[....] Starting OpenBSD Secure Shell server: sshd[ 54.065993] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 54.425851] audit: type=1800 audit(1539188339.490:29): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 54.445277] audit: type=1800 audit(1539188339.490:30): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 56.184139] random: sshd: uninitialized urandom read (32 bytes read) [ 56.636497] random: sshd: uninitialized urandom read (32 bytes read) [ 58.490332] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts. [ 64.391489] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/10 16:19:11 fuzzer started [ 68.779924] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/10 16:19:16 dialing manager at 10.128.0.26:45337 2018/10/10 16:19:16 syscalls: 1 2018/10/10 16:19:16 code coverage: enabled 2018/10/10 16:19:16 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/10 16:19:16 setuid sandbox: enabled 2018/10/10 16:19:16 namespace sandbox: enabled 2018/10/10 16:19:16 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/10 16:19:16 fault injection: enabled 2018/10/10 16:19:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/10 16:19:16 net packed injection: /dev/net/tun can't be opened (open /dev/net/tun: cannot allocate memory) 2018/10/10 16:19:16 net device setup: enabled [ 73.976870] random: crng init done 16:21:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x10, 0x0, 0x7}], 0x10}, 0x0) [ 175.983236] IPVS: ftp: loaded support on port[0] = 21 [ 177.193310] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.199794] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.208370] device bridge_slave_0 entered promiscuous mode [ 177.338898] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.345454] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.353904] device bridge_slave_1 entered promiscuous mode [ 177.479747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 177.605953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.993397] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.125889] bond0: Enslaving bond_slave_1 as an active interface with an up link 16:21:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]}}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000002480)=ANY=[]}, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) [ 178.759171] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 178.767506] team0: Port device team_slave_0 added [ 178.952323] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 178.960124] team0: Port device team_slave_1 added [ 179.082085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.093460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.102464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.385158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.542396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.550038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.559140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.643537] IPVS: ftp: loaded support on port[0] = 21 [ 179.767321] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.779194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.788106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.667566] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.674540] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.683061] device bridge_slave_0 entered promiscuous mode [ 181.846974] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.853679] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.862404] device bridge_slave_1 entered promiscuous mode [ 182.057284] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 182.141223] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.147814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.154872] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.161307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.170158] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.328863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 182.728721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.067226] bond0: Enslaving bond_slave_0 as an active interface with an up link 16:21:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000000)={0x4400000010, 0x0, 0x0, 0x70a0}, 0xc) [ 183.338387] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 183.612439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 183.623620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.941281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 183.948456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.259459] IPVS: ftp: loaded support on port[0] = 21 [ 184.805562] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 184.813774] team0: Port device team_slave_0 added [ 185.090626] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 185.098890] team0: Port device team_slave_1 added [ 185.338654] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 185.345863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.354760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.645610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 185.652896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.661527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.980651] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 185.988305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.997270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.173601] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.181285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.190398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.884413] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.890913] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.899581] device bridge_slave_0 entered promiscuous mode [ 187.113969] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.120481] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.129355] device bridge_slave_1 entered promiscuous mode [ 187.301771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.492862] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.180291] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.408743] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.678201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.686980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.970357] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 188.977597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.427734] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.434297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.441179] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.447750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.456459] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 189.817626] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 189.825886] team0: Port device team_slave_0 added [ 189.864859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.060072] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 190.068297] team0: Port device team_slave_1 added 16:21:15 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/dsp\x00', 