[ 57.662223] audit: type=1800 audit(1538976652.708:27): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 59.206328] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 59.692918] random: sshd: uninitialized urandom read (32 bytes read) [ 60.377483] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 62.686319] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.60' (ECDSA) to the list of known hosts. [ 68.555812] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/08 05:31:05 fuzzer started [ 73.153963] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/08 05:31:10 dialing manager at 10.128.0.26:36867 2018/10/08 05:31:10 syscalls: 1 2018/10/08 05:31:10 code coverage: enabled 2018/10/08 05:31:10 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/08 05:31:10 setuid sandbox: enabled 2018/10/08 05:31:10 namespace sandbox: enabled 2018/10/08 05:31:10 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/08 05:31:10 fault injection: enabled 2018/10/08 05:31:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/08 05:31:10 net packed injection: enabled 2018/10/08 05:31:10 net device setup: enabled [ 78.215201] random: crng init done 05:33:17 executing program 0: [ 203.690473] IPVS: ftp: loaded support on port[0] = 21 [ 206.063923] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.070415] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.079089] device bridge_slave_0 entered promiscuous mode [ 206.238314] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.245126] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.253674] device bridge_slave_1 entered promiscuous mode [ 206.395899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 206.537207] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 206.970614] bond0: Enslaving bond_slave_0 as an active interface with an up link 05:33:22 executing program 1: [ 207.122011] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 207.464246] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 207.471310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.985324] IPVS: ftp: loaded support on port[0] = 21 [ 208.117716] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 208.125935] team0: Port device team_slave_0 added [ 208.396936] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 208.405129] team0: Port device team_slave_1 added [ 208.686316] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 208.693525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.702356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.953555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 208.960714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.969757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.193368] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 209.200944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.210197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.391699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 209.399340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.408720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.607748] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.614511] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.623045] device bridge_slave_0 entered promiscuous mode [ 211.848047] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.854672] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.863275] device bridge_slave_1 entered promiscuous mode [ 212.079839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 212.223489] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.229990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.237075] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.243629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.252656] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 212.284991] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 212.582386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 05:33:27 executing program 2: [ 213.067768] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 213.388458] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 213.584279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 213.624880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.681523] IPVS: ftp: loaded support on port[0] = 21 [ 213.846144] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 213.853413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.576368] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 214.584620] team0: Port device team_slave_0 added [ 214.918613] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 214.926730] team0: Port device team_slave_1 added [ 215.243735] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 215.250773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.259767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.519491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 215.526814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.535772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.682180] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 215.689764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.699127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.996821] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 216.004845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.014042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.515012] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.521501] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.530242] device bridge_slave_0 entered promiscuous mode [ 218.759609] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.766331] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.774764] device bridge_slave_1 entered promiscuous mode [ 219.001125] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 219.242415] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.248944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.256004] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.262551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.271412] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 