[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 58.990062] sshd (6157) used greatest stack depth: 53184 bytes left [....] Starting OpenBSD Secure Shell server: sshd[ 59.179786] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 59.918351] random: sshd: uninitialized urandom read (32 bytes read) [ 60.558734] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 62.202522] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.81' (ECDSA) to the list of known hosts. [ 67.989612] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/10 20:54:12 fuzzer started [ 72.687630] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/10 20:54:17 dialing manager at 10.128.0.26:45337 2018/10/10 20:54:17 syscalls: 1 2018/10/10 20:54:17 code coverage: enabled 2018/10/10 20:54:17 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/10 20:54:17 setuid sandbox: enabled 2018/10/10 20:54:17 namespace sandbox: enabled 2018/10/10 20:54:17 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/10 20:54:17 fault injection: enabled 2018/10/10 20:54:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/10 20:54:17 net packed injection: /dev/net/tun can't be opened (open /dev/net/tun: cannot allocate memory) 2018/10/10 20:54:17 net device setup: enabled [ 79.093204] random: crng init done 20:56:17 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000140)=""/119, 0x77, 0x0) [ 196.132761] IPVS: ftp: loaded support on port[0] = 21 [ 197.499164] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.505769] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.514653] device bridge_slave_0 entered promiscuous mode [ 197.673287] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.679786] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.688808] device bridge_slave_1 entered promiscuous mode [ 197.833100] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 197.975503] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.414679] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.565720] bond0: Enslaving bond_slave_1 as an active interface with an up link 20:56:21 executing program 1: clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x2, &(0x7f00000003c0)=@raw=[@jmp], &(0x7f0000000580)="170a00eaf43d86d1afd96c158f5efd119fd301015a3f79cc6777658c0ba224ea5918becd1b74a7a7f027696116d1bbb1d7ccbb0c013eec1a32073757c05e50b1c4ace41c8db08f13e892a11120e7de369b827e5b59ca82731176161c9353", 0x0, 0xc3, &(0x7f0000000480)=""/195}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000001080)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001400)={{{@in=@multicast2, @in=@local}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000001500)=0xe8) [ 199.296298] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 199.304639] team0: Port device team_slave_0 added [ 199.605610] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 199.614062] team0: Port device team_slave_1 added [ 199.918816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.016412] IPVS: ftp: loaded support on port[0] = 21 [ 200.147619] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 200.155637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.164719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.405881] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 200.413770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.423219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.703399] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 200.711035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.720323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.036619] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.043233] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.051940] device bridge_slave_0 entered promiscuous mode [ 202.240961] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.247611] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.256401] device bridge_slave_1 entered promiscuous mode [ 202.534144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.753072] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 203.359881] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 203.416807] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.423384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.430361] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.436974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.446227] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 203.612197] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 203.983375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.126211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 204.133428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.818458] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 204.826828] team0: Port device team_slave_0 added 20:56:26 executing program 2: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) close(r0) creat(&(0x7f0000000540)='./file0\x00', 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0x14) [ 205.175846] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 205.184116] team0: Port device team_slave_1 added [ 205.517394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 205.524716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.533456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.712177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 205.719311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.728464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.033383] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 206.041017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.050475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.253368] IPVS: ftp: loaded support on port[0] = 21 [ 206.300381] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 206.308283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.317711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.875746] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.882369] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.890909] device bridge_slave_0 entered promiscuous mode [ 209.140790] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.147353] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.156226] device bridge_slave_1 entered promiscuous mode [ 