[ 59.466911] audit: type=1800 audit(1539236171.501:27): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 60.921528] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 63.314689] random: sshd: uninitialized urandom read (32 bytes read) [ 63.824549] random: sshd: uninitialized urandom read (32 bytes read) [ 65.966493] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts. [ 71.868181] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/11 05:36:25 fuzzer started [ 76.394643] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/11 05:36:30 dialing manager at 10.128.0.26:39089 2018/10/11 05:38:53 syscalls: 1 2018/10/11 05:38:53 code coverage: enabled 2018/10/11 05:38:53 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/11 05:38:53 setuid sandbox: enabled 2018/10/11 05:38:53 namespace sandbox: enabled 2018/10/11 05:38:53 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/11 05:38:53 fault injection: enabled 2018/10/11 05:38:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/11 05:38:53 net packed injection: /dev/net/tun can't be opened (open /dev/net/tun: cannot allocate memory) 2018/10/11 05:38:53 net device setup: enabled [ 224.010708] random: crng init done 05:40:57 executing program 0: r0 = memfd_create(&(0x7f0000000100)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c46000000000000d05e0000000003003e00000000006f02000000000000400000000000000000000000000000000000000000003800"], 0x38) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240)=[&(0x7f0000000080)='\x00'], 0x1000) [ 346.416747] IPVS: ftp: loaded support on port[0] = 21 [ 347.813963] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.820433] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.829230] device bridge_slave_0 entered promiscuous mode [ 347.975465] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.982011] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.990522] device bridge_slave_1 entered promiscuous mode [ 348.132648] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 348.273148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 348.720509] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 348.869668] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 349.155455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 349.162651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 05:41:01 executing program 1: r0 = memfd_create(&(0x7f0000000040)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) fcntl$addseals(r0, 0x409, 0x8) [ 349.625132] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 349.633546] team0: Port device team_slave_0 added [ 349.818943] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 349.827433] team0: Port device team_slave_1 added [ 350.023617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 350.204006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 350.211112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 350.220317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 350.381070] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 350.388953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 350.398191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 350.497752] IPVS: ftp: loaded support on port[0] = 21 [ 350.582000] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 350.589649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 350.598965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.467147] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.473844] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.482464] device bridge_slave_0 entered promiscuous mode [ 352.692967] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.699445] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.708093] device bridge_slave_1 entered promiscuous mode [ 352.940588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 353.148031] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 353.559638] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.566216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.573300] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.579764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.588992] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 353.820985] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 354.120924] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 354.318582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 354.327411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.523464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.542176] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 354.549404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 05:41:07 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r0, 0x3, 0x8000, 0x8001) fallocate(r0, 0x3, 0x5e89, 0xfff9) [ 355.178605] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 355.187018] team0: Port device team_slave_0 added [ 355.500901] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 355.509270] team0: Port device team_slave_1 added [ 355.859769] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 355.867024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 355.876141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.118738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 356.125942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 356.135102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 356.339174] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 356.346882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.356158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 356.469434] IPVS: ftp: loaded support on port[0] = 21 [ 356.669896] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 356.693742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.703072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.550035] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.556627] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.565341] device bridge_slave_0 entered promiscuous mode [ 359.855492] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.862100] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.870536] device bridge_slave_1 entered promiscuous mode [ 359.926164] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.932718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.939677] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.946257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.955568] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 360.022983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 360.204866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 360.538137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 361.386454] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 361.661958] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 361.847052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 361.857294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.096124] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 