[ 50.719684] sshd (6347) used greatest stack depth: 54176 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 51.144430] kauditd_printk_skb: 2 callbacks suppressed [ 51.144460] audit: type=1800 audit(1545322169.197:29): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 51.169449] audit: type=1800 audit(1545322169.197:30): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [ 51.259019] startpar (6279) used greatest stack depth: 53728 bytes left Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.116' (ECDSA) to the list of known hosts. 2018/12/20 16:09:42 fuzzer started 2018/12/20 16:09:47 dialing manager at 10.128.0.26:46613 2018/12/20 16:09:47 syscalls: 1 2018/12/20 16:09:47 code coverage: enabled 2018/12/20 16:09:47 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/20 16:09:47 setuid sandbox: enabled 2018/12/20 16:09:47 namespace sandbox: enabled 2018/12/20 16:09:47 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/20 16:09:47 fault injection: enabled 2018/12/20 16:09:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/20 16:09:47 net packet injection: enabled 2018/12/20 16:09:47 net device setup: enabled 16:10:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x2}) syzkaller login: [ 130.912194] IPVS: ftp: loaded support on port[0] = 21 [ 132.341254] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.348582] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.357168] device bridge_slave_0 entered promiscuous mode [ 132.453342] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.459896] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.468338] device bridge_slave_1 entered promiscuous mode [ 132.554275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 132.638256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 132.900897] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 132.993919] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 133.079505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 133.086581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.174903] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 133.181937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.447048] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.455756] team0: Port device team_slave_0 added [ 133.540680] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.549529] team0: Port device team_slave_1 added [ 133.636856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.730459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.818112] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.825816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.835307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.924581] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.932300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.941655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 16:10:52 executing program 1: r0 = socket$kcm(0x29, 0x802, 0x0) sendmsg$kcm(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000100)='q', 0x1}], 0x1, &(0x7f0000001400)}, 0x0) sendmmsg(r0, &(0x7f000000ab00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f000000a280), 0x0, &(0x7f0000000040)}}, {{&(0x7f000000a440)=@can, 0x10, &(0x7f000000a5c0), 0x3a5, &(0x7f000000a600)}, 0x3}], 0x2, 0x0) [ 134.698179] IPVS: ftp: loaded support on port[0] = 21 [ 135.398907] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.405616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.412828] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.419367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.428593] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 135.435328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.221332] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.228038] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.236474] device bridge_slave_0 entered promiscuous mode [ 137.362290] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.368852] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.377205] device bridge_slave_1 entered promiscuous mode [ 137.483727] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 137.649630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.057995] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 138.185199] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 138.660385] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.669575] team0: Port device team_slave_0 added [ 138.825164] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.833935] team0: Port device team_slave_1 added [ 138.946141] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.954006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.963150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 16:10:57 executing program 2: r0 = socket(0xa, 0x80005, 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000240)="0a5c2d0240316285717070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}}, 0x0) [ 139.114362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.255903] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.263648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.272761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.473748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 139.481443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.490667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.808160] IPVS: ftp: loaded support on port[0] = 21 [ 141.471133] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.477816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.485334] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.491913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.501431] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 141.508078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.548404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.303259] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 142.466520] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.473212] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.481598] device bridge_slave_0 entered promiscuous mode [ 142.612231] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.618805] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.627196] device bridge_slave_1 entered promiscuous mode [ 142.800983] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 142.895238] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 142.901614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.909823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.006108] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.474559] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.487611] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.679602] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.769240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.776420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.933709] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 143.940757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.483404] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.492075] team0: Port device team_slave_0 added [ 144.676765] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.685518] team0: Port device team_slave_1 added [ 144.859888] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 144.867080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.876114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.062001] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 145.069178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.078381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.231477] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 145.239319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.248813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.440950] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 145.448718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.457875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 16:11:05 executing program 3: r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300030000000000000000003800000000000000000000000000200001000000000000010000000003"], 0x39) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 147.581143] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.587828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.595057] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.601611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.611434] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.618073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 16:11:05 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x2}) [ 147.767772] IPVS: ftp: loaded support on port[0] = 21 16:11:06 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x2}) 16:11:06 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x2}) 16:11:06 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '&\x00'}, 0x7) [ 148.523501] audit: type=1400 audit(1545322266.577:31): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=7004 comm="syz-executor0" [ 148.620878] 8021q: adding VLAN 0 to HW filter on device bond0 16:11:06 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '&\x00'}, 0x7) [ 148.804908] audit: type=1400 audit(1545322266.857:32): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=7016 comm="syz-executor0" 16:11:06 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '&\x00'}, 0x7) [ 148.991986] audit: type=1400 audit(1545322267.037:33): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=7024 comm="syz-executor0" 16:11:07 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '&\x00'}, 0x7) [ 149.186068] audit: type=1400 audit(1545322267.237:34): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=7032 comm="syz-executor0" 16:11:07 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) [ 149.444460] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 150.347119] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.362495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.370461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 16:11:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x541f, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffff}) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000080)="964a914709b1c3eb876400fd2d67cbdbb889f1f6fa05b9587b8bf0564c38e7a5aa9373623a0a832069f0b26ea311b404aa51225c074ae89af67fb4600b4abf35e63f63f34390eb6a62610a40a57a5efe4a929e20e52fc64338b476444eb6354ead5b1bdbeb9ba5eb0cb31c8ab1e3a2bd9e9a4996ea7b2884177054d6bfbfa3afbe6921d71af2d29ee75f64eb58d994f50ce21478e4e7bf877ce37a6148a255c85ea9362b19bde4305023fb643ea40c81a927a298639ebb72b56c02dfc781697040a3ac88c21718a4e439fab2363312b18a0b76ecc721e23d2cc48a0fa073ba43a3920f3dd90589e5ad897a9798d5") [ 