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000600)=@nullb='/dev/nullb0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000800)='udf\x00', 0x0, &(0x7f0000000840)='bridge0\x00') [ 190.346990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 190.354296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.363360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.693464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 190.700620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.709515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.065742] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 191.073500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.082590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.439895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 191.447964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.457022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.789171] IPVS: ftp: loaded support on port[0] = 21 [ 193.006226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.248462] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 194.710665] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.717266] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.725735] device bridge_slave_0 entered promiscuous mode [ 194.801582] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.808168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.815189] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.821766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.830222] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 194.952300] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.958765] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.967351] device bridge_slave_1 entered promiscuous mode [ 195.122000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.260562] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 195.405097] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 195.411545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.419771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.554673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 196.512747] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 196.753082] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.894144] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.241787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 197.248937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.567352] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 197.574660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.535972] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 198.544176] team0: Port device team_slave_0 added [ 198.853699] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 198.862313] team0: Port device team_slave_1 added [ 199.151329] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 199.166919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.175915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 16:21:24 executing program 4: r0 = socket$inet6(0xa, 0x1010000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, &(0x7f00000000c0), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, 'dummy0\x00', 'team_slave_0\x00', 'syzkaller0\x00', 'rose0\x00', @dev, [], @link_local, [], 0xb0, 0xb0, 0xe8, [@time={'time\x00', 0x18}]}}, @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}]}, 0x1f0) [ 199.595797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 199.603029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.611945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.946705] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 199.954564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.963711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.265461] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 200.273236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.282150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.932185] IPVS: ftp: loaded support on port[0] = 21 [ 203.815692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.554194] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.560683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.567704] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.574237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.583644] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 204.641260] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.647835] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.656375] device bridge_slave_0 entered promiscuous mode [ 204.741945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.016509] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.023254] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.031593] device bridge_slave_1 entered promiscuous mode [ 205.497740] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 205.508575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 16:21:30 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1b0000001e0081aee4050c00000f0000008bc36f7d79ce3263dac3", 0x1b}], 0x1, &(0x7f0000000080)}, 0x0) 16:21:30 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffff9c}) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x85fc9a731462a10a) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240)={r1, 0x80000, r3}) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x8ec0, 0x0) vmsplice(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="d1a39e6f", 0x4}], 0x1, 0x3) write$P9_RAUTH(r6, &(0x7f0000000300)={0x14}, 0x14) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x10}, 0x18) close(r2) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) [ 205.942268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 16:21:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept(r0, 0x0, &(0x7f0000000000)) fcntl$notify(r0, 0x402, 0x20) sendmmsg(r1, &(0x7f0000004400)=[{{&(0x7f0000001f40)=@nfc, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)="447ea23012b290b5", 0x8}], 0x1, &(0x7f0000002140)}}], 0x1, 0x0) 16:21:31 executing program 0: r0 = socket$kcm(0x10, 0x1000000000005, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r1, &(0x7f00000000c0)="219a2ab47d13642074d4cb21aa30227af2bdd28646771c0088a59e3579825f1681c40e91c9ef46e9845a9aeb26daf4095151fb1bff30d645bdc4d98e18008a9c4adc317de2d694445c7fdb599ec8be4d94057a76693271517f7ca9fed065615c9824bd08d7c937296f0ba0358245ddfbafffd148fd61b712da42bd4d5ddf5dfb2bbf02aed5477c393d2ff8b4f1fe35fed65a470bfcea32005ac4eaa84e9f7373f8a447c75116d88914c93fe353128faed1", 0xb1, 0x40, 0x0, 0x0) recvmsg(r0, &(0x7f000000c040)={&(0x7f000000ae00)=@hci, 0x80, &(0x7f000000bfc0)=[{&(0x7f000000ae80)=""/4096, 0xffffffffffffffb8}, {&(0x7f000000be80)=""/231, 0xe7}, {&(0x7f000000bf80)=""/39, 0x27}], 0x3, &(0x7f000000c000)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="23000000420081aee405e9a4000000000000c6ff07d800400300000000000000000000", 0x23}], 0x1, &(0x7f0000000a00)}, 0x0) socketpair$inet6(0xa, 0x0, 0x200, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x6, 0xfffffffffffffff7, 0x7, 0x408d, 0x1}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000340)={r3, 0xfff, 0x1000, "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"}, 