362.103390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 363.010825] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 363.019302] team0: Port device team_slave_0 added [ 363.336803] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 363.345256] team0: Port device team_slave_1 added [ 363.673752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 363.680833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 363.690045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 05:41:15 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') [ 364.066604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 364.073962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 364.083103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 364.422244] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 364.429882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 364.438785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 364.805498] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 364.813211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 364.822847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 365.188562] IPVS: ftp: loaded support on port[0] = 21 [ 365.604347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.135167] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 368.554932] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.561401] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.570270] device bridge_slave_0 entered promiscuous mode [ 368.598106] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 368.604703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 368.612877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 368.745902] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.752491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.759430] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.766029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.775046] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 368.912058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 368.954939] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.961396] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.970178] device bridge_slave_1 entered promiscuous mode [ 369.316262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 369.725111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 369.916402] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.846382] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 371.203501] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 371.528435] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 371.535814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.935602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 371.942832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.078642] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 373.087028] team0: Port device team_slave_0 added [ 373.555080] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 373.563484] team0: Port device team_slave_1 added [ 373.896855] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 373.904022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.913152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 374.142856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.278502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 374.286023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 374.295039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 05:41:26 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) rt_sigsuspend(&(0x7f0000000680), 0x8) [ 374.716427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 374.724538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 374.733946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 375.146978] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 375.154807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 375.164147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 375.728310] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 376.291361] IPVS: ftp: loaded support on port[0] = 21 [ 377.328584] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 377.335135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 377.343343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 378.944567] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.046060] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.052631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.059572] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.066189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.074795] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 05:41:32 executing program 0: r0 = socket(0xa, 0x3, 0x1000000000ff) sendto$unix(r0, &(0x7f0000000180)="be4e66365f1e51f732626dac3e1ffc90afe7c1db642bca876f2381a10255ef5b4bdd599eb37c6fae", 0x28, 0xfffffffffffffffe, &(0x7f0000000080)=@abs, 0x6e) [ 380.433482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 05:41:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) getpeername(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) r3 = epoll_create1(0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x2400, 0x0) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000240)=""/73) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000000c0)) [ 380.856540] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.863250] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.872167] device bridge_slave_0 entered promiscuous mode 05:41:33 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r1, 0x800000000000) fallocate(r0, 0x3, 0x0, 0x80000000) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) [ 381.374232] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.380719] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.389546] device bridge_slave_1 entered promiscuous mode 05:41:33 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4754) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x4, 0x4, 0x100000001, 0x0, r0, 0xfffffffffffffffe}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000136fd4)={0xd, 0x3, 0x4, 0x52, 0x0, r1}, 0x2c) getrlimit(0xc, &(0x7f0000000040)) [ 381.807851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 05:41:34 executing program 0: fanotify_mark(0xffffffffffffffff, 0x0, 0x800040000000, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/254, 0xfe) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xa06f, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x12}, 0x2}, @ib={0x1b, 0x0, 0x3800000000000, {"9841ada264b01a99128ab95b176dc7a0"}, 0x7ff, 0x4, 0x3}}}, 0x118) [ 382.240947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 05:41:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002033700000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e23, @rand_addr=0x9}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8040, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x50000000, 0x1) ioctl$NBD_DISCONNECT(r2, 0xab08) r3 = getegid() setfsgid(r3) 