Warning: Permanently added '10.128.0.124' (ECDSA) to the list of known hosts. 2018/12/20 19:13:14 fuzzer started 2018/12/20 19:13:18 dialing manager at 10.128.0.26:46613 syzkaller login: [ 70.923480] gcc (6430) used greatest stack depth: 54088 bytes left 2018/12/20 19:13:19 syscalls: 1 2018/12/20 19:13:19 code coverage: enabled 2018/12/20 19:13:19 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/20 19:13:19 setuid sandbox: enabled 2018/12/20 19:13:19 namespace sandbox: enabled 2018/12/20 19:13:19 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/20 19:13:19 fault injection: enabled 2018/12/20 19:13:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/20 19:13:19 net packet injection: enabled 2018/12/20 19:13:19 net device setup: enabled 19:15:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000}}, 0x20) [ 189.918167] IPVS: ftp: loaded support on port[0] = 21 [ 191.285119] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.291674] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.300148] device bridge_slave_0 entered promiscuous mode [ 191.383043] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.389596] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.397952] device bridge_slave_1 entered promiscuous mode [ 191.478197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 191.557270] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 191.805813] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 191.890331] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 191.973725] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 191.980709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.063000] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 192.069970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.318928] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 192.327732] team0: Port device team_slave_0 added [ 192.407530] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 192.416124] team0: Port device team_slave_1 added [ 192.496633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.585224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.669383] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.677140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.686468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.770890] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.778601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.787942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 19:15:21 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) r1 = socket$inet6(0xa, 0x803, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x100000000000026, &(0x7f0000000380)={@multicast2, @local}, 0xc) dup3(r1, r0, 0x0) [ 193.652168] IPVS: ftp: loaded support on port[0] = 21 [ 193.988675] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.995320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.002636] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.009172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.018556] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 194.025127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.214662] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.221237] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.229635] device bridge_slave_0 entered promiscuous mode [ 196.379247] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.385853] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.394178] device bridge_slave_1 entered promiscuous mode [ 196.527193] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 196.660037] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.090717] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.249626] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.528274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 197.535344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.962267] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 197.970877] team0: Port device team_slave_0 added 19:15:26 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r1, 0x84, 0x76, &(0x7f0000dcffe8)=""/24, &(0x7f0000000000)=0x18) [ 198.143402] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 198.152168] team0: Port device team_slave_1 added [ 198.237537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.326355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.492292] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 198.499904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.509078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.570465] IPVS: ftp: loaded support on port[0] = 21 [ 198.713861] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 198.721460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.730781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.463892] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.470464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.477695] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.484279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.493642] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 200.694851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.949921] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.956629] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.965054] device bridge_slave_0 entered promiscuous mode [ 201.148894] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.155663] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.163962] device bridge_slave_1 entered promiscuous mode [ 201.302693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.318755] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.358066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 201.507731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 201.822072] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 201.828383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.836528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.021975] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 202.142800] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 202.329885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 202.337125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.514839] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 202.521908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.553282] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.110600] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 203.119374] team0: Port device team_slave_0 added [ 203.254041] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 203.262682] team0: Port device team_slave_1 added [ 203.363899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 203.371132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.380123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.549440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 203.556520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.565724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.773910] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 203.781622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.791242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.983777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 203.991413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.000587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.634855] ip (6898) used greatest stack depth: 53840 bytes left 19:15:33 executing program 3: r0 = memfd_create(&(0x7f0000000000)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000001280)={0x5}, 0x10) [ 206.007262] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.013878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.020966] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.027604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.036918] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 206.042962] IPVS: ftp: loaded support on port[0] = 21 [ 206.043535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 19:15:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000}}, 0x20) 19:15:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000}}, 0x20) 19:15:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000}}, 0x20) 19:15:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) [ 207.745692] x86/PAT: syz-executor0:7017 map pfn RAM range req write-combining for [mem 0x154ac0000-0x154ac3fff], got write-back [ 207.834169] x86/PAT: syz-executor0:7024 map pfn RAM range req write-combining for [mem 0x154ac0000-0x154ac3fff], got write-back [ 207.867174] 8021q: adding VLAN 0 to HW filter on device bond0 19:15:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) [ 208.174109] x86/PAT: syz-executor0:7036 map pfn RAM range req write-combining for [mem 0x154000000-0x154003fff], got write-back 19:15:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) [ 208.392575] x86/PAT: syz-executor0:7046 map pfn RAM range req write-combining for [mem 0x154600000-0x154603fff], got write-back 19:15:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r4, &(0x7f0000000040)=0x100000, 0x8001) [ 208.688891] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 208.697143] x86/PAT: syz-executor0:7060 map pfn RAM range req write-combining for [mem 0x1541e0000-0x1541e3fff], got write-back 19:15:37 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0xc, 0x4, 0x3, 0x0, r0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000040), 0x0}, 0x18) 19:15:37 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0xc, 0x4, 0x3, 0x0, r0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000040), 0x0}, 0x18) [ 209.546478] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.552895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.560756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.649883] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.656523] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.664918] device bridge_slave_0 entered promiscuous mode [ 209.851849] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.858409] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.866795] device bridge_slave_1 entered promiscuous mode [ 210.074594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 210.230843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 210.335646] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.644747] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 210.775686] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 210.881454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 210.889056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.056776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 211.063848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.627274] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 211.636046] team0: Port device team_slave_0 added [ 211.800866] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 211.809523] team0: Port device team_slave_1 added [ 212.014318] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 212.021297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.030148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.201830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 212.210413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.219385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.423097] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 212.430753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.440238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.630924] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 212.638718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.647772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.635231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.220024] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 19:15:42 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) r1 = socket$inet6(0xa, 0x803, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x100000000000026, &(0x7f0000000380)={@multicast2, @local}, 0xc) dup3(r1, r0, 0x0) [ 214.457336] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.464071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.471232] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.477859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.486955] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 214.493495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.921685] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 214.928109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.935954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.507269] 8021q: adding VLAN 0 to HW filter on device team0 19:15:46 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r1, 0x84, 0x76, &(0x7f0000dcffe8)=""/24, &(0x7f0000000000)=0x18) [ 219.339190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.660584] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 219.964160] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 219.970382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.978489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.145400] 8021q: adding VLAN 0 to HW filter on device team0 19:15:49 executing program 3: r0 = memfd_create(&(0x7f0000000000)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000001280)={0x5}, 0x10) 19:15:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0xc, 0x4, 0x3, 0x0, r0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000040), 0x0}, 0x18) 19:15:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x80000) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000100)) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x13, "d525753579820e076aa965ed204a75bf9d3314"}, &(0x7f00000001c0)=0x1b) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r3, 0x9}, &(0x7f0000000240)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000002c0)={r3, 0xf1, "c4e59bd3be8662207e19c99fcadefae8bbf3addcd8fcca2119bbf149064dce7d78fecf0ae40885e98a12ab94bb9e2fc323b0bb94a019e8fb81864d05f9752ca49a849355e4b88040addb2fd1dcb15460b6f18efa0513cf9df1f349628e538466049dfa6d8200777cd092588c1ae4145513ddbb3a79eba210f99f091f6b6bd4639bf182faf62729a0331769302deb28d9e78b61864cfdf972c64fb575e3aa94e1c557421a3f23d1c00078116c87db74f86138f08f6887f36dda4f0116aa3ed1a472446e000e4a8a0363f2fa09c9a3e757a95fb7202272c7e1ac17082bcb7207fffb4b551bed2be3f2a98a81a4e03a576b70"}, &(0x7f00000003c0)=0xf9) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000440)=@int=0x9b, 0x4) mmap(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x0, 0x10, r0, 0x0) r5 = request_key(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='\xa1\x00', 0xffffffffffffffff) r6 = add_key(&(0x7f0000000540)='logon\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)="3aad35808ae468942ab18225844a3e2761fbcea2318b4a06a546e1a39f8a6a9c3b044470e95f38338829802516535291913995f4a8f57b8885d32095f4ab201f898ece09ce229b8eef3bf9b2d1e6b41e6d9e7649356776e8cad465a78c9cefd07efa2046d1a7956d2ab146d2b714c9cc7d81e3f006831e1a1723eec8c8f4968bd8d6421f481bca2b104b228878d593fa5a204b707c054eb247afe2906ed1dec66fb8b0cdfe184bf7c31d79526d9111b2714e2ab2a1a8d6bbe0de7947d3d61e879e", 0xc1, 0xfffffffffffffffb) keyctl$negate(0xd, r5, 0x8, r6) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f00000006c0), &(0x7f0000000700)=0x8) socket$inet6(0xa, 0x80807, 0x0) sendmsg$nl_route(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40002010}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@mpls_delroute={0x24, 0x19, 0x10, 0x70bd28, 0x25dfdbfe, {0x1c, 0x10, 0x0, 0x8, 0xfe, 0x0, 0xc8, 0x7, 0x2ba908227f4b21ac}, [@RTA_TTL_PROPAGATE={0x8, 0x1a, 0xae2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={0x0, r1, 0x0, 0x7, &(0x7f0000000840)='md5sum\x00', 0xffffffffffffffff}, 0x30) wait4(r7, &(0x7f00000008c0), 0x8, &(0x7f0000000900)) ioctl$void(r1, 0x5451) gettid() keyctl$search(0xa, r5, &(0x7f00000009c0)='cifs.idmap\x00', &(0x7f0000000a00)={'syz', 0x0}, r6) fsetxattr$security_selinux(r8, &(0x7f0000000a40)='security.selinux\x00', &(0x7f0000000a80)='system_u:object_r:iptables_exec_t:s0\x00', 0x25, 0x1) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000ac0)) setxattr$trusted_overlay_redirect(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='trusted.overlay.redirect\x00', &(0x7f0000000b80)='./file0\x00', 0x8, 0x2) pipe(&(0x7f0000000bc0)) 19:15:49 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r1, 0x84, 0x76, &(0x7f0000dcffe8)=""/24, &(0x7f0000000000)=0x18) 19:15:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) r1 = socket$inet6(0xa, 0x803, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x100000000000026, &(0x7f0000000380)={@multicast2, @local}, 0xc) dup3(r1, r0, 0x0) 19:15:49 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10001, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000013c0)=0xe8) bind$can_raw(r0, &(0x7f0000001400)={0x1d, r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001440)=0x2, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001480)={0x0, r0, 0x80000000, 0x10000, 0x0, 0x2}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000014c0)={0x0, 0x40, 0x6, 0x9}, &(0x7f0000001500)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001540)={r2, 0x3ff}, 0x8) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001580)={0x0, @aes128, 0x2, "e67765d192b5d711"}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000015c0)) bind$vsock_stream(r0, &(0x7f00000016c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000001700), &(0x7f0000001740)=0x4) write$input_event(r0, &(0x7f0000001780)={{0x0, 0x7530}, 0x2, 0x4, 0x8001}, 0x18) prctl$PR_SET_SECUREBITS(0x1c, 0x12) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x9) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f00000017c0)) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000001840)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8206}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x44, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000001980)={{0x0, 0x6}, 'port1\x00', 0x91, 0x80000, 0xffffffffffffc888, 0xfff, 0xd2, 0x9, 0x4, 0x0, 0x1}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000001a40)={0x3, 0x100000000}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000001a80)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000001ac0)='trusted.overlay.opaque\x00', &(0x7f0000001b00)='y\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001b40)={r2, 