Warning: Permanently added '10.128.10.40' (ECDSA) to the list of known hosts. 2018/12/20 23:26:06 fuzzer started 2018/12/20 23:26:11 dialing manager at 10.128.0.26:46613 2018/12/20 23:26:11 syscalls: 1 2018/12/20 23:26:11 code coverage: enabled 2018/12/20 23:26:11 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/20 23:26:11 setuid sandbox: enabled 2018/12/20 23:26:11 namespace sandbox: enabled 2018/12/20 23:26:11 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/20 23:26:11 fault injection: enabled 2018/12/20 23:26:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/20 23:26:11 net packet injection: enabled 2018/12/20 23:26:11 net device setup: enabled 23:28:38 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x0, 0x4}, 0xc) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xfffffffffffffe14) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value, 0x8) shutdown(0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x8084}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000980)={0x75a, 0x208, 0x6, 0x3, 0x0}, &(0x7f00000009c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000a00)={r3, 0xca}, &(0x7f0000000a40)=0x8) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000008c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f0000000880)={&(0x7f0000000a80)=ANY=[@ANYBLOB="00002abd7000ffdbdf25100000000800060000002000"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x40084) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000001e00)='veth0_to_bridge\x00') pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r1, &(0x7f0000001c80)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001a40)="cfb498eeb9bb78552e8c05f53f3f98987e9c23be7c5752b2f4d6054b2c0a0cb652672615125eea8ed67fc69cdfc196c68bcf2e0dbc7cbcae257ff5e53efe77df693b49f7b6b54e2a9932e07010d9d3420ceac88e9bc84ee18e0733d7240970482868cd718e304f1a79444ee2bf487c7ed4bf5c5d0783b919a5ea64e65bb7fa3dc760344cabc9fdfde2d1d26de8716508926f9847f3037daa7479addb0cafd265366cb98cbc0a472ddb110d18acb0e06c34f389f5dc43615157f918cdc4132d9fde85c55e8d98d856c6d3b2140ba70a10", 0xd0}], 0x1, &(0x7f0000001b80), 0x0, 0x20000004}], 0x1, 0x8000) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000140)={{0x3c, @rand_addr=0x9, 0x4e20, 0x4, 'fo\x00', 0x39, 0x3, 0x65}, {@loopback, 0x4e20, 0x2, 0x26d5, 0x1, 0x1f}}, 0x44) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="4eb6b026dc81f5323a3d9e248c1834d4859ea1f19484bbb4571614d1bb87125ae97acb79e64d6c6872b812f028166f91f13f15394e0de482005e56bd88360617aa41a8569a1fc0f0a01585dfceaae3b8d31a5e35768cb5eb5375bfc5ec379a674992c5474db308e01d097d07befa249ac1ee283406b06680ef590d7dca0dea295197b0e8242bd3b5dbb9d92decb6bcf5cf4e0416993a77a6dd34041f5b3e866ac8fec986c1546bd5c7f54a666e4c930674a2ffad3dbd3062d262d53856fa6d8f7807d8", 0xc3}], 0x1, &(0x7f0000000540), 0x0, 0x800}, 0x40000) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000001d00)=""/189, &(0x7f0000001dc0)=0xbd) sendto$inet(r4, &(0x7f0000000740)="a7baef2ab350d9b2505d3dfd87595ed501c4ddf70462c5c5a61cc4798a59d12dd00000ca21b8884a73cf6d254bf0e75e0f983549a6bfb861d98c3031474599435212da3ec4f63b5b0085f35f7c50e2b934a95d2900f64f1715a8333cf68dd412193b285db9a9d38846bc3ea82a9293eb7b0fb03a98f435b5fdc32241553db5cb4e09f25c69f533ac601cb0b629b8d391b9a3b51d684766104ab5b0eae3f0592dbcdaaf9d42482ee18235c2efb86082", 0xaf, 0x80, 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000940)={0xa43, 0x0, 0x3ff, 0x8, 0x0, 0x62, 0x2, 0x0, 0x7, 0x8}) write$binfmt_misc(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="c5c1c1548bb62be38056348bf45aa72acbb580b008000000bbeaf477c0e8806d5ca492db00000000"], 0x28) getpeername(r2, &(0x7f00000003c0)=@hci={0x1f, 0x0}, &(0x7f0000000280)=0x80) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000005c0)={@loopback, r5}, 0x14) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x1e) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0)={0x3, 0xa3a8, 0x5, 0xffffffffffffffd4, 0x3ff, 0x7fffffff, 0xfffffffffffffff7, 0x3, 0xffff, 0xf12, 0x101}, 0xb) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000580)=0xffffffff, 0x8) syzkaller login: [ 218.595323] IPVS: ftp: loaded support on port[0] = 21 [ 220.009794] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.016979] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.025474] device bridge_slave_0 entered promiscuous mode [ 220.110124] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.116718] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.125098] device bridge_slave_1 entered promiscuous mode [ 220.209338] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 220.291277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.546133] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.672108] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 220.802794] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 220.809795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.908984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 220.916039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.168469] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 221.177112] team0: Port device team_slave_0 added [ 221.258427] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 221.267034] team0: Port device team_slave_1 added [ 221.349786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.438460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.522844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 221.530476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.539859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.625208] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 221.632890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.642316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.957819] ip (6640) used greatest stack depth: 53672 bytes left 23:28:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85512, &(0x7f000000c000)={0x6, 0x0, 0x0, 0x0, '\xdd\xfb\xe3m\xe3\xf9\xb5\xe3\xe0\x04\xbc\xc0\xaeM\xe5\xd4\xe81\xc6\x8bl)V\xc2\x87Dv\xee\x83\xe4\x17EOhL\xabjq\xb19dN\xa9z'}) [ 222.519135] IPVS: ftp: loaded support on port[0] = 21 [ 222.807772] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.814432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.821681] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.828221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.837618] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 222.844188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.920026] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.926775] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.935284] device bridge_slave_0 entered promiscuous mode [ 225.050881] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.057500] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.065752] device bridge_slave_1 entered promiscuous mode [ 225.188080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.267371] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 225.544770] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 225.702102] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 225.823000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 225.833031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.361705] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 226.370231] team0: Port device team_slave_0 added [ 226.503249] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.511926] team0: Port device team_slave_1 added [ 226.683078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 226.690072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.699185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.785933] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 