Warning: Permanently added '10.128.10.40' (ECDSA) to the list of known hosts. 2018/11/12 03:17:00 fuzzer started 2018/11/12 03:17:06 dialing manager at 10.128.0.26:42475 2018/11/12 03:17:06 syscalls: 1 2018/11/12 03:17:06 code coverage: enabled 2018/11/12 03:17:06 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/12 03:17:06 setuid sandbox: enabled 2018/11/12 03:17:06 namespace sandbox: enabled 2018/11/12 03:17:06 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/12 03:17:06 fault injection: enabled 2018/11/12 03:17:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/12 03:17:06 net packed injection: enabled 2018/11/12 03:17:06 net device setup: enabled 03:19:21 executing program 0: syzkaller login: [ 210.674564] IPVS: ftp: loaded support on port[0] = 21 [ 212.799984] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.806532] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.815111] device bridge_slave_0 entered promiscuous mode [ 212.962729] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.969196] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.977776] device bridge_slave_1 entered promiscuous mode [ 213.162766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 213.362758] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 213.753556] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 213.884845] bond0: Enslaving bond_slave_1 as an active interface with an up link 03:19:25 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0xffffff92}, {0xffffffe0}}) [ 214.699611] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 214.707624] team0: Port device team_slave_0 added [ 214.770817] IPVS: ftp: loaded support on port[0] = 21 [ 214.958959] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 214.967056] team0: Port device team_slave_1 added [ 215.182299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.448336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 215.455691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.464471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.734083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 215.761909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.770814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.896264] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 215.903935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.912880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.667248] ip (6731) used greatest stack depth: 53088 bytes left [ 217.604254] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.610728] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.619190] device bridge_slave_0 entered promiscuous mode [ 217.838242] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.844800] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.853324] device bridge_slave_1 entered promiscuous mode [ 218.038268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 218.163893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 218.263999] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.270476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.277497] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.284000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.292448] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 218.781953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.889815] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 219.158581] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.352032] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 219.359076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.524074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 219.531124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 03:19:30 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0x8}}) [ 220.328997] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 220.337072] team0: Port device team_slave_0 added [ 220.655184] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 220.660355] IPVS: ftp: loaded support on port[0] = 21 [ 220.663098] team0: Port device team_slave_1 added [ 220.936059] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 220.943227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.952153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.151270] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 221.158432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.167114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.429939] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 221.437701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.446779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.753442] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 221.761025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.770032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.682890] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.689387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.696382] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.702956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.711777] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 224.931938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.241440] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.248163] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.256568] device bridge_slave_0 entered promiscuous mode [ 225.523374] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.529833] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.538419] device bridge_slave_1 entered promiscuous mode [ 225.801028] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 226.090917] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 226.858933] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 227.160845] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 227.362609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 227.369893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 03:19:38 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bond0\x00', 0xfff}) [ 227.656822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 227.664011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.602094] IPVS: ftp: loaded support on port[0] = 21 [ 228.679477] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 228.687393] team0: Port device team_slave_0 added [ 228.761097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.028696] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 229.036666] team0: Port device team_slave_1 added [ 229.351962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 229.359037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.367988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.616108] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 229.624005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.632664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.967581] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 229.975315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.984640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.032185] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 230.273300] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 230.280913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.289950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.214633] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 