207 0 returned -16 [ 927.566155] Dead loop on virtual device ip6tnl0, fix it urgently! [ 927.592913] binder: 13224:13230 ioctl c0306201 20000440 returned -14 [ 927.612095] Dead loop on virtual device ip6tnl0, fix it urgently! 15:50:11 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xfffffffffffffffc, 0x5c832, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') 15:50:11 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x100, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x100, 0x0, 0xffffffffffffffff}, 0x20) 15:50:11 executing program 6: socket(0x11, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') read(r0, &(0x7f0000000100)=""/133, 0x85) [ 927.648419] binder_alloc: binder_alloc_mmap_handler: 13224 20001000-20004000 already mapped failed -16 [ 927.651577] Dead loop on virtual device ip6tnl0, fix it urgently! [ 927.651897] Dead loop on virtual device ip6tnl0, fix it urgently! [ 927.652245] Dead loop on virtual device ip6tnl0, fix it urgently! [ 927.692789] binder: BINDER_SET_CONTEXT_MGR already set 15:50:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='fd/3\x00') close(r0) [ 927.713412] binder: 13224:13230 ioctl 40046207 0 returned -16 [ 927.771481] binder: 13224:13257 ioctl c0306201 20000440 returned -14 [ 927.831564] binder: release 13224:13257 transaction 515 out, still active [ 927.855144] binder: undelivered TRANSACTION_COMPLETE [ 927.874199] binder: release 13224:13230 transaction 512 out, still active [ 927.888953] binder: undelivered TRANSACTION_COMPLETE [ 928.277883] binder: 13219:13270 ERROR: BC_REGISTER_LOOPER called without request 15:50:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 15:50:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/prev\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/202, 0x3}], 0x2000000000000112, 0x0) 15:50:12 executing program 2: r0 = memfd_create(&(0x7f0000000100)='}\x00', 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x51, r0, 0x0) fcntl$addseals(r0, 0x409, 0xf) 15:50:12 executing program 4: mkdir(&(0x7f000052aff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000de2ff8)='.', &(0x7f00005e9000)='cifs\x00', 0x6000, &(0x7f0000ad5000)) 15:50:12 executing program 7: socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x0) write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000007500)=[{{&(0x7f0000003f00)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000005180)=""/4096, 0x1000}}, {{&(0x7f0000006180)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000007480)=""/100, 0x64}}], 0x2, 0x42, 0x0) 15:50:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000010"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f00000000c0)=[@fda={0x66646185}, @fd={0x66642a85}], &(0x7f0000000180)=[0x20]}}], 0x0, 0x0, &(0x7f0000000500)}) 15:50:12 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) setitimer(0x0, &(0x7f0000000180)={{0x0, 0x2710}}, &(0x7f00000001c0)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req3={0x0, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:50:12 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={"6966623000fafff6ffffffffff00"}) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4000011, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) 15:50:12 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000b, &(0x7f0000c29ffc)=0x9, 0x4) [ 928.397100] binder: undelivered TRANSACTION_COMPLETE [ 928.402305] binder: send failed reply for transaction 512, target dead [ 928.409426] binder: send failed reply for transaction 515, target dead 15:50:12 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x4005, 0x4) sendto$inet6(r0, &(0x7f0000000100)="04010000008b00ddb8460900ffb2", 0xe, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x6, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) 15:50:12 executing program 4: mkdir(&(0x7f000052aff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000de2ff8)='.', &(0x7f00005e9000)='cifs\x00', 0x6000, &(0x7f0000ad5000)) 15:50:12 executing program 2: mkdir(&(0x7f000052aff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000de2ff8)='.', &(0x7f00005e9000)='cifs\x00', 0x6000, &(0x7f0000ad5000)) [ 928.461753] binder: 13281:13286 ERROR: BC_REGISTER_LOOPER called without request [ 928.473801] binder: undelivered TRANSACTION_COMPLETE [ 928.479130] binder: undelivered transaction 518, process died. [ 928.499687] binder: 13281:13286 got transaction with invalid fd, -1 15:50:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/prev\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/202, 0x3}], 0x2000000000000112, 0x0) 