226.793041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.802083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.889706] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 226.897418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.906679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.033783] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 227.041350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.050707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 23:28:47 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f00000000c0)=0x10) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1) [ 227.993916] IPVS: ftp: loaded support on port[0] = 21 [ 228.718952] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.725697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.732860] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.739437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.749517] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 228.756085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.935384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.571281] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 230.249557] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 230.255987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.264099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.618338] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.624967] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.633228] device bridge_slave_0 entered promiscuous mode [ 230.823494] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.830040] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.838326] device bridge_slave_1 entered promiscuous mode [ 230.971214] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.009130] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 231.189572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 231.743489] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 231.903602] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 232.050403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 232.057558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.141512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 232.148651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.597203] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 232.605803] team0: Port device team_slave_0 added [ 232.767979] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 232.776680] team0: Port device team_slave_1 added [ 232.961191] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 232.968259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.977304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.134780] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 233.141922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.150969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.287699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.295923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.305147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.399964] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 233.407736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.416863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.994500] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.001124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.008331] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.014957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.023970] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 235.030435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.558034] 8021q: adding VLAN 0 to HW filter on device bond0 23:28:55 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f0000000000)={0x0, 0x80805513, 0x710000}) [ 235.866566] IPVS: set_ctl: invalid protocol: 60 0.0.0.9:20000 23:28:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080), 0x4) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000040)=""/4, &(0x7f0000000000)=0x9) 23:28:56 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='r\x00') [ 236.276043] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 236.314914] IPVS: ftp: loaded support on port[0] = 21 23:28:56 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x101002, 0xfffffffffffffffa) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000200)={0x7, 0x16b, [{0xaec3, 0x0, 0x3}, {0x2, 0x0, 0x6}, {0x8001, 0x0, 0x100000001}, {0x429, 0x0, 0x2}, {0x49f, 0x0, 0xfffffffffffffffb}, {0x7f, 0x0, 0x4}, {0x4, 0x0, 0x39}]}) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000a000/0x3000)=nil) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x200, 0x100000000, 0x9, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0)=r1, 0x4) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 236.588921] mmap: syz-executor0 (7148) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 23:28:56 executing program 0: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)="01", 0x1, 0xfffffffffffffffe) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfffffffffffeffff}) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000600)="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", 0x121, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r2, r2}, &(0x7f0000000140)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000340)={'crct10dif\x00'}, &(0x7f0000000100)}) r3 = dup(0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x70, r4, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xab2a}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcc8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040081) 23:28:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x22000, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x6044fa1d) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) [ 237.035149] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 237.041478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.049369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 23:28:57 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18) fstatfs(r0, &(0x7f0000000240)=""/194) ioctl(r3, 0x800000000008982, &(0x7f0000000080)) close(0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xb1, 0x1000, &(0x7f0000000080)="5a73e88a72baeefd575c83efe5f38a8f69a49d775b0f8d3f306f94142a625da0facf7ca9c967ae30fde47b9d0e95aa71ccac74052b4dfad367aebd1e03f0aa02e0d5a0d7182b9d4c65ef12c0286e011d4ac147e6b7dac1027bd2e7199d1b8df6f4a72f8a66cc1eb8820e50c749afd55e09781769b20bdbd937b0aa72d9cd4d370570966812ea782255316adb6e08a5c32db0f66323d21ac7f6662ebbe114dae4f31891486ee0ae0fc601ded8d9c78deee4", &(0x7f0000000340)=""/4096, 0x101}, 0x28) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000140)) ioctl(0xffffffffffffffff, 0x0, 0x0) 23:28:57 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x0, 0x0, 0x3}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe5e, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00\x00\x00\x04\x00', @ifru_flags}) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000340)={0x4, 0x0, [{}, {}, {}, {}]}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4100, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000200}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ce}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) [ 237.794282] 8021q: adding VLAN 0 to HW filter on device team0 23:28:57 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x0, 0x0, 