[ 49.501822] audit: type=1800 audit(1545325553.555:26): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 51.000523] kauditd_printk_skb: 2 callbacks suppressed [ 51.000552] audit: type=1800 audit(1545325555.055:29): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 51.025571] audit: type=1800 audit(1545325555.065:30): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.78' (ECDSA) to the list of known hosts. 2018/12/20 17:06:06 fuzzer started 2018/12/20 17:06:11 dialing manager at 10.128.0.26:46613 2018/12/20 17:06:11 syscalls: 1 2018/12/20 17:06:11 code coverage: enabled 2018/12/20 17:06:11 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/20 17:06:11 setuid sandbox: enabled 2018/12/20 17:06:11 namespace sandbox: enabled 2018/12/20 17:06:11 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/20 17:06:11 fault injection: enabled 2018/12/20 17:06:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/20 17:06:11 net packet injection: enabled 2018/12/20 17:06:11 net device setup: enabled 17:07:41 executing program 0: semget$private(0x0, 0xfffffffffffffffc, 0x0) syzkaller login: [ 158.031832] IPVS: ftp: loaded support on port[0] = 21 [ 159.408753] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.415392] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.423740] device bridge_slave_0 entered promiscuous mode [ 159.506674] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.513259] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.521549] device bridge_slave_1 entered promiscuous mode [ 159.602925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.681309] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.932129] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 160.016669] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.100237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.107343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.189274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.196310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.449938] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 160.458693] team0: Port device team_slave_0 added [ 160.540642] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 160.549230] team0: Port device team_slave_1 added [ 160.633594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.723124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.806805] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 160.814609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.823858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.909135] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 160.917268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.926533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 17:07:45 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 161.917750] IPVS: ftp: loaded support on port[0] = 21 [ 162.015648] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.022223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.029333] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.035928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.045135] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 162.051607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.189240] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.195997] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.204148] device bridge_slave_0 entered promiscuous mode [ 164.307638] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.314219] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.322468] device bridge_slave_1 entered promiscuous mode [ 164.407317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 164.549764] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 164.936155] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 165.102550] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 165.856841] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.865630] team0: Port device team_slave_0 added [ 165.957293] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.966109] team0: Port device team_slave_1 added [ 166.110589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.202943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.298658] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 166.306358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.315493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.488967] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 166.496674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.505584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 17:07:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x2) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20008011, 0x0, 0x0) read(r0, 0x0, 0x0) [ 167.397733] IPVS: ftp: loaded support on port[0] = 21 [ 167.646966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.224532] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.231088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.238246] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.244838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.254162] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 