0x1008) r4 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000040)={0x200}, 0x4) [ 206.982432] bond0: Enslaving bond_slave_0 as an active interface with an up link 16:21:32 executing program 0: r0 = socket$inet6(0x10, 0x5, 0x5) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f00000000c0)={0x400, 0xa2, 0x5, 0x400}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req={0x401, 0x80000001, 0x4c82, 0x3}, 0x10) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060000001900150007000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 207.137445] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 207.144117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.152063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.382450] bond0: Enslaving bond_slave_1 as an active interface with an up link 16:21:32 executing program 0: utimes(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)={{0x0, 0x7530}}) [ 207.771351] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 207.778709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 16:21:33 executing program 0: unshare(0x24020400) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x8001, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000000)=0x1) r1 = getpid() ptrace$getregset(0x4204, r1, 0x203, &(0x7f0000000100)={&(0x7f0000000040)=""/163, 0xa3}) pwritev(r0, &(0x7f0000000340), 0x0, 0x0) [ 208.197560] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 208.204839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 16:21:33 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={'bcsf0\x00', @ifru_ivalue=0x81}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000680)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000a0040000800200004001000000000000b8030000b8030000b8030000040035ce"], 0x1) [ 208.682481] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.338942] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 209.347171] team0: Port device team_slave_0 added [ 209.691020] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 209.699293] team0: Port device team_slave_1 added [ 210.031630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 210.038856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.048279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.295327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.406360] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 210.413650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.423032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.728822] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 210.736871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.748048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.029605] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 211.037448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.046334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.389197] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 212.229257] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 212.235854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.244054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.303242] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.077848] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.084412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.092742] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.099209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.107717] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 214.114700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 16:21:41 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000080), 0xfffffffffffffe43) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000000080)=""/73, 0x2fb}}], 0x1, 0x0, &(0x7f0000002640)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') pwritev(r0, &(0x7f0000001400), 0x2a6, 0x0) [ 217.186050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.993244] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 218.851323] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 218.858246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.866188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 16:21:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b01db3a3c0300001c02000001000000a001000000010000000000000000000079b43f6979250f21f63c"], 0x2a) [ 219.600096] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.743942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.241178] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 16:21:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8}, 0x10) [ 222.732222] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 222.738648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.746574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.150487] 8021q: adding VLAN 0 to HW filter on device team0 16:21:50 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x84e1f, @rand_addr=0x566}, 0xfffffffffffffff3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1}}, 0x44801) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r3, r0, 0x0, 0xd, &(0x7f0000000340)='/dev/binder#\x00'}, 0x30) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x202102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) unshare(0x40000000) fcntl$setstatus(r1, 0x4, 0x40000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000500)=0x7, 0x4) sendto$inet(r4, &(0x7f0000a34fff), 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000200)) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000300), 0x0, {0xa, 0x4e23, 0x10000, @dev={0xfe, 0x80, [], 0x14}}}}, 0x38) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000480)={0x50, ""/80}) 16:21:50 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x801, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x5, 0x4) write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x18, 0xfffffffffffffff5, 0x1, {0x5}}, 0x18) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{}, {r1, r2/1000+30000}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x7fff, 0x2, 0x2, 'queue0\x00', 0x3f}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000240)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg\x00', 0x4) write$FUSE_STATFS(r0, &(0x7f00000002c0)={0x60, 0x0, 0x1, {{0x8, 0x8, 0x1, 0x0, 0x7, 0x1000, 0x4000000000, 0x17}}}, 0x60) chdir(&(0x7f0000000340)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000380)={{0x3, 0x617}, 'port1\x00', 0x43, 0x2, 0x8, 0xffff, 0x6, 0x8, 0x1, 0x0, 0x2, 0xfff}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cuse\x00', 0x2, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000480)=0x7) getsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f00000004c0)={@dev}, &(0x7f0000000500)=0xc) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='\x00', r0}, 0x10) r5 = dup2(r4, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000005c0), &(0x7f0000000600)=0x4) time(&(0x7f0000000640)) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000680)={0x0, r5}) sendmmsg(r5, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="9015411101e86b06654774f86f36a191ea0626da1540987872407ce24fa9430f1a80ba297ca0fc599fc58fa55af6aac9017cf740488027c7f642cdcc19edac2768fb8cdbf10e92c66a701669e00b6e6594a0bc24706a507c2bae", 