[....] Starting OpenBSD Secure Shell server: sshd[ 51.031060] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 51.397184] audit: type=1800 audit(1539104488.443:29): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 51.416852] audit: type=1800 audit(1539104488.443:30): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 54.632094] random: sshd: uninitialized urandom read (32 bytes read) [ 54.981740] random: sshd: uninitialized urandom read (32 bytes read) [ 56.668295] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.64' (ECDSA) to the list of known hosts. [ 62.369446] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/09 17:01:41 fuzzer started [ 66.232718] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/09 17:01:45 dialing manager at 10.128.0.26:44001 2018/10/09 17:01:45 syscalls: 1 2018/10/09 17:01:45 code coverage: enabled 2018/10/09 17:01:45 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/09 17:01:45 setuid sandbox: enabled 2018/10/09 17:01:45 namespace sandbox: enabled 2018/10/09 17:01:45 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/09 17:01:45 fault injection: enabled 2018/10/09 17:01:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/09 17:01:45 net packed injection: enabled 2018/10/09 17:01:45 net device setup: enabled [ 70.587970] random: crng init done 17:03:13 executing program 0: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bond0\x00'}) sync() [ 157.226101] IPVS: ftp: loaded support on port[0] = 21 [ 159.304596] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.311074] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.319582] device bridge_slave_0 entered promiscuous mode [ 159.436273] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.442929] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.451013] device bridge_slave_1 entered promiscuous mode [ 159.567901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.691178] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 160.072125] bond0: Enslaving bond_slave_0 as an active interface with an up link 17:03:17 executing program 1: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0x10, 0x400000000003, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@nl=@kern={0x10, 0x9, 0x8000000000000000}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="5500000018007f7000fe01b2a4a280930a600080fea8430291000000390009002300fbff010000000d0005000be9ffffffffc68b65082314e9030b9d566885b16732009b84e7b1df136ef75af90000000000000000", 0x55}], 0x1, &(0x7f0000000000)}, 0x0) [ 160.214274] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.843495] IPVS: ftp: loaded support on port[0] = 21 [ 161.275997] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 161.283940] team0: Port device team_slave_0 added [ 161.539436] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 161.547460] team0: Port device team_slave_1 added [ 161.755150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 161.773313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.782108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.956322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 161.963523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.972076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.124048] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 162.131668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.140580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.341076] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 162.348962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.357867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 17:03:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000900)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x86100) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) sendfile(r2, r1, &(0x7f0000000180), 0x100000005) [ 164.395640] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.402758] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.410860] device bridge_slave_0 entered promiscuous mode [ 164.618121] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.624676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.631535] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.638106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.646646] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 164.677874] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.684708] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.692991] device bridge_slave_1 entered promiscuous mode [ 164.897510] IPVS: ftp: loaded support on port[0] = 21 [ 165.015539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 165.231854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 165.302720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.895679] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 166.227300] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 166.502027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 166.509296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.771465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 166.778733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.394455] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 167.402613] team0: Port device team_slave_0 added [ 167.725773] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 167.733977] team0: Port device team_slave_1 added [ 167.968065] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 167.975343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.984244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.275434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 168.282609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.291104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.504949] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 168.512841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.521613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.821276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.829178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.837973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.243152] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.249805] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.258180] device