150.546591] tty_tiocsserial: 'syz-executor0' is using deprecated serial flags (with no effect): 00008700 [ 150.624912] tty_tiocsserial: 'syz-executor0' is using deprecated serial flags (with no effect): 00008700 [ 151.133817] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.386828] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.393558] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.401867] device bridge_slave_0 entered promiscuous mode [ 151.604796] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.611377] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.619792] device bridge_slave_1 entered promiscuous mode [ 151.866114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 152.009261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 152.461491] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.670704] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 152.881294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 152.888483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.060086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 153.067309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.572923] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.581642] team0: Port device team_slave_0 added [ 153.751131] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.759858] team0: Port device team_slave_1 added [ 153.952261] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 153.959336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.968360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.167323] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 154.174631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.183556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.325240] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.333131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.342868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.483839] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.491541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.500725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 16:11:13 executing program 1: r0 = socket$kcm(0x29, 0x802, 0x0) sendmsg$kcm(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000100)='q', 0x1}], 0x1, &(0x7f0000001400)}, 0x0) sendmmsg(r0, &(0x7f000000ab00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f000000a280), 0x0, &(0x7f0000000040)}}, {{&(0x7f000000a440)=@can, 0x10, &(0x7f000000a5c0), 0x3a5, &(0x7f000000a600)}, 0x3}], 0x2, 0x0) [ 155.445348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.003165] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.242220] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.248940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.256204] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.262799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.272866] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 156.280366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.504005] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.510363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.518586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.124462] 8021q: adding VLAN 0 to HW filter on device team0 16:11:18 executing program 2: r0 = socket(0xa, 0x80005, 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000240)="0a5c2d0240316285717070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}}, 0x0) [ 161.131575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.305557] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.477205] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.483638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.491320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.667366] 8021q: adding VLAN 0 to HW filter on device team0 16:11:20 executing program 3: r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300030000000000000000003800000000000000000000000000200001000000000000010000000003"], 0x39) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 16:11:20 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000180)={@loopback, r2}, 0x14) r3 = open(&(0x7f0000000040)='./file0\x00', 0x4c000, 0x8) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x401, 0x2b4eea60]}, &(0x7f0000000100)=0x8) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000005c0)={@remote, r2}, 0x14) close(r1) 16:11:20 executing program 1: r0 = socket$kcm(0x29, 0x802, 0x0) sendmsg$kcm(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000100)='q', 0x1}], 0x1, &(0x7f0000001400)}, 0x0) sendmmsg(r0, &(0x7f000000ab00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f000000a280), 0x0, &(0x7f0000000040)}}, {{&(0x7f000000a440)=@can, 0x10, &(0x7f000000a5c0), 0x3a5, &(0x7f000000a600)}, 0x3}], 0x2, 0x0) 16:11:20 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0x0, 0x8, {0xff}}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@remote, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000001c0)={0x1, 0xfffffffffffffc82, 0x0, 0xd6bd}) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000200), 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000240)=""/80, &(0x7f00000002c0)=0x50) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000340)={0x101}, 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) futimesat(r0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={{0x0, 0x7530}, {0x77359400}}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000480)={0x6, 0x7f}) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000004c0)={0x3, 0x3}) timerfd_gettime(r0, &(0x7f0000000500)) prctl$PR_GET_TSC(0x19, &(0x7f0000000540)) syncfs(r0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000580)=""/144, &(0x7f0000000640)=0x90) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000007c0)) fcntl$setsig(r0, 0xa, 0x27) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f00000008c0)={0x1, {r2, r3+30000000}, 0x9, 0x8}) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000900)={0x7, 0x100000000, 0x100, 0x1, 0x2, 0x1}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000940)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000009c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000980)="c7323660eb40", 0x6, r0}, 0x68) bind$pptp(r0, &(0x7f0000000a40), 0x1e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000a80)={0x80000001, 0x10000, 0x5217, 0x6, 0x5, 0x80000000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000b00)='lo\xd2/cgroup\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000b40)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000bc0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback, 0x1}, {0xa, 0x4e20, 0x3, @mcast2, 0x3}, r4, 0x70c}}, 0x48) 16:11:20 executing program 5: r0 = dup(0xffffffffffffff9c) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e21, 0x400, @remote, 0x80}, 0x1c) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000580)={0xc, 0x8, 0xfa00, {&(0x7f0000000400)}}, 0x10) fallocate(r0, 0x77, 0x2, 0x3) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000005c0)={r0}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000600)={0x8, 0x1, 0x9, 0x377, [], [], [], 0xfffffffffffffffa, 0x0, 0x1f, 0x9bc, "5eb71612306f2b8fc55c4d760fab0123"}) set_thread_area(&(0x7f0000000740)={0x1, 0x20100000, 0x0, 0x7, 0x1000, 0x1ce3, 0x0, 0x3, 0x5, 0x100000000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) write$P9_RSYMLINK(r0, &(0x7f0000000780)={0x14, 0x11, 0x2, {0x0, 0x4, 0x1}}, 0x14) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0xffff) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x200200, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000800)) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000009c0)={'veth1_to_bridge\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vcan0\x00', 0x0}) sendmsg$xdp(r0, &(0x7f0000000e00)={&(0x7f0000000a40)={0x2c, 0x0, r2, 0x39}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000a80)="b830b46ba8a80c125e435b09", 0xc}, {&(0x7f0000000ac0)="6b337b59742f166e45342c8e7f1de8b0086f1de3", 0x14}, {&(0x7f0000000b00)="fe77846e8fa14891fe67f1e49fbaf679d604e8752abd688260940880d7bc6feef9f8", 0x22}, {&(0x7f0000000b40)="03fd13742a2c92c5717dcb41d0", 0xd}, {&(0x7f0000000b80)="85b2b2a0af07095076b138c06bffea7f190251c8a05689c18b640c6e3e716b85bb90", 0x22}, {&(0x7f0000000bc0)="d5c9e4d4775874c71e79f2e3cacd07d2dcf5b682e024c06d46a990eb5032c7cfcf67b32d05d1d502f368060f2d6a81d4e8d5d4cc702b420084b998317c4f4351cb073f14369a5aa45f8fb19c303680537ca15c3c022ea4fe0a20760710924fb081e6ad94e6814b6c6dd45a540726505dde0d5f5c17515c9644eda5fd5e765b98cf6b1d89e03c6cbf88ee5b259d", 0x8d}, {&(0x7f0000000c80)="8d704160542c29e0fed1c5455618b60e6a038dd6357e13e97b7230a208b7f3e734eb0092afbade7c0a1187b4b7215016a76feb61e65636ee27665a25345b7c6a88099321c3b66e0c44c706f966417cbc3061b1d97a6a4d7a9590582450f5c41a47bff9a655ba0c37cd4282f48afd684e91c765c6f95b48f88d43e6b73b0d9af1967ebb438c8d6aa5364909b7401743167edd18e067130a5d7a586cd9d5040a5a11f696d0b444b8d2c6706b82e92ac1cb1b41993b6a5e35c9d3898e3a37cec8b793357c94e3c7814ef3158b17f30b4106cc82ca85595b401367ce660978860e", 0xdf}], 0x7, 0x0, 0x0, 0x40}, 0x4000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e80)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000f80)={&(0x7f0000000e40), 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x6c, r3, 0x310, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r0}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000fc0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000001100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001140)=0x20) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000001180)={r4, 0x9, 0x2}, 0x8) ioctl$int_in(r0, 0x0, &(0x7f00000011c0)=0x1ff) accept(r1, &(0x7f0000001200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000001280)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000012c0)={'vcan0\x00', r2}) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x4) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000001300)) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000001380)={0x18, 0x0, {0x3, @broadcast, 