0x5a}], 0x2, 0x0, 0x0, 0x90}, 0x9}, {{&(0x7f0000001780)=@nfc_llcp={0x27, 0x7, 0x0, 0x1, 0xe3f, 0xffffffffffffc1bf, "8d86ad90fd910f0fe1934c2e60221372bde24852000623593d4734232d215d0c4122ae13767fee2c0ea1b87eff214a4cd5c97c321f62cb0164db8f0050820e", 0x3b}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001800)="b55a3c0b2d5a40e3bf1ad545fd8f7001e03b8fd33a212765cbf926c7f637887c370dd29a3d5c845308afe93e8d8aa9357739523f0f90aed9c8ca55bc5fab57ff1c480e6307662fe0af709580a8d63a3698c2a1b3279276ef8088748b66cb839dd36bb0c1553fddd7158526e95bec74be3863c0fe7a4f4d779c5afb5e39da0af213437734a60b53d26d834bb972a64cef765d6bffd97d7875f3c9439e46a9515fddbcc626a7eea7559ae44b531b28ac995cc8f51ddd4a432449548b463605", 0xbe}], 0x1, &(0x7f0000001900)=[{0xf8, 0x1ab, 0x18, "9220481cdbc39d4163ee3ec034762a01a77ab6f5ca7db1d4ac91fa0d2211aa87d781af09cf838c95e190bc1d6a310ba99a10faae71f9a6166c709ab3d191d66e72bf7d091d6fb40167fdb1b15821edc1d4265241232c49e814e89757ed7b58dade1d9c99a466ade0e12056df0119968a7292298152f16abc995b9254125fa04114aa8b9dfc9069bda235a9105a6c5e275feefcc5908f408bd41273db3439bafac683064cddfc9be7970b933adefde4c1d42e590b658f889d4266649f217eea837a18c690127aad83c3e332e4e7c8d2c606ae0ef4fe329f706940f7e56ee00537b371efa86a"}], 0xf8, 0x1}, 0x1}, {{&(0x7f0000001a00)=@nfc={0x27, 0x0, 0x2, 0x2}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000002a80)="6c83007d6d640fcecc24ddad2c18b883bdfe6d0275e50d4991fb6d0c40a9cba2e9becd52d901ff5ad6c3c86da922d02f3a598e8cd7f5b2795f45f1093ee0a5269336b330b3eb79e9ad29fd1405aa3a08e86058a100b40ea49655d0883d9a289ff94677554ee885c269ba065fe4fd02448439024182b7b5df0440a697f18590cfe5cc3cf402f5d66f4e75e3dcf714ef0087c2f9c5e3b44693c661720f4798a335a5b3f3c6dc5f4e820dc7dcb77f0a37ebbc91f54e53926138499a", 0xba}, {&(0x7f0000002b40)="580d751d207b68f7146d", 0xa}, {&(0x7f0000002b80)="0ac7c73def1b1320fab3cd3dabf2e9f08b3a9a0a1b5e8968079c26df152072651250648eac8f7233f0a076a940c5d13e1b27693f7d8074f4a2e67888cf96b6add20e85895d3ad31616a3314af7229d9ff21626367b7efe160b47e17c9193c13650d8903a581897f9afce5c29cafb62aa19d3654de16da4c3d7c1388b0af683e031bd78f3d93fa47a4e3a4e985c98cc0bb61c440b3d8c20f54084ce39dd40c791cd17db7c669e86b493e7846cf24636f705b13f3020553c95801861df5bd97dca9edfc8130c898e9231300ebdc9cd602dc23e1475b4b6b8bd3c", 0xd9}, {&(0x7f0000002c80)}, {&(0x7f0000002cc0)="464dd06d741a4272ae6724b8f3adb1512721a8bf420ac6d0c4c229b20b6fa35f5c878a03dc1065598d05ef426f88f9a0ea8c0f017802c8f1905c020b814e3bd993c960e98d1113c386c464b34fa0981c501fd7c1dd52e6c12d3b96c3ada656daaf70c8af0a38b4b843540e740d872ef98cc56c816561067335b1b3469b085bc3fca9327f7bd912c8d69665270e451744f1d99a1d957aa30cfc4683066cba687b8b58636ab5854dbcebb2bba9b481f95250", 0xb1}], 0x6, &(0x7f0000002e00)=[{0x40, 0x119, 0x101, "bca9b8e335fc8ffb8b8ef8b569db826f3c359d0dc0a71e4f5c53076de984c6c809fe64afd30f605bae"}, {0x80, 0x84, 0x2, "d3ddbf6d3aa0bf41c2e51c88a777f65e42c7e84e7d9d17115e3c3c854744c682ce8a6a95141389e904b50c3eb6166c578606a6c1868e00d30544e067eb74e406f4781093acf632958108e418ded66f83c78423f0798a8beb563fb65114159c4ca311f98dc2b6c7b74da1c401d2ae60"}], 0xc0, 0x10}, 0x5}], 0x3, 0xef46e08f48bc6598) r6 = syz_genetlink_get_family_id$team(&(0x7f0000002fc0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003000)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000030c0)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f00000031c0)=0xe8) getpeername$packet(r4, &(0x7f0000003200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003240)=0x14) accept4$packet(r0, &(0x7f0000003280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000032c0)=0x14, 0x800) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003300)={0x0, @rand_addr, @rand_addr}, &(0x7f0000003340)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000003380)={'team0\x00', 0x0}) accept$packet(r0, &(0x7f00000033c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003400)=0x14) recvmsg(r5, &(0x7f0000003680)={&(0x7f0000003440)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000003580)=[{&(0x7f00000034c0)=""/11, 0xb}, {&(0x7f0000003500)=""/95, 0x5f}], 0x2, &(0x7f00000035c0)=""/156, 0x9c, 0x7}, 0x40) accept4$packet(r5, &(0x7f00000036c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003700)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003740)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4}}, &(0x7f0000003840)=0xe8) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003880)={0x0, @multicast2, @multicast2}, &(0x7f00000038c0)=0xc) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003900)={0x0, @dev, @remote}, &(0x7f0000003940)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003d40)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000003d80)={@empty, @remote, 0x0}, &(0x7f0000003dc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003e00)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f00000043c0)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004380)={&(0x7f0000003e40)={0x510, r6, 0x0, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x174, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r10}, {0xb4, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r11}, {0x1b0, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xefd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xa6}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x7c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x80, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}]}, 0x510}, 0x1, 0x0, 0x0, 0x1}, 0x4800) 16:21:50 executing program 1: socket$netlink(0x10, 0x3, 0x0) select(0x40, &(0x7f0000000080)={0x5, 0xfff, 0x10001, 0x6, 0xfffffffffffffff7, 0x9, 0xd13f}, &(0x7f00000000c0)={0x0, 0x9, 0x1, 0x0, 0x1, 0x8, 0xffffffff, 0x1f}, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x5, 0x0, 0x3}, &(0x7f0000000140)) r0 = socket(0x1000000000000a, 0x80000000005, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) wait4(0x0, &(0x7f0000000100), 0x1000000, &(0x7f0000000500)) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 16:21:50 executing program 0: unshare(0x20400) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="4e34ce70d06eca1808c4f568668600526c538a6fb7e5717b5e1aa28261b2a54300f4e6df35cfcaff13a60cecd59f49d3df8c68e7c56252c5c7c215618d133dde640389bb"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x3, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0x9, {{0xa, 0x4e21, 0x4, @local, 0x20}}, 0x0, 0x3, [{{0xa, 0x4e21, 0x1000, @ipv4={[], [], @multicast2}, 0x400}}, {{0xa, 0x4e24, 0x2, @ipv4={[], [], @multicast2}, 0x851}}, {{0xa, 0x4e23, 0xfff, @loopback, 0x606}}]}, 0x210) syncfs(r0) 16:21:50 executing program 2: pipe2(&(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) r1 = memfd_create(&(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 16:21:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8}, 0x10) 16:21:50 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$P9_RRENAME(r1, &(0x7f0000000200)={0x7}, 0x7) dup2(r1, r0) [ 225.305221] hrtimer: interrupt took 33985 ns [ 225.470787] IPVS: ftp: loaded support on port[0] = 21 16:21:50 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "ac3c2024bfbf99ec50d31d9c7ee754aeb2440318837e4f76c50ef886f1433f0bbc0bc81634a3ee5d9ac38627d70118205d1dad05781e68ac8411859d5c0cb6e50bb5b89b3ee8356fa5015ef3e9615edd"}, 