bridge_slave_0 entered promiscuous mode [ 169.493324] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.499884] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.508133] device bridge_slave_1 entered promiscuous mode [ 169.695379] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.930512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 170.820339] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 171.067568] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.322957] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.341001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 17:03:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 171.631351] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.638580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.133698] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.140216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.147305] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.153811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.162211] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 172.403867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.448028] IPVS: ftp: loaded support on port[0] = 21 [ 172.566430] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.574451] team0: Port device team_slave_0 added [ 172.849931] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.858024] team0: Port device team_slave_1 added [ 173.219265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.226902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.235566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.532494] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.539521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.548248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.818578] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.826332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.835225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.165037] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.172872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.181679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.836091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.833958] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 177.412985] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.419469] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.427729] device bridge_slave_0 entered promiscuous mode [ 177.670617] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.678779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.685636] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.692118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.700512] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 177.740899] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.747481] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.755652] device bridge_slave_1 entered promiscuous mode [ 177.942566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.988676] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 177.995092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.002887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.054218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.359977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 179.178550] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.208247] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.491374] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.766598] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.773743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.078800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 180.086163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 17:03:37 executing program 4: seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6, 0x0, 0x0, 0x407ffffffd}]}) [ 181.205348] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 181.213413] team0: Port device team_slave_0 added [ 181.567946] IPVS: ftp: loaded support on port[0] = 21 [ 181.577231] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 181.585190] team0: Port device team_slave_1 added [ 181.980218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 181.987426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.996099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.314695] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 182.321768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.330399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.693969] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 182.701496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.710510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.102814] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.110383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.119342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.439052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.986668] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.993246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.000108] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.006677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.015149] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 187.072574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.174493] ip (6803) used greatest stack depth: 53056 bytes left 17:03:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8200006) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80b) fallocate(r0, 0x8, 0x0, 0x10000) [ 187.933688] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 187.942077] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.949056] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.957236] device bridge_slave_0 entered promiscuous mode [ 188.368786] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.375364] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.383686] device bridge_slave_1 entered promiscuous mode [ 188.771271] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 189.113126] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 189.398874] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 189.405459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.413232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 