'ip6gre0\x00'}}) sendmsg$kcm(r0, &(0x7f00000024c0)={&(0x7f00000013c0)=@ethernet={0x307, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f0000001440)="1ac986bcf7bab63b3f56de181bce2121aa070b4fcdcfd41ab8c83864eb3154927db38a2e8c6eddf3d75829dd583398971675fdbb7eeec92c3d48495f0e490a9e78e7316a6724eff9f9331e89d631365f340d0596c6a14327f2d2340a2035086819d976d5fb4150d0d79967aa6472982b79799a71f687d58a5e3af5a5dd9dc868f3b0c79e14e527e26f8917b3c5600b6004d22cf3d7c6182d00e8331f39beeb88a7d03ca22d129becd69f0cc91e9268b175be8897c9dc34aab6062aac068fffe29f91cae7453cb348477173d25a1dc900f92379422cc12e144f90fbd15d07c20215ad7efb3f3a146b3cff5ce0b9a2c6598fd029e91b10802b1d7cf21c3cbb968057fdc4ead09d386c28105cfa14636bbeb47744df28d190bb469a68d5aeec8265d97ccd7cba50b8fedc83e379fe269bb2c7468714bcc6a6acbb8eec5e59ed165f196468134695e1d46d4414cc2994a365de8c4fffd0709c7608aa9bbfa526053b771bd4c53d75d9387781ea99ed8670bc6d8ecdb3379fd5572eadb3850c602f69c9a446ec0aec44ca581cec02ac4d71b28e3ca1e57d7b8faa8012b1b403a44aacf7c63e7930d8688d83fca90b114f7b2eba8f268094878f9d8416e6f5810d9f22c3f859eacff4628f12eaa268204259ceab6ce169b80ff52ef5f7a9fca73b0db2b07aca9c53a3ce2f1383c8260d2cd01634a653dbdf0bc09dd096328d6115e297bac13fe0e9694a1dcdc1ee605767ed1b06783b0737d769edaf98b9a049aa0f13a1674ce1bd485c066f58ffca42f5f5f8169238130528246acaf5d7c046fc6e744e6e7be159da493108590e64684cda6eedb92c4e0c9b79dcb38b3f97d0d43fbd2f654946ba87abdccde6c2b78dc647af43826aa19511909201afe6d5cb4218ee6ff7bc59221592acb0578a0cb8a4f845dec75fc4dad3188212a27bfb4cb6ecea99c0a6080a6c7489dd9e9b87e53a047fbafd5d041b74ff5a60b806ca4119b79407306521c1e4586736ecc14a681938189c5d694f71a47fc1c9088f7f06e9ab4c7f730af64edff264b80cab6f5db39b1184dd6ea2636cd1ce1846a202e5f9b577e7704880ee7af8973ddc60501fcac65756425808bd1e140123f86ef4ef56498dadd15f8044eb20b15e226a14be13aa08361aaa79a3ec5cac966a2a5dd105f80aa5948d784d1a93616926d591630d56fe45785896f1da0667aefa754a20fecd316bb1a4fdeb4408a2ed108553fb3c92f435734471184a42f27735bc70a3102c212c11fe24f24d106c16e529e4fc66f4e035f70c7820c8c14e3a9cb5e4f9ce0411aa46daa65abca786c6276ea590f01cca76e9bf7778a7e37d33785e41adea757b9a8ec29b7af4ac76dc4a51f451b2d52523d5e39cc0963b8614ea72ceab978202bde24a733bb66fd7ddb60a3ccd779b3a8920588771de89727669c0af13a75f93d8c3569e7acbf955cbc252b35160286f070ef0dc087d177cad23d2e15dbfec8a50af2c27fd20ad26ebc6608e374925f5f98e3a188f391a15a8081f124fccc55b8300b7fd1c711c702f5f913789a21c2cb0f8706c830eb764f89cb336a645a510bf845841003cf7d4299c5bccb20d1ad4aaa6b8dbd45432b73ba7b1cffe0a4f345b815502ba7451b14b76fffe66980942b46524044d16b8da61eea66fe16bdb434eb0d866536afac9a749011d31d33df1cad695e641d3985b1106be3f79cfad4b30bf2f7afe2483b064f530ec07f59ab8fe043057ac0a87ae26c3201c366aa0451ddf2f06b15343ebdd9ff62a72a3dc61c91ca724465439817958b157f3b96235fa2f2862f4e667671112f0a5e91727199036c871127a265a0dd18c94cd09f52f9f6c30b2c060e44e696f6e3afb96d788e8baff9ecc7ce1772e7b466678e295a468038589f7819ed22154777cc5ebde4a38f1a21a69ed4034b7d16276313e1a039df8795ee77ba5f54058ecd3006d9dfb53178c1660143d1bcc97914b23fc9ac7a50927fcc6f40591daa6bb6fe2a813864e05fbf8ee1720e81b75d3d1045fa3aed741dd721fe1782100367f097d386920bca646ca415ad2a8c41d94221cff05a8a26fd4802b4976866b975aba7b0bc3e3bf753148c54016fae52066d3fd3417c6cafc2922a5bc779d934fa81d832b4bd53d29584fcf73a27d889383f0f977b487a8a4c301e1eedbffa8e7fd42470f84d91ebaa6a109d7639ae06f539e905e92c1a853d14266bff003a45ec6de46a32f18058309f149fbe7f838db3d19d17e98946b322d3b543b53be2d39b813de141c1fc4c08af66781f4153be1038b24257eb70d8e901de663420bf60985b3d759ad21128ed581dbfff85318133a4a92edf8edab7f3f89360d3a29e22d26c99448f19456e021b736e00aae99f9b80a3ba70396870602176a0a875048adad5c73208b53a747ad6080d74570beb46d254f224929a415e84606392ffb4520ea462f36d3af4f5b4aa8d55e01b12d1c6758c5cb401e651477ebbc16f16270e51fcd6c0677cb2bef0177395d97d88b39bf89885e6f9985168facbac93d4ac789b1b5c436687f5e3d8b04d5794aed0667277711f55bb4984e34a5c58d88c790105b5b942b1790c6d8ab7e4ced6d17c6c47afc48e6e94df83489bb448ce7c5982f06b0bcaedf62b11257748f8dbdcc17df90abcd4149164fed237fddcfe905272c87eca24c3f0fedd500a3970cbd50dd839d52bdcc894c8e424095e2bf4e61c2864d35e16a75e0a8aa1d0c05188469a528949eab2aed5997db6a1939d4b22b0311767ef61af23c8829216c05aa3f3e22aa24de9b8d24294c20a595dc26cc86c9ab886e93ec1e9c40312b485a4454fc92d76c0d43cafe79b97658119ddbefdb57e88b4901d8518e24600c6602ddfe0dd744b6232c0fb44e0c09612058b17f970f0a433cc2f17e2b40cce0d1068c7202675babcdb4c9df0bee32beb74e4b00b5856021a283d4d81a2aca96f9e5dc886ee8f6e3588fabf2e18df0fa513bc48a01666ee1fd2894bc26765084582ee70a6f581c1fff2771358707741438636b8d65b41521d8bb511a68d0f68e2d574169c9757bca184b350ee762bf186763880f61aea461e3f5ede48ecf97338991c9b8873dffa01fb379ffe013d6e5714759d6b2a25d3c73b3c749b21a22d2d19b2deaee0d069c9aa374d1ffcb184707cf48b63547a75dfb3748af36b722a18095d479e59903f51b5b8bdac91b80ba6156956d3729b8a00056345e545adb2e8ef1a78a89d50ff3c7f1056ed895277777718a2d46bb84a12a43b8635b95ba69e2f89e223e4c7d30925e0b1a23402912e70a3688b72251a2db0488792e6639da93154ffc2dd1ecb9e66ec3f33e2ea1b6530fd73ef85307c4505f06761ed08f6734afd29c163a25f86a5c982d423c06fc3e216c31d1f90ad1e33690f193c49379e9b2ad5893ccdc8c33cd1606b3b6049b53badf09fad9d0d65e4363c6d4c00e3d6554d09fd62629a0aacade3adcc259537816798e50b643af5dcd92dcb0f36a4b75ff0526ee92330909b4fcde989f3ea1afa08433111a94f33fe7e284bed5ccbcde148d9894b8e5f91bc7c1953d78f8b88340e3363b6ce738d685d16b8274398cc07adbfe135fbe574b2b448ef630c4f56863a4d38d9a4b8ee9e2e341f602b6937c21b0c84ff0df623cb867e1af7c3b504608c424ebe9d4ebc37f7ca75b546c726d2b5e321a8f8e5ee6a6020232a5bf4a786f052b53155d36babfbf52189e3b08b9300ee5153d0a2af05f1354832732b0c0e52e6aac207e62ba5bdac36e0e1dd703cb946e982da4d885ad159be0c5834ac735b263ddf4ee7f1008a530307e4dfe8130424df1f1bd29650a354553c5ba5f7829dfd206440827c93e8605b12d47b1825f20e8e66cd642d7ce021ae42508a3aee18c6adb04b40bc45ace65ae8e2e6bf8f10a4ea88ce5ac3e74f5cae77ded331f6624ef47381ac9ef08ac4f65d5ab81494df86a743b0c06ec5084b27e595aabd419508da1719b310a1375f6a918039690954d93e09437e6325eb3e30c0f49bd63c5d8e610f74edb9a85679e99d11dbce51b82a9beefdeef474e5a46c3dc0ecec80299965bd32f8fb51b04575c0ed34d3c20f98e0063092527bf2d98e73f16b27a435e54a19ade356ea9c26fea3e9115a85e086db6295010c0c676fe04972004e139534c90e9d07fdc0d27430219a016601732df35caadd5edd3fbe45fd234a00e586e3ba1f8b50d886c815415e32def0e4ac6f50c2b3c7283616cc842b72a85d3ee90f1e1f13eba7967bf96df779ef2555c3a2037b791e7d8db60821cb3298226d8fa0428796344f0a23ac98af5bb5388ef05fa1570d9c493ce428912be282397c3db4821b7eb69d37f2d35a6e9a4cfaad93f3f20d47aa4e507f10e96e8bab33715c95fae758776cd15e272b8d8cb28d2f05d6c9ef6f069a25c1aa5169189a1fcc852be16a528b57519baddbafc69cf48a300adf5192b7bbbf9a9fa8821033bb1e1f487294bf2f2070b00249b9dd393d42b0cae4580fd1bedd58a72eb268ed71e6d83f4568b1514903d6ed25270098e30406b6edb1f48b626df1059e9c1631985664285f592006794ad2514829bdbedd11c3e8479ab22a56d9cc1057b4893edd53db472168b8df6ce5e25dad75f8f2e51675c291f86c9c3688e029f5b62c1652707c018142636a1ef7e0b910069b1abb26926ebf6e5a3c94f26e78e8f4554337c67c10b3f1e98a2031ad4f3b6596faa83b8acc2b5f8fac238d699115aae8c53b137441a43d4df3fffb46ca09cc453b3a4416471ec9422c6eac2dfcaf0a60cea8ef7dfa4a4b8bfe0724fac807ac213d3eef433c6f922ab1406facb393614a73ee89931a11e914b368e30ef53138bb794d1ff74d41c61312451bbee0d33e55b3658ad111ca5935b98a05574244409e274f2a01742e3347b5c62ea8431af613fd290cad6c7420aaefdd12a366c68bc0fa0397ff442e9feb72826c2450d53984d55313071df1f57e1904e300cac430d5d3c4cddaa6b9b679b4ebc455d2a72f8647168a5b3ed12ef06a6d18fd205b9fc79227c59e7f5e2c1fb2375eb626b64350ac00321a5c7e3abf32c36d07afd71bc34637d425dce377b911c046fe216abe1df429813aa8eb3f3b27329f86c7988f8a0e2b0eb577cd2d4bbb81a60378953c6477a8b9e468cea4fd81268258c69bfabf994da94f1f5157e7d52aeb5d8be3ea3e6ab96c93d547de58c7f94332f7222dae4521827d851769935313d7f3e863bcd3eeeaa9a5e224aa4d7ff39342da7e6fe0d2e27b519b01396fdfef4bbfa8ab5ceabdf3d455e2de70beaf0761cc73e2e183087759177cce16e8569f77b25be8e6bf8c1812d071e8edbf1bf3327e6e1aa262c22803ddfb7601c73ce66d9a2f8d2d2e47ba9d0d100f6b07b2c8c2a18af9b7b8695b2d4138e0c5ba52c85e1e9bbc71d15ff88bfdfdc87e22890d09affe5063f23dcdd42a51e73065161c8f7d5f54505a909a032b57459c5725f7b2949ba763b0f30aaf53cc9147db71a022c98c8db4a5ec8e970036ca20876ab3726f137f20571f9e3b1893c728d19273950b31baf14de76fc9b9f3014ad20806c82a88f18ae4d6963438cf34c77a7c4552d448a20af2d95895c421c2656d835e6aa1fdb4b8f80e3300e0c4bb66d6ac2c119fe1d4ef2e99b25075abe69d2766f4da03b754dc8a19ad4700b584f9320f0ea4156fd53d6561920a733955d2da4149ae6ce384a4500cac0f602237fc000427a22341ac6055d84cf915a854abcb41324dafde602b546d71cc112b435710dde16105cc711", 0x1000}, {&(0x7f0000002440)="5f899b5699bb597657bb4e5178d6bd4f7e7d02c9db3f", 0x16}], 0x2}, 0x80) 16:11:20 executing program 2: r0 = socket(0xa, 0x80005, 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000240)="0a5c2d0240316285717070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}}, 0x0) 16:11:21 executing program 1: r0 = socket$kcm(0x29, 0x802, 0x0) sendmsg$kcm(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000100)='q', 0x1}], 0x1, &(0x7f0000001400)}, 0x0) sendmmsg(r0, &(0x7f000000ab00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f000000a280), 0x0, &(0x7f0000000040)}}, {{&(0x7f000000a440)=@can, 0x10, &(0x7f000000a5c0), 0x3a5, &(0x7f000000a600)}, 0x3}], 0x2, 0x0) 16:11:21 executing program 2: r0 = socket(0xa, 0x80005, 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000240)="0a5c2d0240316285717070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}}, 0x0) 16:11:21 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2000a, 0x0) write$sndseq(r1, &(0x7f0000000240)=[{0xffffff92, 0x0, 0xffffffb0, 0x0, @tick, {}, {}, @raw8={"d019d861ff4477fe3ebde348"}}], 0x30) 16:11:21 executing program 3: r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300030000000000000000003800000000000000000000000000200001000000000000010000000003"], 0x39) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 16:11:21 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0xffffffffffff91fd, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 16:11:21 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2000a, 0x0) write$sndseq(r1, &(0x7f0000000240)=[{0xffffff92, 0x0, 0xffffffb0, 0x0, @tick, {}, {}, @raw8={"d019d861ff4477fe3ebde348"}}], 0x30) 16:11:21 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2000a, 0x0) write$sndseq(r1, &(0x7f0000000240)=[{0xffffff92, 0x0, 0xffffffb0, 0x0, @tick, {}, {}, @raw8={"d019d861ff4477fe3ebde348"}}], 0x30) 16:11:21 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0xffffffffffff91fd, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 16:11:21 executing program 3: r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300030000000000000000003800000000000000000000000000200001000000000000010000000003"], 0x39) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 163.903043] IPVS: ftp: loaded support on port[0] = 21 [ 163.921359] IPVS: ftp: loaded support on port[0] = 21 [ 165.357668] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.364305] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.372730] device bridge_slave_0 entered promiscuous mode [ 165.388128] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.394687] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.402975] device bridge_slave_0 entered promiscuous mode [ 165.454361] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.460962] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.469307] device bridge_slave_1 entered promiscuous mode [ 165.483821] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.490354] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.498727] device bridge_slave_1 entered