0xd8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 16:21:50 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000380)="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", 0x1c9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 16:21:50 executing program 4: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x858, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) personality(0x400000f) io_setup(0x7, &(0x7f00000007c0)=0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ip6_mr_cache\x00') getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f00000005c0)=""/1, &(0x7f0000000140)=0xfffffcbf) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x2, &(0x7f0000000000)={0x7, 0x6, 0x4}) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYRES16=r4, @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000600)=ANY=[@ANYRES16=r0], @ANYPTR=&(0x7f0000000640)=ANY=[@ANYRES16=r2]], @ANYRES64=r3, @ANYRES16=r4, @ANYRESHEX=r3, @ANYPTR], 0x6}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x10000000008010, r3, 0xfffffffffffffffc) clock_gettime(0x20000005, &(0x7f0000000540)={0x0, 0x0}) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000500), &(0x7f0000000580)=0x8) pselect6(0x40, &(0x7f0000000100)={0xfff, 0xfffffffffffffffa, 0x4, 0x1, 0x9, 0xfff, 0x3, 0x5}, &(0x7f0000000180)={0x6, 0x2a, 0x10000, 0x6, 0x5, 0x8, 0x4c5f426b, 0xff}, &(0x7f00000001c0)={0x3, 0x0, 0x7, 0x0, 0x8000, 0xcb, 0x3, 0xffffffffffffe9ab}, &(0x7f0000000280)={r6, r7+10000000}, &(0x7f0000000300)={&(0x7f00000002c0)={0x7fffffff}, 0x8}) uselib(&(0x7f0000000380)='./file0\x00') r8 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x20202, 0x43) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f00000000c0)={0x5e, @multicast1, 0x4e24, 0x3, 'fo\x00', 0x20, 0x7, 0x6e}, 0x2c) ioctl$GIO_UNISCRNMAP(r8, 0x4b69, &(0x7f0000000200)=""/71) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000440)) getsockopt$inet_tcp_int(r8, 0x6, 0x3f, &(0x7f0000000400), &(0x7f0000000880)=0x4) fcntl$getown(r3, 0x9) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000800)={0x0}, &(0x7f0000000480)=0x92) r10 = getpgid(r9) ioctl$KDSIGACCEPT(r8, 0x4b4e, 0xb) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r8, 0x10e, 0x8, &(0x7f00000004c0)=0x1000, 0x4) pipe2(&(0x7f0000000040), 0x84800) getrlimit(0xf, &(0x7f0000000340)) mq_notify(r5, &(0x7f00000003c0)={0x0, 0x2e, 0x1, @tid=r10}) mq_timedsend(r5, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) 16:21:50 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "ac3c2024bfbf99ec50d31d9c7ee754aeb2440318837e4f76c50ef886f1433f0bbc0bc81634a3ee5d9ac38627d70118205d1dad05781e68ac8411859d5c0cb6e50bb5b89b3ee8356fa5015ef3e9615edd"}, 0xd8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 16:21:50 executing program 2: pipe2(&(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) r1 = memfd_create(&(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 16:21:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 226.124395] sg_write: data in/out 589788/46 bytes for SCSI command 0x0-- guessing data in; [ 226.124395] program syz-executor1 not setting count and/or reply_len properly [ 226.174011] sg_write: data in/out 589788/46 bytes for SCSI command 0x0-- guessing data in; [ 226.174011] program syz-executor1 not setting count and/or reply_len properly [ 226.788868] IPVS: ftp: loaded support on port[0] = 21 [ 227.685719] ip (7434) used greatest stack depth: 53056 bytes left [ 227.757576] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.764433] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.772320] device bridge_slave_0 entered promiscuous mode [ 227.851595] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.858180] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.866267] device bridge_slave_1 entered promiscuous mode [ 227.944921] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 228.021508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 228.254871] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.336239] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.428170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 228.435291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.512854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 228.519846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.753509] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 228.761882] team0: Port device team_slave_0 added [ 228.838988] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 228.846716] team0: Port device team_slave_1 added [ 228.925281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.007209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.085577] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 229.093390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.102145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.179120] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 229.186581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.195656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.049373] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.055898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.062829] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.069227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.077467] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 230.441970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.227147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.517844] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.806630] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 233.812999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.820708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.112558] 8021q: adding VLAN 0 to HW filter on device team0 16:22:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x100000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="480000001400199009004b0101048c01010000ebbd2e2ab9f5440000632379eb000000000000551f5f0028213ee20607000000000000003f666674a8ffff00c7e5ed5e00000000c8", 0x48}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000007400), 0x0, 0x1, &(0x7f00000076c0)) 16:22:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0ffff00000005}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0xffffffffa0010000]}}]}, 0x179}}, 0x0) 16:22:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 16:22:01 executing program 4: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x858, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) personality(0x400000f) io_setup(0x7, &(0x7f00000007c0)=0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ip6_mr_cache\x00') getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f00000005c0)=""/1, &(0x7f0000000140)=0xfffffcbf) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x2, &(0x7f0000000000)={0x7, 0x6, 0x4}) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYRES16=r4, @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000600)=ANY=[@ANYRES16=r0], @ANYPTR=&(0x7f0000000640)=ANY=[@ANYRES16=r2]], @ANYRES64=r3, @ANYRES16=r4, @ANYRESHEX=r3, @ANYPTR], 