219.288667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.182220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.227928] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.527755] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 220.843390] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 220.850431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.102348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 221.109497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 05:33:36 executing program 3: [ 222.109873] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 222.118175] team0: Port device team_slave_0 added [ 222.520030] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 222.520872] IPVS: ftp: loaded support on port[0] = 21 [ 222.528184] team0: Port device team_slave_1 added [ 222.879687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 222.886984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.896035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.200895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 223.208122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.217002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.561153] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 223.568866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.577907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.861971] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 223.869840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.879097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.611256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.087604] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 227.563681] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 227.570020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.578150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.927874] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.934555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.941458] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.948038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.956916] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 228.219607] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.226398] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.235075] device bridge_slave_0 entered promiscuous mode [ 228.506826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.621047] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.627795] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.636453] device bridge_slave_1 entered promiscuous mode [ 228.951162] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.015803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 229.425029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 230.391948] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 230.714264] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 230.937223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 230.944395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.347688] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 231.354844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 05:33:47 executing program 4: [ 232.430606] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 232.438757] team0: Port device team_slave_0 added [ 232.865262] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 232.873634] team0: Port device team_slave_1 added [ 233.344145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 233.351225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.360422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.638257] IPVS: ftp: loaded support on port[0] = 21 [ 233.811252] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 233.818720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.827687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.135735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.235706] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 234.243479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.252698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.655252] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 234.663464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.672686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.655169] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 237.297827] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 237.304400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.313086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 05:33:53 executing program 0: [ 239.143749] 8021q: adding VLAN 0 to HW filter on device team0 05:33:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000400)="153f6234488dd25d766070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000600)=0x1ff, 0x4) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x100000000, 0x8000) ioctl$TIOCSTI(r2, 0x5412, 0x5) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) shutdown(r3, 0x1) [ 239.465523] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.468014] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 239.472127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.489409] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.495985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.504700] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 239.582483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 05:33:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = socket$inet(0x2, 0x805, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc02, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="8907040000", 0x5) sendto$inet(r1, &(0x7f0000000000)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(r3, &(0x7f0000008180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/13}, {&(0x7f0000000080)=""/31}, {&(0x7f0000000100)=""/34}, {&(0x7f0000000580)=""/216}, {&(0x7f00000003c0)=""/217}, {&(0x7f00000004c0)=""/175}], 