0x3}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe5e, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00\x00\x00\x04\x00', @ifru_flags}) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000340)={0x4, 0x0, [{}, {}, {}, {}]}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4100, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000200}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ce}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 23:28:58 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000080)={0x1f}) getgroups(0x6, &(0x7f0000000000)=[0x0, 0xee00, 0x0, 0xee01, 0xffffffffffffffff, 0xee01]) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) [ 239.480470] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.487126] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.495264] device bridge_slave_0 entered promiscuous mode [ 239.611957] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.618470] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.626725] device bridge_slave_1 entered promiscuous mode [ 239.748911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 239.940876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 240.519942] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.676342] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.878170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 240.885754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.053767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 241.060716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.533048] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 241.541836] team0: Port device team_slave_0 added [ 241.709661] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 241.718460] team0: Port device team_slave_1 added [ 241.850785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 241.858439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.867375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.962570] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 241.969727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.978664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.196848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 242.204608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.213732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 23:29:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xd3, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0xd19, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x4}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}}, 0x400000000000) [ 242.292920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.376672] netlink: 'syz-executor1': attribute type 21 has an invalid length. [ 242.396469] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 242.404143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.413730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.872575] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 243.343449] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 243.349786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.357885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.848617] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.855224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.862581] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.869250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.878287] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 243.886659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.999708] 8021q: adding VLAN 0 to HW filter on device team0 23:29:07 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000), 0xf, &(0x7f0000002ff0)={&(0x7f000000ef80)=ANY=[@ANYBLOB='E\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000790eaada477f17eb046695eea58af88d0bd407c0c234f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"], 0x80}}, 0x0) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x5, 0x4400) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000100)=0x7) [ 248.734638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.914254] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 249.079650] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 249.086009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.093877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.258350] 8021q: adding VLAN 0 to HW filter on device team0 23:29:10 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) dup2(r2, r1) 23:29:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x8, 0x20a000) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000001c0)={{0x3f, @local, 0x4e21, 0x2, 'fo\x00', 0x1, 0x2, 0xf}, {@broadcast, 0x4e23, 0x2, 0xf8, 0x697, 0x5c}}, 0x44) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000000000000000000000", 0x4c}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000380)={0x10001, 0x4, 0x7, 0x1f, 0x10000, 0x5}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) 23:29:10 executing program 1: mkdir(&(0x7f00000012c0)='./file0\x00', 0x0) mount(&(0x7f0000000400)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZG\xbbv\xbc}0x0) io_cancel(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xef, r0, &(0x7f0000000240)="258cdca7d0866404527dcc768017bae6800c958ad71576595647f3a645be61b1daf25dfd2338e8fd67cdf3d466582cda360d142e548a0b8fadd5a4015120c93fc0bdcef612a5603c556c07352c478ec5dfb182d91ff788a275fdfee69a6e527a4d", 0x61, 0x9, 0x0, 0x0, r0}, &(0x7f0000000300)) read(r0, &(0x7f0000000340)=""/5, 0x5) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000380)=[0x8, 0xefd, 0x10001, 0x47, 0x2afa], 0x5, 0x3519, 0xfc00, 0x1f, 0x2, 0x8001, {0x4, 0x4, 0x400000000000, 0x289, 0x27611a5a, 0x7fffffff, 0x80000000, 0x8, 0x1, 0x0, 0x4, 0x9, 0x7, 0x8, "789c4fd51cd8aa2b340525aead3fff69c913b4f0c52bec4851d0e5de64ab9ed8"}}) ioctl$KDENABIO(r0, 0x4b36) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000440)="8420850790fd2ede") ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000480)={0x2, 0x3ff, {0x57, 0x100, 0x8000, {0x3, 0x7}, {0x7f, 0x5}, @rumble={0x9, 0x2}}, {0x55, 0x100000001, 0x1, {0x9, 0x95}, {0x9, 0x1ff}, @cond=[{0x8, 0x3, 0x0, 0xfffffffffffffa03, 0x3, 0x8000}, {0x3, 0xffffffffffffffff, 0x7f, 0x8000, 0x8, 0x4}]}}) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000500)) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000540)) r4 = socket$inet6(0xa, 0x2, 0x26a) mq_getsetattr(r0, &(0x7f0000000580)={0x8001, 0xfffffffffffffffc, 0x9, 0x4, 0x3, 0x2299fa5f, 0x3, 0xa0b6}, &(0x7f00000005c0)) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='/dev/snd/pcmC#D#c\x00', r0}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000880)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000900)={0x5, 0x10, 0xfa00, {&(0x7f0000000680), r6, 0x2}}, 0x18) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000940)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000980)=0x8002, 0x4) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000009c0)='trusted.overlay.nlink\x00', &(0x7f0000000a00)={'U-', 0x4}, 0x28, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000a40)="a87aab11a2a8badc4bd0ec7e377086c9b01c3776116e753531e3baa66413e42dc89e3112232489b32548159488a06663dfd553b74982366aef9008417bde04e37dfc18d8d1f904dc944b692e38da52aefca7fd4ff61fab55058da9fd863968cb28cf4e6126d3", 0x66) io_submit(r3, 0x3, &(0x7f0000000d00)=[&(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x5, 0x3, r1, &(0x7f0000000ac0)="1d82fe77b7dc8bc13e58a67fca37f6396c04673b8216411ca53c973e26102078cfdd29fe0d947fca623c30b300e7f87743146fca5699b44693339c537f860053c5c0cee2ff165cf0fda4ce2570393dd9030d9df430e1196bc63e2dcbe3e8f798d647cf41a117d5e3145f32830afde94186c9dcb9e3433b2e6a842c2af65ca28b57408cfa0beceae1eb9a4bb2dc0b96a37abe06de0be3674c338ad4358b402d2df8b8a4f3278e0f113b5b7cc9d0b5877129a08fe57515186b960124394d5a589563ece97d9b452aaa2283aa670dd9fa4879a8", 