17:03:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmdt(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@dev}}}, &(0x7f0000000280)=0xe8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f657865000000000004ee004bddd9de91be10eebf000ee9a90f798058439ed55432b37c4f85c3cf27aed7256d5ffa07424adee901d2da75af1f02ac") flistxattr(r2, &(0x7f0000000340)=""/199, 0xfffffffffffffdd6) 17:03:47 executing program 0: unshare(0x20400) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2040, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040), 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240), 0x4) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xf) socket$packet(0x11, 0x2, 0x300) 17:03:47 executing program 5: r0 = geteuid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40080, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x8000, 0x81, 0x6394}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r2, 0x5}, &(0x7f0000000180)=0x8) write$FUSE_GETXATTR(r1, &(0x7f00000001c0)={0x18, 0x0, 0x4, {0x4}}, 0x18) sendmsg$kcm(r1, &(0x7f0000001400)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000280)="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", 0x1000}], 0x1, &(0x7f00000012c0)=[{0xd0, 0x29, 0x8001, "16683f5ee87840794143938f9356caabe5ec3db9f662c6add15083edc1bd5d954df5b5e1a640d59353c1faf3a7f07cf89d6ffd0fee91c5d590741b0a782021a7ea6a3c11ff29776c7e39415b2c471742bcc562d0f01e5fe796f4c0f4e5e2cc806dccbf8fe786f758861192a38b1ffb72efa3de0adaafc6067c7f8bfa3a28c5f9865ae299ef1d1248ff0f43020b46b1ca4ba4034f66440ebc8dc661a39073908dbd244d1412dbd1afe15b410459e004b261d4d26e459b71e8ae1b2f2e15"}, {0x68, 0x11f, 0x2, "2ce707e9d08a2eee52b19a95a21d53a4207857f3a3f9066668e5bc370d88aee6bc35dbb012698a8119faad36b04a0ae65e5f4ca3c77c51f24068ba992abe0fb43135ffe2c43fd0a681e084e7f7065a0e86e9a62999d984d6"}], 0x138, 0x1}, 0x20000000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001440)={r3, 0x2}, &(0x7f0000001480)=0x8) ioctl$BLKFRASET(r1, 0x1264, &(0x7f00000014c0)=0x532f) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001500)={@in={{0x2, 0x4e23, @multicast2}}, 0x94c, 0x6, 0x8000, "e40a1aa8b50c5a34b50e71cfbf592f327d83393e389cdb60ad92936bd92ccf46857783f87054c9a2c09f732e1ac61e76102c9ae8171b001c2a90908ffa8a0ff32429dba79230c3d644eed1cc535ae752"}, 0xd8) getsockname$packet(r1, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001640)=0x14) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001680)={{{@in=@rand_addr=0x100, @in=@remote, 0x4e22, 0x0, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0xbf, r5, r0}, {0x20b, 0x80000001, 0x3, 0xfffffffffffffff9, 0x9, 0x6d2, 0xe6, 0x2}, {0x7acd, 0x7, 0x0, 0x37}, 0x7fffffff, 0x0, 0x1, 0x1, 0x3, 0x2}, {{@in6=@ipv4, 0x4d4, 0x3c}, 0xa, @in, 0x3503, 0x1, 0x3, 0x7, 0x6, 0x1000, 0x9}}, 0xe8) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000001780)=0x5) r6 = syz_open_dev$dspn(&(0x7f00000017c0)='/dev/dsp#\x00', 0x1000, 0x2) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000001800)={0x9, 0x0, [{0x80000000, 0x0, 0x0, 0x0, @adapter={0x40, 0x4f5, 0x7, 0x1ff, 0x7fff}}, {0x77d, 0x7, 0x0, 0x0, @sint={0xe5, 0x7}}, {0x400, 0x0, 0x0, 0x0, @irqchip={0x6, 0x10001}}, {0xf124, 0x0, 0x0, 0x0, @adapter={0x8001, 0x2590, 0x5, 0xffff, 0x2}}, {0x8001, 0x1, 0x0, 0x0, @sint={0x10001, 0x2}}, {0x5, 0x1, 0x0, 0x0, @irqchip={0x8, 0xffffffffffff760a}}, {0x8, 0x1, 0x0, 0x0, @sint={0xffff, 0x3a55}}, {0x9, 0x3, 0x0, 0x0, @adapter={0x5, 0x100000000, 0x800, 0x8, 0x60000000000000}}, {0xf6, 0x2, 0x0, 0x0, @adapter={0x0, 0x2, 0x1, 0x4d74, 0x380000000000000}}]}) getsockopt$inet6_tcp_int(r6, 0x6, 0x15, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) ioctl$TIOCEXCL(r6, 0x540c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001a40)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000001b40)=0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000001bc0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001b80)={0xffffffffffffffff}, 0x13f, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000001c00)={0x9, 0x108, 0xfa00, {r7, 0x51, "77ec6f", "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"}}, 0x110) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000001d40)={0x0, 0x0}) write$FUSE_LK(r6, &(0x7f0000001d80)={0x28, 0xfffffffffffffffe, 0x7, {{0xfffffffffffffff9, 0x35, 0x3, r8}}}, 0x28) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000001dc0)={0x100000000, 0x5, 0x4, 0xc, 0x3, 0x0, 0xff, 0x78, r3}, &(0x7f0000001e00)=0x20) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000001e40)) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x58) write$P9_RREADDIR(r1, &(0x7f0000001e80)={0x103, 0x29, 0x1, {0x7, [{{0x49, 0x2, 0x2}, 0xffffffff, 0x6, 0x7, './file0'}, {{0x20, 0x2, 0x5}, 0x5, 0x1, 0x7, './file0'}, {{0x1c, 0x0, 0x7}, 0x0, 0x9, 0x7, './file0'}, {{0x2, 0x1, 0x8}, 0x9, 0x0, 0x7, './file0'}, {{0x0, 0x8000, 0x5}, 0x4, 0x800000000000000, 0x7, './file0'}, {{0x0, 0x4, 0x6}, 0x5, 0x8000, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0xef2, 0x3, 0x7, './file0'}, {{0x22, 0x3, 0x7}, 0x9, 0x2, 0x7, './file0'}]}}, 0x103) accept$inet(r1, &(0x7f0000001fc0)={0x2, 0x0, @rand_addr}, &(0x7f0000002000)=0x10) [ 190.316641] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 190.689226] bond0: Enslaving bond_slave_1 as an active interface with an up link 17:03:47 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="64c5"], 0x2) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='sqQ'], 0x3) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 190.836651] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.115701] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 191.122874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 17:03:48 executing program 0: r0 = userfaultfd(0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000527ff8), 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 17:03:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b00500000000bb00000101dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x2b8, &(0x7f0000000100)}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003080)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=""/169, 0xa9}}, {{&(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, &(0x7f0000003240)={0x77359400}) [ 