05:41:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002033700000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e23, @rand_addr=0x9}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8040, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x50000000, 0x1) ioctl$NBD_DISCONNECT(r2, 0xab08) r3 = getegid() setfsgid(r3) 05:41:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002033700000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e23, @rand_addr=0x9}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8040, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x50000000, 0x1) ioctl$NBD_DISCONNECT(r2, 0xab08) r3 = getegid() setfsgid(r3) [ 383.592537] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 384.080329] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 384.473296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 384.480380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 384.860747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 384.868331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 385.272015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.926405] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 385.934848] team0: Port device team_slave_0 added [ 386.302232] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 386.310437] team0: Port device team_slave_1 added [ 386.735656] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 386.751378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 386.758612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 386.767590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 387.107284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 387.114509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 387.123392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 387.417287] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 387.425144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.434174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.692032] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 387.698418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.706460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.828613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 387.836448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.845543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 05:41:40 executing program 1: [ 388.677465] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.708807] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.715379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.722454] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.728917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.738293] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 390.745219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 393.043803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.091808] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 05:41:46 executing program 2: [ 394.903947] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 394.910435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 394.918502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 395.479680] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.148692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.719643] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 399.152141] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 399.158436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 399.166410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 05:41:51 executing program 3: [ 399.615816] 8021q: adding VLAN 0 to HW filter on device team0 05:41:54 executing program 4: 05:41:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002033700000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e23, @rand_addr=0x9}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8040, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x50000000, 0x1) ioctl$NBD_DISCONNECT(r2, 0xab08) r3 = getegid() setfsgid(r3) 05:41:54 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x800) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) getsockname$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={r2, 0xbc, &(0x7f0000000200)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22}, @in6={0xa, 0x4e23, 0xfa3, @local, 0x200}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x5}, @in6={0xa, 0x4e21, 0x9, @remote, 0x8}, @in6={0xa, 0x4e22, 0x34b, @mcast2, 0x5}, @in6={0xa, 0x4e22, 0x81, @loopback}, @in={0x2, 0x4e22}]}, &(0x7f0000000300)=0x10) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={r2, 0x8, 0x1, [0x6]}, &(0x7f0000000400)=0xa) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000440)=0x8, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KDSKBLED(r0, 0x4b65, 0xfffffffffffffffc) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000480)={0x6, [0xffffffff927a75d3, 0xffff, 0x5, 0x81, 0x100000000, 0xed8d]}, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x1000, 0x8}) msgget$private(0x0, 0x44c) syslog(0x9, &(0x7f0000000500)=""/115, 0x73) execve(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)=[&(0x7f00000005c0)='/dev/vga_arbiter\x00', &(0x7f0000000600)='keyringtrusted$securityeth0\x00', &(0x7f0000000640)="7d87766d6e6574307070703000"], &(0x7f0000000900)=[&(0x7f00000006c0)='/dev/bus/usb/00#/00#\x00', &(0x7f0000000700)="6d696d655f7479706576626f786e65743126e67b2800", &(0x7f0000000740)='posix_acl_access\\cgrouptrusted\x00', &(0x7f0000000780)='/dev/vga_arbiter\x00', &(0x7f00000007c0)="0500", &(0x7f0000000800)='eth1ppp0&lo^\x00', &(0x7f0000000840)='/dev/vga_arbiter\x00', &(0x7f0000000880)="29e23a00", &(0x7f00000008c0)='/dev/vga_arbiter\x00']) symlinkat(&(0x7f0000000980)='./file0/file0\x00', r0, &(0x7f00000009c0)='./file0\x00') getsockopt$netlink(r3, 0x10e, 0xf, &(0x7f0000000a00)=""/139, &(0x7f0000000ac0)=0x8b) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000cc0)={0x1, 0x2, 0xda9, 0xec, &(0x7f0000000b00)=""/236, 0x72, &(0x7f0000000c00)=""/114, 0xd, &(0x7f0000000c80)=""/13}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000d00)={0x30, 0x5, 0x0, {0x0, 0x5, 0x7, 0x20}}, 0x30) fstat(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, &(0x7f0000000e00)=0xc) r6 = getuid() write$P9_RSTATu(r0, &(0x7f0000000e40)={0x5e, 0x7d, 0x1, {{0x0, 0x47, 0xfffffffffffffff8, 0x100, {0x10, 0x1, 0x2}, 0xa4000000, 0x80000001, 0x800000000000, 0x93, 0x7, 'em0user', 0xd, 'eth1ppp0&lo^\x00'}, 0x2, "0500", r4, r5, r6}}, 0x5e) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000ec0)={0x28, 0x2, 0x0, {0x3, 0x0, 0x1000}}, 0x28) socket$inet6(0xa, 0x800, 0x800) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f40)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0xb1}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x74, r7, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r1}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xc8, 