0x0, &(0x7f00000007c0)=""/160, 0xa0}}], 0x234, 0x8802, &(0x7f00000083c0)={0x77359400}) writev(r3, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 05:33:55 executing program 0: keyctl$instantiate_iov(0x4, 0x0, &(0x7f00000015c0), 0x0, 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6, 0x4000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000000c0)={0x9, 0x6, 0x4, 0x8000, 'syz1\x00', 0x5}) [ 240.934641] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.941167] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.949759] device bridge_slave_0 entered promiscuous mode 05:33:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000380)="03", 0x1, 0x20000004, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r1) [ 241.416573] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.423192] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.431486] device bridge_slave_1 entered promiscuous mode 05:33:56 executing program 0: unshare(0x24020400) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x2000004031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x5, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x20000800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) [ 241.935187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 05:33:57 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x100, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000100)={0x89, 0xffffffffffffffff}) [ 242.324620] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 05:33:57 executing program 0: socketpair(0x1f, 0x6, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0)=0x7, 0x4) r1 = socket$l2tp(0x18, 0x1, 0x1) add_key(&(0x7f0000000740)="93431747bf70a52ba6e52dda17012d3eae80741e9c0e37e8562ddd5c611ce0c7f7dc1a920641c128d61e051472128747966f1160fd7053e4ede708f600dc93bd27fefc5295fd26701e226b01218d8bc44e0fbe2e7645d3a8ed842d62e22b7ed62d454fa2c95e7e342700c07b452677b1a419dee1b7d73a4fe417fd9894219cac651c796460dbd7471db958635a34ae13d799ef67d952a017e10ac23a34216fa4302ccdbbc4d07514e03296edfe97c1f1e38562c7ff860ff5ebb7", &(0x7f0000000180)={'syz'}, &(0x7f0000000500), 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000140)="03", 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, "db835aba4e0c698b497aeb019987e4b2efa4fa470876400af718e3edd01414a92ae74a565f16c3a21684ebdbfcb00b689785f4ad442b5a7f510f6a206455054f3e538c4cce109262bf4b4fb9f4005beee51248bd20463640a668c3d2800df6b6323684350497b63030efc846c8e76c56fd02e81f518e3ca39fabf5c94e780d3d3234893c85a7"}) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'team0\x00', {0x2, 0x4e23, @multicast2}}) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r2, r2}, &(0x7f00000006c0)=""/83, 0x53, &(0x7f0000000240)={&(0x7f00000000c0)={'crc32\x00'}, &(0x7f00000001c0)}) ioctl(r1, 0x8912, &(0x7f0000000340)="153f6234418dd25d766070ac85") [ 243.541636] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 244.012424] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 244.446253] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 244.453510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.920559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 244.929436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.288758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.151396] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 246.159821] team0: Port device team_slave_0 added [ 246.516453] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 246.524689] team0: Port device team_slave_1 added [ 246.851511] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 246.868340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 246.875644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.884701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.243947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 247.250980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.259906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.576010] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 247.583729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.592793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.938123] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 247.945944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.955345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.167714] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.175940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.183969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 05:34:04 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bf0000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mremap(&(0x7f000079c000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) [ 249.637163] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.513505] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.519973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.527030] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.533590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.542137] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 251.548698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.140706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.220682] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 256.277829] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 256.284354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.292698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 05:34:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000300), 0x10) [ 257.369568] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.425103] 8021q: adding VLAN 0 to HW filter on device bond0 05:34:18 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/38, 0x26}], 0x1, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, &(0x7f0000004640)={0x0, 0x989680}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x60000, 0x0) getdents64(r0, &(0x7f0000001680)=""/148, 0xfffffe08) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0) writev(r1, &(0x7f00000023c0), 