promiscuous mode [ 165.550121] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 165.584646] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 165.629698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 165.664474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 165.878178] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 165.911906] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 165.964691] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 165.996930] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 166.051671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 166.058805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.078638] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 166.085743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.141101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 166.148223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.168770] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 166.175852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.399986] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.408700] team0: Port device team_slave_0 added [ 166.428541] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.437226] team0: Port device team_slave_0 added [ 166.489798] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.498614] team0: Port device team_slave_1 added [ 166.519400] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.528038] team0: Port device team_slave_1 added [ 166.580236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.612757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.669427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.700775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.754737] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 166.762438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.771571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.804671] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 166.812552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.821731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.874512] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 166.882319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.891418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.914778] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 166.922413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.931515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.839429] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.846079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.853239] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.859686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.867973] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 167.880903] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.887464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.894718] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.901277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.910549] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 168.042432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.050359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.404619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.498423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.723515] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 171.813810] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 172.034791] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 172.041128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.049266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.141598] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 172.148043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.156205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.355223] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.471708] 8021q: adding VLAN 0 to HW filter on device team0 16:11:32 executing program 4: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008100e00f80ecdb4cb90402c865160b100000d4126efb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) 16:11:32 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x0, 0x22600) fcntl$setstatus(r0, 0x4, 0x0) 16:11:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2000a, 0x0) write$sndseq(r1, &(0x7f0000000240)=[{0xffffff92, 0x0, 0xffffffb0, 0x0, @tick, {}, {}, @raw8={"d019d861ff4477fe3ebde348"}}], 0x30) 16:11:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2000a, 0x0) write$sndseq(r1, &(0x7f0000000240)=[{0xffffff92, 0x0, 0xffffffb0, 0x0, @tick, {}, {}, @raw8={"d019d861ff4477fe3ebde348"}}], 0x30) 16:11:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0xffffffffffff91fd, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 16:11:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f0000000080)="b06c1484", 0x4) sendfile(r1, r2, 0x0, 0x88001) 16:11:32 executing program 4: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008100e00f80ecdb4cb90402c865160b100000d4126efb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) 16:11:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0xffffffffffff91fd, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 16:11:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2000a, 0x0) write$sndseq(r1, &(0x7f0000000240)=[{0xffffff92, 0x0, 0xffffffb0, 0x0, @tick, {}, {}, @raw8={"d019d861ff4477fe3ebde348"}}], 0x30) 16:11:32 executing program 4: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008100e00f80ecdb4cb90402c865160b100000d4126efb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) 16:11:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2000a, 0x0) write$sndseq(r1, &(0x7f0000000240)=[{0xffffff92, 0x0, 0xffffffb0, 0x0, @tick, {}, {}, @raw8={"d019d861ff4477fe3ebde348"}}], 0x30) 16:11:32 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x0, 0x22600) fcntl$setstatus(r0, 0x4, 0x0) 16:11:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f0000000080)="b06c1484", 0x4) sendfile(r1, r2, 0x0, 0x88001) 16:11:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@getsadinfo={0x14, 0x23, 0x707}, 0x14}, 0x8}, 0x0) 16:11:33 executing program 2: unshare(0x20040600) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000500)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=""/83, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f00000005c0)=""/187, &(0x7f0000000700)=""/130, &(0x7f00000007c0)=""/248}) 16:11:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000580)={0x5}) 16:11:33 executing program 4: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008100e00f80ecdb4cb90402c865160b100000d4126efb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) [ 175.145927] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 175.230585] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 16:11:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x0, 0x22600) fcntl$setstatus(r0, 0x4, 0x0) 16:11:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f0000000080)="b06c1484", 0x4) sendfile(r1, r2, 0x0, 0x88001) 16:11:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000580)={0x5}) 16:11:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@getsadinfo={0x14, 0x23, 0x707}, 0x14}, 0x8}, 0x0) 16:11:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000300)=0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000240)=0x100400001, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000002c0)={0x1}, 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000600)='/exe\x00\x00\x00\x00\x00\x04\x9b\x84\x05r\x13r\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5\xe9\x01\xd2\xdau\x06\x00\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\xe8\xf5\xeb\x84_\x06\xc2\xb4\x83?\x0f\x84\xb3V\xf09\x19(\x06\x00\x8f|\xe6lr\x88A\x04\x1a\xfeW\x05\x95%\x80\xb4\x9a\xca\xd4Yd\x89\xf4E_,\xbaX\xeem)\x81G\xdf\xab2V\xc7B\xc1\xb6\x9fgy=\xfdj\x9bM\xb8\x88\xe6F\";\xe7\xfb\x8b\'\x17 .\xa9V\x11\x8f\x19?\xb8\xab]\xd2\xc0\xfd\xaf\x97\x16\xedQ\xad\x15\xd8\x1dC\xb8\x9e\x1c\xec\xab\xcb\xa5\xd2\xe6/[>\xc8\xaf\xed\xae\x87\x12\x18\xff\a\x00\x00\x00\x00\x00\x00\x1d\xb9\x8eP&$\x19\xdeX\xd7G)]\xa8\xae\xbc\x0f\x7f\x7fV\x80\xe4\xd3\xee\xad\xe2\n->B\v5Ea\x80\xb1\tT\x9eN\xf0\xe1\xb5V\x91\x03\x009\xce6\xa2H7)z\x9b\x9fzgK _o3\xf0\x01\x00\xf4\x84\xf0M\x8b\xba&\x91\x91\xd3d\xecZ\xc18=\x9a\xb7F\r*\x89\x93\x8f\xb7`\t6\xd9\x9bjy&\xdd\xfb\'\xe0\x96\x00\xc5\x03\v\x05\x1d\x15\x11\x9fq\n\xf1\xa0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0xfffffffffffffff7, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 16:11:33 executing program 2: unshare(0x20040600) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000500)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=""/83, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f00000005c0)=""/187, &(0x7f0000000700)=""/130, &(0x7f00000007c0)=""/248}) [ 175.584896] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 16:11:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000580)={0x5}) 16:11:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x0, 0x22600) fcntl$setstatus(r0, 0x4, 0x0) 16:11:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@getsadinfo={0x14, 0x23, 0x707}, 0x14}, 0x8}, 0x0) 16:11:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f0000000080)="b06c1484", 0x4) sendfile(r1, r2, 0x0, 0x88001) 16:11:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000300)=0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000240)=0x100400001, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000002c0)={0x1}, 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000600)='/exe\x00\x00\x00\x00\x00\x04\x9b\x84\x05r\x13r\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5\xe9\x01\xd2\xdau\x06\x00\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\xe8\xf5\xeb\x84_\x06\xc2\xb4\x83?\x0f\x84\xb3V\xf09\x19(\x06\x00\x8f|\xe6lr\x88A\x04\x1a\xfeW\x05\x95%\x80\xb4\x9a\xca\xd4Yd\x89\xf4E_,\xbaX\xeem)\x81G\xdf\xab2V\xc7B\xc1\xb6\x9fgy=\xfdj\x9bM\xb8\x88\xe6F\";\xe7\xfb\x8b\'\x17 .\xa9V\x11\x8f\x19?