15:50:12 executing program 2: mkdir(&(0x7f000052aff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000de2ff8)='.', &(0x7f00005e9000)='cifs\x00', 0x6000, &(0x7f0000ad5000)) 15:50:12 executing program 4: mkdir(&(0x7f000052aff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000de2ff8)='.', &(0x7f00005e9000)='cifs\x00', 0x6000, &(0x7f0000ad5000)) 15:50:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/prev\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/202, 0x3}], 0x2000000000000112, 0x0) [ 928.580457] binder: 13281:13286 transaction failed 29201/-9, size 56-8 line 3247 [ 928.590059] binder: BINDER_SET_CONTEXT_MGR already set [ 928.611826] binder: 13292:13297 ioctl 40046207 0 returned -16 [ 928.622578] binder: send failed reply for transaction 520 to 13281:13286 [ 928.649124] binder: BINDER_SET_CONTEXT_MGR already set [ 928.654729] binder: 13281:13307 ioctl 40046207 0 returned -16 [ 928.670860] binder_alloc: 13281: binder_alloc_buf, no vma [ 928.678951] binder: 13281:13307 ERROR: BC_REGISTER_LOOPER called without request [ 928.686954] binder: 13281:13286 transaction failed 29189/-3, size 0-0 line 3142 [ 928.777225] binder: undelivered TRANSACTION_ERROR: 29189 [ 928.786753] binder: undelivered TRANSACTION_COMPLETE [ 928.817702] binder: undelivered TRANSACTION_ERROR: 29201 [ 928.830175] binder: undelivered TRANSACTION_ERROR: 29190 [ 928.841029] binder: send failed reply for transaction 522 to 13292:13297 [ 929.332175] binder: 13292:13326 ERROR: BC_REGISTER_LOOPER called without request [ 929.346216] binder: 13292:13326 got reply transaction with no transaction stack [ 929.353732] binder: 13292:13326 transaction failed 29201/-71, size 0-0 line 2927 15:50:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00') close(r0) 15:50:13 executing program 7: prctl$getreaper(0x2, &(0x7f0000000100)) 15:50:13 executing program 2: mkdir(&(0x7f000052aff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000de2ff8)='.', &(0x7f00005e9000)='cifs\x00', 0x6000, &(0x7f0000ad5000)) 15:50:13 executing program 4: mkdir(&(0x7f000052aff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000de2ff8)='.', &(0x7f00005e9000)='cifs\x00', 0x6000, &(0x7f0000ad5000)) 15:50:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000010"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f00000000c0)=[@fda={0x66646185}, @fd={0x66642a85}], &(0x7f0000000180)=[0x20]}}], 0x0, 0x0, &(0x7f0000000500)}) 15:50:13 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={"6966623000fafff6ffffffffff00"}) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4000011, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) 15:50:13 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) setitimer(0x0, &(0x7f0000000180)={{0x0, 0x2710}}, &(0x7f00000001c0)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req3={0x0, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:50:13 executing program 3: r0 = socket(0x18, 0x0, 0x3) connect(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa}}}, 0x12) [ 929.471162] binder: undelivered TRANSACTION_ERROR: 29201 15:50:13 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x2, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:50:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@ipv4_newroute={0x20, 0x18, 0xc23, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_METRICS={0x4, 0x8}]}, 0x20}, 0x1}, 0x0) [ 929.523474] binder: undelivered TRANSACTION_COMPLETE [ 929.528821] binder: undelivered TRANSACTION_ERROR: 29189 15:50:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00') close(r0) 15:50:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') read(r0, &(0x7f0000000180)=""/230, 0xff4e) 15:50:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1=0xe0000001}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@dev={0xac, 0x14, 0x14}, @multicast1=0xe0000001]}, 0x18) [ 929.568339] binder: 13332:13338 ERROR: BC_REGISTER_LOOPER called without request 15:50:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00') close(r0) 15:50:13 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0xffff0020, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback={0x0, 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x80}, 0x1}, 0x0) [ 929.626083] binder: 13332:13338 got transaction with invalid fd, -1 [ 929.639382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 929.652956] binder: 13332:13338 transaction failed 29201/-9, size 56-8 line 3247 15:50:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') read(r0, &(0x7f0000000180)=""/230, 0xff4e) [ 929.704854] binder: send failed reply for