231.220994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.228955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.560968] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.852523] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.859000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.865978] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.872503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.881125] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 233.912236] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.918693] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.927287] device bridge_slave_0 entered promiscuous mode [ 234.213942] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.220404] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.228946] device bridge_slave_1 entered promiscuous mode [ 234.422884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.553965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.875717] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.854307] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 236.220492] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 236.561145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 236.568397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.750499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.922837] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 236.930043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 03:19:48 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0xffffff92}, {0xffffffd0}}) [ 237.922639] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 237.930574] team0: Port device team_slave_0 added [ 238.018132] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 238.280463] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 238.288530] team0: Port device team_slave_1 added [ 238.673201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 238.680256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.689049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.014779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 239.016680] IPVS: ftp: loaded support on port[0] = 21 [ 239.022029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.035809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.438327] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 239.444941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.452921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.483838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 239.491427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.500314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.905258] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 239.913138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.922159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 03:19:51 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0xffffff94}}) [ 240.794198] 8021q: adding VLAN 0 to HW filter on device team0 03:19:52 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xffffffffffffffde, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2, 0xf}}, 0x10) ioctl$RTC_PIE_OFF(r1, 0x7006) 03:19:52 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x200000001, 0x84) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1800000, 0x2000) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000140)={"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"}) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) shutdown(r1, 0x1) 03:19:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[0x6]}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000100)) [ 242.523187] QAT: Invalid ioctl [ 242.549573] QAT: Invalid ioctl [ 242.582975] QAT: Invalid ioctl 03:19:53 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = dup3(r0, r0, 0x80000) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0xc5, "dfeae6cf2e1638b2d2c1107ef7f0fd380df11689902de666f58e8bf8fb471fa50ad279ee4e0276108f14d27688555b18c97e8de59856a59556b7b0c417f0c0eae6d05533ad48bdd7e12fc30fcce22065a0daf127125b012f1e76cb55edb75c6009c65db039b3873917ceb2a41901f87a0e4dec5766237ca9287f958cded5e58562afc18041b3fa7e86a32054d049d41822bf05108c810dd87e3123402b6ff506c57a9621b8600b4d7b42358e2e937f04e47af7b02ce9fedd69349b5b000cdae8b80e82d08d"}, &(0x7f0000000000)=0xe9) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000003c0)={0x5, 0x20, 0x5, 0x0, 0x0, [], [], [], 0xffff, 0x80}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x190, "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"}, &(0x7f0000000040)=0x198) 03:19:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000001c0)=""/4096, &(0x7f0000000000)=0x1000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) [ 244.345482] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.352125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.359098] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.365672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.373917] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:19:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) [ 244.742724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 03:19:56 executing program 0: unshare(0x20400) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x4c0000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="00022dbd7000ffdbdf251000000008000500080000001800030014000200000000000000000000000000000000000800040004000000080006000200000008000600ff0100000c0003000800010000000000080004003f000000"], 0x60}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000180)) [ 245.661512] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.668170] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.676782] device bridge_slave_0 entered promiscuous mode [ 246.112423] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.118909] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.127559] device bridge_slave_1 entered promiscuous mode [ 246.500182] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 246.882382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 247.879847] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 248.189965] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 248.573217] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 248.580338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.662522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.835476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 248.842760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.671391] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 249.679551] team0: Port device team_slave_0 added 03:20:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000080), 0x10) [ 249.869163] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 249.996899] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 250.005083] team0: Port device team_slave_1 added [ 250.303969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 250.312225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.320901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.565454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 250.573012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.581784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.710815] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 250.717501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.725472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.791491] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 250.799338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.808436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.032593] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 