0x707, {"76aede8323efd19922d264f816173159ee1ea1493b874549db13311358e87040b4b125c7a6f8289d89e4c9511079257b296c5d616b4b02d6e622bd21703663cfa79082dca206e3f68acd5009fd92c43bc3b37cc94ac202bcdd97b6c8b08ca2a98c410033ee529d8e8211bdbe9d8ea2bcc8d51902474e2ff49d99c61a6b5bc9679a6951e231f89b453ee3a59e90d7d1c9dd51db5ed30abded2f982f409574e73f533f373910dc9521f0d42811bfaf7d"}}, {0x0, "65d66ecc1e361a7a039395d068f2165eca3ca583195bbb1ff83be930edf5a81240bb2ea6d6c5c146dd4cfcf03685e7835730a66eff5058369a44d75549d4d1052f4123ae993d15305ab46fa734403e4b764f729bd7b63340f404ac6e994968fc745528f2c1c67c039f74639b0bc492ccec942a4ff44849b7b39c"}}, &(0x7f0000001200)=""/83, 0x144, 0x53, 0x1}, 0x20) 05:41:54 executing program 1: 05:41:54 executing program 2: 05:41:54 executing program 3: 05:41:54 executing program 2: r0 = memfd_create(&(0x7f0000000100)="00000600000000000000", 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYPTR=&(0x7f0000001340)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="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"]]], 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 05:41:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="6e65742f61727000c412d4bb5b122838186b29fe91e5198fde3144e4486fd0c1883bd2a2cb3921eed78fa0c2467ec156ae7ae95c09f5823df2dc104e2bfb7f4fc46781bcf2ca0c9d0b52f5d668c73fe83a1e4b544a325e04ec417db4210dd95438489e17fa1b70046726eba32151fb75d2e19d873967b3e46b7a5f5dba9ce7bf17abc2a45ed20029a2117ebf080e7c23735e24") r1 = syz_open_procfs(0x0, &(0x7f0000000140)="6f6f6d5f61646a00000026e7080900040000") sendfile(r1, r0, &(0x7f0000000240), 0x239fffffffffffd) 05:41:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000080), 0x20000082) 05:41:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002033700000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e23, @rand_addr=0x9}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8040, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x50000000, 0x1) ioctl$NBD_DISCONNECT(r2, 0xab08) getegid() [ 402.842452] hrtimer: interrupt took 149307 ns [ 402.888116] misc userio: Invalid payload size 05:41:55 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) prctl$seccomp(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) unlinkat(r0, &(0x7f00000000c0)='./bus\x00', 0x0) 05:41:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000080), 0x20000082) [ 403.311295] misc userio: Invalid payload size 05:41:55 executing program 3: clone(0x200, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000bc0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000280), &(0x7f0000000b40)) r1 = dup(r0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000380)=""/71) unlink(&(0x7f0000000280)='./file1\x00') creat(&(0x7f00000001c0)='./file0\x00', 0x0) [ 403.454125] kauditd_printk_skb: 3 callbacks suppressed [ 403.454160] audit: type=1326 audit(1539236515.501:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7531 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a37a code=0xffff0000 05:41:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000000)={&(0x7f0000c57ff8)=@abs, 0x6e, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000698000)=@generic, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000040)=""/181}, {&(0x7f00000002c0)=""/4096}, {&(0x7f0000000100)=""/186}, {&(0x7f00000012c0)=""/74}, {&(0x7f0000001340)=""/129}, {&(0x7f0000001400)=""/109}, {&(0x7f0000001480)=""/129}, {&(0x7f0000002780)=""/215}, {&(0x7f0000001640)=""/108}, {&(0x7f00000016c0)=""/4096}], 0x0, &(0x7f0000f9fff8)=""/90, 0xffffffffffffff57}, 0x0) [ 403.970078] audit: type=1326 audit(1539236516.011:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7531 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a37a code=0xffff0000 [ 404.311459] IPVS: ftp: loaded support on port[0] = 21 [ 405.046406] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.052877] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.060410] device bridge_slave_0 entered promiscuous mode [ 405.139098] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.145662] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.153808] device bridge_slave_1 entered promiscuous mode [ 405.232398] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 405.307808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 405.543241] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 405.624832] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 405.773773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 405.780819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 406.014924] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 406.022720] team0: Port device team_slave_0 added [ 406.106243] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 406.113919] team0: Port device team_slave_1 added [ 406.193933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 406.272197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 406.351054] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 406.358517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.367642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 406.441738] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 406.449021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.458012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.330954] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.337428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.344409] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.350827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.359266] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 407.722003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 410.569586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.864765] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 411.154069] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 411.160330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 411.168484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 411.458718] 8021q: adding VLAN 0 to HW filter on device team0 05:42:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x5) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in=@loopback, 0x4e20, 0xfffffffffffffc00, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0x21, r2, r3}, {0xfffffffffffffff8, 0x7, 0x9, 0x43dc, 0x5, 0x8, 0x9, 0x8}, {0x1900, 0x1, 0x80000001, 0x8}, 0x5, 0x6e6bc0, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d5, 0x6f}, 0xa, @in6=@mcast2, 0x3500, 0x3, 0x1, 0x3, 0x8, 0x100000001, 0x8000}}, 0xe8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r4, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) syncfs(r4) 05:42:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002033700000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e23, @rand_addr=0x9}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8040, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x50000000, 0x1) ioctl$NBD_DISCONNECT(r2, 0xab08) 05:42:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000080), 0x80000001) 05:42:05 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000040)) tkill(r1, 0x401004000000016) ioctl$KDDISABIO(r2, 0x4b37) 05:42:05 