168.260651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.278438] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 168.934101] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.940397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.948673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.717157] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.281071] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.287746] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.296095] device bridge_slave_0 entered promiscuous mode [ 170.485530] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.492212] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.500512] device bridge_slave_1 entered promiscuous mode [ 170.708644] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 170.869908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 171.438499] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 171.598281] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.761704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.768904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.917536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.924671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.405867] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.414478] team0: Port device team_slave_0 added [ 172.505349] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.513906] team0: Port device team_slave_1 added [ 172.639052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 172.646120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.655154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.818836] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 172.825946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.835035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.028855] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.037128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.046186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.180928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.188755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.198081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 17:07:57 executing program 0: semget$private(0x0, 0xfffffffffffffffc, 0x0) 17:07:57 executing program 0: semget$private(0x0, 0xfffffffffffffffc, 0x0) 17:07:57 executing program 0: semget$private(0x0, 0xfffffffffffffffc, 0x0) 17:07:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000240)="2300000014000707030f00c0f635c63f280f550b00120f0a0811000100f5fe0012ff00", 0x23) 17:07:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000240)="2300000014000707030f00c0f635c63f280f550b00120f0a0811000100f5fe0012ff00", 0x23) 17:07:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000240)="2300000014000707030f00c0f635c63f280f550b00120f0a0811000100f5fe0012ff00", 0x23) 17:07:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000240)="2300000014000707030f00c0f635c63f280f550b00120f0a0811000100f5fe0012ff00", 0x23) 17:07:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x17, 0x0, 0x7, 0xfffffffffffff6d5, 0x4, 0xffffffffffffffff, 0x0, [0xc, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x2c) [ 174.804934] 8021q: adding VLAN 0 to HW filter on device bond0 17:07:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x17, 0x0, 0x7, 0xfffffffffffff6d5, 0x4, 0xffffffffffffffff, 0x0, [0xc, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x2c) 17:07:59 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x17, 0x0, 0x7, 0xfffffffffffff6d5, 0x4, 0xffffffffffffffff, 0x0, [0xc, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x2c) [ 175.250847] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.257458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.264676] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.271215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.280155] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 175.286740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.501906] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 175.971343] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 175.977769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.985648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.346997] 8021q: adding VLAN 0 to HW filter on device team0 17:08:03 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 180.779523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.104904] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.426717] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.433079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.440933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.767535] 8021q: adding VLAN 0 to HW filter on device team0 17:08:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x2) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20008011, 0x0, 0x0) read(r0, 0x0, 