0xd2, 0x545a, 0x0, 0x3, r5}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x3, r4, &(0x7f0000000c00)="4fcec802a1c5021e82cc873d754e116fd4812e3b82ceefae6168051600bc80", 0x1f, 0xc0a3, 0x0, 0x1, r0}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x7, 0x1000, r0, &(0x7f0000000c80)="03ef087e58af51bf9e906da325932e2344648941eb48715ee19bb9a3ecc84e3be4103b99", 0x24, 0xff, 0x0, 0x2, r0}]) 23:29:10 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6110e99f, 0x8000) write$binfmt_aout(r0, &(0x7f0000000040)={{0x1cf, 0xffff, 0x7, 0x297, 0x77, 0x8, 0x31b, 0x2}, "5ab0ad9f8f908a1b85369797095dae27ed2199a456abb2a105972d57d07602210413c9d1a4bfb9ea1cfed04b009536a1647326a3", [[], [], []]}, 0x354) r1 = epoll_create(0x1) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000003c0)=0x7, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40845) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, r1, 0x0, 0x5, &(0x7f0000000540)='TIPC\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0x50, &(0x7f0000000600)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r3, r1, 0x0, 0xb, &(0x7f00000005c0)='/dev/adsp#\x00', r5}, 0x30) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000700)) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000740)={0x6, 0xffffffffffffff81, 0x5, 0x2, 0x401, 0x69c}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000780)={0x3a, @loopback, 0x4e24, 0x0, 'fo\x00', 0x10, 0x20, 0x1c}, 0x2c) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000007c0)={0x3aee, 0x16, 0x40e1, 0x289, "bbf731df6121571ca410bd72762e89689cd0a617dacbc8fec7f690d8cf217e8e"}) setxattr$security_ima(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='security.ima\x00', &(0x7f0000000880)=@sha1={0x1, "da76f89d6308c5059f7beb5f27c68cd9dbfd2072"}, 0x15, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000008c0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000900)='trusted.overlay.nlink\x00', &(0x7f0000000940)={'U+', 0x1}, 0x28, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000980)={{&(0x7f0000ffa000/0x6000)=nil, 0x6000}, 0x1}) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000009c0)={0x1, 0x0, {0x3b, 0x1, 0x0, 0xf, 0xb, 0x0, 0x2, 0xa6, 0xffffffffffffffff}}) mq_getsetattr(r0, &(0x7f0000000a00)={0x1, 0xdd33, 0x8, 0x401, 0x10000, 0x9, 0x3, 0x6}, &(0x7f0000000a40)) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000a80)) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000ac0)=""/32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b00)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000b80)={0x15, 0x110, 0xfa00, {r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x81, {"af9bd6ca3eb9864d4438245659d0119e"}, 0x9dd, 0x2c2e, 0x2a1e}, @in={0x2, 0x4e21, @multicast1}}}, 0x118) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) epoll_create(0x3be) r7 = socket$pptp(0x18, 0x1, 0x2) fcntl$setpipe(r7, 0x407, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000cc0)={0x0}, &(0x7f0000000d00)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000d40)={r8, @in6={{0xa, 0x4e22, 0x8, @empty, 0x81}}, 0xed2, 0x3, 0x8, 0x4, 0x6}, &(0x7f0000000e00)=0x98) 23:29:10 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000), 0xf, &(0x7f0000002ff0)={&(0x7f000000ef80)=ANY=[@ANYBLOB='E\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000790eaada477f17eb046695eea58af88d0bd407c0c234f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"], 0x80}}, 0x0) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x5, 0x4400) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000100)=0x7) [ 250.441838] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 250.466136] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 250.498540] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 250.522428] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. 23:29:10 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000), 0xf, &(0x7f0000002ff0)={&(0x7f000000ef80)=ANY=[@ANYBLOB='E\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000790eaada477f17eb046695eea58af88d0bd407c0c234f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"], 0x80}}, 0x0) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x5, 0x4400) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000100)=0x7) 23:29:10 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendto$inet(r0, &(0x7f0000000000), 0xfec4, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast}, 0x10) poll(&(0x7f0000000100)=[{r0, 0x1ffffffffd}], 0x1, 0x327) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000440)=0x4008, 0x4) sendto$inet(r0, &(0x7f0000440000), 0x38c, 0x0, &(0x7f00002ce000), 0x10) 23:29:10 executing program 0: r0 = socket(0x400000000000010, 0x802, 0x0) write(r0, &(0x7f0000000040)="240000001a0099f0003be90000ed190e020808160000000031ba0080080001007f196be0", 0x24) 23:29:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79}) 23:29:10 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000), 0xf, &(0x7f0000002ff0)={&(0x7f000000ef80)=ANY=[@ANYBLOB='E\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000790eaada477f17eb046695eea58af88d0bd407c0c234f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"], 0x80}}, 0x0) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x5, 0x4400) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000100)=0x7) [ 250.797121] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 23:29:11 executing program 0: keyctl$dh_compute(0x1b, &(0x7f0000000080), 0x0, 0x0, 0x0) 23:29:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [0x401]}) 23:29:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ') ioctl$DRM_IOCTL_RES_CTX(r0, 0x6611, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 23:29:11 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000), 0xf, &(0x7f0000002ff0)={&(0x7f000000ef80)=ANY=[@ANYBLOB='E\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000790eaada477f17eb046695eea58af88d0bd407c0c234f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"], 0x80}}, 0x0) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x5, 0x4400) [ 251.314566] IPVS: ftp: loaded support on port[0] = 21 [ 251.357720] IPVS: ftp: loaded support on port[0] = 21 [ 252.784043] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.790626] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.799072] device bridge_slave_0 entered promiscuous mode [ 252.813112] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.819644] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.827896] device bridge_slave_0 entered promiscuous mode [ 252.878112] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.884725] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.893019] device bridge_slave_1 entered promiscuous mode [ 252.908669] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.915325] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.923658] device bridge_slave_1 entered promiscuous mode [ 252.970762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 253.006356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 253.045617] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 253.085842] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 253.290208] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 253.368575] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 253.386397] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 253.508197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 253.516343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.529101] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 