executing program 3: clone(0x820002102011ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x978, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200007c0], 0x0, &(0x7f0000000080), &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ipddp0\x00', 'bridge_slave_0\x00', "7465616d5f73ff5e76655f30004000", @local, [], @link_local, [], 0x8b8, 0x8b8, 0x8e8, [@among={'among\x00', 0x820}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x2}]}, 0x9f0) 05:42:05 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x10, &(0x7f0000bbfff8), 0x8) 05:42:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002033700000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e23, @rand_addr=0x9}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8040, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x50000000, 0x1) 05:42:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000e16"], @ANYPTR=&(0x7f0000000600)=ANY=[]], 0x0, 0x0, &(0x7f00000007c0)}) 05:42:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000180)) 05:42:06 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0xfffffffffffffffc}, 0x2) [ 414.429791] binder: 7827:7829 unknown command 536870912 [ 414.435649] binder: 7827:7829 ioctl c0306201 200002c0 returned -22 [ 414.551128] binder_alloc: binder_alloc_mmap_handler: 7827 20001000-20004000 already mapped failed -16 [ 414.618927] binder: BINDER_SET_CONTEXT_MGR already set [ 414.624817] binder: 7827:7829 ioctl 40046207 0 returned -16 [ 414.709395] binder: release 7827:7829 transaction 2 out, still active [ 414.731757] binder: send failed reply for transaction 2, target dead [ 414.866306] misc userio: No port type given on /dev/userio [ 414.893125] misc userio: The device must be registered before sending interrupts [ 415.676311] binder: 7855:7858 unknown command 536870912 [ 415.682271] binder: 7855:7858 ioctl c0306201 200002c0 returned -22 [ 415.737475] binder: release 7855:7858 transaction 6 out, still active [ 416.175584] binder: send failed reply for transaction 6, target dead 05:42:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002033700000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e23, @rand_addr=0x9}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8040, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x50000000, 0x1) 05:42:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x5) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in=@loopback, 0x4e20, 0xfffffffffffffc00, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0x21, r2, r3}, {0xfffffffffffffff8, 0x7, 0x9, 0x43dc, 0x5, 0x8, 0x9, 0x8}, {0x1900, 0x1, 0x80000001, 0x8}, 0x5, 0x6e6bc0, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d5, 0x6f}, 0xa, @in6=@mcast2, 0x3500, 0x3, 0x1, 0x3, 0x8, 0x100000001, 0x8000}}, 0xe8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r4, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) syncfs(r4) 05:42:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000e16"], @ANYPTR=&(0x7f0000000600)=ANY=[]], 0x0, 0x0, &(0x7f00000007c0)}) 05:42:07 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) write(r1, &(0x7f0000000200)='`', 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) quotactl(0x102080000201, &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000080)) 05:42:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002033700000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e23, @rand_addr=0x9}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8040, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 416.984858] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large: [ 416.996209] clocksource: 'acpi_pm' wd_now: 8cb1a8 wd_last: cf00d4 mask: ffffff [ 417.005586] clocksource: 'tsc' cs_now: e458c6531e cs_last: e27ca9e520 mask: ffffffffffffffff [ 417.016174] tsc: Marking TSC unstable due to clocksource watchdog [ 417.029564] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 417.038378] sched_clock: Marking unstable (417087970224, -58416316)<-(417155090336, -125536318) [ 417.049412] clocksource: Switched to clocksource acpi_pm 05:42:09 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @local}, 0x8, {0x2, 0x0, @rand_addr}, "0000000500000000723000"}) 05:42:09 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000080)) read$FUSE(r0, &(0x7f0000000300), 0x1000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @local}, 0x8, {0x2, 0x0, @rand_addr}, "0000000500000000723000"}) 05:42:09 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x4100) 05:42:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002033700000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e23, @rand_addr=0x9}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8040, 0x0) 05:42:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000e16"], @ANYPTR=&(0x7f0000000600)=ANY=[]], 0x0, 0x0, &(0x7f00000007c0)}) 05:42:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x4002, 0x0) 05:42:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr(0xffffffffffffffff, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') [ 417.375773] binder: 7877:7881 unknown command 536870912 [ 417.381209] binder: 7877:7881 ioctl c0306201 200002c0 returned -22 [ 417.444665] binder: release 7877:7881 transaction 10 out, still active 05:42:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) tee(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000240)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "900b21888b6cc77b101984261cafca360e11b6c7a13a0830cd29f419884847da90828288bebec9a65da1ba9bb02d8c9871511b6bee7194cfae74d7d4b41a5ee5", "627783b5afe9993d902ce10af431125ebedc76b0659a9cd7b79108b9097ed60e22e9cf55034bdf1fb1f0a15a01f32f2598064591156404681de46104820d931c", "8c5c4741e6ea115c84fc7f3b969deded47d3d964d140481071e204315cce1f9f"}) getpid() syz_open_procfs(0x0, &(0x7f0000000480)='net/netlink\x00') ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000040)={0x7fff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@loopback, @in6=@remote}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) fstat(r0, &(0x7f0000000700)) getresgid(&(0x7f0000000400), &(0x7f0000000780), &(0x7f00000007c0)) 05:42:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002033700000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e23, @rand_addr=0x9}}) 05:42:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x4002, 0x0) 05:42:09 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000580)}, 0x20008844) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 05:42:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr(0xffffffffffffffff, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') [ 417.842566] binder: send failed reply for transaction 10, target dead 05:42:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr(0xffffffffffffffff, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 05:42:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002033700000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) 05:42:10 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @rand_addr}, 