\xb8\xab]\xd2\xc0\xfd\xaf\x97\x16\xedQ\xad\x15\xd8\x1dC\xb8\x9e\x1c\xec\xab\xcb\xa5\xd2\xe6/[>\xc8\xaf\xed\xae\x87\x12\x18\xff\a\x00\x00\x00\x00\x00\x00\x1d\xb9\x8eP&$\x19\xdeX\xd7G)]\xa8\xae\xbc\x0f\x7f\x7fV\x80\xe4\xd3\xee\xad\xe2\n->B\v5Ea\x80\xb1\tT\x9eN\xf0\xe1\xb5V\x91\x03\x009\xce6\xa2H7)z\x9b\x9fzgK _o3\xf0\x01\x00\xf4\x84\xf0M\x8b\xba&\x91\x91\xd3d\xecZ\xc18=\x9a\xb7F\r*\x89\x93\x8f\xb7`\t6\xd9\x9bjy&\xdd\xfb\'\xe0\x96\x00\xc5\x03\v\x05\x1d\x15\x11\x9fq\n\xf1\xa0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0xfffffffffffffff7, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 16:11:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000580)={0x5}) 16:11:33 executing program 2: unshare(0x20040600) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000500)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=""/83, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f00000005c0)=""/187, &(0x7f0000000700)=""/130, &(0x7f00000007c0)=""/248}) [ 175.998579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 16:11:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000300)=0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000240)=0x100400001, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000002c0)={0x1}, 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000600)='/exe\x00\x00\x00\x00\x00\x04\x9b\x84\x05r\x13r\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5\xe9\x01\xd2\xdau\x06\x00\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\xe8\xf5\xeb\x84_\x06\xc2\xb4\x83?\x0f\x84\xb3V\xf09\x19(\x06\x00\x8f|\xe6lr\x88A\x04\x1a\xfeW\x05\x95%\x80\xb4\x9a\xca\xd4Yd\x89\xf4E_,\xbaX\xeem)\x81G\xdf\xab2V\xc7B\xc1\xb6\x9fgy=\xfdj\x9bM\xb8\x88\xe6F\";\xe7\xfb\x8b\'\x17 .\xa9V\x11\x8f\x19?\xb8\xab]\xd2\xc0\xfd\xaf\x97\x16\xedQ\xad\x15\xd8\x1dC\xb8\x9e\x1c\xec\xab\xcb\xa5\xd2\xe6/[>\xc8\xaf\xed\xae\x87\x12\x18\xff\a\x00\x00\x00\x00\x00\x00\x1d\xb9\x8eP&$\x19\xdeX\xd7G)]\xa8\xae\xbc\x0f\x7f\x7fV\x80\xe4\xd3\xee\xad\xe2\n->B\v5Ea\x80\xb1\tT\x9eN\xf0\xe1\xb5V\x91\x03\x009\xce6\xa2H7)z\x9b\x9fzgK _o3\xf0\x01\x00\xf4\x84\xf0M\x8b\xba&\x91\x91\xd3d\xecZ\xc18=\x9a\xb7F\r*\x89\x93\x8f\xb7`\t6\xd9\x9bjy&\xdd\xfb\'\xe0\x96\x00\xc5\x03\v\x05\x1d\x15\x11\x9fq\n\xf1\xa0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0xfffffffffffffff7, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 16:11:34 executing program 1: unshare(0x20040600) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000500)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=""/83, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f00000005c0)=""/187, &(0x7f0000000700)=""/130, &(0x7f00000007c0)=""/248}) 16:11:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@getsadinfo={0x14, 0x23, 0x707}, 0x14}, 0x8}, 0x0) 16:11:34 executing program 2: unshare(0x20040600) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000500)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=""/83, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f00000005c0)=""/187, &(0x7f0000000700)=""/130, &(0x7f00000007c0)=""/248}) 16:11:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000300)=0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000240)=0x100400001, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000002c0)={0x1}, 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000600)='/exe\x00\x00\x00\x00\x00\x04\x9b\x84\x05r\x13r\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5\xe9\x01\xd2\xdau\x06\x00\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\xe8\xf5\xeb\x84_\x06\xc2\xb4\x83?\x0f\x84\xb3V\xf09\x19(\x06\x00\x8f|\xe6lr\x88A\x04\x1a\xfeW\x05\x95%\x80\xb4\x9a\xca\xd4Yd\x89\xf4E_,\xbaX\xeem)\x81G\xdf\xab2V\xc7B\xc1\xb6\x9fgy=\xfdj\x9bM\xb8\x88\xe6F\";\xe7\xfb\x8b\'\x17 .\xa9V\x11\x8f\x19?\xb8\xab]\xd2\xc0\xfd\xaf\x97\x16\xedQ\xad\x15\xd8\x1dC\xb8\x9e\x1c\xec\xab\xcb\xa5\xd2\xe6/[>\xc8\xaf\xed\xae\x87\x12\x18\xff\a\x00\x00\x00\x00\x00\x00\x1d\xb9\x8eP&$\x19\xdeX\xd7G)]\xa8\xae\xbc\x0f\x7f\x7fV\x80\xe4\xd3\xee\xad\xe2\n->B\v5Ea\x80\xb1\tT\x9eN\xf0\xe1\xb5V\x91\x03\x009\xce6\xa2H7)z\x9b\x9fzgK _o3\xf0\x01\x00\xf4\x84\xf0M\x8b\xba&\x91\x91\xd3d\xecZ\xc18=\x9a\xb7F\r*\x89\x93\x8f\xb7`\t6\xd9\x9bjy&\xdd\xfb\'\xe0\x96\x00\xc5\x03\v\x05\x1d\x15\x11\x9fq\n\xf1\xa0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0xfffffffffffffff7, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 16:11:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000100)=0x157) 16:11:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000300)=0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000240)=0x100400001, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000002c0)={0x1}, 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000600)='/exe\x00\x00\x00\x00\x00\x04\x9b\x84\x05r\x13r\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5\xe9\x01\xd2\xdau\x06\x00\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\xe8\xf5\xeb\x84_\x06\xc2\xb4\x83?\x0f\x84\xb3V\xf09\x19(\x06\x00\x8f|\xe6lr\x88A\x04\x1a\xfeW\x05\x95%\x80\xb4\x9a\xca\xd4Yd\x89\xf4E_,\xbaX\xeem)\x81G\xdf\xab2V\xc7B\xc1\xb6\x9fgy=\xfdj\x9bM\xb8\x88\xe6F\";\xe7\xfb\x8b\'\x17 .\xa9V\x11\x8f\x19?\xb8\xab]\xd2\xc0\xfd\xaf\x97\x16\xedQ\xad\x15\xd8\x1dC\xb8\x9e\x1c\xec\xab\xcb\xa5\xd2\xe6/[>\xc8\xaf\xed\xae\x87\x12\x18\xff\a\x00\x00\x00\x00\x00\x00\x1d\xb9\x8eP&$\x19\xdeX\xd7G)]\xa8\xae\xbc\x0f\x7f\x7fV\x80\xe4\xd3\xee\xad\xe2\n->B\v5Ea\x80\xb1\tT\x9eN\xf0\xe1\xb5V\x91\x03\x009\xce6\xa2H7)z\x9b\x9fzgK _o3\xf0\x01\x00\xf4\x84\xf0M\x8b\xba&\x91\x91\xd3d\xecZ\xc18=\x9a\xb7F\r*\x89\x93\x8f\xb7`\t6\xd9\x9bjy&\xdd\xfb\'\xe0\x96\x00\xc5\x03\v\x05\x1d\x15\x11\x9fq\n\xf1\xa0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0xfffffffffffffff7, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) [ 176.410600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 16:11:34 executing program 1: unshare(0x20040600) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000500)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=""/83, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f00000005c0)=""/187, &(0x7f0000000700)=""/130, &(0x7f00000007c0)=""/248}) 16:11:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000100)=0x157) 16:11:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIONREAD(r1, 0x541b, 0x0) 16:11:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000300)=0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000240)=0x100400001, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000002c0)={0x1}, 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000600)='/exe\x00\x00\x00\x00\x00\x04\x9b\x84\x05r\x13r\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5\xe9\x01\xd2\xdau\x06\x00\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\xe8\xf5\xeb\x84_\x06\xc2\xb4\x83?\x0f\x84\xb3V\xf09\x19(\x06\x00\x8f|\xe6lr\x88A\x04\x1a\xfeW\x05\x95%\x80\xb4\x9a\xca\xd4Yd\x89\xf4E_,\xbaX\xeem)\x81G\xdf\xab2V\xc7B\xc1\xb6\x9fgy=\xfdj\x9bM\xb8\x88\xe6F\";\xe7\xfb\x8b\'\x17 .\xa9V\x11\x8f\x19?\xb8\xab]\xd2\xc0\xfd\xaf\x97\x16\xedQ\xad\x15\xd8\x1dC\xb8\x9e\x1c\xec\xab\xcb\xa5\xd2\xe6/[>\xc8\xaf\xed\xae\x87\x12\x18\xff\a\x00\x00\x00\x00\x00\x00\x1d\xb9\x8eP&$\x19\xdeX\xd7G)]\xa8\xae\xbc\x0f\x7f\x7fV\x80\xe4\xd3\xee\xad\xe2\n->B\v5Ea\x80\xb1\tT\x9eN\xf0\xe1\xb5V\x91\x03\x009\xce6\xa2H7)z\x9b\x9fzgK _o3\xf0\x01\x00\xf4\x84\xf0M\x8b\xba&\x91\x91\xd3d\xecZ\xc18=\x9a\xb7F\r*\x89\x93\x8f\xb7`\t6\xd9\x9bjy&\xdd\xfb\'\xe0\x96\x00\xc5\x03\v\x05\x1d\x15\x11\x9fq\n\xf1\xa0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0xfffffffffffffff7, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 16:11:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_open(&(0x7f0000000100)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xb2\xa88H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xca\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x02\x00\x00\x00\x00\x00\x00\x00\xb46\x9b\x8d\x19\xd3\xf2in\xba0y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@\xc5e\xef\xc3n\xdb\xa3K5j\xae\x00\x00\x00\x00\x00\x00\x00\x00', 0xc0, 0x0, 0x0) mq_unlink(&(0x7f0000000440)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xc7I8H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xea\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x01\xf8\x81\xe8\xf6+\xe91\xb46\x9b\x8d\x19\xd3\xf2in\xba0\x9e4v\x8c\x9c\x1a\xd8@y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@') 16:11:34 executing program 1: unshare(0x20040600) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000500)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=""/83, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f00000005c0)=""/187, &(0x7f0000000700)=""/130, &(0x7f00000007c0)=""/248}) 16:11:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000300)=0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000240)=0x100400001, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000002c0)={0x1}, 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000600)='/exe\x00\x00\x00\x00\x00\x04\x9b\x84\x05r\x13r\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5\xe9\x01\xd2\xdau\x06\x00\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\xe8\xf5\xeb\x84_\x06\xc2\xb4\x83?\x0f\x84\xb3V\xf09\x19(\x06\x00\x8f|\xe6lr\x88A\x04\x1a\xfeW\x05\x95%\x80\xb4\x9a\xca\xd4Yd\x89\xf4E_,\xbaX\xeem)\x81G\xdf\xab2V\xc7B\xc1\xb6\x9fgy=\xfdj\x9bM\xb8\x88\xe6F\";\xe7\xfb\x8b\'\x17 .\xa9V\x11\x8f\x19?\xb8\xab]\xd2\xc0\xfd\xaf\x97\x16\xedQ\xad\x15\xd8\x1dC\xb8\x9e\x1c\xec\xab\xcb\xa5\xd2\xe6/[>\xc8\xaf\xed\xae\x87\x12\x18\xff\a\x00\x00\x00\x00\x00\x00\x1d\xb9\x8eP&$\x19\xdeX\xd7G)]\xa8\xae\xbc\x0f\x7f\x7fV\x80\xe4\xd3\xee\xad\xe2\n->B\v5Ea\x80\xb1\tT\x9eN\xf0\xe1\xb5V\x91\x03\x009\xce6\xa2H7)z\x9b\x9fzgK _o3\xf0\x01\x00\xf4\x84\xf0M\x8b\xba&\x91\x91\xd3d\xecZ\xc18=\x9a\xb7F\r*\x89\x93\x8f\xb7`\t6\xd9\x9bjy&\xdd\xfb\'\xe0\x96\x00\xc5\x03\v\x05\x1d\x15\x11\x9fq\n\xf1\xa0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0xfffffffffffffff7, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 16:11:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000100)=0x157) 16:11:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIONREAD(r1, 0x541b, 0x0) 16:11:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_open(&(0x7f0000000100)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xb2\xa88H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xca\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x02\x00\x00\x00\x00\x00\x00\x00\xb46\x9b\x8d\x19\xd3\xf2in\xba0y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@\xc5e\xef\xc3n\xdb\xa3K5j\xae\x00\x00\x00\x00\x00\x00\x00\x00', 0xc0, 0x0, 0x0) mq_unlink(&(0x7f0000000440)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xc7I8H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xea\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x01\xf8\x81\xe8\xf6+\xe91\xb46\x9b\x8d\x19\xd3\xf2in\xba0\x9e4v\x8c\x9c\x1a\xd8@y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@') 16:11:35 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x1000000, 0x1}) 16:11:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000100)=0x157) 16:11:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x7) 16:11:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIONREAD(r1, 0x541b, 0x0) 16:11:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_open(&(0x7f0000000100)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xb2\xa88H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xca\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x02\x00\x00\x00\x00\x00\x00\x00\xb46\x9b\x8d\x19\xd3\xf2in\xba0y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@\xc5e\xef\xc3n\xdb\xa3K5j\xae\x00\x00\x00\x00\x00\x00\x00\x00', 