0x1000000000000252) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) getpeername$inet6(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x1c) [ 263.339141] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 263.881933] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 263.888301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.896398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.431193] 8021q: adding VLAN 0 to HW filter on device team0 05:34:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x2000000008912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mlock(&(0x7f0000001000/0x2000)=nil, 0x2000) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 05:34:22 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20000000}) finit_module(r1, &(0x7f0000000080)='\x00', 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r2, 0x4}, &(0x7f0000000180)=0x8) r3 = pkey_alloc(0x0, 0x2) pkey_free(r3) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x6) ioctl$RTC_VL_CLR(r0, 0x7014) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000200)=0x1752, 0x4) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000240)=0x7ff, 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)={0x3, 0x0, [0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f00000002c0)=0xa0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x18) prctl$setfpexc(0xc, 0x100081) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000340)=""/196, &(0x7f0000000440)=0xc4) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000480)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000004c0)=0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000500)={0x1, r6}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000540)={r2, @in6={{0xa, 0x4e24, 0x0, @mcast2, 0x6}}}, &(0x7f0000000600)=0x84) socket$unix(0x1, 0x7, 0x0) syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x61c001) getsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000680)={@multicast1, @dev}, &(0x7f00000006c0)=0x8) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000700)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000740)={@loopback, 0x0}, &(0x7f0000000780)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000007c0)={r7, 0x1, 0x6, @local}, 0x10) perf_event_open(&(0x7f0000000800)={0x3, 0x70, 0x7, 0x6, 0x7, 0x80000000, 0x0, 0x2, 0x4004, 0x8, 0x3, 0x7, 0x7f, 0x2, 0x5, 0x1ff, 0x0, 0x8, 0x9, 0x3, 0xfffffffffffffffc, 0xff, 0xae, 0x40, 0x80000001, 0x6, 0x9, 0x40, 0x3f, 0x4, 0xfffffffffffffffc, 0x4, 0x80000001, 0x9, 0x7, 0x7ff, 0x2, 0x5, 0x0, 0x8, 0x0, @perf_config_ext={0xc8, 0x9}, 0x8000, 0x10001, 0x9, 0x0, 0x55c, 0xef0c000000000, 0x200}, r6, 0x6, r0, 0x1) 05:34:22 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000001c0)={0x29}, 0x4) r0 = socket$inet(0x2, 0x805, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1f, 0xd0100) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000280)={0x0, {0x6, 0x1, 0x0, 0x2, 0x2}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff7188f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) accept4$vsock_stream(r2, &(0x7f00000002c0), 0x10, 0x0) io_setup(0x0, &(0x7f0000000140)) exit(0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1b, 0x19, 0x1c, "e8e9af5b35f6853b674c2207b08594aaff5d43aa71523768f82cede3aa9bd1dd05b9e0d5b65a36c5ebbe589c8094a7f2fea08077815cabab80bce0d8889146f4", "38cbbb500e3310828bcbea55c85a4b55baeb54d05c6fead6f64e046bca63554d26d99193f3c6940086eb029e54512ffca12350e0e4e5ae2f1084186ee2a481e4", "61748b2059fcd7542d73d557925fbcd9f9d87d3b3f6b295c77850f5223c16973", [0x7f4, 0x400]}) clone(0x0, &(0x7f00000003c0)="1a8ac169a683226f2e080f06a8a9b42d800919528f16fc098856d6fb748727d936daaadb033809d91d5557254effa9439d7fd6cc3b723516ae823b4c5eb2f08176cf19bf6fb94d681ea6d999f7e1d89e11eceaf8de9568db8aece28041d4d9f7077564ab76e784b9cc7647fb4064e0f4487ffa2f15abf18dc4b07f089a394ffc3f95e9b6bc1a96421a2830fa8ebd106beb2a97f2804358ed73b22e9cbf77a05ce67dbea17373a001535ce664671fc500b09340e11381bf6933157f342a", &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000480)='I') setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="fffffff87f000001000000000600001044fc0800000020900b24aa745f5baed08c17e5cde254e809564e0a4060862bb4eacb8822088fe2e01dd7ba0f66e03bb2e3f8fba33744922410b01532e75c92740ca9a8073833a8bf9a662c5d6dbe76044b97944d6b8d28ff3e7f01ec6c394df4a8bde4df89a30652575b5bf4cd77acc447a52c6f4fbd7b"], 0x1) 05:34:22 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b7020000fe000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000004006a0a00fe000000008500000026000000b7000000000000009500000000000000"], &(0x7f0000000340)='ser\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0xd7, &(0x7f0000000840)="16131a4abd08284a2535e4f83499", &(0x7f0000000380)=""/215}, 0x28) 05:34:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x410205, 0x0, &(0x7f0000ffd000/0x1000)=nil}) 05:34:22 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/4096}, 0x1008, 0x0, 0x0) [ 267.352541] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 267.391986] hrtimer: interrupt took 53401 ns 05:34:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x7) 05:34:22 executing program 0: getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x7fff, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0xfe30, 0x20000006, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty={[0xe00000000000000, 0xfe80000000000000, 0xfe800000, 0xe603000000000000]}}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000340)={0x4, 0xffffffffffffffff}) socketpair$inet(0x2, 0x0, 0x8, &(0x7f0000000100)) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000240)={0x0, 0x2000000001, 0x2, &(0x7f0000000080)}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8200, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000100)={{0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x5}, 0x0, [0x7, 0x200, 0xfab, 0x4, 0x5614, 0x3f, 0x100000000, 0x1, 0x2, 0x9, 0xd2f, 0x80, 0x800, 0x8, 0x5, 0x400000000000000, 0x7, 0x4, 0x5, 0x0, 0x2, 0x6, 0x562, 0x10001, 0x0, 0x4f, 0x2, 0xd7, 0x9, 0x4, 0x8, 0x0, 0x6, 0x867b, 