0x93, "1ab21dd7a2900dcd97f1f49595547b5179d557b3684a51a225916f9c29cfc451eeac6815cb147a00f0b49991ff8912a25891e1feca069c9632cbd7e16d7402f5b932dccc7108ee53444f1987e0b17a90b9963b938b4b0efb34e32353b4cd1cb358576118bea35eb8f110f979b456aa31fe7662d3b7f2d78254392ed1f3b715df3b6fad9a44c57e58423f9c8ac6bb4c3a0e9e66"}, &(0x7f0000001c00)=0x9b) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001c40)={r5, 0x9, 0x10, 0x7ff, 0xa4f}, &(0x7f0000001c80)=0x18) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000001cc0), &(0x7f0000001d00)=0x4) r6 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000001d40)) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000001d80)={0xfffffffffffffff9, 0x2, 0x1000, 0x9, "ca6ba732fc5601627280145d4314b99e38ebcaff889e4322b0abe99b90e7a6f8"}) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000001dc0)) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001e40)='/dev/sequencer\x00', 0xc0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000001e80)={r2, 0xff}, 0x8) 19:15:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0xc, 0x4, 0x3, 0x0, r0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000040), 0x0}, 0x18) 19:15:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) r1 = socket$inet6(0xa, 0x803, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x100000000000026, &(0x7f0000000380)={@multicast2, @local}, 0xc) dup3(r1, r0, 0x0) 19:15:49 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r1, 0x84, 0x76, &(0x7f0000dcffe8)=""/24, &(0x7f0000000000)=0x18) 19:15:49 executing program 3: r0 = memfd_create(&(0x7f0000000000)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000001280)={0x5}, 0x10) 19:15:49 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0x800000000000937e, &(0x7f00000001c0)="8c000000070000007f") 19:15:49 executing program 3: r0 = memfd_create(&(0x7f0000000000)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000001280)={0x5}, 0x10) 19:15:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x367, 0x46, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:15:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') sendfile(r1, r0, &(0x7f0000000000)=0x45d, 0x239fffffffffffc) [ 221.974722] autofs4:pid:7548:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(140.7), cmd(0x0000937e) [ 221.987406] autofs4:pid:7548:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) [ 222.288937] IPVS: ftp: loaded support on port[0] = 21 [ 222.347788] IPVS: ftp: loaded support on port[0] = 21 [ 223.668598] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.675196] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.683424] device bridge_slave_0 entered promiscuous mode [ 223.729347] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.735954] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.744217] device bridge_slave_0 entered promiscuous mode [ 223.762794] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.769323] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.777488] device bridge_slave_1 entered promiscuous mode [ 223.825687] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.832283] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.840667] device bridge_slave_1 entered promiscuous mode [ 223.859215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 223.922329] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 223.939558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 224.001685] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 224.187085] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 224.250506] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 224.271134] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 224.336028] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 224.353680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 224.360715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.420380] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 224.428009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.444893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 224.451975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.512889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 224.519842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.703556] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.712349] team0: Port device team_slave_0 added [ 224.768350] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.776971] team0: Port device team_slave_0 added [ 224.790014] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.798598] team0: Port device team_slave_1 added [ 224.854310] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.862964] team0: Port device team_slave_1 added [ 224.876808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.941498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.969297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.023925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.052174] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.059818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.069600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.111830] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.119422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.129478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.156272] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 225.163973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.174198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.215487] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 225.223215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.232328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.079853] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.086564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.093805] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.100331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.109244] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 226.201689] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.208355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.215557] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.222140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.231212] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 226.362139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.370110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.506390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.598447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.813871] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 229.901464] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 230.114599] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 230.120899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.128761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.219318] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 230.225702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.233716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.431375] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.535493] 8021q: adding VLAN 0 to HW filter on device team0 19:16:00 executing program 4: r0 = socket(0x40000000001e, 0x5, 0x0) setsockopt(r0, 0x10f, 0x0, 0x0, 0x0) 19:16:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)) 19:16:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') sendfile(r1, r0, &(0x7f0000000000)=0x45d, 0x239fffffffffffc) 19:16:00 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0x800000000000937e, &(0x7f00000001c0)="8c000000070000007f") 19:16:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x367, 0x46, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:16:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005a001f00ff03f4f9002304001576f51108020100020804028001c9a800000000", 0x24) [ 232.583266] netlink: 16 bytes leftover after parsing attributes in process `syz-executor5'. [ 232.585545] autofs4:pid:8093:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(140.7), cmd(0x0000937e) [ 232.604558] autofs4:pid:8093:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) 19:16:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)) 19:16:00 executing program 4: r0 = socket(0x40000000001e, 0x5, 0x0) setsockopt(r0, 0x10f, 0x0, 0x0, 0x0) 19:16:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005a001f00ff03f4f9002304001576f51108020100020804028001c9a800000000", 0x24) 19:16:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') sendfile(r1, r0, &(0x7f0000000000)=0x45d, 0x239fffffffffffc) 19:16:00 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0x800000000000937e, &(0x7f00000001c0)="8c000000070000007f") 19:16:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x367, 0x46, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 232.872227] netlink: 16 bytes leftover after parsing attributes in process `syz-executor5'. 