0x10) r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000001a00)="153f6234488dd25d766070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xe, 0x3, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fcb000)={r1, &(0x7f0000000180), &(0x7f0000000080)}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000780)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f000051e000)={r1, &(0x7f00000002c0), &(0x7f0000950000)}, 0x20) 05:42:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffff9c, &(0x7f0000000280)={0x2, 0x0, @dev}, &(0x7f00000002c0)=0x10) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 05:42:10 executing program 4: r0 = memfd_create(&(0x7f0000000100)="00000600000000000000", 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYPTR=&(0x7f0000001340)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="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"]]], 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 05:42:10 executing program 1: mmap(&(0x7f00003fe000/0x4000)=nil, 0x4000, 0x1, 0x40000031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback, @broadcast}, 0xc) 05:42:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr(0xffffffffffffffff, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 05:42:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) 05:42:11 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x80800) read$FUSE(r0, &(0x7f0000000300), 0x1000) 05:42:11 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip6_vti0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0x100000252, 0x0, &(0x7f0000893ff0), 0x10) 05:42:11 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800010002000000e5ff00000ae8ffff67182587d3000000"], 0x1}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 05:42:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000000)=""/19, 0xfffffc84) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)) 05:42:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 05:42:11 executing program 1: 05:42:11 executing program 3: 05:42:12 executing program 5: 05:42:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) 05:42:12 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip6_vti0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0x100000252, 0x0, &(0x7f0000893ff0), 0x10) 05:42:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip6_vti0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0x100000252, 0x0, &(0x7f0000893ff0), 0x10) 05:42:12 executing program 3: 05:42:12 executing program 2: 05:42:12 executing program 2: 05:42:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) socket$netlink(0x10, 0x3, 0xc) 05:42:12 executing program 3: 05:42:13 executing program 5: 05:42:13 executing program 2: 05:42:13 executing program 1: 05:42:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) 05:42:13 executing program 4: 05:42:13 executing program 5: 05:42:13 executing program 3: 05:42:13 executing program 2: 05:42:13 executing program 4: 05:42:13 executing program 1: 05:42:13 executing program 5: 05:42:14 executing program 0: writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) 05:42:14 executing program 3: 05:42:14 executing program 2: 05:42:14 executing program 4: 05:42:14 executing program 5: 05:42:14 executing program 3: 05:42:14 executing program 0: writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) 05:42:14 executing program 1: 05:42:14 executing program 2: 05:42:14 executing program 4: 05:42:14 executing program 0: writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) 05:42:14 executing program 3: 05:42:14 executing program 5: 05:42:15 executing program 1: 05:42:15 executing program 2: 05:42:15 executing program 4: 05:42:15 executing program 3: 05:42:15 executing program 1: 05:42:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) 05:42:15 executing program 5: 05:42:15 executing program 2: 05:42:15 executing program 4: 05:42:15 executing program 3: 05:42:16 executing program 1: 05:42:16 executing program 0: socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) 05:42:16 executing program 2: 05:42:16 executing program 5: 05:42:16 executing program 4: 05:42:16 executing program 2: 05:42:16 executing program 0: socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) 05:42:16 executing program 3: 05:42:16 executing program 1: 05:42:16 executing program 5: 05:42:16 executing program 2: 05:42:16 executing program 4: 05:42:17 executing program 3: 05:42:17 executing program 0: socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1000018f) 05:42:17 executing program 1: 05:42:17 executing program 2: 05:42:17 executing program 5: 05:42:17 executing program 4: 05:42:17 executing program 3: 05:42:17 executing program 1: 05:42:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000037d000), 0x0) 05:42:17 executing program 5: 05:42:17 executing program 4: 05:42:17 executing program 3: 05:42:17 executing program 2: 05:42:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000037d000), 0x0) 05:42:18 executing program 2: 05:42:18 executing program 5: 05:42:18 executing program 3: 05:42:18 executing program 1: 05:42:18 executing program 4: 05:42:18 executing program 2: 05:42:18 executing program 5: 05:42:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000037d000), 0x0) 05:42:18 executing program 1: 05:42:18 executing program 3: 05:42:19 executing program 2: 05:42:19 executing program 4: 05:42:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)}], 0x1) 05:42:19 executing program 5: 05:42:19 executing program 1: 05:42:19 executing program 3: 05:42:19 executing program 2: 05:42:19 executing program 4: 05:42:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)}], 0x1) 05:42:19 executing program 5: 05:42:20 executing program 3: 05:42:20 executing program 1: 05:42:20 executing program 4: 05:42:20 executing program 5: 05:42:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)}], 0x1) 05:42:20 executing program 2: 05:42:20 executing program 3: 05:42:20 executing program 1: 05:42:20 executing program 4: 05:42:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319000000070000000681", 0x10}], 0x1) 05:42:20 executing program 2: 05:42:20 executing program 5: 05:42:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319000000070000000681", 0x10}], 0x1) 05:42:21 executing program 2: 05:42:21 executing program 5: 05:42:21 executing program 4: 05:42:21 executing program 1: 05:42:21 executing program 3: 05:42:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319000000070000000681", 0x10}], 0x1) 05:42:21 executing program 1: 05:42:21 executing program 2: 05:42:21 executing program 3: 05:42:21 executing program 5: 05:42:21 executing program 4: 05:42:22 executing program 2: 05:42:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100", 0x18}], 0x1) 05:42:22 executing program 3: 05:42:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000002c0)={0x4, {{0xa, 0x4e20, 0x3, @mcast2, 0x8001}}}, 0x88) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000003580)=0x200000202, 0x4) fcntl$setstatus(r0, 0x4, 