251.040203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.049063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.426106] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.523596] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.530091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.537104] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.543643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.552182] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 253.558881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.059331] 8021q: adding VLAN 0 to HW filter on device bond0 03:20:06 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'sit0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) [ 255.891128] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 256.426935] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 256.433506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.442321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.938912] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.161812] ip (7872) used greatest stack depth: 53072 bytes left [ 259.648243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.077001] device bond0 entered promiscuous mode [ 260.082153] device bond_slave_0 entered promiscuous mode [ 260.087934] device bond_slave_1 entered promiscuous mode [ 260.096058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.108621] device bond0 left promiscuous mode [ 260.113388] device bond_slave_0 left promiscuous mode [ 260.118746] device bond_slave_1 left promiscuous mode [ 260.130625] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 03:20:11 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x64800) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x0, 0x4, 0x8, {0x83, 0x9}, {0x8d, 0x6}, @cond=[{0x7, 0xff, 0x0, 0x9, 0xfffffffffffffffb, 0x10001}, {0x8, 0xe634, 0x8, 0x1946, 0x80000000, 0x6}]}) getsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x7f) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e23, 0x8, @empty, 0xfff}, {0xa, 0x4e22, 0x3, @local, 0x2}, 0xfffffffffffffffa, [0x88b, 0x7fffffff, 0x3, 0x1, 0x7, 0xfffffffffffffffb, 0x100000000, 0x6]}, 0x5c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', r1}) r2 = accept(r0, &(0x7f0000000200)=@rc, &(0x7f0000000280)=0x80) removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@random={'trusted.', 'vboxnet0${:]/)^ppp1!eth0\x00'}) fchmod(r2, 0x20) r3 = request_key(&(0x7f0000000340)='rxrpc\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='!(\x00', 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000400)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480), 0x0, 0xfffffffffffffff9) keyctl$unlink(0x9, r3, r4) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000004c0)="f724dc3ef7d2d7f5f4f91a3ac81ac78fd354a1ef7940f1507867fa1611bc3ba19d797dcf2f074893da840439476327590fb875df7acf7c58a904ccb0023b48072f75d8d639d1a9e94d286062be41a2975a9e5a0cc2eab70ba34ec589f38bf58c1e1cb118a79301be0c981442d8dbcd7de5d56086a8f3d9d14b0fdac77c7f82f9c37e4d0ffc6ab14a6e54fcd1830d4b976e582373dc612c6905a807fae061ec5a4064759f4b0011") syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f00000005c0)={0x2, 0x0, 0x2080, {0x1, 0xf000, 0x2}, [], "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", "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"}) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000002640)) add_key$user(&(0x7f0000002680)='user\x00', &(0x7f00000026c0)={'syz', 0x3}, &(0x7f0000002700)="f5602ff5430d96dad5bb7e321191e16cfe08f8d859990ac14676e9e2f9436fb872ad4dd396c423c3a1c31d6854275fe40247caa904a9aea92ba8daeb3f5df4eb67e24faab318c407fe3c962cce4478946d205664e478909a959b4e69e2d236acf3c2218ff1ad65b0feec7916f4f2ca9d4b809b08e553120a1dbcf37f301b1a9119cca2667aa6b421d7ab56c14118f511ae13cf10c483c6f1f2cafa7208b3dac93dbe020fd3509dff92ce0cc60c3ab4dedbc0d71c", 0xb4, r3) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000027c0)={0x40000000, 0x109, "05be907d87135ae3f99dcd504f64a7260baa2290dc8812d1d5ced4ed5b61cc9c", 0x81, 0x8, 0xff, 0x9, 0x80000001, 0x407, 0x7f, 0x9, [0xe27, 0x0, 0x3ff, 0x5]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000028c0)={0x0}, &(0x7f0000002900)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002940)=0x0) rt_tgsigqueueinfo(r5, r6, 0x17, &(0x7f0000002980)={0x14, 0x9, 0x9, 0x3f}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000029c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3}) fcntl$addseals(r0, 0x409, 0xc) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000002a00)={'eql\x00', {0x2, 0x4e21, @local}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000002a40)='/dev/video37\x00', 0x2, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000002a80)) setxattr$security_evm(&(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)='security.evm\x00', &(0x7f0000002b40)=@md5={0x1, "7a2fb2377149b43fbaecdca4a7957728"}, 0x11, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000002b80)={0x7b, 0x0, [0xff, 0x8, 0xb47e]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000002c00)={0x5, {{0xa, 0x4e23, 0xc73, @mcast2, 0x4}}}, 0x88) [ 260.642226] IPVS: ftp: loaded support on port[0] = 21 [ 260.647466] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 260.647685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.661398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.235178] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.851521] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.858073] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.866470] device bridge_slave_0 entered promiscuous mode [ 262.986072] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.992647] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.001144] device bridge_slave_1 entered promiscuous mode [ 263.125413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 263.248689] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 263.626604] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 263.758475] bond0: Enslaving bond_slave_1 as an active interface with an up link 03:20:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8922, &(0x7f0000000080)={'bond0\x00', 0xfff}) 03:20:15 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0xfffffffffffffff9, 0x8}, 0x24) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, 0x0, &(0x7f00000000c0)}, 0x20) 03:20:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) 03:20:15 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000000080)=0x3) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xff) read$FUSE(r0, &(0x7f0000002180), 0x184) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) [ 264.364660] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 264.372869] team0: Port device team_slave_0 added [ 264.496336] binder: 8040:8044 ioctl c018620c 20000040 returned -22 [ 264.640307] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 264.648500] team0: Port device team_slave_1 added 03:20:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8922, &(0x7f0000000080)={'bond0\x00', 0xfff}) 03:20:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:15 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='\r', 0x1}], 0x1, 0x0) 03:20:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) 03:20:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)="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", 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/171, 0xab) fcntl$notify(r0, 0x402, 0x80000036) [ 264.974277] binder: 8059:8062 ioctl c018620c 20000040 returned -22 [ 265.162196] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 265.169395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.178305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 03:20:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000400)='./file0\x00', 