0x9, 0xffffffff, 0x5de5, 0xfffffffffffffffd, 0x1814, 0x7f, 0x1f, 0x7, 0x3d9f, 0x6, 0x18000, 0x4, 0x401, 0x0, 0x3, 0x5, 0xfff, 0x4334, 0xf5, 0x20, 0x8000, 0x8, 0xf6, 0xed7d, 0xfff, 0x2, 0x100000000, 0x0, 0x1, 0xd5e, 0x6, 0x8c9, 0xe8a7, 0x7, 0x9, 0x10000, 0x2, 0x20, 0x0, 0x7, 0x400, 0x1370, 0x6, 0x40, 0x1, 0x6, 0x6, 0x80, 0x0, 0xfffffffffffffff7, 0x7fffffff, 0x23debecd, 0x3, 0xfffffffffffffffa, 0x2, 0x0, 0x7, 0x7839, 0xb4, 0x1, 0x8, 0x2, 0x1, 0x2, 0x6, 0x2, 0x5, 0x200, 0x0, 0x5, 0xffffffff, 0x3f, 0x0, 0x100, 0xffffffffffff0000, 0x0, 0xfff, 0x2, 0x1, 0x80000001, 0x5, 0x0, 0x2, 0x2, 0xdc, 0x3f, 0x6, 0x5, 0x9, 0x6d8, 0x7, 0x10001, 0x6, 0x86f0], {0x0, 0x1c9c380}}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x0, 0xb}, 0x14}}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) 05:34:23 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x32, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) 05:34:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000200)={0x2, 0x4000000000000d, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}}, @sadb_lifetime={0x4, 0x3, 0x4}]}, 0xa0}}, 0x0) [ 268.521232] Unknown ioctl -993503981 05:34:24 executing program 4: ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 05:34:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x7) [ 269.280947] IPVS: ftp: loaded support on port[0] = 21 [ 269.331521] Unknown ioctl -993503981 05:34:24 executing program 3: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x0, 0x0, 0x5}}}, 0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x138, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x20003, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', "00000000400000000000006fa9199000", @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1b0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x0) [ 269.858183] kernel msg: ebtables bug: please report to author: Unknown flag for bitmask [ 269.942972] kernel msg: ebtables bug: please report to author: Unknown flag for bitmask [ 272.612987] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.619560] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.628046] device bridge_slave_0 entered promiscuous mode [ 272.772271] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.778758] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.787445] device bridge_slave_1 entered promiscuous mode [ 272.940142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 273.079949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 273.505802] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 273.650437] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 274.373639] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 274.381804] team0: Port device team_slave_0 added [ 274.521125] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 274.529370] team0: Port device team_slave_1 added [ 274.683800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.863805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.009691] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 275.017443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.026336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.170488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 275.178303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.187318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.791641] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.798153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.805232] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.811786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.820178] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 276.827029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 283.006117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.568318] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 284.110227] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 284.116763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.124742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.623506] 8021q: adding VLAN 0 to HW filter on device team0 05:34:41 executing program 5: 05:34:41 executing program 0: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/129, 0x81) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) clone(0x1102001bfc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f00000000c0)) 05:34:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) getrandom(&(0x7f0000000280)=""/104, 0xffffffffffffff7b, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 05:34:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0) arch_prctl(0x2002, &(0x7f0000000180)) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_submit(0x0, 0x1, &(0x7f0000000e80)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000033c0)}]) pipe(&(0x7f0000000980)) 05:34:41 executing program 1: setresuid(0x0, 0xee01, 0x0) pipe(&(0x7f0000000340)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') 05:34:41 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = socket(0x11, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80000000000006, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'team0\x00'}) 05:34:41 executing program 1: 05:34:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000a80)=@in={0x2, 0x2, @rand_addr=0xfec00000}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000780)=ANY=[]}}], 0x2, 0x0) 05:34:42 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/protocols\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 