0xc0, 0x0, 0x0) mq_unlink(&(0x7f0000000440)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xc7I8H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xea\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x01\xf8\x81\xe8\xf6+\xe91\xb46\x9b\x8d\x19\xd3\xf2in\xba0\x9e4v\x8c\x9c\x1a\xd8@y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@') 16:11:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 16:11:35 executing program 4: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:11:35 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x1000000, 0x1}) 16:11:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x7) [ 177.629877] binder: 8258:8261 BC_FREE_BUFFER u0000000020ffb000 no match [ 177.683578] binder_alloc: binder_alloc_mmap_handler: 8258 20001000-20004000 already mapped failed -16 16:11:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_open(&(0x7f0000000100)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xb2\xa88H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xca\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x02\x00\x00\x00\x00\x00\x00\x00\xb46\x9b\x8d\x19\xd3\xf2in\xba0y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@\xc5e\xef\xc3n\xdb\xa3K5j\xae\x00\x00\x00\x00\x00\x00\x00\x00', 0xc0, 0x0, 0x0) mq_unlink(&(0x7f0000000440)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xc7I8H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xea\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x01\xf8\x81\xe8\xf6+\xe91\xb46\x9b\x8d\x19\xd3\xf2in\xba0\x9e4v\x8c\x9c\x1a\xd8@y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@') 16:11:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIONREAD(r1, 0x541b, 0x0) [ 177.782523] binder_alloc: 8258: binder_alloc_buf, no vma [ 177.788255] binder: 8258:8268 transaction failed 29189/-3, size 0-0 line 2973 [ 177.802384] binder: BINDER_SET_CONTEXT_MGR already set [ 177.807822] binder: 8258:8261 ioctl 40046207 0 returned -16 16:11:35 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x1000000, 0x1}) [ 177.874547] binder: 8258:8273 BC_FREE_BUFFER u0000000020ffb000 no match [ 177.905368] binder: send failed reply for transaction 2 to 8258:8261 [ 177.912298] binder: undelivered TRANSACTION_COMPLETE [ 177.917494] binder: undelivered TRANSACTION_ERROR: 29189 16:11:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x7) 16:11:36 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000440)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "a1d8f2", 0x10, 0x806, 0x0, @dev, @mcast2, {[], @icmpv6=@ni={0x0, 0x8}}}}}}, 0x0) 16:11:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 178.062935] binder: undelivered TRANSACTION_ERROR: 29189 16:11:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') write$P9_RFSYNC(r0, 0x0, 0x0) 16:11:36 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x1000000, 0x1}) 16:11:36 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000440)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "a1d8f2", 0x10, 0x806, 0x0, @dev, @mcast2, {[], @icmpv6=@ni={0x0, 0x8}}}}}}, 0x0) [ 178.206829] binder: 8286:8288 BC_FREE_BUFFER u0000000020ffb000 no match [ 178.363490] binder: release 8286:8288 transaction 5 out, still active [ 178.370178] binder: undelivered TRANSACTION_COMPLETE [ 178.377236] binder: send failed reply for transaction 5, target dead [ 178.386338] syz-executor4 (8262) used greatest stack depth: 53008 bytes left 16:11:36 executing program 4: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:11:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x7) 16:11:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 16:11:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') write$P9_RFSYNC(r0, 0x0, 0x0) 16:11:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x74) 16:11:36 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000440)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "a1d8f2", 0x10, 0x806, 0x0, @dev, @mcast2, {[], @icmpv6=@ni={0x0, 0x8}}}}}}, 0x0) [ 178.686678] binder: 8307:8314 BC_FREE_BUFFER u0000000020ffb000 no match 16:11:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') write$P9_RFSYNC(r0, 0x0, 0x0) 16:11:36 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000440)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "a1d8f2", 0x10, 0x806, 0x0, @dev, @mcast2, {[], @icmpv6=@ni={0x0, 0x8}}}}}}, 0x0) 16:11:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x74) 16:11:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 178.871141] binder: send failed reply for transaction 7 to 8307:8314 [ 178.878016] binder: undelivered TRANSACTION_COMPLETE [ 178.883235] binder: undelivered TRANSACTION_ERROR: 29189 16:11:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000300)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) [ 179.071380] binder: 8330:8334 BC_FREE_BUFFER u0000000020ffb000 no match 16:11:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000300)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) [ 179.229188] binder: release 8330:8334 transaction 9 out, still active [ 179.236024] binder: undelivered TRANSACTION_COMPLETE [ 179.267403] binder: send failed reply for transaction 9, target dead 16:11:37 executing program 4: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:11:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x74) 16:11:37 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x44, 0x5}}}}}, &(0x7f0000000040)) 16:11:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') write$P9_RFSYNC(r0, 0x0, 0x0) 16:11:37 executing program 3: socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x65}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) 16:11:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000300)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 16:11:37 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 16:11:37 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x44, 0x5}}}}}, &(0x7f0000000040)) 16:11:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000300)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 16:11:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x74) 16:11:37 executing program 3: socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x65}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) 16:11:38 executing program 1: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000073) fcntl$setstatus(r0, 0x4, 0x46000) read(r0, &(0x7f0000000400)=""/250, 0xfa) 16:11:38 executing program 4: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:11:38 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x44, 0x5}}}}}, &(0x7f0000000040)) 16:11:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xe9K:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xd9\x81\x87A\xc3\xbd\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g\xff\xff\xff\xff\xff\xb8(', 0x0) fallocate(r1, 0x0, 0x8000, 0xc77) lseek(r1, 0x0, 0x4) 16:11:38 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 16:11:38 executing program 3: socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x65}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) 16:11:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xe9K:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xd9\x81\x87A\xc3\xbd\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g\xff\xff\xff\xff\xff\xb8(', 0x0) fallocate(r1, 0x0, 0x8000, 0xc77) lseek(r1, 0x0, 0x4) 16:11:38 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 16:11:38 executing program 3: socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x65}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) 16:11:38 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x44, 0x5}}}}}, &(0x7f0000000040)) 16:11:39 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 16:11:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xe9K:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xd9\x81\x87A\xc3\xbd\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g\xff\xff\xff\xff\xff\xb8(', 0x0) fallocate(r1, 0x0, 0x8000, 0xc77) lseek(r1, 0x0, 0x4) 16:11:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xe9K:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xd9\x81\x87A\xc3\xbd\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g\xff\xff\xff\xff\xff\xb8(', 0x0) fallocate(r1, 0x0, 0x8000, 0xc77) lseek(r1, 0x0, 0x4) 16:11:39 executing program 0: syz_emit_ethernet(0x3a5, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x3a, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x7ffff}}}}}}, 0x0) 16:11:39 executing program 1: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000073) fcntl$setstatus(r0, 0x4, 0x46000) read(r0, &(0x7f0000000400)=""/250, 0xfa) 16:11:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000007740)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_newneigh={0x3c, 0x1c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @broadcast}, @NDA_DST_IPV6={0x14}]}, 0xfe4d}}, 0x0) 16:11:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xe9K:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xd9\x81\x87A\xc3\xbd\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g\xff\xff\xff\xff\xff\xb8(', 0x0) fallocate(r1, 0x0, 0x8000, 0xc77) lseek(r1, 0x0, 0x4) 16:11:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xe9K:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xd9\x81\x87A\xc3\xbd\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g\xff\xff\xff\xff\xff\xb8(', 0x0) fallocate(r1, 0x0, 0x8000, 0xc77) lseek(r1, 0x0, 0x4) 16:11:39 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40505330, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 16:11:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xe9K:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xd9\x81\x87A\xc3\xbd\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g\xff\xff\xff\xff\xff\xb8(', 0x0) fallocate(r1, 0x0, 0x8000, 0xc77) lseek(r1, 0x0, 0x4) 16:11:39 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000006400), 0x1000) 16:11:39 executing program 0: syz_emit_ethernet(0x3a5, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x3a, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x7ffff}}}}}}, 0x0) 16:11:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000007740)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_newneigh={0x3c, 0x1c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @broadcast}, @NDA_DST_IPV6={0x14}]}, 0xfe4d}}, 0x0) 16:11:40 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000280)='loginuid\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r1, r2, 0x0, 0x1) 16:11:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000007740)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_newneigh={0x3c, 