transaction 526 to 13332:13338 [ 929.727177] device lo entered promiscuous mode 15:50:13 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000240)) 15:50:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00') close(r0) [ 929.765741] device lo left promiscuous mode 15:50:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') read(r0, &(0x7f0000000180)=""/230, 0xff4e) 15:50:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000010"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f00000000c0)=[@fda={0x66646185}, @fd={0x66642a85}], &(0x7f0000000180)=[0x20]}}], 0x0, 0x0, &(0x7f0000000500)}) 15:50:13 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x4) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001200ff09fffefd956fa264b724a6007e00000000000000683540150024001d001fc41180b598be593ab6821148a730bb1aa49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 929.833676] binder: undelivered TRANSACTION_ERROR: 29190 [ 929.839672] binder: undelivered TRANSACTION_COMPLETE [ 929.858502] binder: undelivered TRANSACTION_ERROR: 29201 [ 929.950078] binder: 13376:13378 ERROR: BC_REGISTER_LOOPER called without request [ 929.958355] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 929.977553] binder: 13376:13378 got transaction with invalid fd, -1 [ 930.001492] binder: 13376:13378 transaction failed 29201/-9, size 56-8 line 3247 [ 930.030821] binder: send failed reply for transaction 529 to 13376:13378 [ 930.068679] device lo entered promiscuous mode [ 930.081038] binder: undelivered TRANSACTION_ERROR: 29190 [ 930.088360] binder: undelivered TRANSACTION_COMPLETE [ 930.107951] binder: undelivered TRANSACTION_ERROR: 29201 [ 930.113873] device lo left promiscuous mode 15:50:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000010"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f00000000c0)=[@fda={0x66646185}, @fd={0x66642a85}], &(0x7f0000000180)=[0x20]}}], 0x0, 0x0, &(0x7f0000000500)}) 15:50:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001fc0)={&(0x7f0000000ac0)={0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000000100)={0x3c, 0x13, 0x301, 0x0, 0x0, {0x1}, [@nested={0x28, 0x18, [@generic="48ef79bb70c010f1880de7701caffad81aa6b93ff8102e74dc33662d891f51f77c"]}]}, 0x3c}, 0x1}, 0x0) 15:50:13 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) read(r1, &(0x7f0000000000)=""/126, 0x7e) 15:50:13 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) setitimer(0x0, &(0x7f0000000180)={{0x0, 0x2710}}, &(0x7f00000001c0)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req3={0x0, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:50:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') read(r0, &(0x7f0000000180)=""/230, 0xff4e) 15:50:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x10, &(0x7f0000000180)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@multicast1=0xe0000001}}, {{@in=@rand_addr}, 0x0, @in=@loopback=0x7f000001}}, 0xe8) 15:50:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001fc0)={&(0x7f0000000ac0)={0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000000100)={0x3c, 0x13, 0x301, 0x0, 0x0, {0x1}, [@nested={0x28, 0x18, [@generic="48ef79bb70c010f1880de7701caffad81aa6b93ff8102e74dc33662d891f51f77c"]}]}, 0x3c}, 0x1}, 0x0) 15:50:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') read(r0, &(0x7f00000000c0)=""/240, 0xf0) 15:50:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f070000004500010700000014190004400000000000000000000a00005d14a4e91ee438d2fd", 0x39}], 0x1) [ 930.205777] binder: 13391:13400 ERROR: BC_REGISTER_LOOPER called without request 15:50:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20}}) 15:50:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001fc0)={&(0x7f0000000ac0)={0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000000100)={0x3c, 0x13, 0x301, 0x0, 0x0, {0x1}, [@nested={0x28, 0x18, [@generic="48ef79bb70c010f1880de7701caffad81aa6b93ff8102e74dc33662d891f51f77c"]}]}, 0x3c}, 0x1}, 0x0) [ 930.279255] binder: 13391:13400 got transaction with invalid fd, -1 [ 930.312405] binder: 13391:13400 transaction failed 29201/-9, size 56-8 line 3247 15:50:13 executing program 2: ioperm(0x0, 0x2, 0x0) clone(0x880000, &(0x7f0000b53000), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) 15:50:13 executing program 4: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 15:50:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$evdev(r0, &(0x7f0000000240)=[{{}, 0x14, 0x4}], 0x18) [ 930.339180] binder: send failed reply for transaction 532 to 13391:13400 15:50:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) [ 