0x6}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x10000000008010, r3, 0xfffffffffffffffc) clock_gettime(0x20000005, &(0x7f0000000540)={0x0, 0x0}) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000500), &(0x7f0000000580)=0x8) pselect6(0x40, &(0x7f0000000100)={0xfff, 0xfffffffffffffffa, 0x4, 0x1, 0x9, 0xfff, 0x3, 0x5}, &(0x7f0000000180)={0x6, 0x2a, 0x10000, 0x6, 0x5, 0x8, 0x4c5f426b, 0xff}, &(0x7f00000001c0)={0x3, 0x0, 0x7, 0x0, 0x8000, 0xcb, 0x3, 0xffffffffffffe9ab}, &(0x7f0000000280)={r6, r7+10000000}, &(0x7f0000000300)={&(0x7f00000002c0)={0x7fffffff}, 0x8}) uselib(&(0x7f0000000380)='./file0\x00') r8 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x20202, 0x43) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f00000000c0)={0x5e, @multicast1, 0x4e24, 0x3, 'fo\x00', 0x20, 0x7, 0x6e}, 0x2c) ioctl$GIO_UNISCRNMAP(r8, 0x4b69, &(0x7f0000000200)=""/71) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000440)) getsockopt$inet_tcp_int(r8, 0x6, 0x3f, &(0x7f0000000400), &(0x7f0000000880)=0x4) fcntl$getown(r3, 0x9) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000800)={0x0}, &(0x7f0000000480)=0x92) r10 = getpgid(r9) ioctl$KDSIGACCEPT(r8, 0x4b4e, 0xb) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r8, 0x10e, 0x8, &(0x7f00000004c0)=0x1000, 0x4) pipe2(&(0x7f0000000040), 0x84800) getrlimit(0xf, &(0x7f0000000340)) mq_notify(r5, &(0x7f00000003c0)={0x0, 0x2e, 0x1, @tid=r10}) mq_timedsend(r5, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) 16:22:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x0, 0x0) 16:22:01 executing program 0: r0 = socket$inet(0x2, 0x8008000000003, 0x33) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0x0, 0x144, 0x238, 0x0, 0x0, 0x3cc, 0x3cc, 0x3cc, 0x3cc, 0x3cc, 0x4, &(0x7f0000000000), {[{{@ip={@local, @remote, 0x0, 0x0, 'rose0\x00', 'veth0_to_bond\x00'}, 0x0, 0x98, 0xf4}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x98, 0xf4}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}, {{@uncond, 0x0, 0x98, 0xf4}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) [ 236.125234] sg_write: data in/out 589788/46 bytes for SCSI command 0x0-- guessing data in; [ 236.125234] program syz-executor1 not setting count and/or reply_len properly 16:22:01 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x84e1f, @rand_addr=0x566}, 0xfffffffffffffff3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1}}, 0x44801) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r3, r0, 0x0, 0xd, &(0x7f0000000340)='/dev/binder#\x00'}, 0x30) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x202102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) unshare(0x40000000) fcntl$setstatus(r1, 0x4, 0x40000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000500)=0x7, 0x4) sendto$inet(r4, &(0x7f0000a34fff), 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000200)) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000300), 0x0, {0xa, 0x4e23, 0x10000, @dev={0xfe, 0x80, [], 0x14}}}}, 0x38) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000480)={0x50, ""/80}) 16:22:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 16:22:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cgroup\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000156, 0x0) 16:22:01 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) [ 236.557407] sg_write: data in/out 589788/46 bytes for SCSI command 0x0-- guessing data in; [ 236.557407] program syz-executor1 not setting count and/or reply_len properly 16:22:01 executing program 4: syslog(0x0, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) 16:22:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 16:22:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000340), 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201}, 0x14}}, 0x0) 16:22:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000740)={&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000680)=""/137, 0x89}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x94b, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 16:22:02 executing program 3: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) wait4(0x0, &(0x7f0000000100), 0x0, &(0x7f0000000500)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) [ 237.277647] IPVS: ftp: loaded support on port[0] = 21 [ 237.412264] sg_write: data in/out 589788/46 bytes for SCSI command 0x0-- guessing data in; [ 237.412264] program syz-executor1 not setting count and/or reply_len properly 16:22:02 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) 16:22:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000340)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000240)={0x0, 0x2000000001, 0x2, &(0x7f0000000080)}) 16:22:02 executing program 1: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 237.919383] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 16:22:04 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 16:22:04 executing program 1: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 16:22:04 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 16:22:04 executing program 5: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000600)=@nullb='/dev/nullb0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000800)='udf\x00', 0x0, &(0x7f0000000840)='bridge0\x00') 16:22:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) r1 = memfd_create(&(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 16:22:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000029c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x9, 0x4) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) 16:22:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288e91198cf0275df5c81cdd8955", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000004600)={&(0x7f0000000040), 0xc, &(0x7f00000045c0)={&(0x7f0000003d80)=ANY=[@ANYBLOB], 0x1}}, 0x40000) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0xffffffffffffff54, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/48, 0x30}], 0x1}}], 0x1, 0x0, &(0x7f0000000300)) [ 239.643599] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:22:04 executing program 1: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 16:22:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) memfd_create(&(0x7f0000000140)='}proc\x00', 0x4) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 16:22:05 executing program 5: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r0, 0x0) 16:22:05 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 16:22:05 executing program 2: clock_settime(0xdaf994a41041939c, &(0x7f00000000c0)) 16:22:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 16:22:05 executing program 5: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000ec0)={&(0x7f0000000e80)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x6, 0x2, 0x4, 0x75, 0x0, 0xab, 0x0, 0x0, 0x600000, 0x0, 0x6e, 0x0, 0x7, 0x0, 0x200000, 0x0, 0x8, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x2, 0x1000, 0xfbc, 0x0, 0xd, 0x7, @perf_bp={&(0x7f0000000280)}, 0x1, 0x0, 0x0, 0x6, 0x0, 0x2fd, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0494e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x2933) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='keyring))/vmnet0:,[\x00') write$cgroup_pid(r1, &(0x7f0000000000), 