19:16:01 executing program 4: r0 = socket(0x40000000001e, 0x5, 0x0) setsockopt(r0, 0x10f, 0x0, 0x0, 0x0) [ 232.932564] autofs4:pid:8111:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(140.7), cmd(0x0000937e) [ 232.945298] autofs4:pid:8111:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) 19:16:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)) 19:16:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') sendfile(r1, r0, &(0x7f0000000000)=0x45d, 0x239fffffffffffc) 19:16:01 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0x800000000000937e, &(0x7f00000001c0)="8c000000070000007f") 19:16:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005a001f00ff03f4f9002304001576f51108020100020804028001c9a800000000", 0x24) 19:16:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x367, 0x46, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:16:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)) 19:16:01 executing program 4: r0 = socket(0x40000000001e, 0x5, 0x0) setsockopt(r0, 0x10f, 0x0, 0x0, 0x0) [ 233.258317] autofs4:pid:8129:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(140.7), cmd(0x0000937e) [ 233.271023] autofs4:pid:8129:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) [ 233.359437] netlink: 16 bytes leftover after parsing attributes in process `syz-executor5'. 19:16:01 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000380)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 19:16:01 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'tWRl0\x00\x10\x00\x00\x00\x00\x03\x00@\x00'}, 0x14) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'\xff\xff\xfe'}, &(0x7f0000000000), 0x1fe, 0xffffffffffffffff) 19:16:01 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) close(r0) 19:16:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0xffffffff}) write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18}, 0x18) 19:16:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005a001f00ff03f4f9002304001576f51108020100020804028001c9a800000000", 0x24) 19:16:01 executing program 1: r0 = msgget$private(0x0, 0x8000000000000011) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000240)=""/83) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000580)=""/213) openat$mixer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mixer\x00', 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000017c0)={{0x0, @empty, 0x4e21, 0x3, 'lc\x00', 0x0, 0x7}, {@broadcast}}, 0x44) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x76) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e20, @remote}, {0x307, @broadcast}, 0x0, {0x2, 0x0, @multicast1}, 'vcan0\x00'}) clone(0x20020102100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000180)="1f0000000104ffce9e67fa5eaca2710bf305010008000100010423dcffdf00", 0x1f) 19:16:01 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000380)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 19:16:01 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'tWRl0\x00\x10\x00\x00\x00\x00\x03\x00@\x00'}, 0x14) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'\xff\xff\xfe'}, &(0x7f0000000000), 0x1fe, 0xffffffffffffffff) [ 233.761087] netlink: 16 bytes leftover after parsing attributes in process `syz-executor5'. 19:16:01 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) close(r0) 19:16:02 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'tWRl0\x00\x10\x00\x00\x00\x00\x03\x00@\x00'}, 0x14) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'\xff\xff\xfe'}, &(0x7f0000000000), 0x1fe, 0xffffffffffffffff) [ 233.956416] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 19:16:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x0, 0x0, 0x0) getegid() ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:16:02 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000380)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 19:16:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0xffffffff}) write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18}, 0x18) [ 234.084289] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 19:16:02 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) close(r0) 19:16:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1}, 0x8) [ 234.144285] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 19:16:02 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000380)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 19:16:02 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'tWRl0\x00\x10\x00\x00\x00\x00\x03\x00@\x00'}, 0x14) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'\xff\xff\xfe'}, &(0x7f0000000000), 0x1fe, 0xffffffffffffffff) 19:16:02 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) close(r0) 19:16:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0xffffffff}) write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18}, 0x18) 19:16:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x0, 0x0, 0x0) getegid() ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:16:02 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000ec0)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000000), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000141e00000c00000000000000000000001800000000000000140100000c0000000000000000000000"], 0x30}, 0x0) 19:16:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x3ff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x1e, &(0x7f0000000040)=[@in={0x2, 0x0, @broadcast}], 0x10) close(r1) 19:16:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0xffffffff}) write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18}, 0x18) 19:16:02 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x54485746, 0x0, @stepwise}) 19:16:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x0, 0x0, 0x0) getegid() ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:16:03 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000ec0)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000000), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000141e00000c00000000000000000000001800000000000000140100000c0000000000000000000000"], 0x30}, 0x0) 19:16:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local, @local, {[], @tcp={{0xf401, 0x1f4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:16:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1}, 0x8) 19:16:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x3ff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x1e, &(0x7f0000000040)=[@in={0x2, 0x0, @broadcast}], 0x10) close(r1) 19:16:03 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000ec0)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000000), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000141e00000c00000000000000000000001800000000000000140100000c0000000000000000000000"], 0x30}, 0x0) 19:16:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x54485746, 0x0, @stepwise}) 19:16:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x0, 0x0, 0x0) getegid() ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:16:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x3ff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x1e, &(0x7f0000000040)=[@in={0x2, 0x0, @broadcast}], 0x10) close(r1) 19:16:03 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000ec0)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000000), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000141e00000c00000000000000000000001800000000000000140100000c0000000000000000000000"], 0x30}, 0x0) 19:16:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x54485746, 0x0, @stepwise}) 19:16:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local, @local, {[], @tcp={{0xf401, 0x1f4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:16:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1}, 0x8) 19:16:03 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x54485746, 0x0, @stepwise}) 19:16:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)={0x8001, {{0x2, 0x0, @multicast1}}}, 0x90) 19:16:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x3ff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x1e, &(0x7f0000000040)=[@in={0x2, 0x0, @broadcast}], 0x10) close(r1) 19:16:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local, @local, {[], @tcp={{0xf401, 0x1f4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:16:03 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080045006, 0x0) 19:16:04 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='security.capability\x00', &(0x7f0000000500)=@v3, 0x18, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=@known='security.capability\x00\xc9\xbd0\x12\x98>\x02\x15Y`\x19j*\x84X_\x19\xc1\xc8&\x17)\x82\xa8\xde\x1c\xccL\xdci\x87\xff\xc9q\\\xef\"\xce\xe4\xc6s\xd48\x8d^V\x04\xa0\xb88\xaf\xb3[\xd3R\xe4\xc9\xeed\x9aw\x12\b0\x9c\xa46\xbf\x91\x9f\xd9ck\xfa%_\xf4\xb3\x1f@\xf8\x8e\xcc\x9c-\x81!q\xc4\x12bO\f\x14/\xc5Oe\xf4\x929\xf2v\x86\xc1}H\x9e\x92]\xa1\x9b\xf3\x1e0\xecu\xcd\x92#yWf\x1c\xe8\xa1V\x84\x18\xe6\xd3\xd4(\x17O\x89\xa1\x1c\xc8!