253.594992] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 253.602071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.617264] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 253.624309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.704343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 253.711372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.849840] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 253.861976] team0: Port device team_slave_0 added [ 253.944502] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 253.953242] team0: Port device team_slave_1 added [ 253.966164] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 253.975356] team0: Port device team_slave_0 added [ 254.032727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.054757] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 254.063411] team0: Port device team_slave_1 added [ 254.118500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.143167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.212281] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 254.219893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.229047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.246511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.305204] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 254.312905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.322023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.337997] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 254.345708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.355691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.439243] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 254.446916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.456012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.228198] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.234811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.242111] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.248682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.257785] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 255.360717] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.367362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.374561] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.381111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.390273] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 255.482034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.489942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.569808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.700781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.873610] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 259.006756] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 259.177804] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.184223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.192283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.308534] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.314971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.323085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.501848] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.635803] 8021q: adding VLAN 0 to HW filter on device team0 23:29:21 executing program 4: r0 = socket(0x40000000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x7f, 0x0, 0x0) 23:29:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000080)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x80050002, 0x0, 0x0, 0x200020}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaab5b, 0x1001, 0x0, 0x0) 23:29:21 executing program 0: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xb9\xb3\xf8h>\xcf\x89\xde\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91\x14\xc5q\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.*,\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\xc3\x9b\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\xffY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\xaa\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd4\xcbW\b\x83\x85$\x82\x86\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xe6\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x80x\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xafL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xcd\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xdf\xa0\x8e') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd6, &(0x7f0000000000), &(0x7f0000000080)=0x21d) 23:29:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x88) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000080)}, 0xc100) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001640)="ba020000", 0x4}], 0x1, &(0x7f0000000140)}, 0x0) 23:29:21 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000), 0xf, &(0x7f0000002ff0)={&(0x7f000000ef80)=ANY=[@ANYBLOB='E\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000790eaada477f17eb046695eea58af88d0bd407c0c234f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"], 0x80}}, 0x0) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) 23:29:21 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@call], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 23:29:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x0, 0x4000000004, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) 23:29:21 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) 23:29:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\x98\xd5|\xb3+L\xcc;\x0f\xf0\xbe\x16\xc1%\xec\xd9\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9\xbf\x94\xf9\x83\xa3\xbb\x13\xbd-\x84j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xd7!SH\xb9\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3', 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/159, 0x9f}], 0x1) 23:29:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x0, 0x4000000004, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) 23:29:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') exit(0x0) sendfile(r1, r2, 0x0, 0x2007ff) 23:29:22 executing program 0: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xb9\xb3\xf8h>\xcf\x89\xde\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91\x14\xc5q\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.*,\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\xc3\x9b\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\xffY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\xaa\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd4\xcbW\b\x83\x85$\x82\x86\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xe6\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x80x\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xafL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xcd\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xdf\xa0\x8e') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd6, &(0x7f0000000000), &(0x7f0000000080)=0x21d) 23:29:22 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000040), 0xfffffffffffffed3, 0x0) 23:29:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000080)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x80050002, 0x0, 0x0, 0x200020}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaab5b, 0x1001, 0x0, 0x0) 23:29:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x0, 0x4000000004, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) 23:29:22 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) 23:29:22 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 23:29:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x0, 0x4000000004, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) 23:29:22 executing program 0: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xb9\xb3\xf8h>\xcf\x89\xde\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91\x14\xc5q\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.