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f00000005c0)="901340a4c56c923a00bde0f0c884e7dce4de348ae82d2050c3ad9815a840b1ad1d470588e0541bceec8c4df8bd6ce76fc755e65f0bc1191f389ead38585fe1bf65db1d4682edbda07be008f3a4258a6888e32e49152d78597c2682ec361b26de82833a384c3e40b722ed42615a466ee481bdad3064c74968f6bad2af617b6f8e02d12a00589826aaedae440cfe9d1fb6885d9b4f5a4e731ba0bc25a335a2c6cdc617439fc4f65f4a69632b5af12cfae84bdea18a4d31d157f6015d0dca3cd8d399947e17a90e78d3f762fc", &(0x7f0000000100)=""/55}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:22:05 executing program 0: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000000080)=ANY=[]}, 0x0) 16:22:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000340), 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201}, 0x14}}, 0x0) 16:22:05 executing program 4: connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my}, 0xb) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x0, 0x0) 16:22:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 16:22:05 executing program 2: 16:22:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 16:22:06 executing program 2: 16:22:06 executing program 3: 16:22:06 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x0, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_ALM_READ(r0, 0x80247009, &(0x7f0000000280)) 16:22:06 executing program 1: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 16:22:06 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_ALM_READ(r0, 0x40247007, &(0x7f0000000280)) 16:22:07 executing program 5: 16:22:07 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_ALM_READ(r0, 0x7003, &(0x7f0000000280)) 16:22:07 executing program 1: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 16:22:07 executing program 4: 16:22:07 executing program 3: 16:22:07 executing program 0: 16:22:07 executing program 1: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 16:22:07 executing program 2: 16:22:07 executing program 5: 16:22:07 executing program 0: 16:22:07 executing program 3: 16:22:07 executing program 4: 16:22:08 executing program 0: 16:22:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 16:22:08 executing program 5: 16:22:08 executing program 2: 16:22:08 executing program 4: 16:22:08 executing program 0: 16:22:08 executing program 3: 16:22:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 16:22:08 executing program 5: 16:22:08 executing program 3: 16:22:08 executing program 4: 16:22:08 executing program 2: 16:22:08 executing program 0: 16:22:09 executing program 5: 16:22:09 executing program 3: 16:22:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 16:22:09 executing program 2: 16:22:09 executing program 4: 16:22:09 executing program 0: 16:22:09 executing program 2: 16:22:09 executing program 3: 16:22:09 executing program 5: 16:22:09 executing program 1: 16:22:09 executing program 0: 16:22:09 executing program 2: 16:22:09 executing program 4: 16:22:10 executing program 3: 16:22:10 executing program 1: 16:22:10 executing program 0: 16:22:10 executing program 2: 16:22:10 executing program 5: 16:22:10 executing program 0: 16:22:10 executing program 3: 16:22:10 executing program 1: 16:22:10 executing program 4: 16:22:10 executing program 5: 16:22:10 executing program 2: syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x2ef, 0x6000) 16:22:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) sendto$inet6(r1, &(0x7f0000000240), 0x0, 0x20000000, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) accept(r0, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) 16:22:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup2(r0, r1) fsetxattr$security_capability(r1, &(0x7f0000000180)='security.capability\x00', &(0x7f00000002c0)=@v2, 0x14, 0x0) 16:22:11 executing program 4: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'bridge0\x00\x00\x00\b\x00', &(0x7f0000000100)=@ethtool_cmd={0x8}}) 16:22:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000004380)=[{{&(0x7f00000002c0)=@sco, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000580)=""/246, 0xfffffffffffffe06}}], 0xc6, 0x0, &(0x7f00000044c0)) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[]}}, 0x0) dup2(r0, r1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'ipddp0\x00', &(0x7f00000001c0)=@ethtool_pauseparam}) 16:22:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x200096dc) 16:22:11 executing program 4: creat(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000200)=@nullb='/dew/nullb0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000180)='dax\x00', 0x0, &(0x7f00000001c0)='threaded\x00') 16:22:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "a0298c2626a80bcc"}, 0x10}}, 0x0) 16:22:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r1, 0xb25}, 0x14}}, 0x0) 16:22:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 16:22:11 executing program 2: syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x2ef, 0x6000) 16:22:11 executing program 1: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000ec0)={&(0x7f0000000e80)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x6, 0x2, 0x4, 0x75, 0x0, 0xab, 0x0, 0x0, 0x600000, 0x0, 0x6e, 0x0, 0x7, 0x0, 0x200000, 0x0, 0x8, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x2, 0x1000, 0xfbc, 0x0, 0xd, 0x0, @perf_bp={&(0x7f0000000280)}, 0x1, 0x0, 0x0, 0x6, 0x5, 0x2fd}, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0494e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x2933) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000005c0)="901340a4c56c923a00bde0f0c884e7dce4de348ae82d2050c3ad9815a840b1ad1d470588e0541bceec8c4df8bd6ce76fc755e65f0bc1191f389ead38585fe1bf65db1d4682edbda07be008f3a4258a6888e32e49152d78597c2682ec361b26de82833a384c3e40b722ed42615a466ee481bdad3064c74968f6bad2af617b6f8e02d12a00589826aaedae440cfe9d1fb6885d9b4f5a4e731ba0", &(0x7f0000000100)=""/55}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:22:11 executing program 4: creat(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000200)=@nullb='/dew/nullb0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000180)='dax\x00', 0x0, &(0x7f00000001c0)='threaded\x00') 16:22:12 executing program 5: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'bridge0\x00\x00\x00\b\x00', &(0x7f0000000100)=@ethtool_cmd={0xf}}) 16:22:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) open(&(0x7f0000000040)='./file0\x00', 0x447d, 0x0) 16:22:12 executing program 3: getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x81) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0xffffff01) ioctl$int_in(r0, 0x80000000005001, &(0x7f00000000c0)) 16:22:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x0, 0x2, r2}) 16:22:12 executing program 5: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'bridge0\x00\x00\x00\b\x00', &(0x7f0000000100)=@ethtool_cmd={0x12}}) 16:22:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xfe7a) read(r0, &(0x7f00000001c0)=""/196, 0x23) 16:22:12 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000002, 0x0) ioctl$int_in(r0, 0xc00008c004500a, &(0x7f0000000180)) write$P9_RRENAME(r0, &(0x7f0000000040)={0x7}, 