930.404662] binder: undelivered TRANSACTION_ERROR: 29190 [ 930.434186] binder: undelivered TRANSACTION_COMPLETE [ 930.479565] binder: undelivered TRANSACTION_ERROR: 29201 15:50:14 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x4) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001200ff09fffefd956fa264b724a6007e00000000000000683540150024001d001fc41180b598be593ab6821148a730bb1aa49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 15:50:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x1c11}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)) 15:50:14 executing program 2: ioperm(0x0, 0x2, 0x0) clone(0x880000, &(0x7f0000b53000), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) [ 931.041764] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:50:14 executing program 0: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @rand_addr=0x40000000}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @broadcast=0xffffffff}}) 15:50:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001fc0)={&(0x7f0000000ac0)={0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000000100)={0x3c, 0x13, 0x301, 0x0, 0x0, {0x1}, [@nested={0x28, 0x18, [@generic="48ef79bb70c010f1880de7701caffad81aa6b93ff8102e74dc33662d891f51f77c"]}]}, 0x3c}, 0x1}, 0x0) 15:50:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 15:50:14 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) setitimer(0x0, &(0x7f0000000180)={{0x0, 0x2710}}, &(0x7f00000001c0)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req3={0x0, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:50:14 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x81, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0x400, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x84) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 15:50:14 executing program 2: ioperm(0x0, 0x2, 0x0) clone(0x880000, &(0x7f0000b53000), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) 15:50:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x1c11}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)) 15:50:14 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_cmd={0x18}}) 15:50:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 15:50:14 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x81, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0x400, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x84) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 15:50:14 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_cmd={0x18}}) [ 931.256774] IPVS: Creating netns size=2552 id=54 15:50:14 executing program 2: ioperm(0x0, 0x2, 0x0) clone(0x880000, &(0x7f0000b53000), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) 15:50:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) [ 931.572089] IPVS: Creating netns size=2552 id=55 15:50:15 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x4) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001200ff09fffefd956fa264b724a6007e00000000000000683540150024001d001fc41180b598be593ab6821148a730bb1aa49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 15:50:15 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_cmd={0x18}}) 15:50:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x1c11}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)) 15:50:15 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01002cbd7000fddbdf2503f700800800060000000000089652c7027cdbb3dd52000400080000000c0001"], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x8040) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 15:50:15 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x81, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0x400, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x84) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 15:50:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='sessionid\x00') pread64(r0, &(0x7f0000000040)=""/101, 0x65, 0x0) 15:50:15 executing program 0: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @rand_addr=0x40000000}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @broadcast=0xffffffff}}) 15:50:15 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000000040)}}, {{&(0x7f0000000180)=@sco={0x1f}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)=[{0x18, 0x1, 0x2, "54460ca51b129aac1e"}], 0x18}}], 0x2, 0x0) 15:50:15 executing program 6: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0xc018620b, 0x204f4000) 15:50:15 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_cmd={0x18}}) 15:50:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) read(r0, &(0x7f0000000140)=""/4096, 