0x42003) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) setpriority(0x0, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0x3b20c91) perf_event_open(&(0x7f0000000780)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x1a) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000200)) getpgid(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 05:42:22 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f0000000200)) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp(r1, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) r4 = getpid() execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0)) fcntl$setown(r2, 0x8, r4) mknod(&(0x7f0000000040)='./bus\x00', 0x8171, 0x0) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) tkill(r1, 0x16) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 05:42:22 executing program 4: stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x400000}, 0x2c) 05:42:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4068aea3, &(0x7f0000002300)={0x0, 0x0, 0x2080, {}, [], "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", "af5e8839860699b0fff3c2d6b706d010573fc71bc1760833f6a68a0e05c8f8818014a848d0e006dc5908d5db7dae1ffa44598f13d5c10454466ac1def8f56333c54e3fd698c66746b6eab7cad5442f3be4f6014d1785009d020c06738fde920617784e4e490bee4e7a9ed9e8d0664a3ea2f8fef51d7bde9a06f3b19030b455f8ae2c0f11d2ece9c117e68c432a82fc7c826ef23848cf9305d082e415ca1f9a7fffef5b4efcc6e58c01d67477f9c0d84aa9a62daf9b4ad558863b7c6e292bd1e5c285f2d282354b179e631a17324c3aa4ba06b063017d36989008434a0f85d54330c44b75d3efc9b1f6b36a9b9b6e319c75661822c0e7bdbbda525c4321040936ca1474f498f73ddc5087167effae2f87a6ca989a16f4b082b614a6b64b24b3979563d6fd391c4447b04a06779bc4325066fb98134cf452f912c1d5550e5e7b923cc724294d6055d0a2876abeba94bdcc1b0ebeecb6005979da03a036de32068fd110d068b2ef52bc251c35f65c7f6615c21ba201697c963828826df4975c604367189c4f9e85f107c004bb6098e31fdc50f7d3457b5271dca28cb9f709bbeaed0d9da831742403a75d0d0d27125bd0f7f63d1ca932df31c0ebb4ba4ec3e91f9278761e76099fec0c7c81a73ef497d9b1d2785eb7b185ba04f832580bbe5ce0c56dfc4363008beee5b8a57fa92e5e17bff390b959f82cbd91348cbab7e0f0444b9739fa84ef5126f109b933bd0bfc88f0afc5cf7ec61485c237d878e1d4f122673fbdaecdd243b30c39cbbd60941df8a817491eebc6595b420a6699540a2ee1726c6c2adc77b19773af0d71c6ccb02aea65a4234e8ff5eaa8fef7ad58a8726f6c2aa44844f34fb0596c9cda573caf435ece992b91dfbb224963af2a3bbe5400e6296b6473e16f58f041fe5eeaa3b757a49df62c7211a2da377281e2b456fb16e42b8fce6c0ce39928c759568e3c39f7cfe40eebc0b774c106b364819c06a461e870448c65b5212eab5ec49d8bb50e28c28b766c3cf1e83af3002d12d7f2498f88dee18a31a49b46d1eb8575838ebad9623460348c339390be689cba4ac9c8de16ae4edfb61fdeb9bf67a904b477b93aedf2c4e896cfc4aaac2c86275de9dde14b75a19851b3122b232552efaa2e0e95dc6eef20b04b09dc43157c16cde66960296d63bff2da8f0a52f6740235c33bca56d9848eebc4356d72c50b5093cbd5e6f5fed999bb45ccd23a2f1475ac06d8fa1636c33f5f39a4d2676d1253257bef46d8c1a49764ae2403d3946926c6fff0a567e2c27fb16733686bb217536c491e4a946cc11f7ad266737cbfdc409d4813c832f3e97c846c665c732b679035c143c9c8dfb4779eaf0a31e622e95add1b6cb924031345f6e24c5a572eccb935e715528fdb27c60ac1e2effaf7bb8eaaba1125e07fb22705831678e85ea47d7f3e78a8e600dd91a8b0373aeecb75c3cca59ac0d454cbf81195519ea47322f7c89e974cb364103af235bbd1262ed3c41bf5c28eb3c4d3594ad66d1724557e5dad070ed403d8b253213b39ef94e99526442bfd2853ba26bdb81e97213fdeb12be32607876190d4097d3cea27772bf9c95c8f54c695bbcd5860d0cb8e0912a8f6499e284039d3e59112a2ecb00b332b73e74274985d22df8f5dbe0a660d392ebd30f4e06311d30d9ff763ffa6187823de1f1c7308af388f0fae70bc0e71736d35e910b880f3d63c2e70d41dbfc91005bfcce405a197620b465659d25494964d2419321c53e38f688627653a3c9b558db75cec3ebaef850799d7ad9b1a617cda6fe4a6d1f651704e1f33e81d3e4042b533b9b936478cf5eb9d481d723dee534c12c97107823119e030ae33c4fcfd6811adadd6c65ad729d04c2cda6fafd15340abb665854b6d954e04fde51c3f02a9cb01eb68e07109630d3e86b4ccf75730a3e0f00c0913d7a299dddc97d85689e9e365a39c60f57926786ad842e69753fd5356b339719f3b37531f0b73fbeeb45b015324583305ae29f495dd1b7f30c68849f85951a39d06c1e2d269edc95c5d823c63816cbf363d9661f8632dd0726c24c9b7aaf502690789d24b557b42f73e85e9193cc10acfb7b7169b6714a6852cdc632b3bbc2bde633cf970f47b5da5e8fdbc13230ad88336a60f19ee5bcea5eeb2a8fa007b36d226b1a4826c3d2018da3ebc77b8f76e03ea3aedd28c99449069a7d2ebf5fc82ff27416c8a4d524e5960d7ae2a2d362b2b86445ed712fa8d1b2bca224694c3295635ffefdb0e0fca6aa78de1ea66c88a65ca1fbc5388145e059da7274b406411c771e6f5b6eebdefbbc3cdf470858bcddd67a29bab732d357cc9abe1ab033be9135a8a616ba094130dc526c26f4b76c825640f909ef5798a204432b9af5a332d37dd607c16d1160b13195baf8e23567af7582c7e9bf0010f093b0ead1f8989f320c611a0df344e54489d65ee2646febb9824d5e1331b200a4c09e67b33b8640243a39c48283e53c5b1b9584f4a6eaf55880043cc572effe16adf17bbed08036eea564345067cee01e71e1290c8177484e60bb5c053f2284c918b4774a587717862da26695ea6a9590ea16f679fcffa9e19613288c3e420a6e2efadfcc75d498a0fbbeecb863d4d362970b9817e32d37d18db3d98c788aa292ce681fdc69037bedcd6193ef03ca6529e4853dae00476ab9ebc5c843ed460fbde0e10dfbee18d0dfef648d349df372a33e5db588e82ca95c03d2ad78d461043e56105d278d4d0c136bab2148e8312b88cca1033a5183ba4369beb9e02cb9e0e6344bc3ba09b2d6a519af20a5b32c85798f21e7351bcea7f6d463f7c79211be6a845f1bca160b89ef7cf78f5eca6170fbfa80b39a08cec6ab06c98322544bd838b390350a99c114d5b4ae3153645f85b3eec1b7b3d5ac73aab80b83ba9334d606e0be8c93abd1add8c6fde0116cf35208b177461b06792402f19f0c2d1724d2f86ea049aa25bfbd801565ba27d3e41c58fe0acc01fd235cdc0b5ca08b9e10bf325db18b382fa69a5a3c980bf0505a9c2046ba3f9b5bdff3ba817c4ecca898136bc451a3ecfdd8776d3df28e6d29122ba5bb5bd3b0df40cb894435520e6436d5256fd0721ed51ab20cabf2d05e59c117aeb7243f038415f368c5577069da2e1185633f15b74092902151d90a28dc0ba59d230392cc12b680bd2f4359d7d8868452143d3c9778ca5fed9f7a8aa1c0e3529abce0860081728dd02066016ea66303754f161bb94d4b9234811e9ae043c4fd19de6e89174001609a588c87f06375401964d9a3b05c64ee700bd219770f78895fed4f90e0f3979b2016250111c37d9812a7193a8191569d6e3cb6218002438fee9de394f0851b083d94422b3d17c20aba4a79c9ac823401f2304fbd084a8e3f312376ce1caf67e4fb1598ad4b22e523b4d4bdf498127366115cf80229374e28fd72cadb90dca7ba0d70568ebcaf23805a908b28598577f1b74820edc5d337a96c20f7e8654c0cec4fb0758f58e8fc63d616c6f09806f003b0ca594674243f58060a90ed260ebb5c8be72a2cf76eebb9868e210f70e4e3867011bc87f7db5b39b2afc9c614b4121663c03cf35f12c521a8ab1a18135d8d85e98b51bee9afc1ebd01642507d4cf78f0be33b0ec79a24bb2155922892da26a67a3989223b2ce8eecf3b5c0ebf8ef45bb2e40399ab98cdd30dbef909a6ec7d8708279573db83446982936ab3434057f1a427bfe885dbea8c338ed2fe2eb1a9f0bcebd5a58f8cad75e98c022d9f4905deba0dc3fa404d10851fefa00a79fe4d30bbf8f5aa1a3e84edd52c2ac90b11367657a05915195e0a46979dcc64f1508a27cf733a8e52a0bb7c8e655c9d257ce243fd13e8ac8bd6926a072dbc30080be66728d7cc75efa3751caa9056625c77faaa853d1915ff1c47ab1c67be7deafe76188a7e759746098a8174e261d1dec1a07cdaa573baec3ea070a98321e8ab3f762ec266a09b4d202a63d8dcda2d9c2950f64b40fbbb8917c1474f1f3c09911fdd28e0d4fd53dac34fb1de34e86e3b495ad3d5cd93610ac1a14af30c77e38789eee1eb3d7eb55a8eeb589ffe35098b197a5da77e28f41a3e86b9b8a8bf14008ed29c72b2c2902c4ad8f45aa217fa4e202234493963c60904ccb6eab33fc279f42775ea8c173b09c8d670625f70810