\xfb\xf6A\"\xa3okA\x1c', 0x0, 0x2) 19:16:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)={0x8001, {{0x2, 0x0, @multicast1}}}, 0x90) 19:16:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x0, 0x2b, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x7, 0x3]}) 19:16:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local, @local, {[], @tcp={{0xf401, 0x1f4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:16:04 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080045006, 0x0) 19:16:04 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='security.capability\x00', &(0x7f0000000500)=@v3, 0x18, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=@known='security.capability\x00\xc9\xbd0\x12\x98>\x02\x15Y`\x19j*\x84X_\x19\xc1\xc8&\x17)\x82\xa8\xde\x1c\xccL\xdci\x87\xff\xc9q\\\xef\"\xce\xe4\xc6s\xd48\x8d^V\x04\xa0\xb88\xaf\xb3[\xd3R\xe4\xc9\xeed\x9aw\x12\b0\x9c\xa46\xbf\x91\x9f\xd9ck\xfa%_\xf4\xb3\x1f@\xf8\x8e\xcc\x9c-\x81!q\xc4\x12bO\f\x14/\xc5Oe\xf4\x929\xf2v\x86\xc1}H\x9e\x92]\xa1\x9b\xf3\x1e0\xecu\xcd\x92#yWf\x1c\xe8\xa1V\x84\x18\xe6\xd3\xd4(\x17O\x89\xa1\x1c\xc8!\xfb\xf6A\"\xa3okA\x1c', 0x0, 0x2) 19:16:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1}, 0x8) 19:16:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)={0x8001, {{0x2, 0x0, @multicast1}}}, 0x90) 19:16:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x0, 0x2b, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x7, 0x3]}) 19:16:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000013c0)="c7442400b0da0000c74424027ec20000c7442406000000000f01142467660f3881651b0f0826f4660fc69088000000b3f20f2dd50f01c82e3ef30f1ac3b9c60d0000b8b8494f68ba000000000f303636650f30", 0x53}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:04 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='security.capability\x00', &(0x7f0000000500)=@v3, 0x18, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=@known='security.capability\x00\xc9\xbd0\x12\x98>\x02\x15Y`\x19j*\x84X_\x19\xc1\xc8&\x17)\x82\xa8\xde\x1c\xccL\xdci\x87\xff\xc9q\\\xef\"\xce\xe4\xc6s\xd48\x8d^V\x04\xa0\xb88\xaf\xb3[\xd3R\xe4\xc9\xeed\x9aw\x12\b0\x9c\xa46\xbf\x91\x9f\xd9ck\xfa%_\xf4\xb3\x1f@\xf8\x8e\xcc\x9c-\x81!q\xc4\x12bO\f\x14/\xc5Oe\xf4\x929\xf2v\x86\xc1}H\x9e\x92]\xa1\x9b\xf3\x1e0\xecu\xcd\x92#yWf\x1c\xe8\xa1V\x84\x18\xe6\xd3\xd4(\x17O\x89\xa1\x1c\xc8!\xfb\xf6A\"\xa3okA\x1c', 0x0, 0x2) 19:16:04 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080045006, 0x0) 19:16:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x0, 0x2b, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x7, 0x3]}) 19:16:04 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='security.capability\x00', &(0x7f0000000500)=@v3, 0x18, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=@known='security.capability\x00\xc9\xbd0\x12\x98>\x02\x15Y`\x19j*\x84X_\x19\xc1\xc8&\x17)\x82\xa8\xde\x1c\xccL\xdci\x87\xff\xc9q\\\xef\"\xce\xe4\xc6s\xd48\x8d^V\x04\xa0\xb88\xaf\xb3[\xd3R\xe4\xc9\xeed\x9aw\x12\b0\x9c\xa46\xbf\x91\x9f\xd9ck\xfa%_\xf4\xb3\x1f@\xf8\x8e\xcc\x9c-\x81!q\xc4\x12bO\f\x14/\xc5Oe\xf4\x929\xf2v\x86\xc1}H\x9e\x92]\xa1\x9b\xf3\x1e0\xecu\xcd\x92#yWf\x1c\xe8\xa1V\x84\x18\xe6\xd3\xd4(\x17O\x89\xa1\x1c\xc8!\xfb\xf6A\"\xa3okA\x1c', 0x0, 0x2) 19:16:04 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080045006, 0x0) 19:16:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)={0x8001, {{0x2, 0x0, @multicast1}}}, 0x90) 19:16:05 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x0, 0x2b, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x7, 0x3]}) 19:16:05 executing program 3: seccomp(0x0, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x2, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000480)={0x0, r0+30000000}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) [ 237.234540] audit: type=1326 audit(1545333365.282:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8350 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0x0 19:16:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x65) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x6e, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 19:16:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) 19:16:05 executing program 0: r0 = socket$inet6(0xa, 0x80803, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 19:16:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000013c0)="c7442400b0da0000c74424027ec20000c7442406000000000f01142467660f3881651b0f0826f4660fc69088000000b3f20f2dd50f01c82e3ef30f1ac3b9c60d0000b8b8494f68ba000000000f303636650f30", 0x53}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:05 executing program 1: getpgid(0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x200000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)=ANY=[@ANYBLOB]) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)='systemtrustedem0posix_acl_accesseth1@vboxnet1ppp0&@&trusted-/\x00') 19:16:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) 19:16:05 executing program 0: r0 = socket$inet6(0xa, 0x80803, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 19:16:05 executing program 1: getpgid(0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x200000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)=ANY=[@ANYBLOB]) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)='systemtrustedem0posix_acl_accesseth1@vboxnet1ppp0&@&trusted-/\x00') 19:16:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000013c0)="c7442400b0da0000c74424027ec20000c7442406000000000f01142467660f3881651b0f0826f4660fc69088000000b3f20f2dd50f01c82e3ef30f1ac3b9c60d0000b8b8494f68ba000000000f303636650f30", 0x53}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) 19:16:06 executing program 0: r0 = socket$inet6(0xa, 0x80803, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) [ 238.023668] audit: type=1326 audit(1545333366.072:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8350 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0x0 19:16:06 executing program 3: seccomp(0x0, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x2, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000480)={0x0, r0+30000000}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) 19:16:06 executing program 1: getpgid(0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x200000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)=ANY=[@ANYBLOB]) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)='systemtrustedem0posix_acl_accesseth1@vboxnet1ppp0&@&trusted-/\x00') 19:16:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x65) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x6e, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 19:16:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) 19:16:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000013c0)="c7442400b0da0000c74424027ec20000c7442406000000000f01142467660f3881651b0f0826f4660fc69088000000b3f20f2dd50f01c82e3ef30f1ac3b9c60d0000b8b8494f68ba000000000f303636650f30", 0x53}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 238.323977] audit: type=1326 audit(1545333366.372:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8405 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0x0 19:16:06 executing program 0: r0 = socket$inet6(0xa, 0x80803, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 19:16:06 executing program 1: getpgid(0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x200000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)=ANY=[@ANYBLOB]) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)='systemtrustedem0posix_acl_accesseth1@vboxnet1ppp0&@&trusted-/\x00') 19:16:06 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='6d::d:/0,[:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 19:16:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x65) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x6e, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 19:16:06 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='6d::d:/0,[:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 19:16:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f0000000680)}) 19:16:06 executing program 0: mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) unshare(0x400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 238.888593] binder: 8434:8437 Release 1 refcount change on invalid ref 0 ret -22 [ 238.945841] binder_alloc: binder_alloc_mmap_handler: 8434 20001000-20004000 already mapped failed -16 [ 239.011370] binder: BINDER_SET_CONTEXT_MGR already set [ 239.016810] binder: 8434:8437 ioctl 40046207 0 returned -16 [ 239.053109] binder_alloc: 8434: binder_alloc_buf, no vma [ 239.058717] binder: 8434:8447 transaction failed 29189/-3, size 24-8 line 2973 [ 239.084999] binder: 8434:8437 Release 1 refcount change on invalid ref 0 ret -22 [ 239.123315] binder: release 8434:8437 transaction 2 out, still active [ 239.130015] binder: unexpected work type, 4, not freed [ 239.135478] binder: undelivered TRANSACTION_COMPLETE [ 239.161425] binder: undelivered TRANSACTION_ERROR: 29189 [ 239.167109] binder: send failed reply for transaction 2, target dead 19:16:07 executing program 3: seccomp(0x0, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x2, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000480)={0x0, r0+30000000}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) 19:16:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0xfffffffffffffffd) 19:16:07 executing program 0: mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) unshare(0x400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 19:16:07 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='6d::d:/0,[:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 