0x1000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) [ 932.018308] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:50:15 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x81, 0x0) r1 = creat(&(0x7f0000000740)='./bus\x00', 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0x400, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x84) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 15:50:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x1c11}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)) 15:50:15 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000000)="220000005a00070300be0200000500e800000000000000000000edff000000000000", 0x22) 15:50:15 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) preadv(r0, &(0x7f0000000100), 0x361, 0x10400003) 15:50:15 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01002cbd7000fddbdf2503f700800800060000000000089652c7027cdbb3dd52000400080000000c0001"], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x8040) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 15:50:16 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet(0x10, 0x3, 0x4) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001200ff09fffefd956fa264b724a6007e00000000000000683540150024001d001fc41180b598be593ab6821148a730bb1aa49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 15:50:16 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000000)="220000005a00070300be0200000500e800000000000000000000edff000000000000", 0x22) 15:50:16 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) preadv(r0, &(0x7f0000000100), 0x361, 0x10400003) 15:50:16 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01002cbd7000fddbdf2503f700800800060000000000089652c7027cdbb3dd52000400080000000c0001"], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x8040) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 15:50:16 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) preadv(r0, &(0x7f0000000100), 0x361, 0x10400003) 15:50:16 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01002cbd7000fddbdf2503f700800800060000000000089652c7027cdbb3dd52000400080000000c0001"], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x8040) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 933.008126] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 933.438388] pktgen: kernel_thread() failed for cpu 0 [ 933.443574] pktgen: Cannot create thread for cpu 0 (-4) [ 933.449070] pktgen: kernel_thread() failed for cpu 1 [ 933.454244] pktgen: Cannot create thread for cpu 1 (-4) [ 933.459589] pktgen: Initialization failed for all threads 15:50:17 executing program 0: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @rand_addr=0x40000000}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @broadcast=0xffffffff}}) 15:50:17 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000000)="220000005a00070300be0200000500e800000000000000000000edff000000000000", 0x22) 15:50:17 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) preadv(r0, &(0x7f0000000100), 0x361, 0x10400003) 15:50:17 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) preadv(r0, &(0x7f0000000100), 0x361, 0x10400003) 15:50:17 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01002cbd7000fddbdf2503f700800800060000000000089652c7027cdbb3dd52000400080000000c0001"], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x8040) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 15:50:17 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01002cbd7000fddbdf2503f700800800060000000000089652c7027cdbb3dd52000400080000000c0001"], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x8040) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 15:50:17 executing program 4: request_key(&(0x7f0000000140)="000000000000020077657200c28b5779f53bc2faff852632182c4521ce3d7bbd8f080f95be0f9c32236b5db4c4f184bc014b1be1e339f921b6cfd9b338d63228c53c2f29d4b4d7fb9e0ad1302492bf0d72966125aedd8ba7dab32d7e84bd1862a0e5c19fc1ef7e455a", &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='id_resolver\x00', 0xfffffffffffffffc) 15:50:17 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000000)="220000005a00070300be0200000500e800000000000000000000edff000000000000", 0x22) 15:50:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x40000000000003, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 15:50:17 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) preadv(r0, &(0x7f0000000100), 0x361, 0x10400003) 15:50:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x81) r1 = memfd_create(&(0x7f0000000040)="6e6f01fcffff692a2936f0d00c94808bcfbce5de2d57e70200818c6ab7847c51a44bb3aaaefbb8ae99506ae53aa88a80fec3073ecbcc3e72", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "859e18c80a06f9419f0645f5c828aff30125fe03f167d575e66335269e4a2784b6fa7ca74f3c4fcc18a97b489efa6cbfc375b6099c15059172f17c8dac70b01b", "c56cc6030016763b68466b3882888b474c3d859b5a4d9ed3ad01737782ad10568d74c9ee09f808a2bb61eec4409ff01aeebedd00000000c71d77353820975691", "2c59f009002dd768558f22ee0a0acc000000075000000500"}) dup2(r2, r0) 15:50:17 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000000), 0x0) 15:50:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 15:50:17 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) preadv(r0, &(0x7f0000000100), 0x361, 0x10400003) 15:50:17 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01002cbd7000fddbdf2503f700800800060000000000089652c7027cdbb3dd52000400080000000c0001"], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x8040) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 15:50:17 executing program 4: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000040)="f0252cf29e87c852f26894faef724e63aecb73e83c9a78b57b0a66e4a9657cce6d61cfb6aa7e17aa2d9d2b94ddaa013148cceafcfa6e16f774cdbba905c29cc09a7c75956f50dae4be9dc66c556f1c52896df51e0611fb4decd13016d3ca9094475f2031cf2f253564", 0x69, 0x0) [ 934.004083] loop_reread_partitions: partition scan of loop0 ( [ 934.004083] AE(%guc5&J'|O0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040), 0x31a, 0x0) 15:50:18 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x80}, 0x1}, 0x0) [ 935.232773] IPVS: Creating netns size=2552 id=56 [ 935.238102] loop_reread_partitions: partition scan of loop0 ( [ 935.238102] AE(%guc5&J'|O0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f000062e000)={&(0x7f0000690ff6)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f0000000ff0)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) INIT: Id "2" respawning too fast: disabled for 5 minutes 15:50:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x28, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001580), 0x0, &(0x7f0000001ac0)}}], 0x1, 0x0) INIT: Id "1" respawning too fast: disabled for 5 minutes 15:50:19 executing program 5: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc0202000000f60f0f000ee1000c08000a0000060000", 0x24) 15:50:19 executing program 3: r0 = memfd_create(&(0x7f0000000ffe)='$\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) utimes(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240)) INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes 15:50:19 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000000000)) 15:50:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r1, &(0x7f0000000380)=""/206, 0x56) mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x3, 0x0, {0xa, 0x2, 0x3, @remote={0xfe, 0x80}, 0x4}}}, 0x32) getpeername(r3, &(0x7f0000000080)=@vsock={0x0, 0x0, 0x0, @reserved}, &(0x7f0000000000)=0x80) 15:50:19 executing program 7: r0 = memfd_create(&(0x7f0000000080)="5bd295e7a5c45ebd0000", 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="08010000000000000000000000000000e20200000000000000000059"], 0x1c) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000003c0), &(0x7f00000005c0), 0x1000) 15:50:19 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000200)={'syz_tun\x00', @ifru_settings={0x0, 0x0, @cisco=&(0x7f00000001c0)}}) 15:50:20 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_nanosleep(0x0, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:50:20 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 936.335733] Dead loop on virtual device ip6tnl0, fix it urgently! 15:50:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000600)={'bridge_slave_0\x00', &(0x7f0000000500)=@ethtool_gstrings={0x1b, 0x4}}) 15:50:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @loopback=0x7f000001}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}}, 0xfffffffffffffffe, {0x2, 0x0, @rand_addr}, "00000000000010000000000000000004"}) 15:50:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r1, &(0x7f0000000380)=""/206, 0x56) mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x3, 0x0, {0xa, 0x2, 0x3, @remote={0xfe, 0x80}, 0x4}}}, 0x32) getpeername(r3, &(0x7f0000000080)=@vsock={0x0, 0x0, 0x0, @reserved}, &(0x7f0000000000)=0x80) 15:50:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/25, 0x19}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x2) readv(r0, &(0x7f0000000580), 0x3c1) [ 936.587868] device lo left promiscuous mode [ 936.601875] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 