0x0) 17:08:08 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x17, 0x0, 0x7, 0xfffffffffffff6d5, 0x4, 0xffffffffffffffff, 0x0, [0xc, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x2c) 17:08:08 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 17:08:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 17:08:08 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 17:08:08 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0\x00'}) r0 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags=0x2}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setregid(r2, r3) 17:08:08 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 17:08:08 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1200, 0x400) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000080)=0x1) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r0, r0}) r1 = fcntl$getown(r0, 0x9) ioprio_set$pid(0x2, r1, 0x5) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x794, 0x8, 0x4, 0x40, {0x77359400}, {0x7, 0x0, 0x7f, 0x3, 0x5, 0x4, "afceff8b"}, 0x0, 0x3, @planes=&(0x7f0000000100)={0x464, 0x4, @fd=r0, 0x7}, 0x4}) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000240)) fadvise64(r2, 0x0, 0x2, 0x2) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000300)=0x20000, 0x4) fsync(r0) r3 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x2, 0x2240) r4 = syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x8, 0x40040) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000003c0)={0x5, 0x1}) inotify_add_watch(r0, &(0x7f0000000400)='./file0\x00', 0x80000008) write$apparmor_current(r0, &(0x7f0000000440)=@hat={'changehat ', 0x2, 0x5e, ['/dev/amidi#\x00']}, 0x29) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000500)={r4}) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000540), 0x10) fcntl$getown(r3, 0x9) fcntl$getflags(r4, 0x408) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000580)={r0, 0x0, 0xfffffffffffff0b9, 0x2849, 0x8}) fsync(r5) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000005c0)=0x5) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000640)={0x34, 0x0, &(0x7f0000000600)}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000006c0)={0x0, 0x5, 0x200, &(0x7f0000000680)=0x3}) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000700)) prctl$PR_GET_DUMPABLE(0x3) 17:08:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x2) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20008011, 0x0, 0x0) read(r0, 0x0, 0x0) 17:08:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:08:08 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0xb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_NMI(r3, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:08:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x2) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20008011, 0x0, 0x0) read(r0, 0x0, 0x0) [ 184.735657] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 17:08:09 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x2) [ 185.067196] IPVS: ftp: loaded support on port[0] = 21 [ 185.069137] IPVS: ftp: loaded support on port[0] = 21 17:08:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:08:09 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0xb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_NMI(r3, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 185.376640] IPVS: ftp: loaded support on port[0] = 21 [ 187.220811] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.227466] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.235838] device bridge_slave_0 entered promiscuous mode [ 187.320500] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.327133] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.335404] device bridge_slave_1 entered promiscuous mode [ 187.470952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.557992] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.564582] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.572822] device bridge_slave_0 entered promiscuous mode [ 187.596675] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.670181] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.676811] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.685098] device bridge_slave_0 entered promiscuous mode [ 187.698901] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.705493] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.713831] device bridge_slave_1 entered promiscuous mode [ 187.766079] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.772740] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.781050] device bridge_slave_1 entered promiscuous mode [ 187.870852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.888187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.970790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.997883] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.019496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.117628] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.288287] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.393189] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.468108] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.567190] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.750654] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 