19:16:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x65) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x6e, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 19:16:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f0000000680)}) 19:16:07 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='6d::d:/0,[:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) [ 239.320230] audit: type=1326 audit(1545333367.362:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8460 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0x0 19:16:07 executing program 0: mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) unshare(0x400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 19:16:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0xfffffffffffffffd) [ 239.445859] binder: 8467:8471 Release 1 refcount change on invalid ref 0 ret -22 [ 239.478034] binder: release 8467:8471 transaction 7 out, still active [ 239.484924] binder: unexpected work type, 4, not freed [ 239.490232] binder: undelivered TRANSACTION_COMPLETE 19:16:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980914, 0xfdfd}) 19:16:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f0000000680)}) [ 239.629348] binder: send failed reply for transaction 7, target dead 19:16:07 executing program 0: mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) unshare(0x400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) [ 239.785978] binder: 8486:8488 Release 1 refcount change on invalid ref 0 ret -22 [ 239.858645] binder: release 8486:8488 transaction 11 out, still active [ 239.865591] binder: unexpected work type, 4, not freed [ 239.870907] binder: undelivered TRANSACTION_COMPLETE [ 239.986505] binder: send failed reply for transaction 11, target dead 19:16:08 executing program 3: seccomp(0x0, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x2, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000480)={0x0, r0+30000000}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) 19:16:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0xfffffffffffffffd) 19:16:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in=@dev}, {@in6=@mcast1}, @in6}}, [@mark={0xc}]}, 0x104}, 0x8}, 0x0) 19:16:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980914, 0xfdfd}) 19:16:08 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, &(0x7f0000000080)=""/79, 0x4f) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000003c0)) 19:16:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f0000000680)}) [ 240.209071] binder: 8501:8503 Release 1 refcount change on invalid ref 0 ret -22 [ 240.230283] binder: release 8501:8503 transaction 15 out, still active [ 240.237219] binder: unexpected work type, 4, not freed [ 240.242687] binder: undelivered TRANSACTION_COMPLETE [ 240.263801] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 240.286342] audit: type=1326 audit(1545333368.332:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8510 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0x0 19:16:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980914, 0xfdfd}) 19:16:08 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x18, 0xa, 0x0, "17606e0f2b5c34c9db5a0f9cc0fbda7643ed12de15d50361a077e48500"}) 19:16:08 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, &(0x7f0000000080)=""/79, 0x4f) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000003c0)) [ 240.315789] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 240.337918] binder: send failed reply for transaction 15, target dead 19:16:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0xfffffffffffffffd) 19:16:08 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, &(0x7f0000000080)=""/79, 0x4f) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000003c0)) 19:16:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in=@dev}, {@in6=@mcast1}, @in6}}, [@mark={0xc}]}, 0x104}, 0x8}, 0x0) [ 240.699144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 19:16:09 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x18, 0xa, 0x0, "17606e0f2b5c34c9db5a0f9cc0fbda7643ed12de15d50361a077e48500"}) 19:16:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980914, 0xfdfd}) 19:16:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') preadv(r0, &(0x7f0000000140), 0x391, 0x0) 19:16:09 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, &(0x7f0000000080)=""/79, 0x4f) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000003c0)) 19:16:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in=@dev}, {@in6=@mcast1}, @in6}}, [@mark={0xc}]}, 0x104}, 0x8}, 0x0) 19:16:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0), 0xfefe) sendfile(r1, r2, &(0x7f0000000240), 0x8000) [ 241.150115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 19:16:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') preadv(r0, &(0x7f0000000140), 0x391, 0x0) 19:16:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in=@dev}, {@in6=@mcast1}, @in6}}, [@mark={0xc}]}, 0x104}, 0x8}, 0x0) 19:16:09 executing program 0: r0 = memfd_create(&(0x7f00000002c0)='&&bdev!(`\\\x00', 0x0) write(r0, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0x7ffd) sendfile(r0, r0, &(0x7f0000000040), 0xff8) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x15, 0x0, 0x0, "25d03fbfb50d57a213bad3276ddd378c"}, 0x15, 0x0) 19:16:09 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x18, 0xa, 0x0, "17606e0f2b5c34c9db5a0f9cc0fbda7643ed12de15d50361a077e48500"}) 19:16:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_pts(r0, 0x2c0000) dup2(r1, r2) 19:16:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0), 0xfefe) sendfile(r1, r2, &(0x7f0000000240), 0x8000) [ 241.479475] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 19:16:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') preadv(r0, &(0x7f0000000140), 0x391, 0x0) 19:16:09 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x18, 0xa, 0x0, "17606e0f2b5c34c9db5a0f9cc0fbda7643ed12de15d50361a077e48500"}) 19:16:09 executing program 0: r0 = memfd_create(&(0x7f00000002c0)='&&bdev!(`\\\x00', 0x0) write(r0, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0x7ffd) sendfile(r0, r0, &(0x7f0000000040), 0xff8) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x15, 0x0, 0x0, "25d03fbfb50d57a213bad3276ddd378c"}, 0x15, 0x0) 19:16:09 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XT\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ') sendfile(r0, r1, &(0x7f0000000000)=0x30101, 0x2b428a52) 19:16:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') preadv(r0, &(0x7f0000000140), 0x391, 0x0) 19:16:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x7}) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x0) 19:16:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000ec0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x10) 19:16:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0), 0xfefe) sendfile(r1, r2, &(0x7f0000000240), 0x8000) 19:16:10 executing program 0: r0 = memfd_create(&(0x7f00000002c0)='&&bdev!(`\\\x00', 0x0) write(r0, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0x7ffd) sendfile(r0, r0, &(0x7f0000000040), 0xff8) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x15, 0x0, 0x0, "25d03fbfb50d57a213bad3276ddd378c"}, 0x15, 0x0) 19:16:10 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XT\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ') sendfile(r0, r1, &(0x7f0000000000)=0x30101, 0x2b428a52) 19:16:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r1, 0x84, 0x8, &(0x7f0000dcffe8)=""/24, &(0x7f0000000000)=0x18) 19:16:10 executing program 0: r0 = memfd_create(&(0x7f00000002c0)='&&bdev!(`\\\x00', 0x0) write(r0, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0x7ffd) sendfile(r0, r0, &(0x7f0000000040), 0xff8) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x15, 0x0, 0x0, "25d03fbfb50d57a213bad3276ddd378c"}, 0x15, 0x0) 19:16:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000ec0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x10) 19:16:10 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XT\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ') sendfile(r0, r1, &(0x7f0000000000)=0x30101, 0x2b428a52) 19:16:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0xec4, 0x4, 0x1, 0x319, 0x0, 0x0, {}, [@generic="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"]}, 0xec4}}, 0x0) 19:16:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x7}) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x0) 19:16:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0), 0xfefe) sendfile(r1, r2, &(0x7f0000000240), 0x8000) 19:16:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vet\x00\x00\x00\x00\x1b\x00\x00\xec\x00\xbdh\x02\x00', 0x43732e5398416f17}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f17}) [ 242.525649] netlink: 3760 bytes leftover after parsing attributes in process `syz-executor1'. 