209.498045] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 209.725923] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.732505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.739468] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.746104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.755277] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 209.787372] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 210.657100] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 210.732051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.974146] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 211.227965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 211.235266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.538227] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 211.545512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 20:56:34 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, &(0x7f0000003280), 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="1000"], 0x2}}], 0x1, 0x0) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) [ 212.567535] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 212.575813] team0: Port device team_slave_0 added [ 212.911486] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 212.919692] team0: Port device team_slave_1 added [ 213.256200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 213.263622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.272744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.425050] IPVS: ftp: loaded support on port[0] = 21 [ 213.630873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 213.638031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.647012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.989193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 213.997101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.006426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.356462] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 214.364187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.373349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.333425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.394481] ip (6627) used greatest stack depth: 53144 bytes left [ 216.684181] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.690668] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.699396] device bridge_slave_0 entered promiscuous mode [ 217.011727] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.018273] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.026860] device bridge_slave_1 entered promiscuous mode [ 217.407689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 217.639699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.828755] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 218.575751] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.582306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.589240] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.595820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.605029] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 218.619609] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.997636] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.053353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.116006] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 219.122650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.130743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.433738] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 219.440911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.793827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 219.800955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.412556] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.807570] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 220.816296] team0: Port device team_slave_0 added [ 221.216792] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 221.225120] team0: Port device team_slave_1 added [ 221.563553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 221.570634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.579960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.884826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 221.892058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.901011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.327884] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 222.335755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.344893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 20:56:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) connect$vsock_dgram(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) [ 222.753048] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 222.760664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.770013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.714468] IPVS: ftp: loaded support on port[0] = 21 [ 225.153234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.704983] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 227.670018] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.676636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.683738] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.690204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.699172] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 227.822004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.375505] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 228.382052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.390065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.955156] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.961869] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.970416] device bridge_slave_0 entered promiscuous mode [ 229.534578] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.541054] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.549794] device bridge_slave_1 entered promiscuous mode [ 229.967674] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 230.028350] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.297940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 20:56:53 executing program 0: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000080)='./bus\x00', &(0x7f0000002bc0)) 