0x1c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @broadcast}, @NDA_DST_IPV6={0x14}]}, 0xfe4d}}, 0x0) 16:11:40 executing program 0: syz_emit_ethernet(0x3a5, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x3a, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x7ffff}}}}}}, 0x0) 16:11:40 executing program 1: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000073) fcntl$setstatus(r0, 0x4, 0x46000) read(r0, &(0x7f0000000400)=""/250, 0xfa) 16:11:40 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000006400), 0x1000) 16:11:40 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000280)='loginuid\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r1, r2, 0x0, 0x1) 16:11:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000007740)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_newneigh={0x3c, 0x1c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @broadcast}, @NDA_DST_IPV6={0x14}]}, 0xfe4d}}, 0x0) 16:11:40 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40505330, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 16:11:40 executing program 0: syz_emit_ethernet(0x3a5, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x3a, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x7ffff}}}}}}, 0x0) 16:11:40 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000280)='loginuid\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r1, r2, 0x0, 0x1) 16:11:40 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000006400), 0x1000) 16:11:40 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000006400), 0x1000) 16:11:40 executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000e47000)={0x80000007}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x80002004}) 16:11:40 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000280)='loginuid\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r1, r2, 0x0, 0x1) 16:11:40 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000006400), 0x1000) 16:11:41 executing program 1: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000073) fcntl$setstatus(r0, 0x4, 0x46000) read(r0, &(0x7f0000000400)=""/250, 0xfa) 16:11:41 executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000e47000)={0x80000007}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x80002004}) 16:11:41 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000014c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/145, 0x91}], 0x2, &(0x7f0000000180)}, 0x0) 16:11:41 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000006400), 0x1000) 16:11:41 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40505330, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 16:11:41 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000006400), 0x1000) 16:11:41 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000014c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/145, 0x91}], 0x2, &(0x7f0000000180)}, 0x0) 16:11:41 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000014c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/145, 0x91}], 0x2, &(0x7f0000000180)}, 0x0) 16:11:41 executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000e47000)={0x80000007}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x80002004}) 16:11:41 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000014c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/145, 0x91}], 0x2, &(0x7f0000000180)}, 0x0) 16:11:41 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000014c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/145, 0x91}], 0x2, &(0x7f0000000180)}, 0x0) 16:11:41 executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000e47000)={0x80000007}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x80002004}) 16:11:42 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000014c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/145, 0x91}], 0x2, &(0x7f0000000180)}, 0x0) 16:11:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x80045430, &(0x7f0000000080)) 16:11:42 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000014c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/145, 0x91}], 0x2, &(0x7f0000000180)}, 0x0) 16:11:42 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2d, 0xa, 0x0, "37ff000000000011c85a0f0100"}) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000140)) 16:11:42 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40505330, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 16:11:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000021c0)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x80, 0x0, "f29427265179e3b65cd70809efc59669ffd9aa6c3f0746edc6b0a53addee053fcd8c7b47f3d4ea9b55d91afd4f60d1c1808c1f00a51c7e5d1336cd14adbfa14d694f6686cc678119a85444a3deb3600b"}, 0xd8) 16:11:42 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff02}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 16:11:42 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2d, 0xa, 0x0, "37ff000000000011c85a0f0100"}) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000140)) 16:11:42 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) 16:11:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x80045430, &(0x7f0000000080)) 16:11:42 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2d, 0xa, 0x0, "37ff000000000011c85a0f0100"}) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000140)) 16:11:42 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) 16:11:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x80045430, &(0x7f0000000080)) 16:11:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000021c0)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x80, 0x0, "f29427265179e3b65cd70809efc59669ffd9aa6c3f0746edc6b0a53addee053fcd8c7b47f3d4ea9b55d91afd4f60d1c1808c1f00a51c7e5d1336cd14adbfa14d694f6686cc678119a85444a3deb3600b"}, 0xd8) 16:11:42 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff02}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 16:11:42 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2d, 0xa, 0x0, "37ff000000000011c85a0f0100"}) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000140)) 16:11:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@updsa={0x138, 0x1a, 0x21, 0x0, 0x0, {{@in6=@loopback, @in=@remote}, {@in6=@loopback, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) 16:11:43 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) capset(&(0x7f0000fb2000)={0x40020071026}, &(0x7f000006f000)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) 16:11:43 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) 16:11:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000021c0)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x80, 0x0, "f29427265179e3b65cd70809efc59669ffd9aa6c3f0746edc6b0a53addee053fcd8c7b47f3d4ea9b55d91afd4f60d1c1808c1f00a51c7e5d1336cd14adbfa14d694f6686cc678119a85444a3deb3600b"}, 0xd8) 16:11:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x80045430, &(0x7f0000000080)) 16:11:43 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff02}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 16:11:43 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) 16:11:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000021c0)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x80, 0x0, "f29427265179e3b65cd70809efc59669ffd9aa6c3f0746edc6b0a53addee053fcd8c7b47f3d4ea9b55d91afd4f60d1c1808c1f00a51c7e5d1336cd14adbfa14d694f6686cc678119a85444a3deb3600b"}, 0xd8) [ 185.524134] capability: warning: `syz-executor4' uses deprecated v2 capabilities in a way that may be insecure 16:11:43 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x3}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbabb000000000000, 0x0, 0x0, 0x0, 0x0, 0xb7ad000000000000]}}, {0x2, 0x0, 0x2e0, @local}, r1}}, 0x48) 16:11:43 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) capset(&(0x7f0000fb2000)={0x40020071026}, &(0x7f000006f000)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) 16:11:43 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff02}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 16:11:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@updsa={0x138, 0x1a, 0x21, 0x0, 0x0, {{@in6=@loopback, @in=@remote}, {@in6=@loopback, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) 16:11:43 executing program 1: memfd_create(&(0x7f00000002c0)='\xff\'\xc5\x02trg\xeb\xf1\xf4\xd8;\xb2\xf0x\x9c\fx\x1c\xcbB\xdf\xa3u\x7f9\xf2u^p\xd7|}!\xd0G\xca$-\x8f\xe1\x1d\"\x87\x94~\xa6\"\xa3*;n\x80\xd1\x80].\x94\x17b\x19\x90\xc5\xc4\xc0{\xed\x95\xed\x90\xcevU9\xb8T\x9d\x83,\xcf\x91^\x9f\xb0\xe7P\xa3\xa1@\xf0\xe2\x87\xb4=\xa71\x81\xb6\xfc\xd7t\xc6\xe2 \x8e\xb7?\xdc\x8df-/\a7\xd1\xb9\xa9\xae\xdc\xff\x9a\xe5@\xc9\x97*\x90\xc2\xca\x95\x17a\x1a\xf9/\x8av\x90T\x84m\x82\xf2\xfe=\xf0\x1f\xa3\xed\x0f\xe0\x7f\xc0\xc9\xb7\xf8a\tP\xb1\xb6\xd1\x8f\x1b\xda\xeae\x1d\xe6Y\x02\xaf6]\x1fSV\xbe\fn\xd5\x1fm\xe1\x9f\x85n\xe5V\x93>\xd0k\xd15.M\x8e\x9f\xda\xd8\xda\xf4:\xf0\xd4\xd1\r\xba\xe9\xc8\x84X\x1a\xd4\xf3\xd2\xb3\xd0\xf6\xc1\xbe9{\t\x92\xb4\x87#\xe5\xdc\x8eT(\xb6\xd1\xb3\x02(\xf8\xa6N3\x94\xf7\xd6B\x0f\xa2\xc8\xce\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf6O\x86\xb1pev\x93\xc1\xf7+ \xaf\xc9\xc1\x16\x9c^V\\X\x9b\xee\xea\xc8\xaa\xc8\xc8\xa2\xa4\x8d\x7fv\x1cF\xa7\xb0\x8cs`\'\xfc\xd4\x90YKo\xfb\xc0\xd4\x85\x02J\xb1\xc4\xea\xf1G__\x1f\x9a\xa6\x14\xe6\xc1mK\xfc\xffY\x82\xe8\x18$\x9ee/\xb6\x9a\xed8U|q\"\x9a\xa1\xaa0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x3}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbabb000000000000, 0x0, 0x0, 0x0, 0x0, 0xb7ad000000000000]}}, {0x2, 0x0, 0x2e0, @local}, r1}}, 0x48) 16:11:44 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) capset(&(0x7f0000fb2000)={0x40020071026}, &(0x7f000006f000)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) 16:11:44 executing program 1: memfd_create(&(0x7f00000002c0)='\xff\'\xc5\x02trg\xeb\xf1\xf4\xd8;\xb2\xf0x\x9c\fx\x1c\xcbB\xdf\xa3u\x7f9\xf2u^p\xd7|}!\xd0G\xca$-\x8f\xe1\x1d\"\x87\x94~\xa6\"\xa3*;n\x80\xd1\x80].\x94\x17b\x19\x90\xc5\xc4\xc0{\xed\x95\xed\x90\xcevU9\xb8T\x9d\x83,\xcf\x91^\x9f\xb0\xe7P\xa3\xa1@\xf0\xe2\x87\xb4=\xa71\x81\xb6\xfc\xd7t\xc6\xe2 \x8e\xb7?