e01897d56d0fa177d87d69784fe66ac5a51ae94b31dc1e9276cdde8e47b22ccfa1c58c7bc119e679614ab75c6f82f092f597ee4843cd0f0f71a05c38d7dfbd8df7ff0d18cb18507a8c4c729f16884ee84dfde1c078d4f324d4d45352dd7334f5a82a88388e0fd32466999e521f01abb6746b367b50b93399e13d80ca1a17b8724b81bb5df37f5f9844993f08aafdd62349c2d01c094976fefc86fc751effc52085c7c59101af1f4c2c68cd64fff3469432edfcaf592458b3c560b63faccd28ca7999052b22820cdc81fb08403ba06485718af63d8f92d12a3ec2a66dffaf92c51081dde8fbdc18a3a40f60a59fccaaac464d69c7dc26baee2f1e38bf246c1ff517e5fea69fe15c2d3c7abd42f5b69277d8b888194ec44d59ac1f1593aefb1a9ecb24352cc62f647c501f91167b769518ea40d15b381c72de4339a9501d915be42253828e24837114e179f25a32d8865c72ca0acca826b9f362da2ac562c218fffcb4625bc609258804793dcc2fa4c24afe4aa77f6c36f5fd301e6184a8e9d3028499ab07bada82f10207ddf2a6dd183930b2f449d9bbdd5ad09663e80d10229da2f46b24ed9aa967c27638c2f005de7407e6506d785a247fe5d57f1b8a1d1132ae39baa70694d21b9dcd6a4e71ca57dcc1db852b952c37dfde2738950ddd79271a80eeaa4c4b4b63a653379760bf49a4c3e210eb38d11ac5d7a02d43f325b05e41f38ac6a01336660943ce6986a3a497930604b17d8a36051bf204bd26464e440f7d93fffcde06f14218baa01ea03b238cf5ec6059f0322929df643b37fa1b771a0e8564f1757c022b0fa855831ab9fb279ab22b5098330ea1488017523be96774099f77dc499e9270cb5379abcd88be1ae6009337e49b9c56e208847f5b74640f8bc6699952b05648e87bd006987cc99972e2efd5c9eaf3925e40b5d1636a0f383ecabf612a3569a6433679715bf86f9b83b4e3f8e0bf7e3c15c9163525fa869e8f1fde7d4c7e8b1983279f1d35d3869de5b50a603a2db3591e9884662a3da35d7c3979abf5c47b781e2fe292e400c2e9eb9cf8f4c34947e9a2c8559725e0cf6b8973119b571d462da4042d3739b9e24b3ea2e3eaf9c6fcc7bf827a36af6d1e31983126348a66b70024333f5d8acbc0ce05bb2392ce0844b3e885ba50b1654ba46adde73d7194d6398a840308e2a661c584d5628bab64ac2164ceccc1a20fd1e02541510cacc570895f8b75cee4b3c120fd23ee3b2aa34ab1865f0174c66c54e24f12c7c39c61ebbbe7f983fb14745ea4e0e6ff850b31f48ff1389862627d9f1c1c01077246ddcb6c84b8738d58c0ddda420b72e61b1d9744d108983c8a5bf424fddf7aed1e69c3f879e2f8bbf86ff8d1460f8b15724aafa97a07cf88f038581f49ed6fe5e32c30bb36113e617e636e5551c6133489509411dc073cf3b582a3b655108a939d2b0cbd2264b95a7699e7b5bbf6ec6bbfd7021bacc08f4a496c681c06e6a978bd1464c9310ef4458e8b2ffab7c4c7536b6a44df39b9401dd7b1e641bdb0076edd31af98eb80e6799a55292eb55515b857366c7766ce7829b940e8544f4a7675c2126defefcd556f663aa2d8e4d7bfdb43"}) [ 430.588497] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:42:22 executing program 2: 05:42:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100", 0x18}], 0x1) [ 430.805864] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 05:42:23 executing program 3: 05:42:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x20a, 0x0) recvmmsg(r1, &(0x7f00000053c0)=[{{&(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000440)=""/223, 0x2000051f}, {&(0x7f0000000540)=""/189, 0xbd}], 0x2, &(0x7f00000008c0)=""/132, 0x84}}], 0x1, 0x0, &(0x7f0000005540)={0x77359400}) 05:42:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100", 0x18}], 0x1) 05:42:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0x3}) [ 431.650696] ================================================================== [ 431.651663] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 431.651663] CPU: 1 PID: 8258 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #66 [ 431.651663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.682019] Call Trace: [ 431.684145] dump_stack+0x306/0x460 [ 431.684145] ? vmx_set_constant_host_state+0x1778/0x1830 [ 431.684145] kmsan_report+0x1a2/0x2e0 [ 431.684145] __msan_warning+0x7c/0xe0 [ 431.684145] vmx_set_constant_host_state+0x1778/0x1830 [ 431.706672] vmx_create_vcpu+0x3e6f/0x7870 [ 431.706672] ? vmx_vm_init+0x340/0x340 [ 431.712964] kvm_arch_vcpu_create+0x25d/0x2f0 [ 431.712964] kvm_vm_ioctl+0x13fd/0x33d0 [ 431.712964] ? __msan_poison_alloca+0x17a/0x210 [ 431.712964] ? do_vfs_ioctl+0x18a/0x2810 [ 431.712964] ? __se_sys_ioctl+0x1da/0x270 [ 431.712964] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 431.712964] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 431.712964] do_vfs_ioctl+0xcf3/0x2810 [ 431.712964] ? security_file_ioctl+0x92/0x200 [ 431.751797] __se_sys_ioctl+0x1da/0x270 [ 431.751797] __x64_sys_ioctl+0x4a/0x70 [ 431.763253] do_syscall_64+0xbe/0x100 [ 431.763253] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 431.768056] RIP: 0033:0x457519 [ 431.768056] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 431.768056] RSP: 002b:00007fb1d40b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.768056] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 431.768056] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 431.816593] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 431.821957] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1d40b46d4 [ 431.821957] R13: 00000000004bfbb7 R14: 00000000004cfc40 R15: 00000000ffffffff [ 431.821957] [ 431.821957] Local variable description: ----dt@vmx_set_constant_host_state [ 431.821957] Variable was created at: [ 431.821957] vmx_set_constant_host_state+0x2b0/0x1830 [ 431.821957] vmx_create_vcpu+0x3e6f/0x7870 [ 431.860864] ================================================================== [ 431.860864] Disabling lock debugging due to kernel taint [ 431.860864] Kernel panic - not syncing: panic_on_warn set ... [ 431.860864] [ 431.860864] CPU: 1 PID: 8258 Comm: syz-executor5 Tainted: G B 4.19.0-rc4+ #66 [ 431.860864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.892063] Call Trace: [ 431.892063] dump_stack+0x306/0x460 [ 431.892063] panic+0x54c/0xafa [ 431.892063] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 431.892063] kmsan_report+0x2d3/0x2e0 [ 431.892063] __msan_warning+0x7c/0xe0 [ 431.918749] vmx_set_constant_host_state+0x1778/0x1830 [ 431.918749] vmx_create_vcpu+0x3e6f/0x7870 [ 431.918749] ? vmx_vm_init+0x340/0x340 [ 431.918749] kvm_arch_vcpu_create+0x25d/0x2f0 [ 431.918749] kvm_vm_ioctl+0x13fd/0x33d0 [ 431.918749] ? __msan_poison_alloca+0x17a/0x210 [ 431.918749] ? do_vfs_ioctl+0x18a/0x2810 [ 431.918749] ? __se_sys_ioctl+0x1da/0x270 [ 431.918749] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 431.918749] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 431.918749] do_vfs_ioctl+0xcf3/0x2810 [ 431.918749] ? security_file_ioctl+0x92/0x200 [ 431.918749] __se_sys_ioctl+0x1da/0x270 [ 431.918749] __x64_sys_ioctl+0x4a/0x70 [ 431.918749] do_syscall_64+0xbe/0x100 [ 431.918749] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 431.918749] RIP: 0033:0x457519 [ 431.918749] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 431.918749] RSP: 002b:00007fb1d40b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.018270] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 432.018270] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 432.018270] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 432.018270] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1d40b46d4 [ 432.018270] R13: 00000000004bfbb7 R14: 00000000004cfc40 R15: 00000000ffffffff [ 432.018270] Kernel Offset: disabled [ 432.018270] Rebooting in 86400 seconds..