191.484193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 191.491318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.638382] IPVS: ftp: loaded support on port[0] = 21 17:03:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b00500000000bb00000101dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x2b8, &(0x7f0000000100)}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003080)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=""/169, 0xa9}}, {{&(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, &(0x7f0000003240)={0x77359400}) [ 192.618043] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 192.626181] team0: Port device team_slave_0 added [ 192.953202] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 192.961186] team0: Port device team_slave_1 added [ 193.240037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 193.247241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.255864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.314501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.549943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 193.557135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.565577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.884539] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 193.892035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.901194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.182496] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 194.190041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.198823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.482456] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 195.796920] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 195.824948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.832883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.012565] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.019140] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.027462] device bridge_slave_0 entered promiscuous mode [ 197.057201] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.416050] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.422779] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.430996] device bridge_slave_1 entered promiscuous mode [ 197.741861] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.748636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.755712] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.762156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.770337] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 197.796716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.130897] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.582912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 17:03:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="799743f57fc7c254f10b4f879acbf60e", 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x850}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x7ffff000}}, 0x0) [ 199.095303] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 199.370174] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 199.595751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 199.604180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.891971] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.899330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.575831] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 200.584222] team0: Port device team_slave_0 added [ 200.837845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.870032] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 200.878060] team0: Port device team_slave_1 added [ 201.131749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 201.138962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.147628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.341120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 201.348356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.356986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.647848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 201.655501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.664338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.717904] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.984231] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 201.991904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.000841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.578484] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 202.585037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.592991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.791911] 8021q: adding VLAN 0 to HW filter on device team0 17:04:01 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='bridge_slave_1\x00') [ 204.672166] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.678847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.685849] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.692532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.700730] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 204.707582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.900752] 8021q: adding VLAN 0 to HW filter on device bond0 17:04:05 executing program 3: [ 208.786340] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 209.271114] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.277764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.285717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.797811] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.129008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.607534] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 212.089891] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 212.096546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.104461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.587731] 8021q: adding VLAN 0 to HW filter on device team0 17:04:09 executing program 4: 17:04:09 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000080)) mknod(&(0x7f0000000180)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000500)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="696f005bfc57169babee54ed16e39e7a8fe4b90016f266e3f63c443b3fc5040006bb5cd4bd7c7373b3d4d470a0cb5617aadbfb64c5f9983c25d024a9f3c489cc438f9e6de1635f672bf70ad3bc27c924384f5586d4a51c6420a4e356e4e5ff7e28104d262f889f390101ccaff805816603f65ba3df555b6c352cd7d84a7267a03436ba") pread64(r0, &(0x7f0000000140), 