15:50:20 executing program 2: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x88040, 0x0) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x300, 0x0) [ 936.631592] qtaguid: iface_stat: create6(lo): no inet dev 15:50:20 executing program 7: r0 = memfd_create(&(0x7f0000000080)="5bd295e7a5c45ebd0000", 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="08010000000000000000000000000000e20200000000000000000059"], 0x1c) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000003c0), &(0x7f00000005c0), 0x1000) 15:50:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dba7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2ec14172daa8e7d1c4c4cf144a238c45c29129af5bdd9bba6df5fdc54d81bf6b43a8cc20856ad9f0a5bf4af44acfe05900ffff00", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:50:20 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) unshare(0x400) pselect6(0x2e7, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 15:50:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @loopback=0x7f000001}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}}, 0xfffffffffffffffe, {0x2, 0x0, @rand_addr}, "00000000000010000000000000000004"}) 15:50:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c626262c85") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340), &(0x7f00000003c0)=[0x0]}}], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 936.705750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 15:50:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/25, 0x19}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x2) readv(r0, &(0x7f0000000580), 0x3c1) [ 936.815658] loop_reread_partitions: partition scan of loop0 (wS]}d I!ޒf8&WF5EiceZ%} [ 936.815658] ̈\) failed (rc=-13) [ 936.830790] binder: 13838:13839 got transaction with invalid offset (0, min 0 max 0) or object. 15:50:20 executing program 7: r0 = memfd_create(&(0x7f0000000080)="5bd295e7a5c45ebd0000", 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="08010000000000000000000000000000e20200000000000000000059"], 0x1c) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000003c0), &(0x7f00000005c0), 0x1000) [ 936.896309] binder: 13838:13839 transaction failed 29201/-22, size 0-8 line 3205 [ 936.923699] loop_reread_partitions: partition scan of loop0 (wS]}d I!ޒf8&WF5EiceZ%} [ 936.923699] ̈\) failed (rc=-13) 15:50:20 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) unshare(0x400) pselect6(0x2e7, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) [ 936.939802] binder: 13838:13839 got transaction with unaligned buffers size, 133 15:50:20 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) unshare(0x400) pselect6(0x2e7, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) [ 936.982171] binder: 13838:13839 transaction failed 29201/-22, size 0-0 line 3187 [ 937.014427] binder_alloc: binder_alloc_mmap_handler: 13838 20ffa000-20ffd000 already mapped failed -16 [ 937.042433] binder: BINDER_SET_CONTEXT_MGR already set [ 937.048060] loop_reread_partitions: partition scan of loop0 (wS]}d I!ޒf8&WF5EiceZ%} [ 937.048060] ̈\) failed (rc=-13) [ 937.067743] binder: 13838:13839 ioctl 40046207 0 returned -16 [ 937.115328] binder_alloc: 13838: binder_alloc_buf, no vma [ 937.161858] binder: 13838:13864 transaction failed 29189/-3, size 0-8 line 3142 [ 937.194402] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) 15:50:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:50:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @loopback=0x7f000001}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}}, 0xfffffffffffffffe, {0x2, 0x0, @rand_addr}, "00000000000010000000000000000004"}) 15:50:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/25, 0x19}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x2) readv(r0, &(0x7f0000000580), 0x3c1) 15:50:20 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 15:50:20 executing program 7: r0 = memfd_create(&(0x7f0000000080)="5bd295e7a5c45ebd0000", 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="08010000000000000000000000000000e20200000000000000000059"], 0x1c) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000003c0), &(0x7f00000005c0), 0x1000) 15:50:20 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) unshare(0x400) pselect6(0x2e7, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 15:50:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c626262c85") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340), &(0x7f00000003c0)=[0x0]}}], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 