188.759398] team0: Port device team_slave_0 added [ 188.826501] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 188.833637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.919340] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 188.928003] team0: Port device team_slave_1 added [ 188.945590] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 188.954374] team0: Port device team_slave_0 added [ 189.037476] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 189.046108] team0: Port device team_slave_1 added [ 189.093607] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.116171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.125277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.169941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.246310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.263679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.270699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.279737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.309272] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 189.317896] team0: Port device team_slave_0 added [ 189.396341] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 189.404622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 189.428897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.438545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.447251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.456446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.469311] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 189.477899] team0: Port device team_slave_1 added [ 189.525000] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 189.536217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.545491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.569537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 189.577270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.586435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.629482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.734628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.741644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.750798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.856627] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 189.864466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.873534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.993275] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 190.000896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.010060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.949262] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.955895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.963158] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.969723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.978813] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 190.986510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.159879] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.166468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.173659] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.180197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.189147] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 191.268223] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.274865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.282066] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.288631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.297788] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 192.012451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.020465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.959126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.045388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.162946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.391925] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.448239] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.636885] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.898867] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 196.905211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.913238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.943477] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 196.950284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.958459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.098687] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.104998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.113109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.381041] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.461493] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.602200] 8021q: adding VLAN 0 to HW filter on device team0 17:08:24 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x2) 17:08:24 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 17:08:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 17:08:24 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0xb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_NMI(r3, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:08:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:08:24 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x2) 17:08:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 17:08:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 17:08:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:08:24 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x2) 17:08:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 17:08:25 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 17:08:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 17:08:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 17:08:25 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0xb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_NMI(r3, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:08:25 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000500), 0x1f1) read$FUSE(r0, &(0x7f0000001500), 0x1000) 17:08:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6288, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000540)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000004c0)}}) 17:08:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000006c0)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x3180000000) read(r1, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = syz_open_pts(r1, 0x0) dup3(r0, r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 17:08:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x80008) 17:08:25 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:08:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6288, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000540)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000004c0)}}) 17:08:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000006c0)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x3180000000) read(r1, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = syz_open_pts(r1, 0x0) dup3(r0, r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 17:08:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6288, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000540)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000004c0)}}) 17:08:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x80008) 17:08:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000000)) 17:08:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000006c0)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x3180000000) read(r1, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = syz_open_pts(r1, 0x0) dup3(r0, r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 17:08:26 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6288, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000540)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000004c0)}}) 17:08:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x80008) 17:08:26 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000500), 0x1f1) read$FUSE(r0, &(0x7f0000001500), 0x1000) 17:08:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000000)) 17:08:26 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:08:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000006c0)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x3180000000) read(r1, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = syz_open_pts(r1, 0x0) dup3(r0, r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 17:08:26 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000500), 0x1f1) read$FUSE(r0, &(0x7f0000001500), 0x1000) 17:08:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000000)) 17:08:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x80008) 17:08:26 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:08:26 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:08:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000000)) 17:08:27 executing program 5: r0 = shmget$private(0x0, 0xfffffffffeffffff, 0x78000a80, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) 17:08:27 executing program 5: r0 = shmget$private(0x0, 0xfffffffffeffffff, 0x78000a80, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) 17:08:27 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000500), 0x1f1) read$FUSE(r0, &(0x7f0000001500), 0x1000) 17:08:27 executing program 1: r0 = shmget$private(0x0, 0xfffffffffeffffff, 0x78000a80, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) 17:08:27 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:08:27 executing program 5: r0 = shmget$private(0x0, 0xfffffffffeffffff, 0x78000a80, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) 17:08:27 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000500), 