0x0, 0x10000000) pread64(r0, &(0x7f0000000000)=""/157, 0x9d, 0x3b) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@ipv4, 0x8, 0x0, 0x2, 0xd, 0x1, 0x7, 0x60}, 0x20) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1f}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair(0x9, 0xf, 0x3, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="039cc9eb052b7691"], 0x1, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 17:04:09 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006540), &(0x7f0000006580)=0xc) getpgrp(0xffffffffffffffff) getresgid(&(0x7f0000007900), &(0x7f0000007940), &(0x7f0000007980)) lstat(&(0x7f0000007c00)='./file0\x00', &(0x7f0000007c40)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000080)) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000640)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10010174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c888c9ff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)) pause() ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic}) 17:04:09 executing program 2: [ 213.052350] hrtimer: interrupt took 101367 ns 17:04:12 executing program 5: 17:04:12 executing program 3: 17:04:12 executing program 2: 17:04:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000580)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 17:04:12 executing program 1: 17:04:12 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000080)) mknod(&(0x7f0000000180)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000500)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="696f005bfc57169babee54ed16e39e7a8fe4b90016f266e3f63c443b3fc5040006bb5cd4bd7c7373b3d4d470a0cb5617aadbfb64c5f9983c25d024a9f3c489cc438f9e6de1635f672bf70ad3bc27c924384f5586d4a51c6420a4e356e4e5ff7e28104d262f889f390101ccaff805816603f65ba3df555b6c352cd7d84a7267a03436ba") pread64(r0, &(0x7f0000000140), 0x0, 0x10000000) pread64(r0, &(0x7f0000000000)=""/157, 0x9d, 0x3b) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@ipv4, 0x8, 0x0, 0x2, 0xd, 0x1, 0x7, 0x60}, 0x20) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1f}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair(0x9, 0xf, 0x3, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="039cc9eb052b7691"], 0x1, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 17:04:12 executing program 2: 17:04:12 executing program 5: 17:04:12 executing program 2: 17:04:12 executing program 4: 17:04:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000002f00)=ANY=[@ANYBLOB="cf96b3e43f001512ee1c680d95a617792d"], 0x1}}, 0x0) recvmmsg(r0, &(0x7f0000004880)=[{{&(0x7f00000002c0)=@generic, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000600)=""/202, 0xca}}], 0x1, 0xffffffffffffffff, &(0x7f0000004a80)={0x77359400}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000700)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000180)=""/78, &(0x7f0000000040)=0x4e) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @broadcast}, &(0x7f0000000280)=0xc) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.nlink\x00', &(0x7f00000002c0)=""/152, 0x98) r5 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000500)) r6 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x3, 0x20900) syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000fc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x21010000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000540)=ANY=[@ANYBLOB="400500000000000000000b02656e61646c65642ae9000000000010b0880000a916bfeff9cf07000000000000ef00000037db48085f597333", @ANYRES32=r4], 0x2}, 0x1, 0x0, 0x0, 0x4040001}, 0x80) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000380)={{0x2, 0x4e22, @remote}, {0x306, @dev={[], 0xb}}, 0x4, {0x2, 0x4e24, @multicast1}, 'syz_tun\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000001300)=ANY=[]}, 0x0) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000001000)="eeb9fedb3fb26fb8913febc751aa47ef4c77b0e003272c6d46bd361eb73be205c0b7219a70c6b55e8fe4b0db0c890b2c23cb56116fb6392c8633aa82e2a53f902f145413c81c76acc919c17877f4d18f2eb7aba0c3d05575f4c8") io_setup(0x0, &(0x7f00000004c0)) creat(&(0x7f0000000580)='./file0\x00', 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r7, 0xc1004110, &(0x7f0000000080)="5aad1aad9f203b1cba7ee1ebcf") r8 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xfffffffffffffff8, 0x2) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, &(0x7f0000000440)={0x4007fffffff, 0x10001, 0x3}) r9 = syz_open_dev$midi(&(0x7f0000000400)='/dev/midi#\x00', 0x67, 0x8000) ioctl$LOOP_SET_FD(r8, 0x4c00, r9) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24}}, [0xffffffff, 0x1, 0x0, 0x7, 0x0, 0x8000, 0xffff, 0x3ff, 0x7, 0x0, 0x80000000, 0xffffffffffffffff, 0x4, 0xff, 0x3]}, &(0x7f0000000240)=0x100) 17:04:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000020002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 17:04:12 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg$kcm(r2, &(0x7f0000008ec0)={0x0, 0x0, &(0x7f0000008e40)=[{&(0x7f0000007b80)=""/4096, 0x1000}], 0x1}, 0x0) 17:04:13 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f0000000240)=[{0x10, 0x10d, 0x4}], 0x10}}], 0x1, 0x0) 17:04:13 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f"], 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 17:04:13 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x42002, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000480)={r1, 0xf5}) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000003c0)=ANY=[], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15f26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de1300005b54074500331d1cee482b157624c5bc719a099e6a3509080000398c", 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0xfffffe38) r3 = gettid() r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_smack_entry(r4, &(0x7f0000000340)='security.SMACK64IPIN\x00', &(0x7f00000004c0)="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", 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x3, 0x0, 0x0, 0x0, 