19:16:10 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XT\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ') sendfile(r0, r1, &(0x7f0000000000)=0x30101, 0x2b428a52) 19:16:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000ec0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x10) 19:16:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0xec4, 0x4, 0x1, 0x319, 0x0, 0x0, {}, [@generic="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"]}, 0xec4}}, 0x0) 19:16:10 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x2c) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2c) [ 242.810409] netlink: 3760 bytes leftover after parsing attributes in process `syz-executor1'. 19:16:10 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/current\x00') exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, &(0x7f00000000c0), 0x1) 19:16:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vet\x00\x00\x00\x00\x1b\x00\x00\xec\x00\xbdh\x02\x00', 0x43732e5398416f17}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f17}) 19:16:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0xec4, 0x4, 0x1, 0x319, 0x0, 0x0, {}, [@generic="92d2ea38a4c31fb64f01e20dedc75288d88af602ada4f939d26f87eb42d28a8c6870388b1ac183955d08581d316ccfbd5054c4f9a4a97bf96feddc0d13659bab2f5d2237176ee0d433cb161ae2a7b49b6dbaedd911148297c04eeb33be7ff80c2daf57103ca22814426e942be63e9e101338b1177228812f59cacc8c22876108185ea4240eaa133d08ffd34f8550ad98930dfce1d48dbd60018ba2ab0fb8d8e6f8789c4847676afcb522e4a908c6c916fe9a7969c22cd4ec83a6ff4a262743140aa14adeec8ee6008ac5a6203cee5c48395852cdfa94964b90395e168ec6d12726b8021256d7af82d145472d11e86d268dfb61f9921587ef44ff27d1a248ed95108ab511437f571c4346f8b7173ff293ffa5e47f88a783551acdf2dda6febfdd8df27f45058b91ec5a5961243d01e49593f1dcaf2bacd0c958ac67ba9eea89f3a168d9c60f5012260abeec9d5680fcb515d9510a753ef62bcdc75a88066fdd6ee58d1256280a21afbf9cf113e54575d5ac1907103368ef783716e8af3716d512276fae0e8b8c33f861037328ba2d868309d01c2afe0fb763fd4be29379ad96d9bfbe8d710181b855caafa0d2f6e2da259206ac7b3d6ccfd1aaa58093ba49e2f331608e92ba7dea349c36e90ef63c677e9679a48ef073ab6c03bcba5b2821baa4ce3e44194e7ec491620cbf9cd3f62087ea159b94c9812cfc2951a348c99678990314f4676a4adf1089a0acb46959d6dc94e89d9769a0b88e59387f1753d7ee843f96400568dd7da19becc829994271eb82d2b99970a40d50346f6806621e66b39960ddcbb0911944b1a249df2911df016d12d4ee0855b1a0c479739f5bf5698e88ff12f5cd94f4452cafd4474f59f8b6f8dc90bffa2143f31e468833e66fd2dd46e4a521d2b7fd4d809034191b07d32567ec6953b80686a2e63d10878e56d8b5e02c083399dfe3ea2e1465c43b2e480494ac979e85841979a4b6e35f52eeef08d5ea17e81d6580113f3fd167d2595af62ce27701ba3cad43fe68c30c95574580dc3b9db23904b1b36bd60c40acd6b94db2cb2018a60bdec61d04b8ce54acdc18ff865de3fb337de11e0efaab0e92ac76347c7db7933f3662b688ebd3dcac6ee07edec78a2650a14354ff58bb06b01f27dc92633b99ff290ddbf90356f06b6a98a484e410712026df967b9c7aeed044f3aefa5970e137815d44d973ec2817a7ef8b2223176d6071f5e6bc308bdf4e8869346d7f9a9d51e90f121f8d7b450f3686a97822954b8c0e9e4c806ac635ca0565cf2293d0cea28056f9e84ad204a5fa748e41b378a4ca2c9160d2db67088a0bee8f32367d728f0ab1b1889c6c34199c2e91a703bfa8a733d81695c9c8a4c8c49b22ddfb4a500dddb82827ee087da76b8265daf1038eed350e4672907d391bdb4e50f9659bc2f067affe4e6a86ed43b0790b3f3c21995f61a975bdd7afb12fd16f1fac029b4fca0528879fa1b5f5f186ded7c30f38347e73d299a097e110442a0459236cb8fdd1bca4ff0e5b80ddc055ee6621abb2b95e908b1a9a95d74d10f254ad3f18ae929d1c4f303ac4661067694808a361c4bac0470afdf18edd46fef43bd829ba8db825eeca2d65d48462cdd2c7007572e7771af285fcdb4826beb7fab8586212923959dd420db587cde49b7d9ec6acee4362e8e732f843c774e4e3a66887632fbbcd566af00ad472375c711994eea128041267d4366186d0ebc62dd0950a2167fee1ec9b521e9ec9af3876a60b7fc8ffcd024e5a5e495c41091051cdd36ecf2eaa0914901c4c57f91fd311d1bc7a582cfe7aa6da96c46413a5b436474425a3ddc2a6b2d8055f591c2a9ea037a75a36951f00d0dc44675807740e4fe7b2c14fc4c975e2c2723a5dac2d3955c5073ff6d6a5bcaf85287b0c4e0857970d07b9863952be9824ad90d268ea832929f1db0b2314e1107f3b5d2be5d3f9bdde9dc5855af503f023fe93e9c46a8ab4df7219a0b3e0dd596842c98521da3482f5af5963b00ce6a128cd7eff323892284f9f3d3d7383b3603874beaa2f759d298e2c99201dcf7be3452c0b6c2ff08b8cd3328aab7b9c1b3f4b51ad3b5f5185e5da4e016d3cc555fc76e755ee0216fafcb3790d2db7b28aef8ae8d38964fe7a3edc752d1398cd7083a55446932f45ae0bc65c152147d27536a5f0ee27be01a9df0060eeb1d69e8e84578c1f60d048be5165d9ec28638569d98bef9b2921c1f3633c5a845581e62dde89046c5661841c7ad14c8db35252b7aaf009e4cadae54914a41500a5929896245f8476e5923c4b07101946f6a8d2b11f419a6b68821a195599489ddea673dee63806dbffe0dbc47f9cb561d5be8f7476c2bd9e2acad4afb4b839968658b1b199fd68512506fe9b8a715cd00516696a772d436814d67f49847dfdde56eb0521cfaf69ae831040dd077296cffbe4d790c3ee431d9a4976ef80c8ac5b453833c20a0978b681bfc21f58acdac37355b3e0488172c29d15c0cef5b50bdc1fbff00b6832989d5a574999f7dca2221c57fbb658b69e970e08142955734dbf44dd1528e026b0c5615f1b73c373ee0116b5e90563bbb913f04c96758ee76ffb53264472052ca98d64d95a38996ebb2283228334873cd261ad5f72d5e94d3f1bbb5e5b6747c63c61deeaaef71ad01e6e2da40d3e71bb23e8898a4773934b36bc24b94f858a25a1f3889320bb51fcf37f33fda643bb2ba05fe273ef2aab325e04259f337137e8fc1a4b57032a74bcf8306c2c146036c27874a02d5d96a9912be30a57d4018e25bd16d1fe5aa972765909026acd15a10b0d95945609febba5381c29f0e8c7b4c1812ce105d32acef3e24c0f26168d2a4cd3fed85cf4451508063e737f3c5509150071f5d6a7e81d94f3484fa3735044dcf142cdd0f572282376c23febd2dffc84c20ac7fe94a1fd88fef93ae1f9547331d4eb24b3e4004e11755c3ddc0ae57c4a10a7150646932908f49cb206b134fdedff33f2635398140e9ccebb519307dadc836690f30e7d9c456261638ed4910c38b5641fdf938ef77abed045cc339296fdda84b9d14999d86d385f20aa23281079c1ca14498683f7ab814800192a85cdbf97f6c1678f69fcf8bf11567756de6240cdc7f531a118ce8abd9ec304c239c0ba385e07dc7964a6c2d8228cdd08f44328902698eb18af42bb1337af7549b44ea7e60d766f1a899b70060ddbb9655e8a7160acf7b6b488e3088968a4c0d7b08a929df905d7f87eb671d90b55ddeab3824c7e1548741f2c661b73493455c54200ae8a74530eadfde5bff371a7167b95cd3fa15c543ded1469a9e343326da3035eece856abe7d23cad28d5e8b1f1bd5367ee0daebdd5d43c4935e4145ca3111967958a598b3bfd4a75b730b825b607ebbd7874926ea41d64f0e904a73e79b6b4b8bdfd17c33b525702e67cd5852ed2964d4f11cad05047d88048688b86641c2854ba0726a36f821ff1b3cd056b844eb2c19f204556333d79b73c137b70b2de9ea59ea1abb1a428bbe8edf9ea43d04333f4e3a3c2e84e500cb0dd7ffcdbdb63931ae41c18b9b8a669ab363a473456b904dfee07c9816599c5bbf9752bac0e2a9c47868cac04fae02945dc38f595b9210e7203073e26626da10fe254e3632adf79d93f634f14a21d92a2bf2476b3016a664e0e431eca5d0d69a31ddb1d628fde2f574f6c83612868bc074bf6f36948facd4f32ebc0b29f2ce845b4674868ee46c6696860028465bef2d03c7e34b7cff456f658d8582a81ad256eeb7a70a3f89503707f833c9002461beceee33e8837ce2ae68ca922caa83ba1697743bab190144ee15ef726d116e370e075e51b913899191554eef989f608962e8d818856ff8b288f4505b13964b0d9bf1a9d770a4444ebd65b03c18b45332036a7bd3fb67662da31cf685c9432e82879e83d9fa6fe03730cdcaf3162403c9e152d7e3b605fdb86c477e5c83011ce95bd7b0bcba303ed8cdd154e82dda513afb4027afbfa58f2e1c9ab610e1ba0c71464e704e1c06b1e22a26966fb3a2c51604db6f6d4ebfcb5b80d341bb98de4e7a8d9a92bb6d6c7ee68a1b8fb633a16b14bc490b49ab341f88560ed2bf098aa1ee3591ebfbc2653a2c913e77da977a491240d4485b2897d12f50480cc2c67d77e92e5625d22861e8e624312dbd77a7e17afc4d03115ac2b3a2c17cfe254099de4e9c93e60f4ac6ee47b3def0cb5fca5532da5c48a41bea35200aea0ae7a3487417e4e5f45a73e5eeb48a104d7735657c8a0c3c3c1dcf0c1f9fca9d472c7fdde9d3507b27c436e890caf2a429938acdb0a6870e274c304c226582e130253a0e45f2d51e232eabfae129d26e4bd3bfb6d8a86d1d1f77b7e82a1922b7fc000270661fb9caeecbecc3d8be7c56d6d4a5d6bac78f1e3e4dfbc23fe3907be8220b4e196fd9688fd2b2ba50094a715fd9d1e27a9a3a14ed5d7c5016336ef2d65005e1a3ff627fd864953d5506b89682b5253054c2ec5ae0123e605cc7b087736914c943634e332ba39b3f3e36003479f9689744021b0c07fbfb1654ee6b2b0953cffe23b1efbbac39b5da7f98a5f029095f436852a9d3186c9e3f2354de39ef2911bba98246924f84211b2fa485887f8d8fbe1adb06ac8cfe99fd4625bc7244068769c72b58ea6024a13beebdf8952f63c6f387f06ac4a6c2ed482d8ee0d21686b4e904cebde55fd06fb9ddc3cad1d0c8c4aa97b8ebbd36b89ea4ad6a2e32b96f6a0ab4649a06f4801bfc26d77ed2f414b465a2697a35aeda3342e17bdb62dc9017d459326612e838adec0970b15b6efe560f07fab2a15c35d8b072cc40c8cdd2eaeedbd671fac1a79dab38d414b3daf42a572caf4f8a2f980a146b61a16eb7746f21a19b016c98fc28e05276fe46f7271bd9df584ead907a63669acf1951f002d7b711c1acbdb775686a0cdef9fad14cf52b12effafaf5577dd562d5a788af228401319df485deead1c85bc493461476935acdea668efd682bf24a8fec925b35fb079749212c7eb56072e37a66da2fbbbe68d4c3785c0bbaf754eeb03ae6ca700d9542248440c3f189db8fe15dd1ad76511a2bef2b06997bcaa4e9e8bdc5b9741138b27caed017aaae8d59277a6ba9fed4d694c0a0d614b39c2b8bf164c60f63e29e38f2d49209d5b2d41de42ff506576dd87ae0309d5f2884d0519c61f170a90cac01ed18e5cff820b9da452a9c9c8d89b38738f38162899fb7b46b9c00c3ed649066d66a2e560c5bd2d2d7c878336d4b19f930b94faa94ce68d3f2e2d678f2752549b8b0ce704324b37fe530693bc1f552514be"]}, 0xec4}}, 0x0) 19:16:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000ec0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x10) 19:16:11 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x2c) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2c) [ 243.139414] netlink: 3760 bytes leftover after parsing attributes in process `syz-executor1'. 19:16:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x7}) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x0) 19:16:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vet\x00\x00\x00\x00\x1b\x00\x00\xec\x00\xbdh\x02\x00', 0x43732e5398416f17}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f17}) 19:16:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0xec4, 0x4, 0x1, 0x319, 0x0, 0x0, {}, [@generic="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"]}, 0xec4}}, 0x0) 19:16:11 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x2c) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2c) 19:16:11 executing program 4: modify_ldt$read_default(0x2, 0xfffffffffffffffe, 0xfffffffffffffd64) [ 243.459839] netlink: 3760 bytes leftover after parsing attributes in process `syz-executor1'. 