0x1f1) read$FUSE(r0, &(0x7f0000001500), 0x1000) 17:08:27 executing program 1: r0 = shmget$private(0x0, 0xfffffffffeffffff, 0x78000a80, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) 17:08:27 executing program 5: r0 = shmget$private(0x0, 0xfffffffffeffffff, 0x78000a80, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) 17:08:27 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:08:27 executing program 1: r0 = shmget$private(0x0, 0xfffffffffeffffff, 0x78000a80, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) 17:08:27 executing program 5: io_setup(0x6c, &(0x7f00000002c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'\x00\xff\x1b\x00\x00\x00\x00\x01\x02\x00\x11\x00o\xf1\xc4=', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040), 0xffc3a1fa}]) [ 203.971013] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.977894] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:08:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x400000000000803, 0x3) ioctl(r3, 0x400001000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000540)={0xd0003}) 17:08:28 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 204.109185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:08:28 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000500), 0x1f1) read$FUSE(r0, &(0x7f0000001500), 0x1000) 17:08:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7b, 0xc0010004, [0x0, 0x0, 0x400000b7]}) 17:08:28 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000500), 0x1f1) read$FUSE(r0, &(0x7f0000001500), 0x1000) 17:08:28 executing program 5: io_setup(0x6c, &(0x7f00000002c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'\x00\xff\x1b\x00\x00\x00\x00\x01\x02\x00\x11\x00o\xf1\xc4=', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040), 0xffc3a1fa}]) 17:08:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x0, 0x0}) 17:08:28 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@mcast2, 0x800, 0x1}, 0x20) [ 204.663825] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:08:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x0, 0x0}) 17:08:28 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@mcast2, 0x800, 0x1}, 0x20) 17:08:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x0, 0x0}) 17:08:29 executing program 5: io_setup(0x6c, &(0x7f00000002c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'\x00\xff\x1b\x00\x00\x00\x00\x01\x02\x00\x11\x00o\xf1\xc4=', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040), 0xffc3a1fa}]) 17:08:29 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@mcast2, 0x800, 0x1}, 0x20) [ 205.078850] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:08:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x0, 0x0}) 17:08:29 executing program 5: io_setup(0x6c, &(0x7f00000002c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'\x00\xff\x1b\x00\x00\x00\x00\x01\x02\x00\x11\x00o\xf1\xc4=', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040), 0xffc3a1fa}]) 17:08:29 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@mcast2, 0x800, 0x1}, 0x20) 17:08:29 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@mcast2, 0x800, 0x1}, 0x20) 17:08:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='/dev/audio\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x0, 0x0) 17:08:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00\x94!\xf9\xadJ\xf0\xff9\x16`9\xfe\x11F\xb6\xf5<:JJqn\x17\xb3\x8e+M\xeap\xd2\xc3\xa95\xab\x115\xec\xc4\x1a\x9c\x10\"\x80\xb2\x84\xc7\xb385@\xc8\bY7j\x00\xc1#\xdc\xbc\xd3\xc8\x93\xe2\x86\f\xf5\xf9\xcbW\x89#=\xf5\x1d+Z\xd3\xc6\xf4\r\xb8T\xd5\xd7\xcd\xf6\x9f\xe8\x941\x8cb\xf7\r\x8a\xa3\x9f\\\xee\xf5M\x87\x82\xad\x90ra\xe41\xb9sC\xc6QU\xf4\xbc=N\xc8\xb8\x93\xd1\x0f\xf6\x92\xeba\x7f\x95\x8b/\x02\x15\xdc\'\x82\xe2\xa4\xa1\x9b\xe9\x02\x00\x00\x00\xe2cYZvf\x9a\xf1Y\xb9\x11\xc2\x9b\xa06I\x97\x9bKL))j\x04\xad\x10\xd7v\xb82-H\xea\x12\x04\xc7\\vK\xd5\x93I\r\xa4\xc2\xd0\xc3\x9aj\xa4\x95\xf2\"\xd5\\\xf1\xd2\x14\xbe$\xc8h\xb3\a59\xd1TDV\xd8\x10\xd8\xfa\xa3\x12\xdd\a?\xec\xe5C\x95L\xe7U\x8cXw\x14\x85\xce\xc3\xbe\x9b\xed4w5c\f\xe9\xed\xcd\xb8^;\x946\x1f\x01\x84 &\x91\xfc\x90w\xd9\xda\xb1\b\x19\xd3W\xe8z\xce\xf0\xfd\xd7Oj\x88\xd8!\xed\xeceM>\xf21\xcf_\x0fS\x03\xbf\xa1k\xdaw\xaf\xb8\xfd=\vsS\x87\xb7\xbe\xf8\x90A\xccu\xe1]\x99\aK\xec\xa8\xf1\xc8\xdb$v\xd1Q@l!\n\x81\x94\xb7\xf6\xb4\xf2\xf7\xd6\x94\xa5\x95\bU') getdents(r0, &(0x7f0000000000)=""/84, 0x54) getdents64(r0, 0x0, 0x157) 17:08:29 executing program 0: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44831, 0xffffffffffffffff, 0x0) mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000f4c000)=""/4096) [ 205.534332] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:08:29 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@mcast2, 0x800, 0x1}, 0x20) 17:08:29 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x400, 0x0) accept4$inet6(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc), 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) r1 = socket$inet6(0xa, 0x1000000000005, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="d3", 0x1, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000200), 0x4) getsockopt$inet_buf(r1, 0x84, 0x20, &(0x7f0000dcffe8)=""/24, &(0x7f0000000000)=0x18) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff}, 0x14) 17:08:29 executing program 0: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44831, 0xffffffffffffffff, 0x0) mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000f4c000)=""/4096) 17:08:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00\x94!