05:34:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x80002) write$UHID_INPUT(r0, &(0x7f0000000480)={0x8, "8dc5a1400074a25adb1dcb044f1c408e050814ef5c720554ae03916effed17fa547685712da769015dffb532eac4d167e2e3ea1af953fd2612ec291294e59cfb954bd2a0875d62bd640098db1010fe416c04d734ffe04b4da05973922bbe123bac7744e5356ee00b05b2c3a6a2c6568e19bbf4193381ebbbd32a95d4a5fc54770ea93bfa220d192dcd7391080298c336c80ccd663525eb387a5bdca0406cfca55531629c32f5007006e6cf07ce0055ae4b4187141d5754cb382c15c723b80d31aecdaf9a4e8d2024d489df6492071e618aa29ac06c43a5451fe9fb33a7e279817aaa806f96bf142847aff645de016bac1c875c80a8df5e2cb5e7d7e5c4681978f3c28dac871f46e850353d254d148fae8da0852a65b76bc51368574dfe3dd63ef749c14684a6f0ee5497b044618a4a6eedf8a24d0574db7670d508f0b837944e57614f972ba5496283a5b96bca19b072d3763a133958a893245bdb3a674db80eae7490682534d0083b8827d2fb03b2a52a28392e20bc1e3ce1d62444570320bd6df1b0fe838ae325a7297693f97510bbbda94172a0aa3646bead18bf3eaf5c17d324071b171c13d51c37302d85f198c3d8fbc79fad29adac5d7152c6253036a57b38c9f09aa6b0b1786a3d822f5ec0a3cdf63ac70f7a2dccd31d3ae870479e910e6a80861f1be2f9426c342e7ded9c151024d731aeb7ffe2769a6a8498fb7812ee3d313601b46629b10f04eebd99588d3a17f671c109200add1a1fb224a996a7215622e1162df741b6e0cefce933ecbfa066afe980e8b3d5bffa034efd554a87d6b86464e90380822adcd899c558832252522ba571b6e64e3baae9ee8b59fe3d3775b73a88dcb283b0f05f2a56a7dcbd16c264ecdb2b897f0bcdf726c013fd071caf9966d689be7b3c96080e08296a02a1580ba95280b1f612d13b0a799570a506904ac9cf03679b46578928d03df1c91baa5906fb626ab32e90ca5bec972d453b1ce1fd0d8e34b35e2118f58d7bbf50607052fd72856284db0e3ee27e84d5ce4d08f05cd428a7fb4064263c81347e679ddcd1b6ac0b545c541e0d749a7a93f14772c10927ae2805c845a13884eda9c45476514f8d56809e56c6d628a7caca065beab144ffe22df493bd7eb1b9420b2049bc178f25bc73162bb11475de63b5676921d645a89410fa85b540e14f6902670e33390d44482f366a01c29c02dfd177e5dfffb3c5b89e378479cf36021a078cdebda01df1f3a2c5ec083e5e682ce6d407d808e993cc19dd16bb1258b10a81ebffbefd9fdab1002e514487c1459d77c164f0ef374f9be3349bcb3d05242a07441c40a3842178968cf72191f076894b9f3eab137e3bcc6ba63c5662c55f9f3d576d744b02ba2bca158982656ff8ad392c41106ed58756ab09ad51a237578e3f93788f7b91060b6e66a8592465ebdd4c518ca5f7e9d3bfe17193854c9366333d6bed0f116e32d55a86761b0cc769ba9325fc1e67ecf53e07f90993490586676e97fc95b1c0be2cae0011cda5eff858d31a8bc94336ab07b6b5835fdf91637b78c58c415384fda7768795ef39d8ddc77cf1a540693bc2aa72e0456ff07f355a6c0b8edb51c0bce5c27c52a32bf4e098c229e3009eb74ae83558a6ba04279154ec873bb6c189d146a2d8d719090faefb9258a36422e7a25b332a0b29dd4d19c9bfc914909661ed36ea1fde85bac85f23673fb9d37b2c60d4fc477d574ce89753476262a298eeaac44b7674337d22d95ca7590707da218c78a706ac91906e9862b0da844dbac156394dbddbe95c1bccc7344623c3584b946ea7b5be3182f5a2dda767fce5acf34c3e7310015ee0392b94787988ce0c1ffc6788b8a78f109943280bf4954e1bda7258c2e2084775c78a5c36bba0edf286e96628ef653809262377c071f65c80ef42ff640ad491d37a0bf66dbf384d4a7a3225ac3fcc3628bec5878cd067f790f7914348c8a71b97974a0061c8f5401f50a3e9d9553ad055e536ebb90be6fa90c373beff6009ba30e28b46bc56a811fc6a1de241278d17fb5979b163a18bdc726630d2929e2bcec5e02cea40a4a914435c198c6e6e98aebcbde367b045fc5af06d1f029ae94fbbb5b4147e274e3b6b8b2cbbc3a16232868c2e2d5b47a61804a7b5d38ca7f84a3352d60b102415cb73840a5d396de98918ee8145d40c5087c7477ac42afb9fd74f22f97eed7ce5130f64e7bfb7e4b066642440d868ebe5edd3d1c64bc67d113b0cfe08477c554c040424a3301d616f34aa7fcd56c9efaf4a1c7ef99158cdd048899df50470c84c16ee4553af2471f88f20243aad49615ace49bb7d4f8cab235ad8fe917959ac88eecfe48635983c515cf0211effb8975d5ea601de7d52eaeb23e0c04e3e0a0644d529313bcb2a7383bfe94c935e030b4897fb95f9119469d617c7f0d821f5a208e1f4173411a2b3d70d1c4dfb3a98f6cf80fad5ff42db09c011c4a29c56a59193469b113b56545a40a353e3460901056205fdf45d735d9b797c3c963b2abfb3eb0b3bec4a1106b6b22128806ca0cbd939a562d4714147584c6e44e14ea5ad14c52403f3a74ec07178f62437ba4cc550df88acfe0eab0a2d58e4e487fd9d7fc2f3edc8f55d3ff2cd29a3cc7a976bf757da99bfc67bdc7ddb3d5891c64c948a101372a3671267390d8b02cb7f3fd2acd7c431c2e1919123347356705950ce25c3ea29db69b8e5d84552b26b7141ba844d42d70aa956def77b4599d2b8ab7b3573374b502dea44a5414f232c06e4c5fe7bfca05519733b2f34471592635889cbc34396e276c81fbed3360d3f85b660adc50aff71eba9775a6b5bf3a5b397fb9b61ec0f9f4b78e91c31439166aad8880fb0778dd75f85fa56b564fbd4366e8dc657ae7301681240b585299177950fec8d603ec87da11c1ca3a5e180e708ac57e16f824de8beeefeafb6f1fa2a01c4b555f31020157013aae9a9c034abd94c3873148c4a13d8b9d14d6d60de7013b458e526daf8947ec8e9e6ea175df6a386a7900d234d1dca23b54a66655547120c21a0da97dbba1d2b3d63d8e5db24c4fd2d4f91ebd495a9a04976d39bd77ab132b9b90bb0befaa2b47e62e9805fb174b9bd0fd05247fcadd9744067b0f0199f0e756ae5bd53c949be4312768ad9c0220b548d4a92eae6a9c897ad27c46839cc10a2eb25928d525fc554cbe22e0e0bd1fe0f0c35b4d9e3f72041b4acc84c14c4b34f93f9c093117dc8cad307542351b4e8e28e5386a1be122aaf6dd9744d48679472990feea908fb7aa7a98b9cf18150b6048e954233e0b2b3bfd07ab3fecee243454db0ef7d22e800c90770c8b69cc7576a47e839ac3251c768042a4d1417f2e24d3ed6198a3f704c176dc6e99c75ab3d740cd03215e4de8fcf9f980b3fde63435180c9b285228f0b6b0d96d5a93696b8ba3566ff9acf616cecaedccf0912de10c37d2f1998d2a354ab77ceb77f5e774eb27cacf879b357e1a64c8c8d4cda48dfb115e96a120d778a57507dc042b7653498857e5861bbdcb1f8519d785558fff5b82c527c54cb783aebcc207d35c18a9a3665d54f6ef70a449d9a1e9499804c8b835c4f0dbe823ad618bdfa459a04c03fe9c3ca4411c0fbc26d0b232b802a3679e65e8bf4dbba324e5ae4b5ee07b0a0f15f36dda5d01fd01a387ae099db7738b063ca9995b41e892a0d2b2b6d58b166dedea73ac08fc89ad21dfa4b022f60754f671abe76110bb74b1d1d6925224a8580a9a5ec491af252b1019c975860328498cbd44b99b0b701fb32758119f2488aba24c103169b43118ebb22ff91ffabfb4c0dad4687140be20c55966f107be25f1784d80a7a2d718c75a118d7ad289313d033d856a48df77c41c89163e984ef60f06fbe383788dc312cd4beb6d30755c387d5731d59127ee71915d036789d1a562d454a172611fe6cc1b0bf67f8f7e7f443544116934911ab89a7871b7e460d390a9b54af97096c5cae167f6eea5f3a1336aace811e0e5b7f3fd4e496fdeca3368a0730f076db8583cafb81a91d28d4c042dd85c86bf730e525e61aa9efa4ac7547bd997f7379ac3fcbdeb9f478821c64b571d868cdd20c9164a6244e6e54e34858debaa15f34233567b9f792b66d8adff719b8939652166cf95b8c3888dab0e8882760177e79626bc1ccad287fe8d58bd008d5b180388344da952ceab52dc7026593f5e7f2b966d24b117fe484286dc5ad555bf194b99ebda3e368017422d4d187dd040b6c896c874ce0619ca3c7e733b1713870bd5a18e89d3a6a935f0a9e0d7ebc3c72b82974ebd4c8f2a03f8b7b2b1aaa7463b0f9b55317387f76e7566f35a6bf013a8f47a1f252d5331567588fedea2085bec1a580f6b4ff933fb0a1c56eacbb2826e2daea0d7790715cec55eb98eeb65aad454153bf6e961cffdfdfb26ff6a7b3d43762027583c004af436ff138f9a40ca73df5b3825788d9ff8e7d435b4e793c1d798dceceff70c950cf998a5d2eb769af7d1a67728f4c6ee699660e7b3f2df75e64b52330a4743b2614ff12614c52c0f6cb9c028c78ecf71