20:56:53 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000055c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0x7ffffffd, 0x3}, {0xfffffffffffffffa, 0x200}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x3, 0x3, 0x3f, 'queue1\x00'}) setsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f00000001c0)={@loopback, @loopback}, 0xffffffffffffff16) [ 231.621146] bond0: Enslaving bond_slave_0 as an active interface with an up link 20:56:53 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000000)="1542392780012f58c4740ef0a1d2c242285a09020000") r1 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040)=0x4, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) [ 232.111064] bond0: Enslaving bond_slave_1 as an active interface with an up link 20:56:54 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000000)="1542392780012f58c4740ef0a1d2c242285a09020000") r1 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040)=0x4, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) [ 232.545433] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 232.552631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 20:56:54 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000000)="1542392780012f58c4740ef0a1d2c242285a09020000") r1 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040)=0x4, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) [ 232.953512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 232.960606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 20:56:55 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000000)="1542392780012f58c4740ef0a1d2c242285a09020000") r1 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040)=0x4, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) 20:56:55 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000000)="1542392780012f58c4740ef0a1d2c242285a09020000") dup2(r0, r0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) 20:56:56 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000000)="1542392780012f58c4740ef0a1d2c242285a09020000") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) [ 234.241204] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 234.249736] team0: Port device team_slave_0 added [ 234.722496] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 234.730699] team0: Port device team_slave_1 added [ 235.088985] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 235.096182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.105180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.344150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.528622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 235.536185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.545114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.840970] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 235.848771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.857844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.190526] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 236.198329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.207386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.659388] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 237.827720] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 237.834296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.842263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.965640] 8021q: adding VLAN 0 to HW filter on device team0 20:57:01 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x8007, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close(r0) unlinkat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x0) readlinkat(r0, &(0x7f0000000000)='./file0/file1\x00', &(0x7f00000001c0)=""/4096, 0x1000) getgroups(0x40000000000002d6, &(0x7f0000000140)) lchown(&(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) [ 239.357789] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.364360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.371331] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.377937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.386587] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 239.393331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.762898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.707883] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 243.646652] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 243.653166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.661166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 20:57:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20048045, &(0x7f00000001c0), 0x10) [ 244.489312] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.244664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.791157] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 20:57:10 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000a80)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x2) [ 248.335485] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.342066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.349864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.640480] 8021q: adding VLAN 0 to HW filter on device team0 20:57:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r2, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:12 executing program 0: socket$l2tp(0x18, 0x1, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) 20:57:12 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x10000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x6}, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0xffff, 0x1, 0xffff, 0x926, r1}, &(0x7f0000000140)=0x10) recvfrom$inet(r0, &(0x7f0000000180)=""/25, 0x19, 0x1, &(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={r3, 0x1ff, 0x2, [0x10001, 0x8000]}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={r4, 0x2, 0xfff}, 0x8) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000002c0)={0x9, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x0, 0x7, [{{0x2, 0x4e23}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @rand_addr=0x5}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e21, @rand_addr=0x3}}, {{0x2, 0x2, @local}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}]}, 