\xf9\xadJ\xf0\xff9\x16`9\xfe\x11F\xb6\xf5<:JJqn\x17\xb3\x8e+M\xeap\xd2\xc3\xa95\xab\x115\xec\xc4\x1a\x9c\x10\"\x80\xb2\x84\xc7\xb385@\xc8\bY7j\x00\xc1#\xdc\xbc\xd3\xc8\x93\xe2\x86\f\xf5\xf9\xcbW\x89#=\xf5\x1d+Z\xd3\xc6\xf4\r\xb8T\xd5\xd7\xcd\xf6\x9f\xe8\x941\x8cb\xf7\r\x8a\xa3\x9f\\\xee\xf5M\x87\x82\xad\x90ra\xe41\xb9sC\xc6QU\xf4\xbc=N\xc8\xb8\x93\xd1\x0f\xf6\x92\xeba\x7f\x95\x8b/\x02\x15\xdc\'\x82\xe2\xa4\xa1\x9b\xe9\x02\x00\x00\x00\xe2cYZvf\x9a\xf1Y\xb9\x11\xc2\x9b\xa06I\x97\x9bKL))j\x04\xad\x10\xd7v\xb82-H\xea\x12\x04\xc7\\vK\xd5\x93I\r\xa4\xc2\xd0\xc3\x9aj\xa4\x95\xf2\"\xd5\\\xf1\xd2\x14\xbe$\xc8h\xb3\a59\xd1TDV\xd8\x10\xd8\xfa\xa3\x12\xdd\a?\xec\xe5C\x95L\xe7U\x8cXw\x14\x85\xce\xc3\xbe\x9b\xed4w5c\f\xe9\xed\xcd\xb8^;\x946\x1f\x01\x84 &\x91\xfc\x90w\xd9\xda\xb1\b\x19\xd3W\xe8z\xce\xf0\xfd\xd7Oj\x88\xd8!\xed\xeceM>\xf21\xcf_\x0fS\x03\xbf\xa1k\xdaw\xaf\xb8\xfd=\vsS\x87\xb7\xbe\xf8\x90A\xccu\xe1]\x99\aK\xec\xa8\xf1\xc8\xdb$v\xd1Q@l!\n\x81\x94\xb7\xf6\xb4\xf2\xf7\xd6\x94\xa5\x95\bU') getdents(r0, &(0x7f0000000000)=""/84, 0x54) getdents64(r0, 0x0, 0x157) 17:08:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='/dev/audio\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x0, 0x0) 17:08:29 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@mcast2, 0x800, 0x1}, 0x20) [ 205.921208] ================================================================== [ 205.928664] BUG: KMSAN: uninit-value in __siphash_aligned+0x512/0xae0 [ 205.935304] CPU: 0 PID: 8427 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #8 [ 205.942409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.951915] Call Trace: [ 205.954531] dump_stack+0x173/0x1d0 [ 205.958207] kmsan_report+0x120/0x290 [ 205.962055] kmsan_internal_check_memory+0x9a7/0xa20 [ 205.967200] ? __local_bh_enable_ip+0xb3/0x1a0 [ 205.971860] __msan_instrument_asm_load+0x8a/0x90 [ 205.976737] __siphash_aligned+0x512/0xae0 [ 205.981028] secure_tcpv6_seq+0x143/0x2b0 [ 205.985234] ? inet6_hash_connect+0x176/0x1a0 [ 205.989784] tcp_v6_connect+0x242b/0x2890 [ 205.993998] ? __msan_poison_alloca+0x1e0/0x270 [ 205.998715] ? tcp_v6_pre_connect+0x130/0x130 [ 206.003235] __inet_stream_connect+0x2f9/0x1340 [ 206.007937] ? kmem_cache_alloc_trace+0x55a/0xb90 [ 206.012815] ? tcp_sendmsg_locked+0x6394/0x6be0 [ 206.017553] tcp_sendmsg_locked+0x65d5/0x6be0 [ 206.022086] ? aa_label_sk_perm+0xda/0x940 [ 206.026358] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 206.031760] ? aa_label_sk_perm+0x6d6/0x940 [ 206.036134] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 206.041514] ? futex_wait+0x912/0xc40 [ 206.045388] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 206.050822] tcp_sendmsg+0xb2/0x100 [ 206.054500] ? tcp_sendmsg_locked+0x6be0/0x6be0 [ 206.059197] inet_sendmsg+0x54a/0x720 [ 206.063027] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 206.068429] ? security_socket_sendmsg+0x1bd/0x200 [ 206.073397] ? inet_getname+0x490/0x490 [ 206.077407] __sys_sendto+0x8c4/0xac0 [ 206.081281] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 206.086762] ? prepare_exit_to_usermode+0x114/0x420 [ 206.091809] ? syscall_return_slowpath+0x50/0x650 [ 206.096705] __se_sys_sendto+0x107/0x130 [ 206.100812] __x64_sys_sendto+0x6e/0x90 [ 206.104817] do_syscall_64+0xbc/0xf0 [ 206.108564] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 206.113779] RIP: 0033:0x457669 [ 206.116988] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 206.135905] RSP: 002b:00007f0b578bbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 206.143640] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457669 [ 206.150934] RDX: 0000000000000001 RSI: 00000000200004c0 RDI: 0000000000000008 [ 206.158222] RBP: 000000000072bf00 R08: 00000000208d4fe4 R09: 000000000000001c 17:08:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='/dev/audio\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x0, 0x0) [ 206.165512] R10: 0000000020000008 R11: 0000000000000246 R12: 00007f0b578bc6d4 [ 206.172890] R13: 00000000004c4539 R14: 00000000004d75a8 R15: 00000000ffffffff [ 206.180196] [ 206.181829] Local variable description: ----combined@secure_tcpv6_seq [ 206.188431] Variable was created at: [ 206.192161] secure_tcpv6_seq+0x7d/0x2b0 [ 206.196245] tcp_v6_connect+0x242b/0x2890 [ 206.200397] [ 206.202040] Bytes 4-7 of 8 are uninitialized [ 206.206462] Memory access of size 8 starts at ffff88814654f658 [ 206.212439] ================================================================== 17:08:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00\x94!