0x0) clone(0x20002102, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="1a3a2c2f3a6e"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") [ 265.472813] ceph: device name is missing path (no : separator in :,/:n) [ 265.515142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 265.522327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.530990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.604134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 265.611421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.620344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.690537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 265.697921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.706882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.528548] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.535007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.541982] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.548393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.556329] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 266.563020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.601144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.888645] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 270.171278] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 270.177632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.185624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.464443] 8021q: adding VLAN 0 to HW filter on device team0 03:20:23 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000000080)=0x3) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xff) read$FUSE(r0, &(0x7f0000002180), 0x184) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 03:20:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) 03:20:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a", 0x4) 03:20:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:23 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r2, 0x6, 0x1d, &(0x7f0000001280), 0x2a4) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 03:20:23 executing program 4: socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:20:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) 03:20:23 executing program 3: sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000140)=@xdp, 0x80, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/114, 0x72}, {&(0x7f00000000c0)=""/48, 0x30}], 0x2, &(0x7f00000013c0)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000015c0)) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7ff, 0x30}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240)=r2, 0x4) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000224, 0x0) 03:20:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) [ 272.631288] binder: 8300:8301 ioctl c018620c 20000040 returned -22 03:20:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:23 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000000000b) inotify_init() setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x1c0, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000008060309736630000010000000000000000064756d6d793000000000000000000000696662300000000000000000000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff0000000000000000d0000000d000000000010000617270000000000000000000000000000000000000000000000000000000000038000000000000000000000000000000e0000001000000007f00000100000000000000000000000000000000aaaaaaaaaa00000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff00000000"]}, 0x238) 03:20:23 executing program 0: unshare(0x20400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x51) 03:20:24 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000200)=""/126) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x100000006, 0x80028021) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x0, 0xb, 0x4312) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") pread64(r2, &(0x7f0000000000)=""/34, 0x22, 0x0) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x1, 0x80000060, 0x2}, {}], 0x8e) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000100)) [ 272.942222] binder: 8310:8313 ioctl c018620c 20000040 returned -22 03:20:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000140)={0x0, 0x0, @ioapic}) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 03:20:24 executing program 0: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) read$FUSE(r0, &(0x7f0000000700), 0x1000) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)="8f8e3e28917f8275f7f0cc4f4ec63b57b688d3d597cd1d2cd8dd73542ee1bb4aa063d6011428af8c2a633cd9a5cbe50b2b6eb8cec29148c3ca74c0293cf7d8fee30edb772355cc26822f37ab9b7a73b37c7756151c2bbfb2909d2215f356f87db23f0a59b1b9096e34d10428b0f6eccd1412f1c3110fecbbab80c6784f196b95808579b9487ce06170e9f741d66c819317dee7681698623859f0c80e520cb8772e78a3246b3e2cdca5b4906546672293c0c24e5bd52cba32ff01d629b1d9a3a14647179e24326217c6fc49b9f13fb0f36d6140515741ebe3fe73a53522885b9ad733e846552433ca1b33495de96fe3eb") 03:20:24 executing program 5: unshare(0x8000400) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pread64(r0, &(0x7f0000000180)=""/40, 0x28, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000000)=""/246) 03:20:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) [ 273.433900] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 03:20:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:24 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000080)=""/246) pwritev(r0, &(0x7f0000f65000)=[{&(0x7f0000000180)="80fd06a8f800", 0x6}], 0x1, 0x0) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc) [ 273.592733] binder: 8344:8346 ioctl c018620c 20000040 returned -22 03:20:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100), &(0x7f00000001c0)=0x4) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/186, &(0x7f0000000240)=0xba) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f00000002c0)=0x8000) 03:20:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'veth0_to_team\x00', &(0x7f00000002c0)=@ethtool_channels={0x3d, 0x9, 0x2, 0x2, 0x7, 0x7fff, 0x7ff, 0x101, 0x9}}) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0xb, &(0x7f0000000040)=""/8, &(0x7f0000706ffc)=0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xa4000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) ioctl$void(r1, 0xc0045c79) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r3, &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x1000, 0x2, 0x0, 0x21, r3}, &(0x7f0000000240)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) 03:20:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) 03:20:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) [ 274.014702] binder: 8359:8362 ioctl c018620c 20000040 returned -22 03:20:25 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:25 executing program 4: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socket$kcm(0x10, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3, 0x800) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001580)=0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000001840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001a40)=ANY=[@ANYBLOB="340100001600000429bd7000fbdbdf25ff010000000000000000000000000001e0000002009922c73c000200a000ff00000068bd337962a113a56b2ba4603c4e03ee0e861593ea32d89ccf675f51ffcf64862df3fbf460e3ade8295ac285bedb123d287e64cfd5dc3e24835d5cac92e1901a13128fb6d7403228bd3441905b6660d767f8e0dedf18427f8e37a78b994ec6c352ef079c7cbf9fa1a7688f77d0f2cf384efed8b6abc89a13d1a0a148e0b6b53851c1128f1d99c0356866370479a5cdaf1a", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="00000000000000000000000000000000000004d43e000000fe8000000000000000000000000000bbf8ffffffffffffff0000000000000000ff7f00000000000060030000000000000100010000000000ff00000000000000080000000000000006000000000000000000000000000000ff7f0000000000000004000000000000fb00000000000000b34e000008000000c201000025bd7000013500000a000300800000000000000000f0ffff1800000008000300091a000024000900060000000000000014100000000000000000000000000000ffff000000000000080016000600000008000300001b0000"], 