*,\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\xc3\x9b\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\xffY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\xaa\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd4\xcbW\b\x83\x85$\x82\x86\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xe6\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x80x\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xafL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xcd\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xdf\xa0\x8e') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd6, &(0x7f0000000000), &(0x7f0000000080)=0x21d) 23:29:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) 23:29:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000080)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x80050002, 0x0, 0x0, 0x200020}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaab5b, 0x1001, 0x0, 0x0) 23:29:22 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) [ 262.634029] binder: 8284 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 262.634058] binder: 8284:8287 ioctl c018620c 20000000 returned -22 23:29:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) 23:29:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x30) 23:29:23 executing program 0: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xb9\xb3\xf8h>\xcf\x89\xde\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91\x14\xc5q\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.*,\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\xc3\x9b\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\xffY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\xaa\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd4\xcbW\b\x83\x85$\x82\x86\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xe6\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x80x\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xafL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xcd\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xdf\xa0\x8e') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd6, &(0x7f0000000000), &(0x7f0000000080)=0x21d) [ 262.905923] binder: 8298 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 262.905949] binder: 8298:8299 ioctl c018620c 20000000 returned -22 23:29:23 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) 23:29:23 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) 23:29:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) [ 263.243334] binder: 8313 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 263.243360] binder: 8313:8316 ioctl c018620c 20000000 returned -22 23:29:23 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 23:29:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000080)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x80050002, 0x0, 0x0, 0x200020}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaab5b, 0x1001, 0x0, 0x0) 23:29:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x630b, {{0x630c, 0x630b, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f0000000500)}) 23:29:23 executing program 2: connect(0xffffffffffffffff, &(0x7f0000002000)=@ethernet, 0x10) connect(0xffffffffffffffff, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) 23:29:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) 23:29:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 263.710124] binder: 8329 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 263.710151] binder: 8329:8330 ioctl c018620c 20000000 returned -22 [ 263.743511] binder: 8332:8333 ERROR: BC_REGISTER_LOOPER called without request [ 263.751063] binder: 8332:8333 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 23:29:23 executing program 2: connect(0xffffffffffffffff, &(0x7f0000002000)=@ethernet, 0x10) connect(0xffffffffffffffff, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) [ 263.759188] binder: 8332:8333 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 263.767364] binder: 8332:8333 transaction failed 29189/-22, size 2305843009213693952-2305843833847414784 line 2834 23:29:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000fb7fee)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000140)) 23:29:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 23:29:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 264.062510] binder: undelivered TRANSACTION_ERROR: 29189 23:29:24 executing program 5: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)=' \x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) mq_notify(r0, &(0x7f0000000040)) mq_notify(r0, 0x0) 23:29:24 executing program 2: connect(0xffffffffffffffff, &(0x7f0000002000)=@ethernet, 0x10) connect(0xffffffffffffffff, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) 23:29:24 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(0xffffffffffffffff, &(0x7f0000002000)=@ethernet, 0x10) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) 23:29:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 23:29:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 23:29:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000fb7fee)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000140)) 23:29:24 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 23:29:24 executing program 5: unshare(0x20400) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000180)=""/73, 0x49}, &(0x7f0000000080)}, 0x20) 23:29:24 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(0xffffffffffffffff, &(0x7f0000002000)=@ethernet, 0x10) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) 23:29:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 23:29:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 23:29:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000fb7fee)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000140)) 23:29:24 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x11000000000b) accept(r0, 0x0, 0x0) listen(r0, 0x0) listen(r0, 0x80) 23:29:25 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(0xffffffffffffffff, &(0x7f0000002000)=@ethernet, 0x10) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) 23:29:25 executing program 4: capset(&(0x7f0000000280)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) get_robust_list(r1, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f00000000c0), 0x0, &(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000200)=0xc) [ 265.173314] capability: warning: `syz-executor4' uses 32-bit capabilities (legacy support in use) 23:29:25 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 23:29:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_getres(0x200000000008, &(0x7f00000002c0)) 23:29:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000fb7fee)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000140)) 23:29:25 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, 0x0, 0x0) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) 23:29:25 executing program 4: capset(&(0x7f0000000280)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) get_robust_list(r1, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f00000000c0), 0x0, &(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000200)=0xc) 23:29:25 executing program 4: capset(&(0x7f0000000280)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) get_robust_list(r1, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f00000000c0), 0x0, &(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000200)=0xc) 23:29:25 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, 0x0, 0x0) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) 23:29:25 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/10, 0x3}, {&(0x7f0000001340)=""/197, 0xc5}], 0x2, 0x0) 23:29:25 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002006}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 23:29:26 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, 0x0, 0x0) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) 23:29:26 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, 0xfffffffffffffffe, 0x20a) 23:29:26 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000000)={0x0, [], 0x4}) 23:29:26 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_mreq(r0, 0x0, 0x20, 0xfffffffffffffffe, &(0x7f0000000100)) 23:29:26 executing program 4: capset(&(0x7f0000000280)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) get_robust_list(r1, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f00000000c0), 0x0, &(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000200)=0xc) 23:29:26 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) connect(0xffffffffffffffff, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) 23:29:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$P9_RREADLINK(r1, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0xfef) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0xfeda) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0xb0a9, &(0x7f0000000200)=""/193) write$UHID_INPUT(r1, &(0x7f0000000540)={0x8, "ecfcd769f0863e77e075ac642fd79c86a634dbf6ebd924b72f08b631012c6093037fa2e33d59a921a6402cd851ac1b9e8e0787ceb5cff6217d1c6dd39b12fb31649b2c93debf158cbd842907146264d285a92a2ee5b96569033edb386abb9f89a66460da27630b6e0d23e5c8694373abd85795522624fd07fa91f971be64671cd4de4d6394a727faf341da97b651dcae1ab7c4a998181e696bdc472d53abef3dd0ee625c08a1c0c831bece6b4965390ef1f3bc2f9298edfcf6d4fb60b6dac84257f45d5ef1e9f7d9d31055a836b16c1f06f1bd320dab467b8a8b917324a0e2acf7af857d630a23fe2e01bb8a507a9aa1d19b9ace53de4ca0828523d6867666a466d0f7bd4da6823522690dc10ee221076beb1e25be8bf645920d7fd81e707cbb98e237c6f65c67396ad3ac68f937ee5873d533cb56d2401f0298b6d7db2aece77830ef7aef59e7b8a8cdf8839684aee68f330282627d870a99a15d2f8a189b388116fa04c4f8c4f831a64265c9ac2fd27f912c9c90b8cb96c441645b39a92439611218645ee15a392bdc1a3ddf495f25a448dd14a8cb7b8378ecdc03f2c4405a70901b2a0fc8978556f66259edbbbc4ff7693237ae3d8987df74569d9101d83d5be1b29ac37e6c64b4c93b5b4cb7e7938083c393ca0583e562b839e066a5fcd752ca12a7a560f7d2a76ca9f7a94f78555a5f05bcb9c9c80948d33cb474076151859b8722fb3afb06f744699a7ce97cd980b6b4fe27427061664e8014cca564451316ff1364a846749015c0408be9b21bafa304be49ba23f9bc517237b869b1731c1a2e9143836d31a7819cfb76e42e7ce2a83580be65b0464bcfb47d04190e9be3669df209a0f5677f46058c06269e426c5d0ce6dee8aff301e7d743922940325221756af539da72d6f019b6075447b240e8e0ce335503d85598afb54fda7bc3c0d0dcbcd3bd573807a1f4f1655797c5039bbe00e375329ac4322ecc148d4562b45744599abaab96aac53dbfe004adb195f034d8bec08667f6ae3af9c0b4d4bb72cde7583bf2ff77263d4ff0314253168e1674aabfc4ca62afee99fca3998c4944bdbb0e5d7991fac8173e8519ae15524441ca19bae837f2daf3a52075452cd4cdde14a6e81e1c4472bcf6b7c639c46a36d0490cbeaa24d1ff2288e5e06e96a9cb342068c86db952fb77dbc2b2520b820eb7e9816f8f24efb7ca572371dd88944cd9658326409ad2b05990c25f26207a87018c5b7e00e68775ff1f24fd83e23624a323024345211ac6ae50d07b8082b30885edcb3d3658dc0b8cc8f5e1f43cbfe33063d0271a0daba64e1b463afec10bf7c2533e3a5bc7f1da65d07e09018f19dcfea083f9a86e63400697f779445fc4f4e1f4d41266516fd80e217668053e0ec3ae5592ba19f9b14310eb19431fd9790450e28f23b6757864024042b5719cc4a7aa418472564a2059114787b860e984b376f56a4be700716e1eb4d086f2ec7134f7db8e97274debbb154ef1d85cd9ac589171deac6c037efcac9c5d5dc31017354878ee6db57ccb3da91a323559c4f109d0f0da3191770125372c50c913a4901d95d9e4bc6b961c342165d40ceeb7094a01d88dc697a20121316d5d68c46b33908714f004c574779c353fab0eb09f91da29626dbd673fde6b39e5093a2cf49fce3616304faa68ff5ea7883fd90f701e6718b12135d761597b5acc205f489aa47194b55cdf2fc34737dff1d7a5a843fc76e8e47e6ba99b6f4b17492921b977b2e5694bea0eecd82760f2c529cab0b87ff7a47c88e7bdf14f49f3c63bf3bfe3994ae00cb54c7aef7c1a59f3a6994c37a05f65aa24f9a5f00e5287de5c14fdc39ddcf7d08f25f67eab37abde95d433a4816268cf9a4e1d8f439af50f0ea5ac184c7a3fe9add0abe42abb4c9dcea0b0da9f2da9f337b337182cbad6a6becbc2a208aec4de4e54c38c3f1864bd45fede66e8d2e8af94cdf35d700fda41db1a38c384e85fa7c0ace2dc15bd18e834972d2fa204d994d39a28967499251b2019a45a6ac6fb912ada76b93a5646fb985c45ae0256b7b886c0749a1fcab6cbf91c62a4bdf7cd9bd862cfaa12b20b1d2b467fc221a5fdf0345cc6b738465604ef5b88df68a09aeb28c38dc3621e9ce8c5aaa36c7f37d235882066c9e3b428e7a61d066f9baf5a74a4a3f569979e643a0139b4cadb5c9d1f4711136bc9e2ebd7fda82866139effe8a4cd67093114ea7f57a074c2b77ed0cce2f6766657ba5921479b1242672fb7fb8ab348ced354850f522e7e261c9c5cce0c634624482cfc8e52403d7481496f2d668efd58713d015d5f1eb446557ea32f29365534fa5ecd344338eb509bdfad7646bc1adf18865dcb1a38f3e51b165a3e542db060d9c15a7546f7a74464eb7cc8018917f4d31eb3575079de95633bb7d5c2bc5277de728296c5ab00d5cc982f9c74f15690cf40308ad7e8d36beebed05b617005d1cb43206985f0b2b353a8baedf4f9d13d536e8602129ffa19b9910207a88f036b2e9b03a522f19e423bb64e0384338866278b3c68c1b68e25d7b4617caa7b054ee4f26a859949d3593b6f11faff76d45ba3a9d3c27da6eb25dcfc837d544d68d754485e13a0101826a821c9bbdacecf9dc6497f82ecf75392390cac40e248a59818c61ac00312121870fda9121b8652c33ea120a3289f77ddd4e7f494270b7f0babf91b5d725ce152224d4f335420b5016ca63d620977dc6db203af47c5644b5d790e966c71c7503f5f5aff070fff11da1c265e2916f6d147720edeb37b39a143aea9c47123121ce644281a062a85489290432fc895a412e9a7b447c469684fc79fa9820ba410ab58534e669008444c1a8ee42c5400b31f54b72d3c8d881d8f45d7798aa61bb6f964e0b4232ce21f483ec275979b0167a0a198f36ed4c3f9cda831dd563684235a4b1da54f39df79261701f00f96cb190cf5fe39604556c52d0da1faadc31d058654c576e8ab41e110caf6f03023bd447d975e7b5652db4197b252ef3026a0f367ef41948050e3d8b13d367d001bfab7dced740d1cf1232ef21ba529791e4b51058b7cd3cf98618f14b01f957872fee61f98d0f319312aca860cbbc5c884fe1cba449d69ff39fb0e331eb1fe1ee99af0ed6ddcbb290b6a5524590719b5b069536b5291e13c444178921381b0072390d8597265e857443c7fba42f15d78730081f4aec8552a8e808447684dfd759d4398f5c66ead8cbabdb8a525dbe959724ba8f7843f34f53e179f1262638bd1da1ffa4c5da0978ae5e8349627b0440c5c47023d6c39c88fe3c619899de861672e1e588f4809ed01b1a9e44af25a215a95867dcc609eb927543f2803817b27fcbf62181f40e6c77e913a454d3f66fa9653155c87b84eac7edb8564a8be3e8e57f2dc2e183fa3a3112bcce826962fa0029a65cd10175d86071b68f88995c479ecf7c43776e188ff5124e6c96769f97ea91982160dc7b99aaef400f9674d553b48b47c52aef35049a9e182a0a64be5ccbf21fbac085d6a86ce4492bd1862fb27bddd50e1313f3986756350c0843d0c9c0e7980712a7bbfb41bab64f18127e92ec081eaddeea6b2789deff2cbe1c077e46ae66494d854206eb49bbacf93c14c3a126f691df06a931de77178b8e3c10c28fcf5ed3be09185ba9db56b30c6266be00ca2005aebe520808cf94b16e029466b6d0c3fc9b1e2966f7e09f5f5ffd9d686755a48a6d2848ddb47af72ce6ddafb06cd18765c7d00f509f460b083830fb5fd9597bab5fd1fabbd8141d4520cda9b95c5dc15367936e5f3dcf0a5f2ff27863f36ceb372c30f51bdcb5ee195052b90723c0afd4a8c3b5770aa9306f6945d5a2aa2675d00ae6b4210ed8a3597acba3c8662e8a7e441ef88d19a8db934ddddc9e6e8b9d9d79a7c6b8777f27385d8bd8c7446082e556dad13091fd6f36471a3d3850f0c609f0afb6fd9e64675ebfe3cecb1b3be9da4218b0fb1b299fd26e993bf95cd04d65101b51049791ff0de289adb01ea7cc3d46f824bcf6229ea0acc6471144c8ccd46ad4679ddfeda352573b783e3530d23f508b43b4a0e0c7d937e2e27bc08b1a5358f1f90232a3bc19a1bdbc32ff9c103402b11b883195e4f8431d165cce0ed