0x410) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000700)={r1, 0x0, 0x2, [0x9, 0x5f10000000000]}, 0xc) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000740)=""/4096) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001740)={r4, 0x3, 0x2, [0x3, 0x8]}, 0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000001780)=0xffffffffffffff9c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001a00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000019c0)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000001a40)={0x5, 0x10, 0xfa00, {&(0x7f00000017c0), r5, 0x1}}, 0x18) r6 = dup2(r0, r0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000001a80)) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/null\x00', 0x200000, 0x0) lremovexattr(&(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)=@random={'os2.', '/dev/null\x00'}) ioctl$DRM_IOCTL_GET_STATS(r7, 0x80f86406, &(0x7f0000001b80)=""/243) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) write$P9_RMKDIR(r6, &(0x7f0000001c80)={0x14, 0x49, 0x2, {0x0, 0x1, 0x7}}, 0x14) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x9) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000001cc0)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000001d00)={r4, 0x7fffffff, 0x934, 0x6}, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001d80)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001ec0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x9c, r8, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffff7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40004}, 0x8050) r9 = add_key$keyring(&(0x7f0000001f00)='keyring\x00', &(0x7f0000001f40)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r10 = request_key(&(0x7f0000001f80)='.request_key_auth\x00', &(0x7f0000001fc0)={'syz', 0x2}, &(0x7f0000002000)='bridge_slave_1\x00', 0x0) keyctl$reject(0x13, r9, 0x30, 0x3, r10) 20:57:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x8000c, 0x41) 20:57:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000040)}, 0x20) 20:57:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000180)=0x80) dup3(r0, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) 20:57:12 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f450200000000000000000000000000020000000904000000000000380000000000000000bebc4a5aae71b2710000000000200000fcffffffffffffff000000000000000000"], 0x46) 20:57:12 executing program 0: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) 20:57:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000500), 0x0) 20:57:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@loopback, @rand_addr, @rand_addr}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @dev}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) 20:57:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r2, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b001000024005000100050041702e87e90a"], 0x24}}, 0x0) 20:57:13 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000001780)={&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x0) bind$inet(r0, &(0x7f000000f000)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2000000000006, &(0x7f0000000300)=0x9, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000002000)={0x2, 0x3}, 0x10) 20:57:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x205}, 0x14}}, 0x0) [ 252.310788] IPVS: ftp: loaded support on port[0] = 21 [ 253.069792] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.076278] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.084401] device bridge_slave_0 entered promiscuous mode [ 253.164216] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.170859] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.179086] device bridge_slave_1 entered promiscuous mode [ 253.258515] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 253.335876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 253.571334] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 253.654367] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 253.736142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 253.743172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.823720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 253.830706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.069808] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 254.077578] team0: Port device team_slave_0 added [ 254.155284] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 254.162993] team0: Port device team_slave_1 added [ 254.240628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.320729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.398375] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 254.405761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.414991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.491418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 254.499075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.508280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.375939] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.382437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.389222] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.395768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.403725] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 255.711996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.569827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.868276] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 259.163104] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.169370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.177585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.470299] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.318142] QAT: Invalid ioctl [ 261.322668] QAT: Invalid ioctl [ 261.326948] QAT: Invalid ioctl [ 261.331367] QAT: Invalid ioctl [ 261.335877] QAT: Invalid ioctl [ 261.339422] QAT: Invalid ioctl [ 261.343537] QAT: Invalid ioctl [ 261.354217] QAT: Invalid ioctl [ 261.357782] QAT: Invalid ioctl [ 261.361894] QAT: Invalid ioctl [ 261.366104] QAT: Invalid ioctl [ 261.369703] QAT: Invalid ioctl [ 261.373817] QAT: Invalid ioctl [ 261.377279] QAT: Invalid ioctl 20:57:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x2013, r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet6(0xa, 