0x134}}, 0x1) recvmsg(r0, &(0x7f00000016c0)={&(0x7f0000001240)=@can, 0x80, &(0x7f0000001640)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/180, 0xb4}, {&(0x7f00000012c0)=""/210, 0xd2}, {&(0x7f00000013c0)=""/195, 0xc3}], 0x4, &(0x7f0000002c40)=""/4096, 0x1000}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1, &(0x7f0000002c40)=ANY=[]}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000015c0)={0x0, 0x5a, "e207fec89deb17224f42ee174af8279557ff56334b8cd410d082bed768394bf1f4d3eda12d2854942c22f94550c72e44fd6f76ea1d1deb55b652404d76d5bf3d9e17d5146e5dc43916136e606e05d0d6be8e1c07060ba30824a3"}, &(0x7f0000001500)=0x62) getpeername$packet(r1, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000018c0)=0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000017c0)=@sack_info={r4, 0x2, 0x81}, &(0x7f0000001800)=0xc) recvmsg(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000005380), 0x0, &(0x7f0000005400)=""/184, 0xb8}, 0x0) lookup_dcookie(0x9, &(0x7f0000001700)=""/134, 0x86) [ 274.276532] binder: 8370:8372 ioctl c018620c 20000040 returned -22 03:20:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000240)={0x2, 0x0, 0x8, 0x3, 0x9, 0x4, 0x2, 0x10000, 0x5, 0x1ff}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000100)={{0x1001, 0x7000, 0xf, 0x100000001, 0x20, 0x0, 0x1, 0xfffffffffffffffc, 0x2ac84f63, 0x2, 0x9, 0x5}, {0x0, 0x10000, 0x9, 0x1, 0x5e4, 0x1, 0x0, 0x3, 0x9, 0xfffffffffffffffc, 0x2, 0x78}, {0x4000, 0x5000, 0x0, 0x1, 0x1000, 0x6, 0x3ff, 0xffffffff80000000, 0x3f99f77b, 0x10000, 0xf0f8, 0xb7a}, {0x4000, 0x101000, 0x3, 0xce6, 0xff, 0x1, 0xffffffff, 0x310f, 0x1, 0x8, 0x200, 0xff}, {0x1002, 0x7000, 0x1b, 0x606, 0xfffffffffffffff9, 0x6, 0xfffffffffffffffd, 0x7, 0x4, 0x0, 0x0, 0x80000000}, {0x106000, 0x0, 0x0, 0x401, 0x8, 0x9, 0x2b8, 0xf6c7, 0x4, 0x81, 0x2, 0x1}, {0x5000, 0xf000, 0xd, 0xf7, 0xfffffffffffffffb, 0x1, 0x1, 0xb4a8, 0x8000, 0x7, 0x101, 0x4}, {0x0, 0xd005, 0xc, 0x7, 0x3, 0x1, 0x1, 0xffffffffffff7fff, 0xfffffffffffffffd, 0x40, 0x6a, 0xfff}, {0xf004, 0x106000}, {0x12000, 0x2}, 0x80000000, 0x0, 0x5000, 0x40400, 0x9, 0x0, 0x1000, [0x9, 0x7167, 0xaea, 0x100]}) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x4, 0x4, 0x1, 0x6}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x50000000}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x8, 0x3}) 03:20:25 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x8000) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, &(0x7f00000000c0)}}) 03:20:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) 03:20:25 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:25 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0xb, 0x8, 0x0, 0x0, [{}, {}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000040)) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)="7e8d9578ae5528cd9144cdfa0a50a50949f824c4c2175590cda93d8f770f2397e0a13c67dea1886d0309dfaf747cf2f56cb2749b87ff1649c7bcb0b3810392ab216e04698c98039c4315bf03bc30091511650ad9380acb56db82521ff1b1a7c898d0", 0x62, 0xfffffffffffffff8) keyctl$get_security(0x11, r0, &(0x7f00000001c0)=""/95, 0x5f) [ 274.669002] binder: 8387:8388 ioctl c018620c 20000040 returned -22 03:20:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x400, 0x4000) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000200)={0xfc, ""/252}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000000000000000a0ddf84b8476d2063b491b6846eb046c1bc496131fd75fefa5311af514cda4c980e0455ffa9995799f9668bafe3e0a2ecc550e896dcfca066cdcffda9d562a420dd2f024bb22713ff6c28d7ca97bd25af46b", @ANYRES32=0x0, @ANYBLOB="00000000000000001c008d2957fc98ec0c656970000000000c00020008000a0004000000"], 0x3c}}, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)) 03:20:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) 03:20:26 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000000000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000040)={0x2, 0x7fffffff, 0x5, 0x730000, 0xffffffff7ff0bdbe}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) 03:20:26 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x890f, &(0x7f0000000080)="153f6234488da50f86633d") r1 = epoll_create1(0x0) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x1}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000040), 0x4) fcntl$lock(r1, 0x5, &(0x7f0000000000)) 03:20:26 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) 03:20:26 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0xf000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x200, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000fc0)=[&(0x7f0000000f80)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x1}]) getpeername$inet6(0xffffffffffffffff, &(0x7f00000008c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000980)=0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @multicast2}}, [0x81, 0x7ff, 0xaf00, 0x3, 0x2, 0x1100000, 0x5, 0xd25, 0x7, 0x40, 0x6, 0xea7, 0x9, 0x1, 0x8001]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000400)={r2, 0x101}, &(0x7f0000000440)=0x8) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) r4 = getuid() setfsuid(r4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$can_raw(r3, &(0x7f0000000480), 0x10) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000}) write$UHID_CREATE2(r3, &(0x7f0000000540)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0xd2, 0x0, 0x66000000000000, 0x1, 0x9, 0x10000, "086fa7f85f4a988446ea04f29df4cb565924b6a31ada1a548458d596aa33ae59f695f9012e6b69c2b856ee7306895b796e9fc6a297974eacdfaa26af8d372fd75ad729565eff2fe1b7ad58db787591e215f6f1a6c9a37c92196278756c47c60c7ea7422dcefb35dc0a3f2394d91d0791d55f1c4ac4b310aaa3e97fd60dc67c80a86ba163eefeb90413eef67b89216af23c3a78bf96ebe80986de7f6d2bd2f361af26cb29b21951969a548af7081edfa6a9a82b63cafdcc99d3e0dc14eea5d96fbc50057728c7717713477c43b8bd3a933666"}, 0x1ea) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000200)={0x0, 0x3ff}) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff000000000000]}, @empty, @loopback, 0x3}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000004c0)=ANY=[@ANYBLOB="53000000a52c53a8e8991f8cf3dd8d847ec339596db925f2dbafedc5d0d24dfc32c6c32c5cff5d0308fc39d645db57010000000000000049de4a37fbb35212e00368341277b3a92b882793e240"], &(0x7f0000000000)=0x1) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) getpgrp(0x0) migrate_pages(0x0, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0xffffffff80000801) 03:20:26 executing program 5: mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180), 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x40a1f37c, 0x41) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000100)={@remote, @rand_addr, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000340)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)=@migrate={0x154, 0x21, 0x8, 0x70bd2c, 0x25dfdbfb, {{@in, @in=@broadcast, 0x4e20, 0x0, 0x4e23, 0xa3, 0xa, 0x0, 0x0, 0x5d, r1, r2}, 0x6e6bbe, 0x3}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24}}, @ipv6_hthresh={0x8, 0x4, {0x12, 0x3f}}, @policy_type={0xc, 0x10, {0x1}}, @address_filter={0x28, 0x1a, {@in=@remote, @in6=@mcast1, 0xa, 0x9, 0x62}}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in6=@local, 0x4e21, 0x8, 0x4e20, 