\xf9\xadJ\xf0\xff9\x16`9\xfe\x11F\xb6\xf5<:JJqn\x17\xb3\x8e+M\xeap\xd2\xc3\xa95\xab\x115\xec\xc4\x1a\x9c\x10\"\x80\xb2\x84\xc7\xb385@\xc8\bY7j\x00\xc1#\xdc\xbc\xd3\xc8\x93\xe2\x86\f\xf5\xf9\xcbW\x89#=\xf5\x1d+Z\xd3\xc6\xf4\r\xb8T\xd5\xd7\xcd\xf6\x9f\xe8\x941\x8cb\xf7\r\x8a\xa3\x9f\\\xee\xf5M\x87\x82\xad\x90ra\xe41\xb9sC\xc6QU\xf4\xbc=N\xc8\xb8\x93\xd1\x0f\xf6\x92\xeba\x7f\x95\x8b/\x02\x15\xdc\'\x82\xe2\xa4\xa1\x9b\xe9\x02\x00\x00\x00\xe2cYZvf\x9a\xf1Y\xb9\x11\xc2\x9b\xa06I\x97\x9bKL))j\x04\xad\x10\xd7v\xb82-H\xea\x12\x04\xc7\\vK\xd5\x93I\r\xa4\xc2\xd0\xc3\x9aj\xa4\x95\xf2\"\xd5\\\xf1\xd2\x14\xbe$\xc8h\xb3\a59\xd1TDV\xd8\x10\xd8\xfa\xa3\x12\xdd\a?\xec\xe5C\x95L\xe7U\x8cXw\x14\x85\xce\xc3\xbe\x9b\xed4w5c\f\xe9\xed\xcd\xb8^;\x946\x1f\x01\x84 &\x91\xfc\x90w\xd9\xda\xb1\b\x19\xd3W\xe8z\xce\xf0\xfd\xd7Oj\x88\xd8!\xed\xeceM>\xf21\xcf_\x0fS\x03\xbf\xa1k\xdaw\xaf\xb8\xfd=\vsS\x87\xb7\xbe\xf8\x90A\xccu\xe1]\x99\aK\xec\xa8\xf1\xc8\xdb$v\xd1Q@l!\n\x81\x94\xb7\xf6\xb4\xf2\xf7\xd6\x94\xa5\x95\bU') getdents(r0, &(0x7f0000000000)=""/84, 0x54) getdents64(r0, 0x0, 0x157) [ 206.219822] Disabling lock debugging due to kernel taint [ 206.225289] Kernel panic - not syncing: panic_on_warn set ... [ 206.231205] CPU: 0 PID: 8427 Comm: syz-executor1 Tainted: G B 4.20.0-rc7+ #8 [ 206.239707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.249081] Call Trace: [ 206.251703] dump_stack+0x173/0x1d0 [ 206.255379] panic+0x3ce/0x961 [ 206.258697] kmsan_report+0x285/0x290 [ 206.262546] kmsan_internal_check_memory+0x9a7/0xa20 [ 206.267714] ? __local_bh_enable_ip+0xb3/0x1a0 [ 206.272381] __msan_instrument_asm_load+0x8a/0x90 [ 206.277267] __siphash_aligned+0x512/0xae0 [ 206.281627] secure_tcpv6_seq+0x143/0x2b0 [ 206.285824] ? inet6_hash_connect+0x176/0x1a0 [ 206.290411] tcp_v6_connect+0x242b/0x2890 [ 206.294644] ? __msan_poison_alloca+0x1e0/0x270 [ 206.299395] ? tcp_v6_pre_connect+0x130/0x130 [ 206.303930] __inet_stream_connect+0x2f9/0x1340 [ 206.308645] ? kmem_cache_alloc_trace+0x55a/0xb90 [ 206.313521] ? tcp_sendmsg_locked+0x6394/0x6be0 [ 206.318239] tcp_sendmsg_locked+0x65d5/0x6be0 [ 206.322766] ? aa_label_sk_perm+0xda/0x940 [ 206.327033] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 206.332422] ? aa_label_sk_perm+0x6d6/0x940 [ 206.336784] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 206.342172] ? futex_wait+0x912/0xc40 [ 206.346050] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 206.351470] tcp_sendmsg+0xb2/0x100 [ 206.355147] ? tcp_sendmsg_locked+0x6be0/0x6be0 [ 206.359840] inet_sendmsg+0x54a/0x720 [ 206.363673] ? __msan_metadata_ptr_for_load_8+0x10/0x20 17:08:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='/dev/audio\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x0, 0x0) [ 206.369063] ? security_socket_sendmsg+0x1bd/0x200 [ 206.374028] ? inet_getname+0x490/0x490 [ 206.378049] __sys_sendto+0x8c4/0xac0 [ 206.381923] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 206.387402] ? prepare_exit_to_usermode+0x114/0x420 [ 206.392432] ? syscall_return_slowpath+0x50/0x650 [ 206.397319] __se_sys_sendto+0x107/0x130 [ 206.401425] __x64_sys_sendto+0x6e/0x90 [ 206.405424] do_syscall_64+0xbc/0xf0 [ 206.409164] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 206.414373] RIP: 0033:0x457669 17:08:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00\x94!\xf9\xadJ\xf0\xff9\x16`9\xfe\x11F\xb6\xf5<:JJqn\x17\xb3\x8e+M\xeap\xd2\xc3\xa95\xab\x115\xec\xc4\x1a\x9c\x10\"\x80\xb2\x84\xc7\xb385@\xc8\bY7j\x00\xc1#\xdc\xbc\xd3\xc8\x93\xe2\x86\f\xf5\xf9\xcbW\x89#=\xf5\x1d+Z\xd3\xc6\xf4\r\xb8T\xd5\xd7\xcd\xf6\x9f\xe8\x941\x8cb\xf7\r\x8a\xa3\x9f\\\xee\xf5M\x87\x82\xad\x90ra\xe41\xb9sC\xc6QU\xf4\xbc=N\xc8\xb8\x93\xd1\x0f\xf6\x92\xeba\x7f\x95\x8b/\x02\x15\xdc\'\x82\xe2\xa4\xa1\x9b\xe9\x02\x00\x00\x00\xe2cYZvf\x9a\xf1Y\xb9\x11\xc2\x9b\xa06I\x97\x9bKL))j\x04\xad\x10\xd7v\xb82-H\xea\x12\x04\xc7\\vK\xd5\x93I\r\xa4\xc2\xd0\xc3\x9aj\xa4\x95\xf2\"\xd5\\\xf1\xd2\x14\xbe$\xc8h\xb3\a59\xd1TDV\xd8\x10\xd8\xfa\xa3\x12\xdd\a?\xec\xe5C\x95L\xe7U\x8cXw\x14\x85\xce\xc3\xbe\x9b\xed4w5c\f\xe9\xed\xcd\xb8^;\x946\x1f\x01\x84 &\x91\xfc\x90w\xd9\xda\xb1\b\x19\xd3W\xe8z\xce\xf0\xfd\xd7Oj\x88\xd8!\xed\xeceM>\xf21\xcf_\x0fS\x03\xbf\xa1k\xdaw\xaf\xb8\xfd=\vsS\x87\xb7\xbe\xf8\x90A\xccu\xe1]\x99\aK\xec\xa8\xf1\xc8\xdb$v\xd1Q@l!\n\x81\x94\xb7\xf6\xb4\xf2\xf7\xd6\x94\xa5\x95\bU') getdents(r0, &(0x7f0000000000)=""/84, 0x54) getdents64(r0, 0x0, 0x157) [ 206.417596] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 206.436508] RSP: 002b:00007f0b578bbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 206.444235] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457669 [ 206.451515] RDX: 0000000000000001 RSI: 00000000200004c0 RDI: 0000000000000008 [ 206.458796] RBP: 000000000072bf00 R08: 00000000208d4fe4 R09: 000000000000001c [ 206.466082] R10: 0000000020000008 R11: 0000000000000246 R12: 00007f0b578bc6d4 [ 206.473364] R13: 00000000004c4539 R14: 00000000004d75a8 R15: 00000000ffffffff [ 206.481610] Kernel Offset: disabled [ 206.485242] Rebooting in 86400 seconds..