b80314eb46a7842964049d35561d5e12e1915a3176980526cf8fd71b1f0697aa506cfadee6e5241a40c860c4fbe407ac161a6a76c9c5c289dbb248b68bac1627a8feb52a25872744f0c016ba6a4c039fb930b05ea1a2c02c387c30c80406b38031b22eb93b0f2b5ee9121862bf52f102d9f7a6a40697f16a6c887c4e3bbe3391d9a57b87f5da858bd479dd6adcb72b5664705654c431fd8823861c1032348c6eafa06ac19de38ce81be43ae15702dfe14f6c6d3f5c438be471e480e8b1c0adb82f551a9fcd44d53a3b0aa526298d6f6c35ec89079061cfa5b2cd50d0da3e306c63c72d014655fa7df8a029d316e11f68b0e6d275059c4f66255949b4917bf1d2acbc0755a1ee6d1336f77dbce6b32e0709e9d96042542e00f684cda37fb86245082fd5dfcf52421b2a01c33d96ae7fb301390aea50827e6d7f722f205aa4b78039c128f2f94fd73a6161e904c3468e9e262657723aa2e23f5888f46463bd0aaef295a0d6b7d1013f47ced965791c04fbc2b89e798e80be449a830de2a0e5e31844f734bf21d6d8a8330340f10c41c80dde5828b6af0951915185f8574e736061570e512e3087f9290abad4c96cb15e806757532c6c4529c7e7a7496c54defa4e56b66fc7ab5c5724d8fc03b6060502043db843e941c590c144831a107612b16a66423373c342e43dd3516e2859d143ff21c280bbecbbf0ced21dec20bc88a10d56bc1dd1ef80d982ec4580a1e091c6f619abcf96ffe2b8d0f2923f9335644316fede1f9e47d62605a9d361bd9a7c5d6f3e90d5b8cb35fd49fcc078fc225d8cd9497210cedd3ff854a8d1b539779e6718d02ae74db8254f33f4319ab08382b836a13b119e19becc5643e5be5a81c1dffc404cd7177ebcf7c0cf1ee9e87c00b65568bd87756eb2ab0f0cfb47f9d6a881f932af6e0e84e450b46a8bb9cc9d1269710c93824e3dd65e5251784052a342131992076d02c0f0b421954b72d8d01031804286009e2b979412ea0009f8cf55d1c4360d5a765facb6c3bd553a3f6449a6eba9a93049c3c741653b21fde6c7916925dacca707a5c0db17c3ef71a06cd63ff39f9c941e9f79a40cb31d0f33239c69e079c3fb7a157b654b776d2e32629e59f64b243b9cdbc52ce3dba7c8592094d0890387d5bff0078bd8c2fab43bebcae8c1266b921c1ec5b3f5ea16939fdd41b64dc02be7166b2ca61dbdf28646a5696103c4e780992c2548863b7", 0x1000}, 0x1006) 05:34:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x1132}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)="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") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x1132}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a31e3bc841f37e62e3598801a53c3087830e46200009e1c52d8b10f5dea6cf3c7c724e008398571316604ed44d0b14aaec411dad743612010a299001a72ec207082ae2034541a8ad980a90f"], 0x4e) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x12) 05:34:42 executing program 1: 05:34:42 executing program 5: 05:34:42 executing program 0: 05:34:42 executing program 1: 05:34:42 executing program 3: 05:34:42 executing program 2: 05:34:42 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x42021) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000030fb4)={0x0, 0x0, 0x207}) write$sndseq(r0, &(0x7f0000000e50), 0xfffffe41) 05:34:43 executing program 0: 05:34:43 executing program 4: 05:34:43 executing program 1: 05:34:43 executing program 2: 05:34:43 executing program 3: 05:34:43 executing program 0: 05:34:43 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x1000000) 05:34:43 executing program 2: 05:34:44 executing program 3: 05:34:44 executing program 1: 05:34:44 executing program 0: 05:34:44 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x42021) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000030fb4)={0x0, 0x0, 0x207}) write$sndseq(r0, &(0x7f0000000e50), 0xfffffe41) 05:34:44 executing program 2: 05:34:44 executing program 3: 05:34:44 executing program 0: 05:34:44 executing program 1: 05:34:44 executing program 4: 05:34:45 executing program 0: 05:34:45 executing program 2: 05:34:45 executing program 3: 05:34:45 executing program 1: 05:34:45 executing program 0: 05:34:45 executing program 4: 05:34:46 executing program 5: 05:34:46 executing program 2: 05:34:46 executing program 1: 05:34:46 executing program 0: 05:34:46 executing program 3: 05:34:46 executing program 4: 05:34:46 executing program 1: 05:34:46 executing program 2: 05:34:46 executing program 3: 05:34:46 executing program 4: 05:34:46 executing program 5: syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @link_local={0x8}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x8906, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c8d1f6", 0x0, "071ccd"}}}}}}, &(0x7f0000000000)) 05:34:46 executing program 0: 05:34:46 executing program 3: 05:34:46 executing program 1: 05:34:47 executing program 2: 05:34:47 executing program 4: 05:34:47 executing program 5: 05:34:47 executing program 0: 05:34:47 executing program 1: 05:34:47 executing program 3: 05:34:47 executing program 0: 05:34:47 executing program 2: 05:34:47 executing program 5: 05:34:47 executing program 4: 05:34:47 executing program 3: 05:34:47 executing program 1: 05:34:47 executing program 0: 05:34:47 executing program 5: 05:34:48 executing program 4: 05:34:48 executing program 2: 05:34:48 executing program 1: 05:34:48 executing program 3: 05:34:48 executing program 5: 05:34:48 executing program 4: 05:34:48 executing program 0: 05:34:48 executing program 2: 05:34:48 executing program 1: 05:34:48 executing program 3: 05:34:48 executing program 2: 05:34:48 executing program 0: 05:34:48 executing program 4: 05:34:49 executing program 1: 05:34:49 executing program 2: 05:34:49 executing program 5: 05:34:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, &(0x7f0000000480)=[@flags], 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) accept$unix(0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000140)=0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000580)=0xefff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, &(0x7f0000000500), 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000200)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x81, 0x402503) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000000440)={@broadcast, @local}, &(0x7f0000000500)=0x8) socket(0xb, 0x0, 0x80) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000003c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:34:49 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x123}) 05:34:49 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x0) r1 = msgget(0x2, 