0x1000000000002, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x8000, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) close(r2) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0xad, {{0x2, 0x4e21}}}, 0x88) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0x50, &(0x7f00000001c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)=r3, 0x2) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x300000a, 0x8013, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000540)={@mcast1, 0x1, 0x2, 0x2, 0x0, 0x6, 0xc8, 0x3}, 0x20) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x3c000, 0x800}, 0x18) write$binfmt_elf32(r4, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x25a) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000640), 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000005c0)=@req3={0x80000000, 0x10000, 0xbdd6, 0x7, 0x8, 0x1000, 0x2}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x8, 0x9, 0x9, 0x7, 0x2}) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001780)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000017c0)={{{@in6, @in=@dev}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f00000018c0)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001900), &(0x7f0000001940)=0xc) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000004c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000019c0)={{{@in6=@loopback, @in=@dev}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000001ac0)=0xe8) r5 = socket$inet6(0xa, 0x6, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000001d00000000000000bf610000000000008510000002000000bf010000000000009500400000000000150100000000001eb7000000000000009500000000000000"], &(0x7f0000000140)="71086518266b77f5d9d05fe947e232a2d78e0e46dc7b32f67f3dd53b755cc699b9b85c015fa75ad008c4c9af88ef21db883a5ccb82e81d0b2f386cb31e742b92b4c745e893d147d84bc535301aeaea7264ae7172a1455ef0dcc6ca230e6754f410e9f6646cf7f9305f6a852f800dc541d833f86988580a78af600724e14d74094b8dc3d1171e4cd6c7b5ed25f52f8dc7544f88cca48e49caf84e32cd970eb1f592530c47291ace77da548dd76bdf122071c6ff034c1f96bfbb2148bc6697ab36947fa49c29ea5d8a434ac1b0fb6c08820d262c59da370784b1197debe39fa535"}, 0x48) close(r6) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001b80)) 20:57:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b001000024005000100050041702e87e90a"], 0x24}}, 0x0) 20:57:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r2, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:23 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0x10000, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000080)=ANY=[@ANYRES32], 0x4}, 0x0) 20:57:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) clone(0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) 20:57:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x1) write$P9_RREAD(r1, &(0x7f0000000140)={0xb}, 0xb) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000080)=0x4000000) 20:57:23 executing program 2: munmap(&(0x7f0000965000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r2, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b001000024005000100050041702e87e90a"], 0x24}}, 0x0) 20:57:24 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = dup2(r1, r0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff}) 20:57:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00\x00\x00\x00\x00\x00\x00\t0\x00', 0x1ff) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000000)) 20:57:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) recvmmsg(r1, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:24 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x402) read$FUSE(r0, &(0x7f0000000440), 0x1000) 20:57:24 executing program 2: munmap(&(0x7f0000965000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b001000024005000100050041702e87e90a"], 0x24}}, 0x0) 20:57:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 20:57:24 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) flock(r0, 0x2) sendfile(r1, r2, &(0x7f0000000100), 0x80000001) 20:57:24 executing program 2: munmap(&(0x7f0000965000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:25 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b001000024005000100050041702e87e90a"], 0x24}}, 0x0) 20:57:25 executing program 1: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd0000c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000180)="1f0000000104fffffd3b54c007110000f30501000b000200cf6189a0870088", 0x1f) [ 263.116683] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 20:57:25 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) flock(r0, 0x2) sendfile(r1, r2, &(0x7f0000000100), 0x80000001) [ 263.165978] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 20:57:25 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b001000024005000100050041702e87e90a"], 0x24}}, 0x0) 20:57:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r2, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:25 executing program 2: munmap(&(0x7f0000965000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:25 executing program 3: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000001c0)="281a8994e668c2b02a122977fbba1ed5ce587b391fe21371d1131a51bc056f18cf6f2333242f96fa999164305f88aacbff7ee30c54a2b160a7af80fdc466debb05005438afcd84ed45b17222c1ecec0ef89840c9a4e444a395c3047b42658b3756b9bcda7fa785a8880829d38fa2e081a65647a3752bcae90e026cd78f8128f958a76f6e8fab0b125999329bb312704bcac9ebb55f6ea4c12415fdb10b48b75f8aa7c7ee853c694d6f459e2003d4ad42a1bf1b03b385b05b53417bf9cc62715faa1375c7623fceee1ac16c9a05e51e845b14eb36c90c6c559ff98b868d07ce06ad60a379b84f530e56cf76b492444968ac9c0a00") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)="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") setgroups(0x2a7, &(0x7f0000000140)) sendfile(r0, r0, &(0x7f0000000000)=0x8000, 0x71c) 20:57:25 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') 20:57:25 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) flock(r0, 0x2) sendfile(r1, r2, &(0x7f0000000100), 0x80000001) 20:57:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[]}}, 0x0) 20:57:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r2, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:26 executing program 2: munmap(&(0x7f0000965000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[]}}, 