0x80000001, 0xa, 0xa0, 0x80, 0xff, r3, r4}, {0x5, 0x1, 0x1, 0x1ff, 0x4, 0x6b26, 0x0, 0xc8a}, {0x5, 0x5, 0xfffffffffffff001, 0xd0}, 0x5, 0x6e6bb6, 0x2, 0x1, 0x1, 0x2}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000480), &(0x7f0000000580)) 03:20:26 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0', "b65d4563a9753e7002decc8504f2879b7e045aa618c32ed104f0d1b42ec25b0d2e0551e32cd9496fce24ec88b4cc"}, 0x32) unshare(0x24020400) unshare(0x24020400) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 03:20:26 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(&(0x7f00000000c0)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) [ 275.521641] hrtimer: interrupt took 89962 ns 03:20:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x0, 0x1, [], [@enc_lim, @enc_lim, @ra]}, 0x18) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000080)}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x5, 0x9, [0x100000000, 0x3, 0xf52, 0x6, 0xdd6, 0x8, 0x1ff80, 0x0, 0x7fffffff]}, &(0x7f0000000080)=0x1a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}}, [0xfffffffffffffffb, 0x2, 0x3, 0x100000000, 0x0, 0x4, 0x5f9, 0x2, 0xdaef, 0x80000001, 0x8, 0x0, 0x9, 0x3f4, 0x400]}, &(0x7f00000000c0)=0x100) 03:20:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) 03:20:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:27 executing program 3: clock_nanosleep(0xfffffbfffffffff4, 0x0, &(0x7f00000000c0), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) readahead(r0, 0x1, 0xba0) 03:20:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) 03:20:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x101, 0x10000025e) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r1, &(0x7f0000cb8fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x47) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40a02, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x40, 0x4) listen(r0, 0x0) 03:20:27 executing program 4: unshare(0x24020400) r0 = syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0x3f, 0x200042) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x104) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x2) getsockname(r0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000080)=0x80) [ 276.536190] binder: 8467:8469 ioctl c018620c 20000040 returned -22 03:20:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) 03:20:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000001100)=""/75) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c832, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={r1, 0x10, &(0x7f00000014c0)={&(0x7f0000001440)=""/121, 0x79, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001180)={r1, 0x10, &(0x7f00000000c0)={&(0x7f00000012c0)=""/237, 0xbe, r2}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001400)={r1, 0x10, &(0x7f00000013c0)={&(0x7f0000001200)=""/177, 0xb1, r3}}, 0x10) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000100)=""/4096) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xa0000, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) 03:20:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000000080ffffffff002000000000000000"], 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000007d190001010000000000000000ac1414bb000000000000e66d1450d380785c41db000000000000ffffffff000000000000000000000000000000000000377764d9e17d48de53a52bc731e7a1ee15bccd1f523562f0fcfbedea32d148c3b873404aca56409063f83d14b185344c87794855fe39188b49f1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}, 0x8}, 0x0) 03:20:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) [ 276.947683] binder: 8483:8487 ioctl c018620c 20000040 returned -22 03:20:28 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) init_module(&(0x7f0000000000)='\'em1ppp0posix_acl_access^ @security(cpuset\\{#eth0-]wlan1\x00', 0x39, &(0x7f0000000040)=']cpuset\x00') connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x400000, @dev, 0x200000}, 0x17) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x20000, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8800000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@deltfilter={0x1ac, 0x2d, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, r2, {0xffe0, 0xffe0}, {0xf, 0x3}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x164, 0x2, [@TCA_CGROUP_ACT={0x160, 0x1, @m_ife={0x15c, 0x13, {{0x8, 0x1, 'ife\x00'}, {0x50, 0x2, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x8, 0x5, @val=0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x3, 0x3000, 0x80}, 0x1}}, @TCA_IFE_SMAC={0xc, 0x4, @broadcast}, @TCA_IFE_SMAC={0xc, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}]}, {0xfc, 0x6, "1ec50889c7c6688daef3239128b752d108330ea41f32146a142c247f7279d96c06589da09324b71cf7f2775511b552816dffd90d7dd27b0ae898151addfb270783dda0dfe8e29b9cc722bfd75dd15d15df5537ba1b36bb52ba0392ad75a39375c72d636c12bc416fd9942db94bfb80ce6c7ee65ff41796ec54ab6ef409eb05d6499f1b48792d1614c8b1cf5c19caa7012a37faaf8f8d55a40633574a07c9d4059e68c98615604ee9066dbbdb514efd56c1360a25ccfc684497123be793c16724fa6c6f8fd9373f085d00ffdbfa4f8b4fa5027b46db703f22098b7eeef67517748dc7f8e41acf0658c2beb001146c27083ca41809564ff97b"}}}}]}}, @filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xfff}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000400), &(0x7f0000000440)=0x4) 03:20:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x7, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x2]}, 0x2c) socket$inet6(0xa, 0x4, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@broadcast, @empty, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xd}, @remote, @empty, 0x800000000000, 0x9, 0x3f, 0x500, 0x1000, 0x1000000, r2}) 03:20:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) 03:20:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000002680), &(0x7f00000002c0)) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x800454a4, &(0x7f0000000040)) 03:20:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:28 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0xffffffffffffffda, 0x1, {{0x200, 0x78d, 0x80000000, 0x0, 0xffffffffffff0000, 0x80000000, 0x96, 0x3ff}}}, 0x60) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000001c0)={0x5, 0xfffffffffffffffc, 0x1, 0x800000000009, 0x3ff}) fsetxattr$security_smack_transmute(r0, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1) [ 277.537371] binder: 8504:8505 ioctl c018620c 20000040 returned -22 03:20:28 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x42c600, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) mount(&(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, &(0x7f000000a000)) chdir(&(0x7f0000000200)='./file0\x00') bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe, 0x104000}, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x24) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e22}}, 0x2, 0x200}, &(0x7f00000003c0)=0x90) r2 = open(&(0x7f0000000000)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x28007e) sendfile(r2, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x12}, 0x8000, 0x2, 0x0, 0xe, 0x6, 0x5, 0xacc7}, &(0x7f0000000240)=0x20) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000440)={0xa20000, 0x9, 0x4, [], &(0x7f0000000400)={0x9b0bff, 0x0, [], @value64=0x80000000}}) close(r2) 03:20:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) 03:20:29 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='fdinfo\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000300)={r2, 0x80000, r1}) getdents(r1, &(0x7f0000000080)=""/15, 0xf) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x30}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000280)=0x104) 