0x7) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x12, r0, 0x0) 16:22:13 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x20000000]}}, 0x7}, 0x5c) 16:22:13 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000002, 0x0) ioctl$int_in(r0, 0xc00008c004500a, &(0x7f0000000180)) write$P9_RRENAME(r0, &(0x7f0000000040)={0x7}, 0x7) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x12, r0, 0x0) 16:22:13 executing program 0: r0 = socket$inet(0x2, 0x8008000000003, 0x33) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendto$inet(r0, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) 16:22:13 executing program 1: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000ec0)={&(0x7f0000000e80)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x6, 0x2, 0x4, 0x75, 0x0, 0xab, 0x0, 0x0, 0x600000, 0x0, 0x6e, 0x0, 0x7, 0x0, 0x200000, 0x0, 0x8, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x2, 0x1000, 0xfbc, 0x0, 0xd, 0x0, @perf_bp={&(0x7f0000000280)}, 0x1, 0x0, 0x0, 0x6, 0x5, 0x2fd}, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0494e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x2933) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000005c0)="901340a4c56c923a00bde0f0c884e7dce4de348ae82d2050c3ad9815a840b1ad1d470588e0541bceec8c4df8bd6ce76fc755e65f0bc1191f389ead38585fe1bf65db1d4682edbda07be008f3a4258a6888e32e49152d78597c2682ec361b26de82833a384c3e40b722ed42615a466ee481bdad3064c74968f6bad2af617b6f8e02d12a00589826aaedae440cfe9d1fb6885d9b4f5a4e731ba0", &(0x7f0000000100)=""/55}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:22:13 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) 16:22:13 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000002, 0x0) ioctl$int_in(r0, 0xc00008c004500a, &(0x7f0000000180)) write$P9_RRENAME(r0, &(0x7f0000000040)={0x7}, 0x7) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x12, r0, 0x0) 16:22:13 executing program 0: pipe2(&(0x7f00000000c0), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x447d, 0x0) [ 248.713343] ================================================================== [ 248.720802] BUG: KMSAN: uninit-value in vmap_page_range_noflush+0x975/0xed0 [ 248.727933] CPU: 0 PID: 8046 Comm: syz-executor2 Not tainted 4.19.0-rc4+ #66 [ 248.735141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.744517] Call Trace: [ 248.747139] dump_stack+0x306/0x460 [ 248.750789] ? vmap_page_range_noflush+0x975/0xed0 [ 248.755746] kmsan_report+0x1a2/0x2e0 [ 248.759603] __msan_warning+0x7c/0xe0 [ 248.763429] vmap_page_range_noflush+0x975/0xed0 [ 248.768231] map_vm_area+0x17d/0x1f0 [ 248.771971] kmsan_vmap+0xf2/0x180 [ 248.775536] vmap+0x3a1/0x510 [ 248.778672] ? ion_heap_map_kernel+0xa33/0xad0 [ 248.783278] ion_heap_map_kernel+0xa33/0xad0 [ 248.787714] ? ion_ioctl+0x690/0x690 [ 248.791446] ion_dma_buf_begin_cpu_access+0x2ba/0x9b0 [ 248.796683] ? ion_dma_buf_release+0x430/0x430 [ 248.801285] dma_buf_ioctl+0x376/0x630 [ 248.805201] ? dma_buf_poll+0x1690/0x1690 [ 248.809366] do_vfs_ioctl+0xcf3/0x2810 [ 248.813272] ? security_file_ioctl+0x92/0x200 [ 248.817799] __se_sys_ioctl+0x1da/0x270 [ 248.821805] __x64_sys_ioctl+0x4a/0x70 [ 248.825714] do_syscall_64+0xbe/0x100 [ 248.829536] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 248.834744] RIP: 0033:0x457579 [ 248.837961] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 248.857221] RSP: 002b:00007f6310d25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.864960] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 248.872253] RDX: 0000000020000040 RSI: 0000000040086200 RDI: 0000000000000005 [ 248.879541] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 248.886843] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6310d266d4 [ 248.894138] R13: 00000000004bedb1 R14: 00000000004ceb30 R15: 00000000ffffffff [ 248.901459] [ 248.903110] Uninit was created at: [ 248.906680] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 248.911837] kmsan_kmalloc+0xa4/0x120 [ 248.915660] __kmalloc+0x14b/0x440 [ 248.919246] kmsan_vmap+0x9b/0x180 [ 248.922803] vmap+0x3a1/0x510 [ 248.925921] ion_heap_map_kernel+0xa33/0xad0 [ 248.930349] ion_dma_buf_begin_cpu_access+0x2ba/0x9b0 [ 248.935585] dma_buf_ioctl+0x376/0x630 [ 248.939498] do_vfs_ioctl+0xcf3/0x2810 [ 248.943402] __se_sys_ioctl+0x1da/0x270 [ 248.947386] __x64_sys_ioctl+0x4a/0x70 [ 248.951291] do_syscall_64+0xbe/0x100 [ 248.955115] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 248.960306] ================================================================== [ 248.967682] Disabling lock debugging due to kernel taint [ 248.973147] Kernel panic - not syncing: panic_on_warn set ... [ 248.973147] [ 248.980533] CPU: 0 PID: 8046 Comm: syz-executor2 Tainted: G B 4.19.0-rc4+ #66 [ 248.989124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.998498] Call Trace: [ 249.001107] dump_stack+0x306/0x460 [ 249.004766] panic+0x54c/0xafa [ 249.008002] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 249.013469] kmsan_report+0x2d3/0x2e0 [ 249.017295] __msan_warning+0x7c/0xe0 [ 249.021117] vmap_page_range_noflush+0x975/0xed0 [ 249.025956] map_vm_area+0x17d/0x1f0 [ 249.029696] kmsan_vmap+0xf2/0x180 [ 249.033276] vmap+0x3a1/0x510 [ 249.036399] ? ion_heap_map_kernel+0xa33/0xad0 [ 249.041002] ion_heap_map_kernel+0xa33/0xad0 [ 249.045440] ? ion_ioctl+0x690/0x690 [ 249.049268] ion_dma_buf_begin_cpu_access+0x2ba/0x9b0 [ 249.054501] ? ion_dma_buf_release+0x430/0x430 [ 249.059103] dma_buf_ioctl+0x376/0x630 16:22:13 executing program 3: getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x81) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0xffffff01) ioctl$int_in(r0, 0x80000000005001, &(0x7f00000000c0)) 16:22:13 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x20000000]}}, 0x7}, 0x5c) 16:22:13 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000002, 0x0) ioctl$int_in(r0, 0xc00008c004500a, &(0x7f0000000180)) write$P9_RRENAME(r0, &(0x7f0000000040)={0x7}, 0x7) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x12, r0, 0x0) [ 249.063019] ? dma_buf_poll+0x1690/0x1690 [ 249.067187] do_vfs_ioctl+0xcf3/0x2810 [ 249.071112] ? security_file_ioctl+0x92/0x200 [ 249.075648] __se_sys_ioctl+0x1da/0x270 [ 249.079651] __x64_sys_ioctl+0x4a/0x70 [ 249.083566] do_syscall_64+0xbe/0x100 [ 249.087388] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 249.092596] RIP: 0033:0x457579 [ 249.095806] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:22:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000300), 0x0) write(r2, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) open(&(0x7f0000000040)='./file0\x00', 0x447d, 0x0) [ 249.114724] RSP: 002b:00007f6310d25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.122451] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 249.129739] RDX: 0000000020000040 RSI: 0000000040086200 RDI: 0000000000000005 [ 249.137026] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 249.144320] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6310d266d4 [ 249.151619] R13: 00000000004bedb1 R14: 00000000004ceb30 R15: 00000000ffffffff [ 249.160047] Kernel Offset: disabled [ 249.163689] Rebooting in 86400 seconds..