15:50:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dba7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2ec14172daa8e7d1c4c4cf144a238c45c29129af5bdd9bba6df5fdc54d81bf6b43a8cc20856ad9f0a5bf4af44acfe05900ffff00", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 937.326807] binder: 13879:13882 got transaction with invalid offset (0, min 0 max 0) or object. [ 937.345890] binder: 13879:13882 transaction failed 29201/-22, size 0-8 line 3205 15:50:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/25, 0x19}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x2) readv(r0, &(0x7f0000000580), 0x3c1) 15:50:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c626262c85") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340), &(0x7f00000003c0)=[0x0]}}], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) [ 937.377181] binder: 13879:13882 got transaction with unaligned buffers size, 133 [ 937.393351] loop_reread_partitions: partition scan of loop0 (wS]}d I!ޒf8&WF5EiceZ%} [ 937.393351] ̈\) failed (rc=-13) [ 937.398889] binder: 13879:13882 transaction failed 29201/-22, size 0-0 line 3187 15:50:21 executing program 7: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) 15:50:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @loopback=0x7f000001}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}}, 0xfffffffffffffffe, {0x2, 0x0, @rand_addr}, "00000000000010000000000000000004"}) [ 937.456363] binder: 13899:13901 got transaction with invalid offset (0, min 0 max 0) or object. [ 937.480723] binder: 13899:13901 transaction failed 29201/-22, size 0-8 line 3205 15:50:21 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/25, 0x19}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x2) readv(r0, &(0x7f0000000580), 0x3c1) 15:50:21 executing program 7: r0 = memfd_create(&(0x7f0000034ffe)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000480)={0x0, 0x0, {0x1, 0x0, 0x0, 0x6}}) [ 937.530955] binder: 13899:13901 got transaction with unaligned buffers size, 133 [ 937.551398] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 937.558055] loop_reread_partitions: partition scan of loop0 (wS]}d I!ޒf8&WF5EiceZ%} [ 937.558055] ̈\) failed (rc=-13) [ 937.575532] qtaguid: iface_stat: create6(lo): no inet dev [ 937.599677] binder: 13899:13901 transaction failed 29201/-22, size 0-0 line 3187 15:50:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c626262c85") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340), &(0x7f00000003c0)=[0x0]}}], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 15:50:21 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4205, r1, 0x200, &(0x7f0000000000)={&(0x7f0000000040)}) [ 937.676405] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) [ 937.686624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 937.778854] ------------[ cut here ]------------ [ 937.783778] WARNING: CPU: 0 PID: 3881 at kernel/signal.c:2090 get_signal+0x11e3/0x14b0() [ 937.792187] Kernel panic - not syncing: panic_on_warn set ... [ 937.792187] [ 937.799538] CPU: 0 PID: 3881 Comm: syz-executor7 Not tainted 4.4.139-g7ba5557 #2 [ 937.807052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 937.816391] 0000000000000000 6b78636fe262a23b ffff8801be6efb28 ffffffff81e0d58d [ 937.824412] ffffffff83a43da0 ffff8800a6323000 ffffffff83a499e0 0000000000000009 [ 937.832467] 000000000000082a ffff8801be6efbe8 ffffffff8140a184 0000000041b58ab3 [ 937.840527] Call Trace: [ 937.843103] [] dump_stack+0xc1/0x124 [ 937.848448] [] panic+0x19e/0x38d [ 937.853448] [] ? add_taint.cold.4+0x16/0x16 [ 937.859401] [] ? warn_slowpath_common.cold.6+0x5/0x20 [ 937.866222] [] warn_slowpath_common.cold.6+0x20/0x20 [ 937.872968] [] ? get_signal+0x11e3/0x14b0 [ 937.878754] [] warn_slowpath_null+0x29/0x30 [ 937.884711] [] get_signal+0x11e3/0x14b0 [ 937.890337] [] ? free_object+0x115/0x2a0 [ 937.896036] [] do_signal+0x8b/0x1d30 [ 937.901388] [] ? hrtimer_nanosleep+0x373/0x540 [ 937.907618] [] ? setup_sigcontext+0x780/0x780 [ 937.913751] [] ? clock_was_set_work+0x30/0x30 [ 937.919899] [] ? do_nanosleep+0x196/0x4f0 [ 937.925685] [] ? __compat_get_timespec.isra.10+0xdd/0x150 [ 937.932857] [] ? compat_SyS_nanosleep+0x21f/0x390 [ 937.939334] [] ? compat_convert_timespec+0x1f0/0x1f0 [ 937.946081] [] ? exit_to_usermode_loop+0xe4/0x160 [ 937.952555] [] exit_to_usermode_loop+0x11a/0x160 [ 937.958940] [] do_fast_syscall_32+0x620/0x8b0 [ 937.965070] [] sysenter_flags_fixed+0xd/0x17 [ 939.090657] Shutting down cpus with NMI [ 939.095158] Dumping ftrace buffer: [ 939.098840] (ftrace buffer empty) [ 939.102529] Kernel Offset: disabled [ 939.106219] Rebooting in 86400 seconds..