12c3ba1d977fefdc9546ab3454c15add99f82137e83ba0485a5deff53b03c4e334a57f8323e6a585d5f0e55a49e0d5bd4b7fd261c978110a86e41781528c319f221c8a7202d501e5d85336fa57f07db7c3e4b8fc18c0eb72eede56ea4993783e16c023e59299fc6775e0ca0d7ecb804d87eaeff70272a2dfeafc1a9d37786c0a40a537f5ac652d05a05acd6a227c9e92236d67c4961ecde63fdd38537835652f104b9872d5b9923439a471cf607eb6c8b1deaf6c3bdf8e0cdc094124c298de3b5df414a808c133b2ea6e48d9007f8dccfef8c26dfa958863ccb64c5ce644643eea129bbb2cd83a01d85f53f51291a26c457e8ab08d44bee40a555c6715d69f62def3aabe2fa0f5911732453ef962c1ce28f35440d834345a0d5c6d161460645b3885dd41b77435ec5e3b863660a91003ace58716f3a1ef9b7bd4c9bbe1bf3b1e631e03603c112884d9f4bf138720a5a8fc9f1d7f7cf736b1695b63ebf8ed88376cc10464b99901bfc5fab8f2800e708e7590f609d96f8aa15a7508504cb49933c04af940b5ced18375ef28aa1073826955cce08f6557f933fc35b72794c4e3fc92d2d8a9d483a8037deb9874d9da1d0d14523b214470464c6817813ab548388fa04b5b1af3b3d10191b5c6cd9908a10d90caa128b2289826175c121b5e108cee6c08f43246e0dbfe4ecaf2390e990202e30c9dab6cdf713727c1f3128be09579be47339afa0764aec333ef3768005263374e76f68e92c9df9ce396b75245ef8f15d639cd1dd70f6a7f8114f1f9676e87504139188cc681b37fdc6aaef2695ab5393c0517391dddb13697af8debda803f5e8e2fbce3566f77080ac524df680db76bb6bdb4ff6bd4ccf7148fb7ad53cb22308df8ec9f5ae25c1cb5eff4f645f1a433f51319ef7ef55f913fd051312272e5b392acc3b9c7d957678d717b374213a586e03ee365663dd18732300e18117ba6e14acff069bff596e1d4d6e108521934cd3837ceba41d7bc2d3325ff063596c0798f435e8d9693bbfeac53fe460513e1b2c8bf4e8edf2e3880e4c63497fda2af5bd3cc8a5014c71adc871d6b6e74c9134d7c7f7365ff14abdc9991539141a947586db46f79881440b70458b2d0473baf574bf67eb7c144b44de4bd9736e012ed87d7443362a63adb20ccdefa355ea6599aecfc66f1c6c85912d3d27d3f95d69f34c3ec935cf802e80792ffc5638b3d5f33094d5f5cd8e887a94d48bf87a13736aac0f695e934c5e128652aa41812ae03a70ecfaf61d5474098a3eb509d06499e89bb0b06bbdf1a70345bfab1106d40d603b7f3e9d4e14bb24c27a0f99bdcea0f45a360bada9b18a62deb1e28fca049e868e6af898a6b7eba919ac657ef78e08ec5c341113d45e23132358472b4a069560b73d0f82c5e1909ab26576371c96e69ad935725a587132a6d380c5af87bfa3481337da00df817450674fcf7468b81de65889dc3e3ac4b7cc35dd4469ccad14993b488a7234a89a5f57ed2f1ba7154cc7af974a9a74fe85b1060001ba7c2ce7ff57b0a8a143ea589a51205ec94386089653898684562fdef1b06e65e5dd50f94e7675ee69ac0a7c51cf6ca68c5b5ee74ada9ffdbf126b8846b3f049b0576314c0de38d146cf89e45633c56240c879aff45e0265b76", 0x1000}, 0x1006) 23:29:26 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, 0xfffffffffffffffe, 0x20a) 23:29:26 executing program 1: r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)={0x91da75488dcbbf4}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x64}}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 23:29:26 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, 0xfffffffffffffffe, 0x20a) 23:29:26 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) connect(0xffffffffffffffff, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80) 23:29:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8000000035, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x0, &(0x7f0000000200)=[{0x10, 0x11}], 0x10}}], 0x1, 0x0) 23:29:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) recvmmsg(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r0, 0x0) 23:29:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r0, 0x400, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@getspdinfo={0x14, 0x25, 0x4, 0x70bd2b, 0x25dfdbfc, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) [ 266.648914] ================================================================== [ 266.656358] BUG: KMSAN: uninit-value in __siphash_aligned+0x512/0xae0 [ 266.662968] CPU: 0 PID: 8474 Comm: syz-executor4 Not tainted 4.20.0-rc7+ #8 [ 266.670085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.679456] Call Trace: [ 266.682094] dump_stack+0x173/0x1d0 [ 266.685773] kmsan_report+0x120/0x290 [ 266.689626] kmsan_internal_check_memory+0x9a7/0xa20 [ 266.694790] __msan_instrument_asm_load+0x8a/0x90 [ 266.699671] __siphash_aligned+0x512/0xae0 [ 266.703978] secure_ipv6_port_ephemeral+0x110/0x220 [ 266.709040] inet6_hash_connect+0x11f/0x1a0 [ 266.713401] tcp_v6_connect+0x20ba/0x2890 [ 266.717608] ? __msan_poison_alloca+0x1e0/0x270 [ 266.722328] ? tcp_v6_pre_connect+0x130/0x130 [ 266.726856] __inet_stream_connect+0x2f9/0x1340 [ 266.731592] inet_stream_connect+0x101/0x180 [ 266.736051] __sys_connect+0x664/0x820 [ 266.739976] ? __inet_stream_connect+0x1340/0x1340 [ 266.744945] ? prepare_exit_to_usermode+0x114/0x420 [ 266.749995] ? syscall_return_slowpath+0x50/0x650 [ 266.754888] __se_sys_connect+0x8d/0xb0 [ 266.758903] __x64_sys_connect+0x4a/0x70 [ 266.763000] do_syscall_64+0xbc/0xf0 [ 266.766750] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 266.771958] RIP: 0033:0x457669 [ 266.775170] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 266.794093] RSP: 002b:00007f21938dfc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 266.801824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 266.809109] RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000003 [ 266.816397] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 266.823687] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f21938e06d4 [ 266.830977] R13: 00000000004bdc27 R14: 00000000004cd678 R15: 00000000ffffffff [ 266.838287] [ 266.839956] Local variable description: ----combined@secure_ipv6_port_ephemeral [ 266.847406] Variable was created at: [ 266.851152] secure_ipv6_port_ephemeral+0x6a/0x220 [ 266.856110] inet6_hash_connect+0x11f/0x1a0 [ 266.860441] [ 266.862105] Bytes 2-7 of 8 are uninitialized [ 266.866529] Memory access of size 8 starts at ffff88818f13f9f0 [ 266.872516] ================================================================== [ 266.879890] Disabling lock debugging due to kernel taint [ 266.885356] Kernel panic - not syncing: panic_on_warn set ... [ 266.891269] CPU: 0 PID: 8474 Comm: syz-executor4 Tainted: G B 4.20.0-rc7+ #8 [ 266.899771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.909133] Call Trace: [ 266.911748] dump_stack+0x173/0x1d0 [ 266.915407] panic+0x3ce/0x961 [ 266.918674] kmsan_report+0x285/0x290 [ 266.922538] kmsan_internal_check_memory+0x9a7/0xa20 [ 266.927708] __msan_instrument_asm_load+0x8a/0x90 [ 266.932594] __siphash_aligned+0x512/0xae0 [ 266.936897] secure_ipv6_port_ephemeral+0x110/0x220 [ 266.941955] inet6_hash_connect+0x11f/0x1a0 [ 266.946319] tcp_v6_connect+0x20ba/0x2890 [ 266.950537] ? __msan_poison_alloca+0x1e0/0x270 [ 266.955249] ? tcp_v6_pre_connect+0x130/0x130 [ 266.959782] __inet_stream_connect+0x2f9/0x1340 [ 266.964536] inet_stream_connect+0x101/0x180 [ 266.968993] __sys_connect+0x664/0x820 [ 266.973428] ? __inet_stream_connect+0x1340/0x1340 [ 266.978412] ? prepare_exit_to_usermode+0x114/0x420 [ 266.983459] ? syscall_return_slowpath+0x50/0x650 [ 266.988375] __se_sys_connect+0x8d/0xb0 [ 266.992399] __x64_sys_connect+0x4a/0x70 [ 266.996501] do_syscall_64+0xbc/0xf0 [ 267.000248] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 267.005451] RIP: 0033:0x457669 [ 267.008678] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 267.027597] RSP: 002b:00007f21938dfc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 267.035322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 267.042608] RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000003 [ 267.049895] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 267.057185] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f21938e06d4 [ 267.064492] R13: 00000000004bdc27 R14: 00000000004cd678 R15: 00000000ffffffff [ 267.072841] Kernel Offset: disabled [ 267.076485] Rebooting in 86400 seconds..