0x400) msgsnd(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="0000000000311799e9ef61e100000084e25d122bf0f3d5a2ff46e1c825b785e7ec01363da488da2ddcfc245bc162563fafce4e92bf073101fcf00c4366e1dba1fa9c11bcd85df6c2aad795b3231b23b6a63c4939ed556b54"], 0x1, 0x800) r2 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x80002) r4 = open(&(0x7f0000000280)='./file0\x00', 0x200, 0xc) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000640)='dummy0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) write$FUSE_INTERRUPT(r4, &(0x7f0000000740)={0x10, 0x0, 0x4}, 0x8e) timerfd_create(0x3, 0x800) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0xa93dda349380be40, 0x0) r6 = socket$inet6(0xa, 0x1000000000002, 0x3) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r8 = msgget$private(0x0, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) fstat(r5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480)) getresgid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000900)) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000940)) r11 = getpgrp(0x0) r12 = getpgid(r11) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000580)=0x0) close(r4) msgctl$IPC_SET(r8, 0x1, &(0x7f00000005c0)={{0x5f80499b, r9, r10}, 0x0, 0x8, 0x4, 0x1, 0x0, 0xf611, r12, r13}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000240)=r14) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={"69726c61bd15000000001f0000000020", 0x1012}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000880)={0x53, 0xffffffffffffffff, 0x74, 0x5, @scatter={0x1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/7, 0x7}]}, &(0x7f0000000800)="7888c822b3118cf067449d6de35f5b1ba1a0f14a6e2637ff914fdb3733068e1c752046a785aacaa5363b9df774965fd9eabd52b8e29363ffc38e11773fe56c69ec8905d1d546fee7910c66dcaa66b96d31796d05c3dcba2684ad07b2c9ffe8b9fc5ceebbbcf6edbdc2bbc9e536dc0b714f4abc1c", &(0x7f0000000200)=""/63, 0x101, 0x30, 0x1, &(0x7f0000000700)}) 05:34:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) [ 294.544330] ================================================================== [ 294.551805] BUG: KMSAN: uninit-value in vmx_create_vcpu+0x10df/0x7920 [ 294.558421] CPU: 0 PID: 7993 Comm: syz-executor0 Not tainted 4.19.0-rc4+ #63 [ 294.565624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.574990] Call Trace: [ 294.577618] dump_stack+0x306/0x460 [ 294.581285] ? _raw_spin_lock_irqsave+0x227/0x340 [ 294.586162] ? vmx_create_vcpu+0x10df/0x7920 [ 294.590626] kmsan_report+0x1a3/0x2d0 [ 294.594507] __msan_warning+0x7c/0xe0 [ 294.598352] vmx_create_vcpu+0x10df/0x7920 [ 294.602624] ? kmsan_set_origin_inline+0x6b/0x120 [ 294.607526] ? __msan_poison_alloca+0x17a/0x210 [ 294.612251] ? vmx_vm_init+0x340/0x340 [ 294.616179] kvm_arch_vcpu_create+0x25d/0x2f0 [ 294.620728] kvm_vm_ioctl+0x13fd/0x33d0 [ 294.624764] ? __msan_poison_alloca+0x17a/0x210 [ 294.629486] ? do_vfs_ioctl+0x18a/0x2810 [ 294.633591] ? __se_sys_ioctl+0x1da/0x270 [ 294.637783] ? vcpu_stat_clear_per_vm+0x420/0x420 05:34:49 executing program 2: [ 294.642662] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 294.647551] do_vfs_ioctl+0xcf3/0x2810 [ 294.651501] ? security_file_ioctl+0x92/0x200 [ 294.656045] __se_sys_ioctl+0x1da/0x270 [ 294.660108] __x64_sys_ioctl+0x4a/0x70 [ 294.664036] do_syscall_64+0xbe/0x100 [ 294.667899] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 294.673116] RIP: 0033:0x457579 [ 294.676336] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 294.695271] RSP: 002b:00007f0e12742c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.703030] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 294.710362] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 294.717669] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 294.725006] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0e127436d4 [ 294.732298] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 294.739603] [ 294.741253] Local variable description: ----c.i.i.i.i.i.i@vmx_create_vcpu [ 294.748185] Variable was created at: [ 294.751924] vmx_create_vcpu+0xd5/0x7920 [ 294.756011] kvm_arch_vcpu_create+0x25d/0x2f0 [ 294.760528] ================================================================== [ 294.767896] Disabling lock debugging due to kernel taint [ 294.773369] Kernel panic - not syncing: panic_on_warn set ... [ 294.773369] [ 294.780810] CPU: 0 PID: 7993 Comm: syz-executor0 Tainted: G B 4.19.0-rc4+ #63 [ 294.789404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.798780] Call Trace: [ 294.801405] dump_stack+0x306/0x460 [ 294.805104] panic+0x54c/0xafa [ 294.808385] kmsan_report+0x2cd/0x2d0 [ 294.812236] __msan_warning+0x7c/0xe0 [ 294.816121] vmx_create_vcpu+0x10df/0x7920 [ 294.820402] ? kmsan_set_origin_inline+0x6b/0x120 [ 294.825283] ? __msan_poison_alloca+0x17a/0x210 [ 294.830005] ? vmx_vm_init+0x340/0x340 [ 294.833952] kvm_arch_vcpu_create+0x25d/0x2f0 [ 294.838529] kvm_vm_ioctl+0x13fd/0x33d0 05:34:49 executing program 1: [ 294.842595] ? __msan_poison_alloca+0x17a/0x210 [ 294.847297] ? do_vfs_ioctl+0x18a/0x2810 [ 294.851383] ? __se_sys_ioctl+0x1da/0x270 [ 294.855575] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 294.860449] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 294.865339] do_vfs_ioctl+0xcf3/0x2810 [ 294.869282] ? security_file_ioctl+0x92/0x200 [ 294.873834] __se_sys_ioctl+0x1da/0x270 [ 294.877860] __x64_sys_ioctl+0x4a/0x70 [ 294.881779] do_syscall_64+0xbe/0x100 [ 294.885618] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 294.890829] RIP: 0033:0x457579 [ 294.894050] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 294.912997] RSP: 002b:00007f0e12742c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.920750] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 294.928038] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 294.935344] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 294.942651] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0e127436d4 [ 294.949955] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 294.958241] Kernel Offset: disabled [ 294.961885] Rebooting in 86400 seconds..