0x0) 20:57:26 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) flock(r0, 0x2) sendfile(r1, r2, &(0x7f0000000100), 0x80000001) 20:57:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r2, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") 20:57:26 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bf4af44acfe05900000053c40600", "ee52c10d1e72a9432c222982fcccff747a3131991a00000000000004002000"}) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000480)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 20:57:26 executing program 2: munmap(&(0x7f0000965000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[]}}, 0x0) 20:57:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x384, 0x0, &(0x7f0000000180)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 20:57:27 executing program 5: open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000100), 0x80000001) 20:57:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) 20:57:27 executing program 2: munmap(&(0x7f0000965000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) [ 265.184750] binder: 7950:7951 ERROR: BC_REGISTER_LOOPER called without request [ 265.192453] binder: 7951 RLIMIT_NICE not set [ 265.196946] binder: 7951 RLIMIT_NICE not set 20:57:27 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r1, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) [ 265.294488] binder: 7950:7960 got reply transaction with no transaction stack [ 265.302063] binder: 7950:7960 transaction failed 29201/-71, size 0-0 line 2762 [ 265.333857] binder_alloc: binder_alloc_mmap_handler: 7950 20001000-20004000 already mapped failed -16 20:57:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB]}}, 0x0) [ 265.446086] binder: BINDER_SET_CONTEXT_MGR already set [ 265.451541] binder: 7950:7951 ioctl 40046207 0 returned -16 [ 265.489008] binder_alloc: 7950: binder_alloc_buf, no vma [ 265.494884] binder: 7950:7965 transaction failed 29189/-3, size 0-0 line 2970 20:57:27 executing program 5: open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000100), 0x80000001) [ 265.534928] binder: 7950:7951 ERROR: BC_REGISTER_LOOPER called without request [ 265.542530] binder: 7951 RLIMIT_NICE not set [ 265.568972] binder: 7950:7960 got reply transaction with no transaction stack [ 265.576701] binder: 7950:7960 transaction failed 29201/-71, size 0-0 line 2762 20:57:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000a80)) [ 265.618284] binder: release 7950:7951 transaction 2 out, still active [ 265.627695] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.633732] binder: release 7950:7951 transaction 2 in, still active [ 265.640315] binder: send failed reply for transaction 2, target dead [ 265.647135] binder: undelivered TRANSACTION_ERROR: 29201 20:57:27 executing program 2: munmap(&(0x7f0000965000/0x1000)=nil, 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB]}}, 0x0) 20:57:27 executing program 1: 20:57:28 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r1, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:28 executing program 2: munmap(&(0x7f0000965000/0x1000)=nil, 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:28 executing program 3: 20:57:28 executing program 5: open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000100), 0x80000001) 20:57:28 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r1, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB]}}, 0x0) 20:57:28 executing program 1: 20:57:28 executing program 2: munmap(&(0x7f0000965000/0x1000)=nil, 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:28 executing program 3: 20:57:28 executing program 1: 20:57:29 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)) flock(r0, 0x2) sendfile(r1, r2, &(0x7f0000000100), 0x80000001) 20:57:29 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r1, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff0200"], 0x12}}, 0x0) 20:57:29 executing program 3: 20:57:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:29 executing program 1: 20:57:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff0200"], 0x12}}, 0x0) 20:57:29 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:29 executing program 3: 20:57:29 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r1, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:29 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)) flock(r0, 0x2) sendfile(r1, r2, &(0x7f0000000100), 0x80000001) 20:57:29 executing program 1: 20:57:30 executing program 1: 20:57:30 executing program 3: 20:57:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff0200"], 0x12}}, 0x0) 20:57:30 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r1, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:30 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)) flock(r0, 0x2) sendfile(r1, r2, &(0x7f0000000100), 0x80000001) 20:57:30 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b0010000240050001"], 0x1b}}, 0x0) 20:57:30 executing program 3: 20:57:30 executing program 1: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)="6d656d6f72790100000016000000ea66571d6ef0133000", 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086610, &(0x7f0000000000)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000700)={@dev={0xfe, 0x80, [], 0x1f}}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x210100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x14, r1}, 0x14}}, 0x0) 20:57:30 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r2, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:31 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:31 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) flock(r0, 0x2) sendfile(r1, r2, &(0x7f0000000100), 0x80000001) 20:57:31 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000200)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500001180cc0800190001000000", 0x24) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/127, 0x7f}], 0x1) 20:57:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b0010000240050001"], 0x1b}}, 0x0) 20:57:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x562a, &(0x7f00000004c0)) 20:57:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b0010000240050001"], 0x1b}}, 0x0) 20:57:31 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) flock(r0, 