\xdc\x8df-/\a7\xd1\xb9\xa9\xae\xdc\xff\x9a\xe5@\xc9\x97*\x90\xc2\xca\x95\x17a\x1a\xf9/\x8av\x90T\x84m\x82\xf2\xfe=\xf0\x1f\xa3\xed\x0f\xe0\x7f\xc0\xc9\xb7\xf8a\tP\xb1\xb6\xd1\x8f\x1b\xda\xeae\x1d\xe6Y\x02\xaf6]\x1fSV\xbe\fn\xd5\x1fm\xe1\x9f\x85n\xe5V\x93>\xd0k\xd15.M\x8e\x9f\xda\xd8\xda\xf4:\xf0\xd4\xd1\r\xba\xe9\xc8\x84X\x1a\xd4\xf3\xd2\xb3\xd0\xf6\xc1\xbe9{\t\x92\xb4\x87#\xe5\xdc\x8eT(\xb6\xd1\xb3\x02(\xf8\xa6N3\x94\xf7\xd6B\x0f\xa2\xc8\xce\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf6O\x86\xb1pev\x93\xc1\xf7+ \xaf\xc9\xc1\x16\x9c^V\\X\x9b\xee\xea\xc8\xaa\xc8\xc8\xa2\xa4\x8d\x7fv\x1cF\xa7\xb0\x8cs`\'\xfc\xd4\x90YKo\xfb\xc0\xd4\x85\x02J\xb1\xc4\xea\xf1G__\x1f\x9a\xa6\x14\xe6\xc1mK\xfc\xffY\x82\xe8\x18$\x9ee/\xb6\x9a\xed8U|q\"\x9a\xa1\xaa0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x3}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbabb000000000000, 0x0, 0x0, 0x0, 0x0, 0xb7ad000000000000]}}, {0x2, 0x0, 0x2e0, @local}, r1}}, 0x48) 16:11:44 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x19, 0x201, 0x0, 0x0, {0x1d, 0xd601}}, 0x14}}, 0x0) 16:11:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@updsa={0x138, 0x1a, 0x21, 0x0, 0x0, {{@in6=@loopback, @in=@remote}, {@in6=@loopback, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) 16:11:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x3}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbabb000000000000, 0x0, 0x0, 0x0, 0x0, 0xb7ad000000000000]}}, {0x2, 0x0, 0x2e0, @local}, r1}}, 0x48) 16:11:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x3}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbabb000000000000, 0x0, 0x0, 0x0, 0x0, 0xb7ad000000000000]}}, {0x2, 0x0, 0x2e0, @local}, r1}}, 0x48) 16:11:44 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x19, 0x201, 0x0, 0x0, {0x1d, 0xd601}}, 0x14}}, 0x0) 16:11:44 executing program 1: memfd_create(&(0x7f00000002c0)='\xff\'\xc5\x02trg\xeb\xf1\xf4\xd8;\xb2\xf0x\x9c\fx\x1c\xcbB\xdf\xa3u\x7f9\xf2u^p\xd7|}!\xd0G\xca$-\x8f\xe1\x1d\"\x87\x94~\xa6\"\xa3*;n\x80\xd1\x80].\x94\x17b\x19\x90\xc5\xc4\xc0{\xed\x95\xed\x90\xcevU9\xb8T\x9d\x83,\xcf\x91^\x9f\xb0\xe7P\xa3\xa1@\xf0\xe2\x87\xb4=\xa71\x81\xb6\xfc\xd7t\xc6\xe2 \x8e\xb7?\xdc\x8df-/\a7\xd1\xb9\xa9\xae\xdc\xff\x9a\xe5@\xc9\x97*\x90\xc2\xca\x95\x17a\x1a\xf9/\x8av\x90T\x84m\x82\xf2\xfe=\xf0\x1f\xa3\xed\x0f\xe0\x7f\xc0\xc9\xb7\xf8a\tP\xb1\xb6\xd1\x8f\x1b\xda\xeae\x1d\xe6Y\x02\xaf6]\x1fSV\xbe\fn\xd5\x1fm\xe1\x9f\x85n\xe5V\x93>\xd0k\xd15.M\x8e\x9f\xda\xd8\xda\xf4:\xf0\xd4\xd1\r\xba\xe9\xc8\x84X\x1a\xd4\xf3\xd2\xb3\xd0\xf6\xc1\xbe9{\t\x92\xb4\x87#\xe5\xdc\x8eT(\xb6\xd1\xb3\x02(\xf8\xa6N3\x94\xf7\xd6B\x0f\xa2\xc8\xce\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf6O\x86\xb1pev\x93\xc1\xf7+ \xaf\xc9\xc1\x16\x9c^V\\X\x9b\xee\xea\xc8\xaa\xc8\xc8\xa2\xa4\x8d\x7fv\x1cF\xa7\xb0\x8cs`\'\xfc\xd4\x90YKo\xfb\xc0\xd4\x85\x02J\xb1\xc4\xea\xf1G__\x1f\x9a\xa6\x14\xe6\xc1mK\xfc\xffY\x82\xe8\x18$\x9ee/\xb6\x9a\xed8U|q\"\x9a\xa1\xaa\xd0k\xd15.M\x8e\x9f\xda\xd8\xda\xf4:\xf0\xd4\xd1\r\xba\xe9\xc8\x84X\x1a\xd4\xf3\xd2\xb3\xd0\xf6\xc1\xbe9{\t\x92\xb4\x87#\xe5\xdc\x8eT(\xb6\xd1\xb3\x02(\xf8\xa6N3\x94\xf7\xd6B\x0f\xa2\xc8\xce\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf6O\x86\xb1pev\x93\xc1\xf7+ \xaf\xc9\xc1\x16\x9c^V\\X\x9b\xee\xea\xc8\xaa\xc8\xc8\xa2\xa4\x8d\x7fv\x1cF\xa7\xb0\x8cs`\'\xfc\xd4\x90YKo\xfb\xc0\xd4\x85\x02J\xb1\xc4\xea\xf1G__\x1f\x9a\xa6\x14\xe6\xc1mK\xfc\xffY\x82\xe8\x18$\x9ee/\xb6\x9a\xed8U|q\"\x9a\xa1\xaa0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x3}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbabb000000000000, 0x0, 0x0, 0x0, 0x0, 0xb7ad000000000000]}}, {0x2, 0x0, 0x2e0, @local}, r1}}, 0x48) 16:11:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x3}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbabb000000000000, 0x0, 0x0, 0x0, 0x0, 0xb7ad000000000000]}}, {0x2, 0x0, 0x2e0, @local}, r1}}, 0x48) 16:11:44 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x19, 0x201, 0x0, 0x0, {0x1d, 0xd601}}, 0x14}}, 0x0) 16:11:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@updsa={0x138, 0x1a, 0x21, 0x0, 0x0, {{@in6=@loopback, @in=@remote}, {@in6=@loopback, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) 16:11:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dspn(0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x40, 0x0, 0x0, 0xfff}, {0x6}]}, 0x10) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x3f00) 16:11:45 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1}, 0x1a) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x8) bind$unix(r2, &(0x7f0000000200)=@abs={0x1}, 0x6e) 16:11:45 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)=[{0x10, 0x29, 0x3}], 0x10}, 0x0) 16:11:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100), 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x580, 0x4) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000180)=0x8, 0x29d) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000140)=""/36, 0x24}, 0x2000) sendmmsg(r0, &(0x7f00000000c0), 0x182, 0x0) 16:11:45 executing program 4: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x2, 0x0, 0x0, 0x0) [ 187.262552] ================================================================== [ 187.270110] BUG: KMSAN: uninit-value in __siphash_aligned+0x512/0xae0 [ 187.276717] CPU: 1 PID: 8721 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #8 [ 187.283848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.293236] Call Trace: [ 187.295863] dump_stack+0x173/0x1d0 [ 187.299549] kmsan_report+0x120/0x290 [ 187.303393] kmsan_internal_check_memory+0x9a7/0xa20 [ 187.308571] __msan_instrument_asm_load+0x8a/0x90 [ 187.313456] __siphash_aligned+0x512/0xae0 [ 187.317749] secure_ipv6_port_ephemeral+0x110/0x220 [ 187.322806] inet6_hash_connect+0x11f/0x1a0 [ 187.327183] tcp_v6_connect+0x20ba/0x2890 [ 187.331385] ? __msan_poison_alloca+0x1e0/0x270 [ 187.336101] ? tcp_v6_pre_connect+0x130/0x130 [ 187.340626] __inet_stream_connect+0x2f9/0x1340 [ 187.345363] ? kmem_cache_alloc_trace+0x55a/0xb90 [ 187.350259] ? tcp_sendmsg_locked+0x6394/0x6be0 [ 187.355029] tcp_sendmsg_locked+0x65d5/0x6be0 [ 187.359581] ? aa_label_sk_perm+0xda/0x940 [ 187.363868] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 187.369286] ? aa_label_sk_perm+0x6d6/0x940 [ 187.373640] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 187.379031] ? futex_wait+0x912/0xc40 [ 187.382918] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 187.388342] tcp_sendmsg+0xb2/0x100 [ 187.392030] ? tcp_sendmsg_locked+0x6be0/0x6be0 [ 187.396726] inet_sendmsg+0x54a/0x720 [ 187.400565] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 187.405948] ? security_socket_sendmsg+0x1bd/0x200 16:11:45 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)=[{0x10, 0x29, 0x3}], 0x10}, 0x0) [ 187.410915] ? inet_getname+0x490/0x490 [ 187.414938] __sys_sendto+0x8c4/0xac0 [ 187.418805] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 187.424314] ? prepare_exit_to_usermode+0x114/0x420 [ 187.429352] ? syscall_return_slowpath+0x50/0x650 [ 187.434251] __se_sys_sendto+0x107/0x130 [ 187.438361] __x64_sys_sendto+0x6e/0x90 [ 187.442369] do_syscall_64+0xbc/0xf0 [ 187.446116] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 187.451333] RIP: 0033:0x457669 [ 187.454542] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 187.473476] RSP: 002b:00007f9ab370fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 187.481205] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457669 [ 187.488486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 187.495769] RBP: 000000000072bf00 R08: 000000002031e000 R09: 000000000000001c [ 187.503070] R10: 0000000020000004 R11: 0000000000000246 R12: 00007f9ab37106d4 [ 187.510356] R13: 00000000004c4539 R14: 00000000004d75a8 R15: 00000000ffffffff [ 187.517657] [ 187.519292] Local variable description: ----combined@secure_ipv6_port_ephemeral [ 187.526739] Variable was created at: [ 187.530541] secure_ipv6_port_ephemeral+0x6a/0x220 [ 187.535523] inet6_hash_connect+0x11f/0x1a0 [ 187.539857] [ 187.541505] Bytes 2-7 of 8 are uninitialized [ 187.545941] Memory access of size 8 starts at ffff88814a6df5f0 [ 187.551936] ================================================================== 16:11:45 executing program 4: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x2, 0x0, 0x0, 0x0) [ 187.559303] Disabling lock debugging due to kernel taint [ 187.564788] Kernel panic - not syncing: panic_on_warn set ... [ 187.570708] CPU: 1 PID: 8721 Comm: syz-executor1 Tainted: G B 4.20.0-rc7+ #8 [ 187.579202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.588565] Call Trace: [ 187.591181] dump_stack+0x173/0x1d0 [ 187.594848] panic+0x3ce/0x961 [ 187.598132] kmsan_report+0x285/0x290 [ 187.601997] kmsan_internal_check_memory+0x9a7/0xa20 [ 187.607177] __msan_instrument_asm_load+0x8a/0x90 16:11:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100), 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x580, 0x4) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000180)=0x8, 0x29d) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000140)=""/36, 0x24}, 0x2000) sendmmsg(r0, &(0x7f00000000c0), 0x182, 0x0) [ 187.612067] __siphash_aligned+0x512/0xae0 [ 187.616377] secure_ipv6_port_ephemeral+0x110/0x220 [ 187.621453] inet6_hash_connect+0x11f/0x1a0 [ 187.625821] tcp_v6_connect+0x20ba/0x2890 [ 187.630025] ? __msan_poison_alloca+0x1e0/0x270 [ 187.634734] ? tcp_v6_pre_connect+0x130/0x130 [ 187.639256] __inet_stream_connect+0x2f9/0x1340 [ 187.643988] ? kmem_cache_alloc_trace+0x55a/0xb90 [ 187.648878] ? tcp_sendmsg_locked+0x6394/0x6be0 [ 187.653603] tcp_sendmsg_locked+0x65d5/0x6be0 [ 187.658135] ? aa_label_sk_perm+0xda/0x940 16:11:45 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)=[{0x10, 0x29, 0x3}], 0x10}, 0x0) [ 187.662399] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 187.667818] ? aa_label_sk_perm+0x6d6/0x940 [ 187.672159] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 187.677540] ? futex_wait+0x912/0xc40 [ 187.681455] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 187.686894] tcp_sendmsg+0xb2/0x100 [ 187.690568] ? tcp_sendmsg_locked+0x6be0/0x6be0 [ 187.695268] inet_sendmsg+0x54a/0x720 [ 187.699140] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 187.704541] ? security_socket_sendmsg+0x1bd/0x200 [ 187.709503] ? inet_getname+0x490/0x490 [ 187.713517] __sys_sendto+0x8c4/0xac0 [ 187.717393] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 187.722875] ? prepare_exit_to_usermode+0x114/0x420 [ 187.727943] ? syscall_return_slowpath+0x50/0x650 [ 187.732818] __se_sys_sendto+0x107/0x130 [ 187.736963] __x64_sys_sendto+0x6e/0x90 [ 187.741009] do_syscall_64+0xbc/0xf0 [ 187.744753] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 187.749975] RIP: 0033:0x457669 [ 187.753200] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 187.772129] RSP: 002b:00007f9ab370fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 187.779857] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457669 [ 187.787156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 187.794459] RBP: 000000000072bf00 R08: 000000002031e000 R09: 000000000000001c [ 187.801744] R10: 0000000020000004 R11: 0000000000000246 R12: 00007f9ab37106d4 [ 187.809026] R13: 00000000004c4539 R14: 00000000004d75a8 R15: 00000000ffffffff [ 187.817323] Kernel Offset: disabled [ 187.820959] Rebooting in 86400 seconds..