03:20:29 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x1e) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000080)={'gretap0\x00', {0x2, 0x4e21, @remote}}) bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) close(r2) [ 278.262217] binder: 8539:8541 ioctl c018620c 20000040 returned -22 03:20:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) 03:20:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) [ 278.550851] kauditd_printk_skb: 3 callbacks suppressed [ 278.550885] audit: type=1800 audit(1541992829.592:31): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor5" name="file0" dev="ramfs" ino=23066 res=0 03:20:29 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80080084122, &(0x7f00000000c0)="328fb48ba04d3cb4e81525bc3c37829b55a5937b74a865b969aef8bab4dea947c09607927a766bbcd08cce95d61c13") fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v1={0x1000000, [{0x8, 0xf2}]}, 0xc, 0x0) 03:20:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) [ 278.647610] binder: 8553:8557 ioctl c018620c 20000040 returned -22 03:20:29 executing program 5: unshare(0x2000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)) 03:20:29 executing program 2 (fault-call:2 fault-nth:0): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) [ 278.828518] binder: 8562:8565 ioctl c018620c 20000040 returned -22 03:20:30 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000000)={0x7fffffff, 0x20000800, 0x1000, 0xf1, 0x4, 0x1, 0x9, 0x7, 0x10000, 0x6}, 0x10) r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) unshare(0x8000400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 03:20:30 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xfff, 0x0) write$P9_RLINK(r3, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000140)=0x0) timer_settime(r4, 0x4000101, &(0x7f0000046fe0), &(0x7f00000001c0)) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) poll(&(0x7f0000000280)=[{r1}, {r0, 0x101}], 0x2, 0x0) [ 279.092492] binder: 8573:8577 ioctl c018620c 20000040 returned -22 03:20:30 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) open(&(0x7f0000000640)='./file0/file0\x00', 0xf0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000000000000000000000000000000000000406554eb3691f399e0aca9bff99079e588acfedc93ccd083ed50b559088e52f7d4e5514fb92c8078453d29cc6f1642d8c55ad70a60930ad6431a641c8146f8e8eba27ec368c1cbb46299c36fea6a479216c6aae4637452d5c43d344b4051fdbdec830ac607e7e7f1ed8fd95c828499e2bf89fcf05df60793cc3260a95a97af91266f48c9b1970153670e7de6424a650e01501d782ab599b6080d5b7aa0d999afb6d76270b7de9c8cbd2ef13210070da851a0d8342991bfb42fe129c40921a0583b4fbea8c28dec907fab0f88c3c909014cc5c8945ace59b0cb3efa"]) 03:20:30 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) 03:20:30 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x8000000000000000}) read(r0, &(0x7f0000000440)=""/4096, 0x1000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000200)=""/191) sigaltstack(&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) openat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) 03:20:30 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) 03:20:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x80000001, 0x1, 0x3f, 0x438f}, {}]}) 03:20:30 executing program 1 (fault-call:4 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000080)}) 03:20:30 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) open(&(0x7f0000000640)='./file0/file0\x00', 0xf0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000000000000000000000000000000000000406554eb3691f399e0aca9bff99079e588acfedc93ccd083ed50b559088e52f7d4e5514fb92c8078453d29cc6f1642d8c55ad70a60930ad6431a641c8146f8e8eba27ec368c1cbb46299c36fea6a479216c6aae4637452d5c43d344b4051fdbdec830ac607e7e7f1ed8fd95c828499e2bf89fcf05df60793cc3260a95a97af91266f48c9b1970153670e7de6424a650e01501d782ab599b6080d5b7aa0d999afb6d76270b7de9c8cbd2ef13210070da851a0d8342991bfb42fe129c40921a0583b4fbea8c28dec907fab0f88c3c909014cc5c8945ace59b0cb3efa"]) 03:20:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000100)={0x7fffffff, {{0xa, 0x4e22, 0x0, @ipv4={[], [], @local}, 0x2}}}, 0x88) getsockopt(r2, 0x0, 0xce, &(0x7f0000001400)=""/203, &(0x7f0000000040)=0xcb) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x2, 0x1, 0x0, 0x8}, 0x20) 03:20:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'veth0_to_bond\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}}) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x82ba, 0x400100) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x1f7a, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000600)="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") ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x3) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xfff, 0x100) accept4(r0, 0x0, &(0x7f0000000140), 0x80800) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(seed)\x00'}, 0x58) get_thread_area(&(0x7f0000000180)={0x0, 0x0, 0x2000, 0x80, 0xdfa, 0x3, 0x8, 0x2, 0x1, 0x7}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'ip6tnl0\x00', 0x200}) 03:20:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x48, 0x14, 0x207, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@nested={0x0, 0x0, [@typed={0x0, 0xc00e, @fd}]}]}, 0x24c}}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e21, @remote}], 0x20) 03:20:31 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x121000, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x0, 0x2, 0x4, 0x7}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000100)) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000200)='/dev/vcs\x00') 03:20:31 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) open(&(0x7f0000000640)='./file0/file0\x00', 0xf0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000000000000000000000000000000000000406554eb3691f399e0aca9bff99079e588acfedc93ccd083ed50b559088e52f7d4e5514fb92c8078453d29cc6f1642d8c55ad70a60930ad6431a641c8146f8e8eba27ec368c1cbb46299c36fea6a479216c6aae4637452d5c43d344b4051fdbdec830ac607e7e7f1ed8fd95c828499e2bf89fcf05df60793cc3260a95a97af91266f48c9b1970153670e7de6424a650e01501d782ab599b6080d5b7aa0d999afb6d76270b7de9c8cbd2ef13210070da851a0d8342991bfb42fe129c40921a0583b4fbea8c28dec907fab0f88c3c909014cc5c8945ace59b0cb3efa"]) 03:20:31 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80001) close(r0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0xc8100, 0x0) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x10000}, 0xc) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x13}) 03:20:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x6, 0x71, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x0, 0xfd1b, &(0x7f00000000c0)}) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x2, 0x7]) 03:20:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000580)=[{&(0x7f0000000400)="04b7", 0x2}], 0x1, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x5) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0x1, 0x3d3) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) 03:20:31 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) open(&(0x7f0000000640)='./file0/file0\x00', 0xf0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000000000000000000000000000000000000406554eb3691f399e0aca9bff99079e588acfedc93ccd083ed50b559088e52f7d4e5514fb92c8078453d29cc6f1642d8c55ad70a60930ad6431a641c8146f8e8eba27ec368c1cbb46299c36fea6a479216c6aae4637452d5c43d344b4051fdbdec830ac607e7e7f1ed8fd95c828499e2bf89fcf05df60793cc3260a95a97af91266f48c9b1970153670e7de6424a650e01501d782ab599b6080d5b7aa0d999afb6d76270b7de9c8cbd2ef13210070da851a0d8342991bfb42fe129c40921a0583b4fbea8c28dec907fab0f88c3c909014cc5c8945ace59b0cb3efa"]) 