0x7fffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0xc0e1, 0x800, 0x8, 0x8, 0x7, 0x8, 0x0, 0xb03, 0x0, 0x80000000, 0x5, 0x9, 0x700000000, 0x0, 0x7, 0x6, 0x6, 0x0, 0x4, 0x80000000, 0x0, 0x80000000, 0x0, @perf_config_ext={0xe05e, 0x7}, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0x50, &(0x7f0000000100)}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x49) write$cgroup_pid(r2, &(0x7f00000000c0)=r3, 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000380)) pipe(&(0x7f00000002c0)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000005dc0)) fcntl$lock(r2, 0x6, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x0, r3}) 17:04:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 17:04:13 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000080)) mknod(&(0x7f0000000180)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000500)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="696f005bfc57169babee54ed16e39e7a8fe4b90016f266e3f63c443b3fc5040006bb5cd4bd7c7373b3d4d470a0cb5617aadbfb64c5f9983c25d024a9f3c489cc438f9e6de1635f672bf70ad3bc27c924384f5586d4a51c6420a4e356e4e5ff7e28104d262f889f390101ccaff805816603f65ba3df555b6c352cd7d84a7267a03436ba") pread64(r0, &(0x7f0000000140), 0x0, 0x10000000) pread64(r0, &(0x7f0000000000)=""/157, 0x9d, 0x3b) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@ipv4, 0x8, 0x0, 0x2, 0xd, 0x1, 0x7, 0x60}, 0x20) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1f}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair(0x9, 0xf, 0x3, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="039cc9eb052b7691"], 0x1, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) [ 216.413200] QAT: Invalid ioctl 17:04:13 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000300), 0x1c) 17:04:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000080)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, &(0x7f0000002740)=""/218, 0x3c}}], 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0) [ 216.564329] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 216.602629] QAT: Invalid ioctl [ 216.636921] QAT: Invalid ioctl [ 216.684975] ================================================================== [ 216.692398] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 216.700033] CPU: 0 PID: 7785 Comm: syz-executor1 Not tainted 4.19.0-rc4+ #65 [ 216.707339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.716699] Call Trace: [ 216.719306] dump_stack+0x306/0x460 [ 216.722954] ? vmx_set_constant_host_state+0x1778/0x1830 [ 216.728434] kmsan_report+0x1a2/0x2e0 [ 216.732257] __msan_warning+0x7c/0xe0 [ 216.736084] vmx_set_constant_host_state+0x1778/0x1830 [ 216.741389] vmx_create_vcpu+0x3e6f/0x7870 [ 216.745646] ? kmsan_set_origin_inline+0x6b/0x120 [ 216.750594] ? __msan_poison_alloca+0x17a/0x210 [ 216.755293] ? vmx_vm_init+0x340/0x340 [ 216.759202] kvm_arch_vcpu_create+0x25d/0x2f0 [ 216.763721] kvm_vm_ioctl+0x13fd/0x33d0 [ 216.767718] ? __msan_poison_alloca+0x17a/0x210 [ 216.772403] ? do_vfs_ioctl+0x18a/0x2810 [ 216.776478] ? __se_sys_ioctl+0x1da/0x270 [ 216.780643] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 216.785502] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 216.790364] do_vfs_ioctl+0xcf3/0x2810 [ 216.794280] ? security_file_ioctl+0x92/0x200 [ 216.798801] __se_sys_ioctl+0x1da/0x270 [ 216.802794] __x64_sys_ioctl+0x4a/0x70 [ 216.806696] do_syscall_64+0xbe/0x100 [ 216.810513] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 216.815719] RIP: 0033:0x457579 [ 216.818920] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 216.837830] RSP: 002b:00007fa6c64b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.845556] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 216.852839] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 216.860124] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 216.867414] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa6c64b76d4 [ 216.874700] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 216.882109] [ 216.883747] Local variable description: ----dt@vmx_set_constant_host_state [ 216.890755] Variable was created at: [ 216.894492] vmx_set_constant_host_state+0x2b0/0x1830 [ 216.899914] vmx_create_vcpu+0x3e6f/0x7870 [ 216.904152] ================================================================== [ 216.911525] Disabling lock debugging due to kernel taint [ 216.916989] Kernel panic - not syncing: panic_on_warn set ... [ 216.916989] [ 216.924401] CPU: 0 PID: 7785 Comm: syz-executor1 Tainted: G B 4.19.0-rc4+ #65 [ 216.932988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.942355] Call Trace: [ 216.944980] dump_stack+0x306/0x460 [ 216.948738] panic+0x54c/0xafa [ 216.951975] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 216.957463] kmsan_report+0x2d3/0x2e0 [ 216.961297] __msan_warning+0x7c/0xe0 [ 216.965131] vmx_set_constant_host_state+0x1778/0x1830 [ 216.970441] vmx_create_vcpu+0x3e6f/0x7870 [ 216.974693] ? kmsan_set_origin_inline+0x6b/0x120 [ 216.979556] ? __msan_poison_alloca+0x17a/0x210 [ 216.984256] ? vmx_vm_init+0x340/0x340 [ 216.988170] kvm_arch_vcpu_create+0x25d/0x2f0 [ 216.992693] kvm_vm_ioctl+0x13fd/0x33d0 [ 216.996688] ? __msan_poison_alloca+0x17a/0x210 [ 217.001381] ? do_vfs_ioctl+0x18a/0x2810 [ 217.005455] ? __se_sys_ioctl+0x1da/0x270 [ 217.009623] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 217.014598] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 217.019464] do_vfs_ioctl+0xcf3/0x2810 [ 217.023381] ? security_file_ioctl+0x92/0x200 [ 217.027954] __se_sys_ioctl+0x1da/0x270 [ 217.032028] __x64_sys_ioctl+0x4a/0x70 [ 217.035927] do_syscall_64+0xbe/0x100 [ 217.039749] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 217.044949] RIP: 0033:0x457579 [ 217.048151] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 217.067082] RSP: 002b:00007fa6c64b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.074811] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 217.082107] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 217.089391] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 217.096676] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa6c64b76d4 [ 217.103959] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 217.112461] Kernel Offset: disabled [ 217.116109] Rebooting in 86400 seconds..