0x2) sendfile(r1, r2, &(0x7f0000000100), 0x80000001) 20:57:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x2fe, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000560e, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0x0, 0x2]}, 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0), 0xfffffffffffffd34) 20:57:31 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r2, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b00100002400500010005004170"], 0x20}}, 0x0) 20:57:32 executing program 1: 20:57:32 executing program 1: 20:57:32 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) flock(r0, 0x2) sendfile(r1, r2, &(0x7f0000000100), 0x80000001) 20:57:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140), 0x4) 20:57:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b00100002400500010005004170"], 0x20}}, 0x0) 20:57:32 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r2, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:33 executing program 1: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) socket$nl_crypto(0x10, 0x3, 0x15) lsetxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000002c0)={0x0, 0xda7}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext, 0x4000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xffffffffffff8000, 0x1000}], 0x1, &(0x7f0000000140)={0x77359400}) 20:57:33 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) flock(r0, 0x2) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000100), 0x80000001) 20:57:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:33 executing program 3: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000001c0)="281a8994e668c2b02a122977fbba1ed5ce587b391fe21371d1131a51bc056f18cf6f2333242f96fa999164305f88aacbff7ee30c54a2b160a7af80fdc466debb05005438afcd84ed45b17222c1ecec0ef89840c9a4e444a395c3047b42658b3756b9bcda7fa785a8880829d38fa2e081a65647a3752bcae90e026cd78f8128f958a76f6e8fab0b125999329bb312704bcac9ebb55f6ea4c12415fdb10b48b75f8aa7c7ee853c694d6f459e2003d4ad42a1bf1b03b385b05b53417bf9cc62715faa1375c7623fceee1ac16c9a05e51e845b14eb36c90c6c559ff98b868d07ce06ad60a379b84f530e56cf76b492444968ac9c0a00") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)="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") write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x137) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4605085f40010000000000000003003e001000000064000000380000007b02000002000000070020000100050000103d04000000000000007011f20000000100000300000079060000010000000000000006000000766c523eeb7d11d8be9d1858a98092bf03827763b638aa58a4bf4445d6dbf4afec8cdeedd880070aac20c2dc4c5991706af563ece7210eb343315caf3685c635370b5a790a21e5fecd97f8bb5e6c11559a54f94556d38a82d852fc431c78f160e0b132000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010"], 0x234) setgroups(0x2a7, &(0x7f0000000140)) sendfile(r0, r0, &(0x7f0000000000), 0xffdf) 20:57:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b00100002400500010005004170"], 0x20}}, 0x0) 20:57:33 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r1, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:33 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) flock(r0, 0x2) sendfile(0xffffffffffffffff, r1, &(0x7f0000000100), 0x80000001) 20:57:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4002) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 20:57:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b001000024005000100050041702e87"], 0x22}}, 0x0) 20:57:33 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r1, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:34 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000040)}, 0x20) 20:57:34 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x400000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x1) ioctl$int_in(r0, 0xc00008c004500a, &(0x7f0000000180)) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x12, r0, 0x0) 20:57:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) flock(0xffffffffffffffff, 0x2) sendfile(r0, r1, &(0x7f0000000100), 0x80000001) 20:57:34 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r1, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b001000024005000100050041702e87"], 0x22}}, 0x0) 20:57:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmget(0x2, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 20:57:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b001000024005000100050041702e87"], 0x22}}, 0x0) 20:57:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r2, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) flock(0xffffffffffffffff, 0x2) sendfile(r0, r1, &(0x7f0000000100), 0x80000001) 20:57:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') sendfile(r0, r0, &(0x7f0000000000), 0x7fffffff) 20:57:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b001000024005000100050041702e87e9"], 0x23}}, 0x0) 20:57:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0xf93f00, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:35 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000300)=""/158, &(0x7f00000003c0)=0x9e) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfdfd, &(0x7f00000001c0)}) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:-0-', 0xee, 0x0) 20:57:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r2, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:35 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) flock(0xffffffffffffffff, 0x2) sendfile(r0, r1, &(0x7f0000000100), 0x80000001) [ 273.438085] binder: BINDER_SET_CONTEXT_MGR already set [ 273.443693] binder: 8231:8238 ioctl 40046207 0 returned -16 20:57:35 executing program 3: r0 = memfd_create(&(0x7f0000000140)='md5sumbdev.vmnet1lo\x00', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 20:57:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b001000024005000100050041702e87e9"], 0x23}}, 0x0) 20:57:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, &(0x7f0000000140), &(0x7f0000e32000), &(0x7f00000001c0), &(0x7f0000000380)) 20:57:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="99"], 0x1) recvmmsg(r2, &(0x7f0000006dc0)=[{{&(0x7f00000019c0)=@ax25, 0x80, &(0x7f0000001d40)}}, {{&(0x7f0000001dc0), 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/50, 0x32, 0x8}, 0xfff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/118, 