03:20:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-sse2\x00'}, 0x1e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) [ 282.182302] device bridge_slave_1 left promiscuous mode [ 282.187996] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.243492] device bridge_slave_0 left promiscuous mode [ 282.249098] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.344637] team0 (unregistering): Port device team_slave_1 removed [ 282.358019] team0 (unregistering): Port device team_slave_0 removed [ 282.370825] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 282.408205] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 282.505032] bond0 (unregistering): Released all slaves [ 283.393211] IPVS: ftp: loaded support on port[0] = 21 [ 284.709789] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.716276] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.724224] device bridge_slave_0 entered promiscuous mode [ 284.801298] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.807769] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.815718] device bridge_slave_1 entered promiscuous mode [ 284.891492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 284.967107] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 285.198500] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 285.279423] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 285.430031] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 285.437203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.665248] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 285.672877] team0: Port device team_slave_0 added [ 285.748229] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 285.755908] team0: Port device team_slave_1 added [ 285.833496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.913763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.993016] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 286.000327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.009154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.086499] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 286.094006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.102781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.964230] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.970673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.977624] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.984143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.992477] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 287.371911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.122627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.413804] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 290.695386] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 290.701813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.709565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.990969] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.870778] FAULT_INJECTION: forcing a failure. [ 292.870778] name failslab, interval 1, probability 0, space 0, times 1 [ 292.882343] CPU: 1 PID: 8914 Comm: syz-executor1 Not tainted 4.19.0+ #82 [ 292.889221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.898607] Call Trace: [ 292.901203] ================================================================== [ 292.908572] BUG: KMSAN: uninit-value in show_trace_log_lvl+0x53f/0x11e0 [ 292.915313] CPU: 1 PID: 8914 Comm: syz-executor1 Not tainted 4.19.0+ #82 [ 292.922145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.931511] Call Trace: [ 292.934120] dump_stack+0x419/0x480 [ 292.937742] ? show_trace_log_lvl+0x53f/0x11e0 [ 292.942343] kmsan_report+0x19f/0x300 [ 292.946156] __msan_warning+0x76/0xd0 [ 292.949949] ? stack_type_name+0x14/0xe0 [ 292.954004] show_trace_log_lvl+0x53f/0x11e0 [ 292.958429] ? dump_stack+0x32d/0x480 [ 292.962222] show_stack+0x12e/0x170 [ 292.965849] dump_stack+0x32d/0x480 [ 292.969509] should_fail+0x11e5/0x13c0 [ 292.973431] __should_failslab+0x278/0x2a0 [ 292.977672] should_failslab+0x29/0x70 [ 292.981647] __kmalloc+0xcf/0x4d0 [ 292.985107] ? _raw_spin_lock+0x1fb/0x2f0 [ 292.989242] ? binder_get_thread+0x46d/0x1200 [ 292.993732] binder_get_thread+0x46d/0x1200 [ 292.998052] binder_ioctl+0x61b/0x2850 [ 293.001946] ? kmsan_set_origin+0x83/0x130 [ 293.006192] ? do_vfs_ioctl+0x187/0x2d30 [ 293.010244] ? binder_poll+0xbe0/0xbe0 [ 293.014120] do_vfs_ioctl+0xf77/0x2d30 [ 293.018006] ? security_file_ioctl+0x92/0x200 [ 293.022495] __se_sys_ioctl+0x1da/0x270 [ 293.026463] __x64_sys_ioctl+0x4a/0x70 [ 293.030338] do_syscall_64+0xcf/0x110 [ 293.034139] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 293.039312] RIP: 0033:0x457569 [ 293.042491] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 293.061390] RSP: 002b:00007f39d85bdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.069095] RAX: ffffffffffffffda RBX: 00007f39d85bdc90 RCX: 0000000000457569 [ 293.076381] RDX: 0000000020000040 RSI: 00000000c018620c RDI: 0000000000000003 [ 293.083651] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 293.090909] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f39d85be6d4 [ 293.098166] R13: 00000000004be858 R14: 00000000004ce830 R15: 0000000000000006 [ 293.105426] [ 293.107048] Local variable description: ----state@show_trace_log_lvl [ 293.113534] Variable was created at: [ 293.117236] show_trace_log_lvl+0xb3/0x11e0 [ 293.121544] show_stack+0x12e/0x170 [ 293.125161] ================================================================== [ 293.132505] Disabling lock debugging due to kernel taint [ 293.137939] Kernel panic - not syncing: panic_on_warn set ... [ 293.137939] [ 293.145294] CPU: 1 PID: 8914 Comm: syz-executor1 Tainted: G B 4.19.0+ #82 [ 293.153505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.162846] Call Trace: [ 293.165438] dump_stack+0x419/0x480 [ 293.169061] panic+0x57e/0xb28 [ 293.172258] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 293.177712] kmsan_report+0x300/0x300 [ 293.181518] __msan_warning+0x76/0xd0 [ 293.185307] ? stack_type_name+0x14/0xe0 [ 293.189378] show_trace_log_lvl+0x53f/0x11e0 [ 293.193800] ? dump_stack+0x32d/0x480 [ 293.197607] show_stack+0x12e/0x170 [ 293.201248] dump_stack+0x32d/0x480 [ 293.204882] should_fail+0x11e5/0x13c0 [ 293.208770] __should_failslab+0x278/0x2a0 [ 293.213015] should_failslab+0x29/0x70 [ 293.216901] __kmalloc+0xcf/0x4d0 [ 293.220343] ? _raw_spin_lock+0x1fb/0x2f0 [ 293.224503] ? binder_get_thread+0x46d/0x1200 [ 293.228990] binder_get_thread+0x46d/0x1200 [ 293.233315] binder_ioctl+0x61b/0x2850 [ 293.237192] ? kmsan_set_origin+0x83/0x130 [ 293.241424] ? do_vfs_ioctl+0x187/0x2d30 [ 293.245476] ? binder_poll+0xbe0/0xbe0 [ 293.249375] do_vfs_ioctl+0xf77/0x2d30 [ 293.253273] ? security_file_ioctl+0x92/0x200 [ 293.257773] __se_sys_ioctl+0x1da/0x270 [ 293.261760] __x64_sys_ioctl+0x4a/0x70 [ 293.265649] do_syscall_64+0xcf/0x110 [ 293.269463] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 293.274653] RIP: 0033:0x457569 [ 293.277837] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 293.296730] RSP: 002b:00007f39d85bdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.304431] RAX: ffffffffffffffda RBX: 00007f39d85bdc90 RCX: 0000000000457569 [ 293.311698] RDX: 0000000020000040 RSI: 00000000c018620c RDI: 0000000000000003 [ 293.318972] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 293.326231] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f39d85be6d4 [ 293.333505] R13: 00000000004be858 R14: 00000000004ce830 R15: 0000000000000006 [ 293.341844] Kernel Offset: disabled [ 293.345485] Rebooting in 86400 seconds..