19:16:11 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x2c) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2c) 19:16:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vet\x00\x00\x00\x00\x1b\x00\x00\xec\x00\xbdh\x02\x00', 0x43732e5398416f17}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f17}) 19:16:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/current\x00') exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, &(0x7f00000000c0), 0x1) 19:16:11 executing program 4: modify_ldt$read_default(0x2, 0xfffffffffffffffe, 0xfffffffffffffd64) 19:16:11 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000643ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00006e9ff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) renameat(r2, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00') 19:16:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000000040)=""/11, 0xfffffcfb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x7}) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x0) 19:16:11 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xf79b, &(0x7f0000548000/0x2000)=nil, 0x3) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 19:16:12 executing program 4: modify_ldt$read_default(0x2, 0xfffffffffffffffe, 0xfffffffffffffd64) 19:16:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000bec8e0cdde6e0aebd71000320800000000000000000000000900000003000000d0020000000000001801000000000000000000001801000000020000000200000002"], 0x1) 19:16:12 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xf79b, &(0x7f0000548000/0x2000)=nil, 0x3) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 19:16:12 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000643ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00006e9ff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) renameat(r2, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00') 19:16:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000bec8e0cdde6e0aebd71000320800000000000000000000000900000003000000d0020000000000001801000000000000000000001801000000020000000200000002"], 0x1) 19:16:12 executing program 4: modify_ldt$read_default(0x2, 0xfffffffffffffffe, 0xfffffffffffffd64) 19:16:12 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xf79b, &(0x7f0000548000/0x2000)=nil, 0x3) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 19:16:12 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/current\x00') exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, &(0x7f00000000c0), 0x1) 19:16:12 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xf79b, &(0x7f0000548000/0x2000)=nil, 0x3) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 19:16:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000bec8e0cdde6e0aebd71000320800000000000000000000000900000003000000d0020000000000001801000000000000000000001801000000020000000200000002"], 0x1) 19:16:12 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000643ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00006e9ff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) renameat(r2, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00') 19:16:12 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) unshare(0x8000400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a3) 19:16:12 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xf79b, &(0x7f0000548000/0x2000)=nil, 0x3) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 19:16:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000bec8e0cdde6e0aebd71000320800000000000000000000000900000003000000d0020000000000001801000000000000000000001801000000020000000200000002"], 0x1) 19:16:13 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000643ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00006e9ff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) renameat(r2, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00') 19:16:13 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xf79b, &(0x7f0000548000/0x2000)=nil, 0x3) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 19:16:13 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xf79b, &(0x7f0000548000/0x2000)=nil, 0x3) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 19:16:13 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) unshare(0x8000400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a3) 19:16:13 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) unshare(0x8000400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a3) 19:16:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xca) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x11a, 0x1, &(0x7f0000000680)=""/4096, &(0x7f0000000180)=0x3) [ 245.449979] ================================================================== [ 245.457412] BUG: KMSAN: uninit-value in __siphash_aligned+0x512/0xae0 [ 245.464015] CPU: 0 PID: 8786 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #8 [ 245.471141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.480510] Call Trace: [ 245.483141] dump_stack+0x173/0x1d0 [ 245.486820] kmsan_report+0x120/0x290 [ 245.490707] kmsan_internal_check_memory+0x9a7/0xa20 [ 245.495876] __msan_instrument_asm_load+0x8a/0x90 [ 245.500741] __siphash_aligned+0x512/0xae0 [ 245.505027] secure_ipv6_port_ephemeral+0x110/0x220 [ 245.510165] inet6_hash_connect+0x11f/0x1a0 [ 245.514511] tcp_v6_connect+0x20ba/0x2890 [ 245.518714] ? __msan_poison_alloca+0x1e0/0x270 [ 245.523448] ? tcp_v6_pre_connect+0x130/0x130 [ 245.528000] __inet_stream_connect+0x2f9/0x1340 [ 245.532740] inet_stream_connect+0x101/0x180 [ 245.537205] __sys_connect+0x664/0x820 [ 245.541126] ? __inet_stream_connect+0x1340/0x1340 [ 245.546072] ? prepare_exit_to_usermode+0x114/0x420 [ 245.551100] ? syscall_return_slowpath+0x50/0x650 [ 245.556023] __se_sys_connect+0x8d/0xb0 [ 245.560022] __x64_sys_connect+0x4a/0x70 [ 245.564102] do_syscall_64+0xbc/0xf0 [ 245.567849] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 245.573058] RIP: 0033:0x457669 [ 245.576298] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 245.595208] RSP: 002b:00007f118f174c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 245.602928] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 245.610204] RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000003 [ 245.617481] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 245.624760] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f118f1756d4 [ 245.632037] R13: 00000000004bdc27 R14: 00000000004cd678 R15: 00000000ffffffff [ 245.639338] [ 245.640972] Local variable description: ----combined@secure_ipv6_port_ephemeral [ 245.648414] Variable was created at: [ 245.652139] secure_ipv6_port_ephemeral+0x6a/0x220 [ 245.657096] inet6_hash_connect+0x11f/0x1a0 [ 245.661428] [ 245.663059] Bytes 2-7 of 8 are uninitialized [ 245.667473] Memory access of size 8 starts at ffff88818872f9f0 [ 245.673438] ================================================================== [ 245.680796] Disabling lock debugging due to kernel taint [ 245.686249] Kernel panic - not syncing: panic_on_warn set ... [ 245.692153] CPU: 0 PID: 8786 Comm: syz-executor1 Tainted: G B 4.20.0-rc7+ #8 [ 245.700644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.709998] Call Trace: [ 245.712602] dump_stack+0x173/0x1d0 [ 245.716260] panic+0x3ce/0x961 [ 245.719515] kmsan_report+0x285/0x290 [ 245.723360] kmsan_internal_check_memory+0x9a7/0xa20 [ 245.728544] __msan_instrument_asm_load+0x8a/0x90 [ 245.733445] __siphash_aligned+0x512/0xae0 [ 245.737725] secure_ipv6_port_ephemeral+0x110/0x220 [ 245.742774] inet6_hash_connect+0x11f/0x1a0 [ 245.747126] tcp_v6_connect+0x20ba/0x2890 [ 245.751768] ? __msan_poison_alloca+0x1e0/0x270 [ 245.756482] ? tcp_v6_pre_connect+0x130/0x130 [ 245.760997] __inet_stream_connect+0x2f9/0x1340 [ 245.765724] inet_stream_connect+0x101/0x180 [ 245.770167] __sys_connect+0x664/0x820 [ 245.774084] ? __inet_stream_connect+0x1340/0x1340 [ 245.779037] ? prepare_exit_to_usermode+0x114/0x420 [ 245.784084] ? syscall_return_slowpath+0x50/0x650 [ 245.788956] __se_sys_connect+0x8d/0xb0 [ 245.792956] __x64_sys_connect+0x4a/0x70 [ 245.797032] do_syscall_64+0xbc/0xf0 [ 245.800768] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 245.805965] RIP: 0033:0x457669 [ 245.809168] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 245.828078] RSP: 002b:00007f118f174c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 245.835796] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 245.843076] RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000003 [ 245.850352] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 245.857626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f118f1756d4 [ 245.864902] R13: 00000000004bdc27 R14: 00000000004cd678 R15: 00000000ffffffff [ 245.873149] Kernel Offset: disabled [ 245.876779] Rebooting in 86400 seconds..