0x76}, {&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000055c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/103, 0x67, 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002540), 0x0, &(0x7f00000066c0)=""/115, 0x73}}], 0x4, 0x2002, 0x0) 20:57:35 executing program 1: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000140)={r0, 0x26}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2e01], 0x0, 0xfff, 0x5, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x2}, 0x10) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000180)) [ 273.994266] ================================================================== [ 274.001710] BUG: KMSAN: uninit-value in vmap_page_range_noflush+0x975/0xed0 [ 274.002621] hrtimer: interrupt took 154361 ns [ 274.008850] CPU: 1 PID: 8259 Comm: syz-executor1 Not tainted 4.19.0-rc4+ #66 [ 274.020524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.029900] Call Trace: [ 274.032510] dump_stack+0x306/0x460 [ 274.036172] ? vmap_page_range_noflush+0x975/0xed0 [ 274.041146] kmsan_report+0x1a2/0x2e0 [ 274.044980] __msan_warning+0x7c/0xe0 [ 274.048818] vmap_page_range_noflush+0x975/0xed0 [ 274.053654] map_vm_area+0x17d/0x1f0 [ 274.057407] kmsan_vmap+0xf2/0x180 [ 274.060987] vmap+0x3a1/0x510 [ 274.064120] ? relay_open_buf+0x81e/0x19d0 [ 274.068399] relay_open_buf+0x81e/0x19d0 [ 274.072517] relay_open+0xabb/0x1370 [ 274.076296] do_blk_trace_setup+0xaf7/0x1780 [ 274.080764] __blk_trace_setup+0x20b/0x380 [ 274.085049] blk_trace_ioctl+0x274/0x970 [ 274.089169] ? kmsan_set_origin_inline+0x6b/0x120 [ 274.094039] ? __msan_poison_alloca+0x17a/0x210 [ 274.098754] ? blkdev_ioctl+0x327/0x55e0 [ 274.102843] ? block_ioctl+0x16f/0x1d0 [ 274.106771] blkdev_ioctl+0x1aaa/0x55e0 [ 274.110774] ? do_futex+0xada/0x59c0 [ 274.114535] ? task_kmsan_context_state+0x6b/0x120 [ 274.119506] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 274.124889] ? vmalloc_to_page+0x57d/0x6b0 [ 274.129166] ? kmsan_set_origin_inline+0x6b/0x120 [ 274.134051] block_ioctl+0x16f/0x1d0 [ 274.137801] ? block_llseek+0x190/0x190 [ 274.141803] do_vfs_ioctl+0xcf3/0x2810 [ 274.145730] ? security_file_ioctl+0x92/0x200 [ 274.150771] __se_sys_ioctl+0x1da/0x270 [ 274.154790] __x64_sys_ioctl+0x4a/0x70 [ 274.158708] do_syscall_64+0xbe/0x100 [ 274.162544] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 274.167767] RIP: 0033:0x457579 [ 274.170988] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 274.189907] RSP: 002b:00007fdb5182fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.197642] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 274.204927] RDX: 0000000020000340 RSI: 00000000c0481273 RDI: 0000000000000004 [ 274.212219] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 274.219507] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdb518306d4 [ 274.226805] R13: 00000000004be9e3 R14: 00000000004ce6e0 R15: 00000000ffffffff [ 274.234115] [ 274.235747] Uninit was created at: [ 274.239312] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 274.244441] kmsan_kmalloc+0xa4/0x120 [ 274.248259] __kmalloc+0x14b/0x440 [ 274.251821] kmsan_vmap+0x9b/0x180 [ 274.255379] vmap+0x3a1/0x510 [ 274.258503] relay_open_buf+0x81e/0x19d0 [ 274.262591] relay_open+0xabb/0x1370 [ 274.266321] do_blk_trace_setup+0xaf7/0x1780 [ 274.270750] __blk_trace_setup+0x20b/0x380 [ 274.275005] blk_trace_ioctl+0x274/0x970 [ 274.279097] blkdev_ioctl+0x1aaa/0x55e0 [ 274.283101] block_ioctl+0x16f/0x1d0 [ 274.286836] do_vfs_ioctl+0xcf3/0x2810 [ 274.290748] __se_sys_ioctl+0x1da/0x270 [ 274.294747] __x64_sys_ioctl+0x4a/0x70 [ 274.298656] do_syscall_64+0xbe/0x100 [ 274.302478] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 274.307675] ================================================================== [ 274.315044] Disabling lock debugging due to kernel taint [ 274.320509] Kernel panic - not syncing: panic_on_warn set ... [ 274.320509] [ 274.327907] CPU: 1 PID: 8259 Comm: syz-executor1 Tainted: G B 4.19.0-rc4+ #66 [ 274.336490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.345855] Call Trace: [ 274.348469] dump_stack+0x306/0x460 [ 274.352143] panic+0x54c/0xafa [ 274.355403] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 274.360885] kmsan_report+0x2d3/0x2e0 [ 274.364722] __msan_warning+0x7c/0xe0 [ 274.368571] vmap_page_range_noflush+0x975/0xed0 [ 274.373407] map_vm_area+0x17d/0x1f0 [ 274.377162] kmsan_vmap+0xf2/0x180 [ 274.380737] vmap+0x3a1/0x510 [ 274.383871] ? relay_open_buf+0x81e/0x19d0 [ 274.388145] relay_open_buf+0x81e/0x19d0 [ 274.392264] relay_open+0xabb/0x1370 [ 274.396031] do_blk_trace_setup+0xaf7/0x1780 [ 274.400509] __blk_trace_setup+0x20b/0x380 [ 274.404814] blk_trace_ioctl+0x274/0x970 [ 274.408931] ? kmsan_set_origin_inline+0x6b/0x120 [ 274.413809] ? __msan_poison_alloca+0x17a/0x210 [ 274.418522] ? blkdev_ioctl+0x327/0x55e0 [ 274.422622] ? block_ioctl+0x16f/0x1d0 [ 274.426559] blkdev_ioctl+0x1aaa/0x55e0 [ 274.430579] ? do_futex+0xada/0x59c0 [ 274.434343] ? task_kmsan_context_state+0x6b/0x120 [ 274.439335] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 274.444730] ? vmalloc_to_page+0x57d/0x6b0 [ 274.449008] ? kmsan_set_origin_inline+0x6b/0x120 [ 274.453894] block_ioctl+0x16f/0x1d0 [ 274.457644] ? block_llseek+0x190/0x190 [ 274.461653] do_vfs_ioctl+0xcf3/0x2810 [ 274.465600] ? security_file_ioctl+0x92/0x200 [ 274.470142] __se_sys_ioctl+0x1da/0x270 [ 274.474163] __x64_sys_ioctl+0x4a/0x70 [ 274.478087] do_syscall_64+0xbe/0x100 [ 274.481919] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 274.487131] RIP: 0033:0x457579 20:57:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000001010000010040ffffffff02001b001000024005000100050041702e87e9"], 0x23}}, 0x0) [ 274.490340] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 274.509256] RSP: 002b:00007fdb5182fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.516996] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 274.524286] RDX: 0000000020000340 RSI: 00000000c0481273 RDI: 0000000000000004 [ 274.531581] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 274.538914] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdb518306d4 [ 274.546216] R13: 00000000004be9e3 R14: 00000000004ce6e0 R15: 00000000ffffffff [ 274.554457] Kernel Offset: disabled [ 274.558093] Rebooting in 86400 seconds..